{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "serialNumber": "urn:uuid:4cd3e3c8-ca6d-4fc6-b68b-ba67b1a2242d",
    "version": 1,
    "metadata": {
        "timestamp": "2026-11-11T15:56:49Z",
        "tools": [
            {
                "vendor": "CycloneDX",
                "name": "cyclonedx-gradle-plugin",
                "version": "1.10.0"
            }
        ],
        "component": {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkcml@11.0.0.FL.20261111-Eval?type=pom",
            "group": "org.zkoss.zk",
            "name": "zkcml",
            "version": "11.0.0.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/zkcml@11.0.0.FL.20261111-Eval?type=pom",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ]
        },
        "lifecycles": [
            {
                "phase": "build"
            }
        ],
        "manufacturer": {
            "name": "Potix Corporation",
            "url": [
                "https://www.zkoss.org"
            ]
        },
        "supplier": {
            "name": "Potix Corporation",
            "url": [
                "https://www.zkoss.org"
            ]
        }
    },
    "components": [
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "group": "commons-beanutils",
            "name": "commons-beanutils",
            "version": "1.9.4",
            "description": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "07dc532ee316fe1f2f0323e9bd2f8df4"
                },
                {
                    "alg": "SHA-1",
                    "content": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
                },
                {
                    "alg": "SHA-256",
                    "content": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
                },
                {
                    "alg": "SHA-512",
                    "content": "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
                },
                {
                    "alg": "SHA-384",
                    "content": "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
                },
                {
                    "alg": "SHA3-384",
                    "content": "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
                },
                {
                    "alg": "SHA3-256",
                    "content": "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://issues.apache.org/jira/browse/BEANUTILS"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-beanutils-1.9.4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-annotations",
            "version": "2.14.1",
            "description": "Core annotations used for value types, used by Jackson data binding package.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "da4742ba6aeb24bf1bd29382fd95647b"
                },
                {
                    "alg": "SHA-1",
                    "content": "2a6ad504d591a7903ffdec76b5b7252819a2d162"
                },
                {
                    "alg": "SHA-256",
                    "content": "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7"
                },
                {
                    "alg": "SHA-512",
                    "content": "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
                },
                {
                    "alg": "SHA-384",
                    "content": "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53"
                },
                {
                    "alg": "SHA3-384",
                    "content": "1f5eb50fb9c3681daf3103d041f2cc6dfa938d8038f1945871260fcb2a8e417c8366f346f916898a0099c36cdfb964d1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "4f2842ab076e5107fad346f0a79c3f87a75f5667b400e7087c6fee7951a37cdb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "60038ae7eeb69fca94e497dda74649e53e9b406d13fa03ef6833bff46f59605b53d17a4004c45b7edaf04ab329b08a6c70e50e177362eb147c2ad70f98b2eee2"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-annotations"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-annotations-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkmax",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "cac8ac74479b83460c07fc655eca15a3285135e89f4d4d74766d92571c5e2fdd"
                },
                {
                    "alg": "SHA-512",
                    "content": "cacd6c7042496871206eb6544a64172fa77cbd89f5c4a54c933124de35a040c248f96b5f76e33c3f85c7aca9f8a6858057dcc8e54e8648b67da2a48826ad0a2e"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "cacd6c7042496871206eb6544a64172fa77cbd89f5c4a54c933124de35a040c248f96b5f76e33c3f85c7aca9f8a6858057dcc8e54e8648b67da2a48826ad0a2e"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkmax-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "group": "org.apache.tomcat",
            "name": "tomcat-jasper-el",
            "version": "9.0.120",
            "description": "Jasper Expression Language Impl",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4dc5f2d87d8583e891af9a7177a9257b"
                },
                {
                    "alg": "SHA-1",
                    "content": "ec9f35960508efd6cf53e2e1515ff5330e032600"
                },
                {
                    "alg": "SHA-256",
                    "content": "1107bcbcc4465de23dfda0c96724af3b8d791296e585edf61fd486c528e9c00f"
                },
                {
                    "alg": "SHA-512",
                    "content": "0733e3950f6fba1b9f3680115a7b8f7739d01b7892e3e96158f9bb95d0fd8c047a918d31f8006ace19a1df1d93c1666f0382adacfa2c5a2ee0648ea63fdd1acd"
                },
                {
                    "alg": "SHA-384",
                    "content": "657ca68d43a9597fe23f499cf69fb8405e4a09aedae51bc1fd14f5da210c69c9a68ae137dba7188ba9c7b840bd3c8649"
                },
                {
                    "alg": "SHA3-384",
                    "content": "e01118a7cd06ea5b015e1b498801d0fed1e8b0cd475f346da51b9e846837de4f79d81a81dd1a8467322f365e6f70eb75"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a269c49b8b0d362337720239b6c89c78721086c526b7acd77bd33a8f8076b258"
                },
                {
                    "alg": "SHA3-512",
                    "content": "5d14286061c0d6ce7e131430e9ca33d3698bf58a81edfa3da190594ad969f3ba26191e125402acea437eefd345c130d21327cb7108bd6c688957a6c2eda8c93c"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0733e3950f6fba1b9f3680115a7b8f7739d01b7892e3e96158f9bb95d0fd8c047a918d31f8006ace19a1df1d93c1666f0382adacfa2c5a2ee0648ea63fdd1acd"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "tomcat-jasper-el-9.0.120.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "group": "com.jhlabs",
            "name": "filters",
            "version": "2.0.235-1",
            "description": "Java Image Processing Pages",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "ca3edff32f4433906c484fdfab2c4043"
                },
                {
                    "alg": "SHA-1",
                    "content": "fff65ebe39d1097cee431087858b3caf957ecfb7"
                },
                {
                    "alg": "SHA-256",
                    "content": "a37202f03eae99ab1faf2a89eeaee3665c8489f45b1aeb0d5926d78a54c613bf"
                },
                {
                    "alg": "SHA-512",
                    "content": "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1"
                },
                {
                    "alg": "SHA-384",
                    "content": "8ec503cdbb8178fd514dbfcb4331ad80c160784e384ac0e34d8598d78a50774e6c850cefa439a2635cd90fec3d09688d"
                },
                {
                    "alg": "SHA3-384",
                    "content": "49b98b9d7837d2be0ef6a9693004256b80bf25b9243a95f7bce7174b4413829f8aa8d888f5cedcbf342480c92538f4f0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "4283ea6a74ae06312078ca5d39b7d5971ee33a80b28848b19767785742f51014"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ee6808ef4ff33cf1aca2efc475037e3644e022cfc8038a667280adf91ef0b5cd69b69da4176de3a097bfb9e17caf216e21223f8e2a9b432c0df2daaa84a76d95"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/axet/jhlabs"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Jerry Huxtable (JH Labs)",
                "url": [
                    "http://www.jhlabs.com"
                ]
            },
            "manufacturer": {
                "name": "Jerry Huxtable (JH Labs)",
                "url": [
                    "http://www.jhlabs.com"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "filters-2.0.235-1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "group": "com.google.errorprone",
            "name": "error_prone_annotations",
            "version": "2.50.0",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1ded1848cfd4f5167e00824faf9c4d3b"
                },
                {
                    "alg": "SHA-1",
                    "content": "74ba43e49ab1184d41634af2ef0047e82c4064b0"
                },
                {
                    "alg": "SHA-256",
                    "content": "4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a"
                },
                {
                    "alg": "SHA-512",
                    "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
                },
                {
                    "alg": "SHA-384",
                    "content": "2986b161379c30e9805f3bcff197d7861b8c0690a021e2d7464707e57028b1953d24eefd1a36722f3c04665190b3cb48"
                },
                {
                    "alg": "SHA3-384",
                    "content": "597fe452ff7e21149da3c537b61d8e1b17df792f67bcd80fbccd6647acca571a94fa8bbcf4840826a37814bb2ef0249a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5447d9786f79d7dc20e8f75ac93f3a05181f3707faf6e91696dd326cdd5f5754"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b51065218c88f5ce0b94e6607dee42d6c01aeb69a87b6e1c656dd406f2196cc999150ce87f56fbeeecbed7e1e354ed285589fa560012e9fb5858a97dc17d2129"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f867b1a1fbc057fcfc37c2fa86082f5965ad6a1c45373eac6cfa6ec058cedbf7b348ab4f3d4fea2d4d105ecc401c14f24d9b16f344507e126a221d50532cb8b2"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "error_prone_annotations-2.50.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-annotations",
            "version": "2.22",
            "description": "Core annotations used for value types, used by Jackson data binding package.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "04c11c456fd1e21b9a21c25c665109cc"
                },
                {
                    "alg": "SHA-1",
                    "content": "15c67f9498d6934cff9510fc70c5a12e52290457"
                },
                {
                    "alg": "SHA-256",
                    "content": "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
                },
                {
                    "alg": "SHA-512",
                    "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
                },
                {
                    "alg": "SHA-384",
                    "content": "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
                },
                {
                    "alg": "SHA3-384",
                    "content": "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
                },
                {
                    "alg": "SHA3-256",
                    "content": "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-annotations"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-annotations-2.22.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-databind",
            "version": "2.22.1",
            "description": "General data-binding functionality for Jackson: works on core streaming API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "df2dcf8d581836d48aae7387311cba93"
                },
                {
                    "alg": "SHA-1",
                    "content": "9e2fb91831cce9cb9262909cd76647508949f232"
                },
                {
                    "alg": "SHA-256",
                    "content": "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
                },
                {
                    "alg": "SHA-512",
                    "content": "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
                },
                {
                    "alg": "SHA-384",
                    "content": "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
                },
                {
                    "alg": "SHA3-384",
                    "content": "7eeb7d7ea5434fdede4b0d256955d0ebf93a11ad89efcc2a3551d649bf197f6aa6c3dd60247805a13270fd8ed0a98ae8"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ab1df340c8e99a3ea6f485b9e3bf0e1cb7b57810b09e9161c8eee38eb8db3e47"
                },
                {
                    "alg": "SHA3-512",
                    "content": "dc3f3df098898dc6bf71fcef0ca232a592f59fb465161b95b03a28eebc9539bede1db83bacaf14dc57328feffc7a4637b911a09356fa4330d93f52131ac7254e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-databind"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-databind-2.22.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zk",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b52b927be1c89fac00bf520c689b9654"
                },
                {
                    "alg": "SHA-1",
                    "content": "ef34965d0fbf3d47dd635ba49bf23385bc6d186f"
                },
                {
                    "alg": "SHA-256",
                    "content": "99fc98ea06baeedf2d5707d4fad70c80fcea676e9bd58d5c4278283d54949bad"
                },
                {
                    "alg": "SHA-512",
                    "content": "e3e566b76845de1b2b901fd406be8fc1a025e558a6edb56efcfff0b9347ebc8390c43a179c3eb1caf9beb8701c3643de47904f0a7ad146471ae02c24572a0dd8"
                },
                {
                    "alg": "SHA-384",
                    "content": "fffc7a50ee7158aa95e70445d10d7d9b72cc6a15bd4a394fbe7a198ad02b5699741b92f8010f7bf8f1da400130592c1d"
                },
                {
                    "alg": "SHA3-384",
                    "content": "8bc41594d00c6fa4c8abb81b68fa4f4d853dbb3786ee79a75f2b710a64136be5e219e7d06aa587893ae002a5fc285af1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "da560d219ec77f9ea0c11fcbb48e297cb49f0f26168db9de2b74cd79919a148e"
                },
                {
                    "alg": "SHA3-512",
                    "content": "37dee3d89d4f1d1a536c8936b0fee7a32f047c35b86e92d4b4df67aaff8a33bb7eeb3d23ce4c61a616ad9f698757f20bd099de37068e645d958405a525f1838c"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e3e566b76845de1b2b901fd406be8fc1a025e558a6edb56efcfff0b9347ebc8390c43a179c3eb1caf9beb8701c3643de47904f0a7ad146471ae02c24572a0dd8"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zk-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "group": "com.google.code.findbugs",
            "name": "jsr305",
            "version": "3.0.2",
            "description": "JSR305 Annotations for Findbugs",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "dd83accb899363c32b07d7a1b2e4ce40"
                },
                {
                    "alg": "SHA-1",
                    "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
                },
                {
                    "alg": "SHA-256",
                    "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
                },
                {
                    "alg": "SHA-512",
                    "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
                },
                {
                    "alg": "SHA-384",
                    "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://code.google.com/p/jsr-305/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jsr305-3.0.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "group": "org.slf4j",
            "name": "slf4j-api",
            "version": "2.0.7",
            "description": "The slf4j API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "403dffa46cdd2e3c82da19df4f394a4c"
                },
                {
                    "alg": "SHA-1",
                    "content": "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
                },
                {
                    "alg": "SHA-256",
                    "content": "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
                },
                {
                    "alg": "SHA-512",
                    "content": "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
                },
                {
                    "alg": "SHA-384",
                    "content": "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
                },
                {
                    "alg": "SHA3-256",
                    "content": "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
                }
            ],
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "modified": false,
            "supplier": {
                "name": "QOS.ch",
                "url": [
                    "https://www.slf4j.org"
                ]
            },
            "manufacturer": {
                "name": "QOS.ch",
                "url": [
                    "https://www.slf4j.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "slf4j-api-2.0.7.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "group": "org.apache.tomcat",
            "name": "tomcat-el-api",
            "version": "9.0.120",
            "description": "Expression language package",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "9fcddde527197a10321c1a619526f5c2"
                },
                {
                    "alg": "SHA-1",
                    "content": "7566ea65835a7852bd9ea96e41601ffdec7f1799"
                },
                {
                    "alg": "SHA-256",
                    "content": "86a2e574ccfd8cf2ebad27787fadec63c8e6779b81519a5485a56a86b294e1c9"
                },
                {
                    "alg": "SHA-512",
                    "content": "09205e4b7689154a61d1b2464659b47e9ca3d04775876264416845c52518c9b7565eb01c950f514b8287a649b1019b23fcc4040d0ad09d73e071d6a6550b8b7a"
                },
                {
                    "alg": "SHA-384",
                    "content": "38d7f6e05b913c47698e5740ec08ee784d57be2ec366eeaa8077a2f1d75348434d44ec70f3be0942093dcb0f061808af"
                },
                {
                    "alg": "SHA3-384",
                    "content": "f6f8367b6652fe41c53d8eaec807fac767f54298139555b53f1bd44f85a816886bc5d8224bb057b183f9a17fc17b6101"
                },
                {
                    "alg": "SHA3-256",
                    "content": "aa43eb0b380465797b98853e161a412a364edc1cabc1f2080b03c112f6670b6a"
                },
                {
                    "alg": "SHA3-512",
                    "content": "59c78cc6cc783897ad4e5d10789a56733b23fe584c38418909bad20ff2a2c68c73f1b4d68bf2a895a0871aa51f88f825653494078e6c6888ab0c693b85d0b857"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "09205e4b7689154a61d1b2464659b47e9ca3d04775876264416845c52518c9b7565eb01c950f514b8287a649b1019b23fcc4040d0ad09d73e071d6a6550b8b7a"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "tomcat-el-api-9.0.120.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zhtml",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "0359c733f0469e54b30f6d72ed529863"
                },
                {
                    "alg": "SHA-1",
                    "content": "e777b9794cdf4b19785d29cac8921be4212518dc"
                },
                {
                    "alg": "SHA-256",
                    "content": "84311c24d77713af659e56f2ac1079ce13dc889abcac2052e7c569ad3f8bdfde"
                },
                {
                    "alg": "SHA-512",
                    "content": "ce6cdedd67e6ca0768033aa04c1305b36d55eb25a7a9b9284e27bea47c68f57d63c10768047c1f8cb204e46bb70b5d09b2c1f5d3eeaa9889731749343ce82130"
                },
                {
                    "alg": "SHA-384",
                    "content": "479274c832cc5b29a0974f78d7cc8082391c36f7515b220c0881a49b57eaa8229a035c31038039d2e1be1e1051fe89a3"
                },
                {
                    "alg": "SHA3-384",
                    "content": "b5be4f27a508d1e8963fd52526d586878bd2ba39ef2a0ea4962127ec4ea948c67f73fad822f4df82ce14c4bb6468fff0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "58bc43074df8536f02e4968fb7b0ce39bae8b04f719d582ad50833fd515ede3f"
                },
                {
                    "alg": "SHA3-512",
                    "content": "96983f0aa528f026c559a361abf6a7f8a39cd31364255a1d9704754fca921f2631c7c43286cce5bf8ac4f7b7529b4b2cd4f794123b20a51494154f7fad8df223"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ce6cdedd67e6ca0768033aa04c1305b36d55eb25a7a9b9284e27bea47c68f57d63c10768047c1f8cb204e46bb70b5d09b2c1f5d3eeaa9889731749343ce82130"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zhtml-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "za11y",
            "version": "11.0.0.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d4b1f9537a2d0a4a14804d207a0d3e9858fd86e6244ca101271cd87ad50dcbeb"
                },
                {
                    "alg": "SHA-512",
                    "content": "4fb4f6be35d4ef34555acfd77319a49c9f71bfff36cea3debef1acc3009ab26f72f3498c2f0c51deefc2ce534c46ccf273927b5835c7be37d11a92bed96adfc7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4fb4f6be35d4ef34555acfd77319a49c9f71bfff36cea3debef1acc3009ab26f72f3498c2f0c51deefc2ce534c46ccf273927b5835c7be37d11a92bed96adfc7"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "za11y-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "group": "org.apache-extras.beanshell",
            "name": "bsh",
            "version": "2.0b6",
            "description": "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "0f27117d5b4cfeea1d0634125313fac0"
                },
                {
                    "alg": "SHA-1",
                    "content": "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f"
                },
                {
                    "alg": "SHA-256",
                    "content": "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047"
                },
                {
                    "alg": "SHA-512",
                    "content": "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18"
                },
                {
                    "alg": "SHA-384",
                    "content": "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb"
                },
                {
                    "alg": "SHA3-384",
                    "content": "800f40bfa0edba4a73b97ea376bf5e4d6b1fdfa3779e9ad292fdc1a06a350dc6c185238efc7f6ce77e3e4f47a5f19150"
                },
                {
                    "alg": "SHA3-256",
                    "content": "2f977780aacfc13d62a0d18f33fd088bc7af72920daaeb0c34f67448712fa5ab"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7136ae9e0df1554547a0234c684c187b8e72ec4470b15d678ab8dedd955b11f819dc8812d055c9c016c6dd5b3b65a39f8f801d0907716cab4dacd565b9f40f49"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/beanshell/beanshell/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/beanshell/beanshell/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "BeanShell",
                "url": [
                    "https://github.com/beanshell/beanshell"
                ]
            },
            "manufacturer": {
                "name": "BeanShell",
                "url": [
                    "https://github.com/beanshell/beanshell"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "bsh-2.0b6.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkbind",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "217e4d646d1186fcaa75c8f920d5a45f"
                },
                {
                    "alg": "SHA-1",
                    "content": "590a1b074bd0317365cc8cc11b2a4ca02d55e917"
                },
                {
                    "alg": "SHA-256",
                    "content": "bcf183d3f0ae3ca456b14a0fa8f19869f4be0535213eebc091a757de9ad0ca48"
                },
                {
                    "alg": "SHA-512",
                    "content": "90cda615e9520a10587cc452f0cafacb168467e45fc34ea6f308696478c532c7fe6187a8fadcd9c30b8ccd75a0b625fa6ced583cca704ebb696940e6f4b71a8c"
                },
                {
                    "alg": "SHA-384",
                    "content": "d6cb8f078014102fee6fdd093c38d416a69d7829ecb3473697b8b4ff764da1ae7d62c36125b9d66bfd23fad3024d102b"
                },
                {
                    "alg": "SHA3-384",
                    "content": "939a8248dc4fd6923d6ae49f8a761960100e0fcb58c1ed2aa275ec09220e33fd43d3ce6dc7593fd8d3087423c3bfcda2"
                },
                {
                    "alg": "SHA3-256",
                    "content": "199d4e55ee88c8198fc1d50bd9526677f5687635a9fc0a5fbe343d7decfe189a"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e54cf7d8ab993bdd7e1a9f282822ee557ede6a23d43409596dd85c592f20171c8e2023f961904d4eb497171353d5327bfee494cf366c0949215b357b28c0eba5"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "90cda615e9520a10587cc452f0cafacb168467e45fc34ea6f308696478c532c7fe6187a8fadcd9c30b8ccd75a0b625fa6ced583cca704ebb696940e6f4b71a8c"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkbind-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "publisher": "Potix",
            "group": "org.zkoss",
            "name": "zsoup",
            "version": "1.8.2.5",
            "description": "zsoup HTML parser",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4d2d03a78503aca4bd2ddd1289dc25f1"
                },
                {
                    "alg": "SHA-1",
                    "content": "7e0a355052c9403ef51d91d315aeaca76967afcf"
                },
                {
                    "alg": "SHA-256",
                    "content": "39dafc2baef6a7f8aaf0a7200c6df8d59d9cf3e91f35d396473aad585e70e1e6"
                },
                {
                    "alg": "SHA-512",
                    "content": "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc"
                },
                {
                    "alg": "SHA-384",
                    "content": "47c29b0fbc355f469d37cff489b07ebc2a5e9676d90a65f40757d6f1f554c177abe100f06daa82a05017a466a0d50c56"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d95491aa37d14dbaba2429b6136a22e82e5b07e06be24626b238c825713d6d20a17d3b93e85e7413a4d975b4d95794f0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f07af8ba3106f37612b14ccc39e4b01150d290318252a1b34544581f51c63f01"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1becfb80bc3878ac341cf8d75bdee5c58c457605bbc9e4d7c3c7eda6b0debfcbdeb5eb8f5606b28d075a33dbb24d5f138b1cd6ba380a482c9f427addb7d5f0e4"
                }
            ],
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.zkoss.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://github.com/zkoss/zsoup/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/zkoss/zsoup"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zsoup-1.8.2.5.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "group": "com.google.guava",
            "name": "failureaccess",
            "version": "1.0.3",
            "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "29a782e90f6b37218b18bb880d2a8f4a"
                },
                {
                    "alg": "SHA-1",
                    "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
                },
                {
                    "alg": "SHA-256",
                    "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
                },
                {
                    "alg": "SHA-512",
                    "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
                },
                {
                    "alg": "SHA-384",
                    "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
                },
                {
                    "alg": "SHA3-384",
                    "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
                },
                {
                    "alg": "SHA3-256",
                    "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "failureaccess-1.0.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zweb",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "c87a4503741f6982e46a0500732349b0"
                },
                {
                    "alg": "SHA-1",
                    "content": "d4318fab528648c200416fad55782e679289beb7"
                },
                {
                    "alg": "SHA-256",
                    "content": "13d1c4ea0b136e41db8a8088e9083e1d0b27bcd24a9c7b4a9eed675b21f23e8c"
                },
                {
                    "alg": "SHA-512",
                    "content": "c734ece568ce6d603274be67d1d7e8af19222748011ccb78edd5abec0317e01864b48ec8ff7e8e201be7eb894d0d0beaf7f8582608496aa8ecd9f5ec66143b6d"
                },
                {
                    "alg": "SHA-384",
                    "content": "216bf8f2f3c010cb2affa7466804893e069656f6c8f503eaba6e9623f8e967b32b5c0ed05937aab2d817b143a6d4c29a"
                },
                {
                    "alg": "SHA3-384",
                    "content": "92240cf34ca593886117bac241976fb9418a75934da70f23cc21ffdfb711e3662140bc6bcf600fae44be797309f44096"
                },
                {
                    "alg": "SHA3-256",
                    "content": "615fb0f9dbf4cc9af7d2b3220ab749a6946a74f7bb689a1ddf0b7eb4c0d271a1"
                },
                {
                    "alg": "SHA3-512",
                    "content": "96828ae4e6d6e7f3d12022462c328c6394485f4c4a47a17969d2d5f747086d5de449482018110b7f33285a4585fdb141b4f6baca7ae7904ff8a946fc08ebb03e"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c734ece568ce6d603274be67d1d7e8af19222748011ccb78edd5abec0317e01864b48ec8ff7e8e201be7eb894d0d0beaf7f8582608496aa8ecd9f5ec66143b6d"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zweb-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "group": "org.apache.httpcomponents.core5",
            "name": "httpcore5",
            "version": "5.4.3",
            "description": "Apache HttpComponents HTTP/1.1 core components",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "40cba87d4704bc9e1691f340fb8042cf"
                },
                {
                    "alg": "SHA-1",
                    "content": "32a0699fbcb103f5621c00983ee8f5aac080e4a6"
                },
                {
                    "alg": "SHA-256",
                    "content": "18bfbbabb478dfb67f31aeaf428c387f3c3df654582e1309f708ee1f3086830a"
                },
                {
                    "alg": "SHA-512",
                    "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
                },
                {
                    "alg": "SHA-384",
                    "content": "09312cfbd7b33c3c8712405aff437ef7b93260a07a625b7cc491d3e2fa0d65852d72f4f6701ef707c4cae52caadcddd0"
                },
                {
                    "alg": "SHA3-384",
                    "content": "419f9608bec952746b274a3510bc0f0dbdb6cc4b1269c9bd89c218894a42fda0dfd7b46912b57cc722b3d76b7f11c07b"
                },
                {
                    "alg": "SHA3-256",
                    "content": "8cb162e60b804205084fcc8e562f6eb47f5c13eefa42208cf6accab1d28e0ba2"
                },
                {
                    "alg": "SHA3-512",
                    "content": "eccc71fecc0525c6fca46ca9e19eaecf26d646f3e71528796e8dcc0f16cb0882d485ceffa1c48e14e60eb8b429ae0fd5935274bb8907c2869ab54cb76e931abd"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "httpcore5-5.4.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zuti",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b5c9449f8fe85fc1630b647105393eee6d3fdc88bda0588e8c7c4f9aa3788c18"
                },
                {
                    "alg": "SHA-512",
                    "content": "612c58fe32d016ea28bdf59ff47b64367712caf9b0cef2c9339fe73788eb1679a6c3bd92bb0369b35f1ac6b261ae3e460e184ad6de17778cc2b0f9ffc00ea4f8"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "612c58fe32d016ea28bdf59ff47b64367712caf9b0cef2c9339fe73788eb1679a6c3bd92bb0369b35f1ac6b261ae3e460e184ad6de17778cc2b0f9ffc00ea4f8"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zuti-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "stateless",
            "version": "11.0.0.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "348eed9d567a5968a1f934cae92be13e3f386957e97e74e984ab5a9f3ed108a8"
                },
                {
                    "alg": "SHA-512",
                    "content": "c9b112dff928ff40e46e2fecb2022e9d3eef2729aa2db4e7a43b548db3abf85e501c23be2f248ed56893fbf7b48927444d0c6ec72f54523655c38d5c192439a9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c9b112dff928ff40e46e2fecb2022e9d3eef2729aa2db4e7a43b548db3abf85e501c23be2f248ed56893fbf7b48927444d0c6ec72f54523655c38d5c192439a9"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stateless-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "client-bind",
            "version": "11.0.0.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c8e54af98288907d52ce7889439760c7c431ea5b326f7a4a9b1a5c54776f4bf4"
                },
                {
                    "alg": "SHA-512",
                    "content": "a11eba8c6a997584d2db76e2e746e73a9d440ac20c1354903768d435704ddf5007f72d85524a63c77aac0dda998194faccffd3ff29da5e627d4e09781de854e8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a11eba8c6a997584d2db76e2e746e73a9d440ac20c1354903768d435704ddf5007f72d85524a63c77aac0dda998194faccffd3ff29da5e627d4e09781de854e8"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "client-bind-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zul",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1718914e8cb49f5b288dc459d199e99d"
                },
                {
                    "alg": "SHA-1",
                    "content": "60504839cffa7dff4958e2f54987fd16ee0165f7"
                },
                {
                    "alg": "SHA-256",
                    "content": "ea602ba99ca2d8f611bd06808550faf514705c58a2254857a70373e3d0acbb28"
                },
                {
                    "alg": "SHA-512",
                    "content": "a39e12911e60d6cf056a53137ee45ee98465c7479c83b04ced31ab1698bc75a29c1564af521cf00fc59d52ee4f1bc3db6a6d226f7738e679acbc1acdcf8319ca"
                },
                {
                    "alg": "SHA-384",
                    "content": "47ed3b74927263c66804f5298f6dda2e0f9e7eae54b4ffd4836452dd41003aafad4e7b3ca65c84f90cae88b51a8fe5df"
                },
                {
                    "alg": "SHA3-384",
                    "content": "95f91e389ce12389b9e5a6f40bb92921e8b12dc0ddd01411598253f550fa334977db708ab6d692f7304cff3e447ae56c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "02507d3c0696f9123f161ade2eb1d72e7520d460860266763142291de263ca4b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "4b146c6f701cc249bc3bf560a048669936fa04288281e04e310b0dd922ed5dd7b54d0c9a5613101057def6956cd48ca0efde7bf48b99cfe8d5a4c029b3f56e0d"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a39e12911e60d6cf056a53137ee45ee98465c7479c83b04ced31ab1698bc75a29c1564af521cf00fc59d52ee4f1bc3db6a6d226f7738e679acbc1acdcf8319ca"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zul-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "group": "commons-collections",
            "name": "commons-collections",
            "version": "3.2.2",
            "description": "Types that extend and augment the Java Collections Framework.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f54a8510f834a1a57166970bfc982e94"
                },
                {
                    "alg": "SHA-1",
                    "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
                },
                {
                    "alg": "SHA-256",
                    "content": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
                },
                {
                    "alg": "SHA-512",
                    "content": "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
                },
                {
                    "alg": "SHA-384",
                    "content": "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
                },
                {
                    "alg": "SHA3-384",
                    "content": "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
                },
                {
                    "alg": "SHA3-256",
                    "content": "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
                },
                {
                    "alg": "SHA3-512",
                    "content": "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/COLLECTIONS"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-collections-3.2.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "publisher": "The Apache Software Foundation",
            "group": "commons-el",
            "name": "commons-el",
            "version": "1.0",
            "description": "JSP 2.0 Expression Language Interpreter Implementation",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "7c98594df7c126f33688fa6d93169639"
                },
                {
                    "alg": "SHA-1",
                    "content": "1df2c042b3f2de0124750241ac6c886dbfa2cc2c"
                },
                {
                    "alg": "SHA-256",
                    "content": "0d67550ec0022b653453c759f063a643c2fe64bc48faa8b25f95a220e2a282e2"
                },
                {
                    "alg": "SHA-512",
                    "content": "006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e"
                },
                {
                    "alg": "SHA-384",
                    "content": "9f2dd90e725a465a266fab7d6f7b4a68df0b4ad846ae379766939d14be4f8016381b445975ca2c4717e0fd2b4ba67516"
                },
                {
                    "alg": "SHA3-384",
                    "content": "90af4463e8d5e9ffb652a4362eca2f3b2797d6dc35e3b019b64272d6f30b8e7722581599c375a4119e112d5462e94dc3"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ade3648961dfeed206636b63a626a4d7470c58ae0555b3fa919d94782fb9d7e2"
                },
                {
                    "alg": "SHA3-512",
                    "content": "16b5d1cfac8960b1e62b45eef46d7ec8f898b6fc3e4bb83b346c9a3a8d9ef847398c3e423a370e783e6603775e672a6321bb9a6094061e2e32c4f8ad20bbf01f"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://jakarta.apache.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/bugzilla/"
                },
                {
                    "type": "mailing-list",
                    "url": "http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/repos/asf/jakarta/commons/proper/el/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-el/commons-el@1.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-el-1.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkwebfragment",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "aa4ab727e70b3710da887368d61c688b"
                },
                {
                    "alg": "SHA-1",
                    "content": "77beeb700af2c294d4a7832e05ea23a44e99a6e0"
                },
                {
                    "alg": "SHA-256",
                    "content": "b660ebf0ca999340e40ca7e6f8853c98a5d40aed350dcefb06ace497c80f262a"
                },
                {
                    "alg": "SHA-512",
                    "content": "d7f51d1feb60c37e8a457079ea984df1718633154d3f9d7cfb4aeb21bc91edd91c171036cb5c84ee1022c31dae86b315c5b7e2787a552456daf57fa9f7588859"
                },
                {
                    "alg": "SHA-384",
                    "content": "03bbaca910b1be9ad67ef61754c3a9ceeea1434e6eae38ea788b1718fd1b75c3429a0894054e919e714a3e2381b38743"
                },
                {
                    "alg": "SHA3-384",
                    "content": "aa294e47a8b1ceb1714cb3cce1f52e373f9c9c769bfa2432e0fa0b821ff918d06bacef38be79b816b95669d4bf4e3b26"
                },
                {
                    "alg": "SHA3-256",
                    "content": "d5d2fd97c4fbdd84455f1bd6521f7fa3d8da9792a98bee602bde28224be41e70"
                },
                {
                    "alg": "SHA3-512",
                    "content": "dc52afb82ec13bad5e85ee0629caa44a49a71f5be9bf9b52f5a21560b5823b3a5dbdebde0f2add0863dc51be5dd302d63c20ca32fc40635261a986a5a4dac8ba"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d7f51d1feb60c37e8a457079ea984df1718633154d3f9d7cfb4aeb21bc91edd91c171036cb5c84ee1022c31dae86b315c5b7e2787a552456daf57fa9f7588859"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkwebfragment-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zcommon",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "daffce1efb00cd6ce21c9f7ce5a1fa69"
                },
                {
                    "alg": "SHA-1",
                    "content": "f1566f0295441707e0ede0d5e19391959a9e7158"
                },
                {
                    "alg": "SHA-256",
                    "content": "7f4febe8ea07f0d288b1608a7d2d27bbd7a77664ff65445a4c1c717db93c8428"
                },
                {
                    "alg": "SHA-512",
                    "content": "95cbeb64a6cfc3225b4d59e498e090853c4c16bd5397d5d473a4e0ffb0034a1582e7edd7c281ea685454d59aedbfc767aacdb909fc98d54b56d17435ad6b83eb"
                },
                {
                    "alg": "SHA-384",
                    "content": "27c5f9a018881a68a158020e7f28635fc48feeb3bfcc989c74078fdfe429c57236f8dbb44ba079844a02262fe187477f"
                },
                {
                    "alg": "SHA3-384",
                    "content": "63448758ebff391a086a3b70306b1e8cef358197456aac679d79acacf4703654c294d0f1d400719c34c06002284cabfb"
                },
                {
                    "alg": "SHA3-256",
                    "content": "86e5a767c1afa91dd13564c0fd555d6db2376da0a5ccca178123d9cf11d581ea"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7d7b9fe716fc1d3563930572184e61f702f8074f796c9335adaf475b6941a3b598f9c3eae95e064b2149da57ae49042508a61e2c185bf4adc42e1289678406f5"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "95cbeb64a6cfc3225b4d59e498e090853c4c16bd5397d5d473a4e0ffb0034a1582e7edd7c281ea685454d59aedbfc767aacdb909fc98d54b56d17435ad6b83eb"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zcommon-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zkex",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "bc15a681f740e3dc486fea428600f8cbfa987ee785c2bb93a424eb585fb85802"
                },
                {
                    "alg": "SHA-512",
                    "content": "4b8d5f29c486e1f472aa3493e791be27951d12631ac58f01ecb2c4fa3da5a4d8812f7fb4736c166c705fd57f8afec96258eafc0f7000f13e774bd44169f5fbad"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4b8d5f29c486e1f472aa3493e791be27951d12631ac58f01ecb2c4fa3da5a4d8812f7fb4736c166c705fd57f8afec96258eafc0f7000f13e774bd44169f5fbad"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zkex-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "zml",
            "version": "11.0.0.FL.20261111-Eval",
            "purl": "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "42c248d37e0ef7e935f442918448452feaced8130cedf09619eda94fc98fc31a"
                },
                {
                    "alg": "SHA-512",
                    "content": "4af3ba4942133b7156cd5537b2c0ab2707bc36e943a6aaa86771dc11ecf25a0b9d957254eddd3321a349b29f5d29e344fb92654ced435224d9bef2e729a8ee8a"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4af3ba4942133b7156cd5537b2c0ab2707bc36e943a6aaa86771dc11ecf25a0b9d957254eddd3321a349b29f5d29e344fb92654ced435224d9bef2e729a8ee8a"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zml-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "publisher": "Eclipse Foundation",
            "group": "org.eclipse.jdt",
            "name": "ecj",
            "version": "3.21.0",
            "description": "Eclipse Compiler for Java(TM)",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4d1404f81be38fdf9186c9556c4ad3e9"
                },
                {
                    "alg": "SHA-1",
                    "content": "d06974eec06892e5594bdb8fbbc95cd81f1c57b2"
                },
                {
                    "alg": "SHA-256",
                    "content": "9082211f48782750093f07822d1ae481e8ece250449578f372334da626ccdead"
                },
                {
                    "alg": "SHA-512",
                    "content": "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351"
                },
                {
                    "alg": "SHA-384",
                    "content": "5123d5e6e30cc26bf70723fdd92ea3eab41b0c694197bee305459b5bd431ee8bb66c4b7f39dc91b5fb4b533a103f70f6"
                },
                {
                    "alg": "SHA3-384",
                    "content": "c86e90c8dcfc88096c3e81dfaea506b8f2ad95b38f84e72ec4aa17ffa609f28bd6cca9a7f57daded00cbeffd66a41845"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5434d2fe6622d1d128f22b4ca4aa9cb9c6b30ad4929b1515e1b0fac0ff09f017"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0a4bee0629ba2f91fdd4e0f1090751e8f89f11e4ffbcec08884a0be66c0aca31ed11ecd061434704f794e6621e09614f19bb6f696fc1f59eb902cb4f466486a9"
                }
            ],
            "licenses": [
                {
                    "expression": "EPL-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.eclipse.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "https://bugs.eclipse.org/"
                },
                {
                    "type": "vcs",
                    "url": "https://git.eclipse.org/c/jdt/eclipse.jdt.core.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Eclipse Foundation",
                "url": [
                    "https://www.eclipse.org"
                ]
            },
            "manufacturer": {
                "name": "Eclipse Foundation",
                "url": [
                    "https://www.eclipse.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "ecj-3.21.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-databind",
            "version": "2.14.1",
            "description": "General data-binding functionality for Jackson: works on core streaming API",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "3e3e7aab8799ccc169b10f244e6fb5b4"
                },
                {
                    "alg": "SHA-1",
                    "content": "268524b9056cae1211b9f1f52560ef19347f4d17"
                },
                {
                    "alg": "SHA-256",
                    "content": "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773"
                },
                {
                    "alg": "SHA-512",
                    "content": "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
                },
                {
                    "alg": "SHA-384",
                    "content": "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a"
                },
                {
                    "alg": "SHA3-384",
                    "content": "4349a433aa87807ef2af5f214dcb154e3bbd5a884c226d5cdefba54feaf2170aee7e169a2e381fa377a6a33f53c0f44c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "3f32d8ce6fb9ef44408817f1416c8dd445d25e871a63cc4b598a7ddb2d3138ff"
                },
                {
                    "alg": "SHA3-512",
                    "content": "c00ab62eebc416880851bd5276ef238b3afa8deb6ed0553fbfd6670a44071f362f794cba69c950f53e17a77dcc471a2a1519436910439e08a359e82e58054d43"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-databind"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-databind-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
            "group": "org.apache.commons",
            "name": "commons-fileupload2-javax",
            "version": "2.0.0-M4",
            "description": "The Apache Commons FileUpload Javax component provides a simple yet flexible means of adding support for multipart file upload functionality to Javax servlets and web applications.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "59d0541318ce334e98f047ed472b4304"
                },
                {
                    "alg": "SHA-1",
                    "content": "1655c138db35bd1f4a296a5c1c7d80e6d7ef7588"
                },
                {
                    "alg": "SHA-256",
                    "content": "fbbf2300bb685c573ad2ca9ea71fe390a1269db384d1c1959b3698dbe096dbb3"
                },
                {
                    "alg": "SHA-512",
                    "content": "12774dddd5061eaf4482d3ac3670c77916b17fccd5862f35fa1e760c8985f2040e712d3d268af29d153028e65b6c7785774e579a7b75f1b6a13e82e312df3590"
                },
                {
                    "alg": "SHA-384",
                    "content": "b3435fb5791b83206e67db9d94fa34dca7c10e0b6b675ba2266c642fcd3db07f3b0fc837486a71524e36cddbeb45818f"
                },
                {
                    "alg": "SHA3-384",
                    "content": "b90fbef7a5bffd1bcc340bbef602831fac398801138892166bfd02d89d9f65434890e7b4f5363516dcb2083cfbe48c02"
                },
                {
                    "alg": "SHA3-256",
                    "content": "dfdb20326fd6ac2ab24a895a9009b73d8e63a74b28ee7baecaa442bf1e70cef8"
                },
                {
                    "alg": "SHA3-512",
                    "content": "32f8a803345f94c6d40d8791d0c2ada75486d4a374998cbc977db31c48db9e604f08440a2ad965039d499b464cc36bf10659ae137cf25086c0b803a601845cb1"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "12774dddd5061eaf4482d3ac3670c77916b17fccd5862f35fa1e760c8985f2040e712d3d268af29d153028e65b6c7785774e579a7b75f1b6a13e82e312df3590"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-fileupload2-javax-2.0.0-M4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "publisher": "JFree.org",
            "group": "org.jfree",
            "name": "jfreechart",
            "version": "1.0.19",
            "description": "JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts, pie charts, line charts, XY-plots and time series plots.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "4ff3762bd04a7239cfb98de542134bec"
                },
                {
                    "alg": "SHA-1",
                    "content": "ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20"
                },
                {
                    "alg": "SHA-256",
                    "content": "153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263"
                },
                {
                    "alg": "SHA-512",
                    "content": "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd"
                },
                {
                    "alg": "SHA-384",
                    "content": "dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549"
                },
                {
                    "alg": "SHA3-384",
                    "content": "0a60de6e3640d63ec6d5fd98a1ddc3e3829ef4b20bd9a236ff7055968ffd826b1c92fbcfefa16ed3a2ce82622e168a9a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "ff29553d392a5f5e3d56fb495c3d4829adb08aeb4a11e5c11a9b3dc12aa47ffb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1f244620552183a5abae81b5a4f6a8a465f9165fa23d273aad01bfde1c1cd7c0fbb21a2f60e26d5ba057ed29115bc274af6bc5cedc90560c5b239ab017accaef"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-2.1-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.jfree.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://sourceforge.net/tracker/?group_id=15494"
                },
                {
                    "type": "mailing-list",
                    "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
                },
                {
                    "type": "vcs",
                    "url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "manufacturer": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jfreechart-1.0.19.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-core",
            "version": "2.14.1",
            "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f9604a5f31129cdb7db4bdec90111850"
                },
                {
                    "alg": "SHA-1",
                    "content": "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3"
                },
                {
                    "alg": "SHA-256",
                    "content": "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526"
                },
                {
                    "alg": "SHA-512",
                    "content": "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
                },
                {
                    "alg": "SHA-384",
                    "content": "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665"
                },
                {
                    "alg": "SHA3-384",
                    "content": "761066454385f5892b0bf1fadfcebd9b8a13d61677df0294ca68dfa4317b3c61e21c429027c7ac6d8272ba80e12a166d"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5302084471ac0959b67c640165eb595007371ebebd4646b81d9a76b26d9f6920"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0733c8d5b752ceabd35bd396470289d3773b804bdcd8b292c3a834394d810e095542a077edb5c7014bb70a8f9ebd7df18553df2cb7947436fbdad8ed7ede0851"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-core"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-core-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "publisher": "OpenSymphony",
            "group": "ognl",
            "name": "ognl",
            "version": "3.1.28",
            "description": "OGNL - Object Graph Navigation Library",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "ff23ca36eb2ba1cb076091d0440144d9"
                },
                {
                    "alg": "SHA-1",
                    "content": "4160525fe152e5dd5b53e12b2c59da84156517c1"
                },
                {
                    "alg": "SHA-256",
                    "content": "aa357126ac26a29cf1a64554719272a8f36253ec072a7fbafa030aa7324ef1d7"
                },
                {
                    "alg": "SHA-512",
                    "content": "9ca433e37f59b14cd0ba17242de25f97c10f02dd45de2368028586375f7f1bc372afd5dd2283330914a43433c00092738afde6d23503f4235601267a162cb1c7"
                },
                {
                    "alg": "SHA-384",
                    "content": "9fae5632abbb35b7946157903012462b2c1ad9c30a18d31b8cfb96950294ad7d7e5bfa43bf12010850997b49c52feeeb"
                },
                {
                    "alg": "SHA3-384",
                    "content": "693c0fc4e294e6e07629e0e38d6ce2f4d9d8b0e15df626aff5d382362a8dd06c5e8aef12f360b4e20ea905a82eb6e26a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7040abeab20481a5aa91df22bed3bf294d915c1d9ffeb295f1a18f175e05e580"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7c3db6d9eea1dfc1d823925b2bdbbc78efc9ece053e6b5d2e8090526533a55a323232213aee358a1cb36b87f6d33797e675e119c4552573b8ac46a500e94ed2e"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.opensymphony.com"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://jira.opensymphony.com/browse/OGNL"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/ognl/ognl@3.1.28?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9ca433e37f59b14cd0ba17242de25f97c10f02dd45de2368028586375f7f1bc372afd5dd2283330914a43433c00092738afde6d23503f4235601267a162cb1c7"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "OGNL",
                "url": [
                    "https://github.com/orphan-oss/ognl"
                ]
            },
            "manufacturer": {
                "name": "OGNL",
                "url": [
                    "https://github.com/orphan-oss/ognl"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "ognl-3.1.28.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "group": "commons-io",
            "name": "commons-io",
            "version": "2.19.0",
            "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "3d1fd45f9d2a247c1d05ab1e98c07160"
                },
                {
                    "alg": "SHA-1",
                    "content": "1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e"
                },
                {
                    "alg": "SHA-256",
                    "content": "824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9"
                },
                {
                    "alg": "SHA-512",
                    "content": "98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c"
                },
                {
                    "alg": "SHA-384",
                    "content": "b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0"
                },
                {
                    "alg": "SHA3-256",
                    "content": "b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://issues.apache.org/jira/browse/IO"
                },
                {
                    "type": "vcs",
                    "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-io-2.19.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "group": "commons-digester",
            "name": "commons-digester",
            "version": "2.1",
            "description": "The Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "528445033f22da28f5047b6abcd1c7c9"
                },
                {
                    "alg": "SHA-1",
                    "content": "73a8001e7a54a255eef0f03521ec1805dc738ca0"
                },
                {
                    "alg": "SHA-256",
                    "content": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"
                },
                {
                    "alg": "SHA-512",
                    "content": "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
                },
                {
                    "alg": "SHA-384",
                    "content": "2aaaa152e6e5fa4c632065e18bb17f8a223de0713be0610b62939b179fccdd37645f2e3073896f455ea95566274e14c1"
                },
                {
                    "alg": "SHA3-384",
                    "content": "68f842c1a87a2fae303d1662a2b9d9d63b358c11c7b26ec468ef64f5e677b44e3db3d30a7f4b74aa73bda0ecf9f4858a"
                },
                {
                    "alg": "SHA3-256",
                    "content": "dafa3bae04d0eb180e384caf6a86be5387537992b2b7c4998cc341d56f0ac4d7"
                },
                {
                    "alg": "SHA3-512",
                    "content": "7a3f2991476cd5f2f8e645fe9820a9820b720b19fc6451be09a3be35bab7d51fe28f094c0f9735aa5f6fb9dc432c8513b7d15ae44d66b0836e97abcf06d74ce4"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/DIGESTER"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_2_1_RC2"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-digester-2.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "group": "com.fasterxml.jackson.dataformat",
            "name": "jackson-dataformat-xml",
            "version": "2.14.1",
            "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "c95952b32a6b42880ec626e5f2bc8563"
                },
                {
                    "alg": "SHA-1",
                    "content": "ccd98bd674080338a6ca4bcdd52be7fb465cec1d"
                },
                {
                    "alg": "SHA-256",
                    "content": "90fa6199c194cf3bad58073d3913b3e8a812d06a5db16faa554ba10f5d859436"
                },
                {
                    "alg": "SHA-512",
                    "content": "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006"
                },
                {
                    "alg": "SHA-384",
                    "content": "e0e29643d970e756b3aa734c161c5ef6db7aa0839a9510362a89a75cd5787b83a00df867eaeb93f80cdebccf84a46776"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3c5c0abd5a5107dcb2948a7a5dafd781629351f7f4af14397a4ab7796ee5b0fe31cadcfd93351648860900887f183c2d"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7ffb7673f5fc74bf2289ce78ed131d952bd2a21c01e22ae37299120094e6810d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "321af4d6fe0a4e3ce404101ec509ec07ecbf1c7df039667dadb52b66f3a28c2b274cfe95ce31087c368f0fca47bdbfcda06c859a8aa60bf1edd514a872dca741"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "http://github.com/FasterXML/jackson-dataformat-xml"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-dataformat-xml-2.14.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.zk",
            "name": "stateless-immutable",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "871de2dc26f7b7bee7b7981ca48ceda4b466d3046e17f9d9abc3657233edcc01"
                },
                {
                    "alg": "SHA-512",
                    "content": "d24f1c7b252d8697424b9222f805741bfb4e6e143db0ffc275a7101aee14d73c0753f649c64a6213e4b1f9c4e9349e4f523d11924841ca0c4415d4ec5709949e"
                }
            ],
            "purl": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "LicenseRef-Potix-ZK-Trial-License-Agreement",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d24f1c7b252d8697424b9222f805741bfb4e6e143db0ffc275a7101aee14d73c0753f649c64a6213e4b1f9c4e9349e4f523d11924841ca0c4415d4ec5709949e"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stateless-immutable-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "publisher": "Cloud Software Group, Inc.",
            "group": "net.sf.jasperreports",
            "name": "jasperreports",
            "version": "6.20.5",
            "description": "Free Java Reporting Library",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "868896e5f176b93aa8c8b6b8e6ce50ab"
                },
                {
                    "alg": "SHA-1",
                    "content": "c91cc68132f154dc3301dec4b71f0b90e3422d1d"
                },
                {
                    "alg": "SHA-256",
                    "content": "b2c02b051438eefa9f272fedeb023334faee72382edee0b495137e3a32831ced"
                },
                {
                    "alg": "SHA-512",
                    "content": "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876"
                },
                {
                    "alg": "SHA-384",
                    "content": "d8d5fcae0e3755381aa40f0386b7fefc045eac9a4f5c01be7cd300822c2989c4743d88eed84375218477af0f16148b3e"
                },
                {
                    "alg": "SHA3-384",
                    "content": "9df8575c58932adac654ce52c1f90735d425b07c6ec55958926b25cedb485bbc7ea014c0a6217c0d5795dadf37bca019"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a8dfeb4b8993f6cde521a803a0b50be253b7f572d499befc8f719effff9c462d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "60fcc0ef16dac529c717015c82feb360de58e30046f94cc6a49506b0fc4860e51c43c40217abbdad996c5a1fbd19a530dffdeb5361bf8740a31290004602f768"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-3.0-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "https://www.jaspersoft.com/"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/TIBCOSoftware/jasperreports"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Jaspersoft",
                "url": [
                    "https://github.com/Jaspersoft/jasperreports"
                ]
            },
            "manufacturer": {
                "name": "Jaspersoft",
                "url": [
                    "https://github.com/Jaspersoft/jasperreports"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jasperreports-6.20.5.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "publisher": "JFree.org",
            "group": "org.jfree",
            "name": "jcommon",
            "version": "1.0.23",
            "description": "JCommon is a free general purpose Java class library that is used in several projects at www.jfree.org, including JFreeChart and JFreeReport.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1b059adc60fef2da40b7130f9a67f977"
                },
                {
                    "alg": "SHA-1",
                    "content": "a316f336ca996e0c6bec4e4fbd49be8f5e1c3968"
                },
                {
                    "alg": "SHA-256",
                    "content": "1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c"
                },
                {
                    "alg": "SHA-512",
                    "content": "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44"
                },
                {
                    "alg": "SHA-384",
                    "content": "72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00"
                },
                {
                    "alg": "SHA3-384",
                    "content": "c0b2735bd3e247210e15e7b907f014d65208c2e4b4c9af2c7617befc01aa160906d4a2c3e3251162d004e7f2fff232e6"
                },
                {
                    "alg": "SHA3-256",
                    "content": "c08d3478dc33b5df4ca75e86c746b2c857a3c60eac854c66cb11d16725b13c1b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "e5ee3b35a3155a01825a58e8c3107403e40c565cf21484a058e184eec72ea415dc750d594aea5bfdd61721ceba4e34fc52fc3e5c76159e3d34c69e7bbe039932"
                }
            ],
            "licenses": [
                {
                    "expression": "LGPL-2.1-or-later",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://www.jfree.org/"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://sourceforge.net/tracker/?group_id=15494"
                },
                {
                    "type": "mailing-list",
                    "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
                },
                {
                    "type": "vcs",
                    "url": "http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "manufacturer": {
                "name": "Object Refinery Limited",
                "url": [
                    "https://www.jfree.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jcommon-1.0.23.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "group": "org.apache.commons",
            "name": "commons-fileupload2-core",
            "version": "2.0.0-M4",
            "description": "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "e7fb1d376a2cab4732c3c12acf69413d"
                },
                {
                    "alg": "SHA-1",
                    "content": "3284839791dc0130ad07d594a05c7c8750aa4dd6"
                },
                {
                    "alg": "SHA-256",
                    "content": "d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991"
                },
                {
                    "alg": "SHA-512",
                    "content": "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777"
                },
                {
                    "alg": "SHA-384",
                    "content": "46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129"
                },
                {
                    "alg": "SHA3-384",
                    "content": "b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-fileupload2-core-2.0.0-M4.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "group": "com.google.j2objc",
            "name": "j2objc-annotations",
            "version": "3.1",
            "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "abe8bd3abff622b9a8b15c3a737aa741"
                },
                {
                    "alg": "SHA-1",
                    "content": "a892ca9507839bbdb900d64310ac98256cab992f"
                },
                {
                    "alg": "SHA-256",
                    "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
                },
                {
                    "alg": "SHA-512",
                    "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
                },
                {
                    "alg": "SHA-384",
                    "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
                },
                {
                    "alg": "SHA3-384",
                    "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
                },
                {
                    "alg": "SHA3-512",
                    "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "http://github.com/google/j2objc"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "j2objc-annotations-3.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "group": "org.immutables",
            "name": "value",
            "version": "2.8.8",
            "description": "Compile time annotations and compile time annotation processor to generate consistent value object using either abstract class, interface or annotation as a base.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "f5fee05ee89fd90a0c6252fc1ea32ff1"
                },
                {
                    "alg": "SHA-1",
                    "content": "d99fa1e04af5a1fda42fa9412d68eb7fe17a1071"
                },
                {
                    "alg": "SHA-256",
                    "content": "93f0d0e2412de051c2d96cc8a8ecc1f3ba91d961ff330f3575e61b43afa68850"
                },
                {
                    "alg": "SHA-512",
                    "content": "be6bc50ed577bb42389d7c1cd50dfa8fa499c9ba6459d3f87c5404fc29bfa26e877db6b49faaf5ab4cbd652ba95d66e46de7e15ef396f82664a5fefded9db697"
                },
                {
                    "alg": "SHA-384",
                    "content": "4715e4b3a4e39a4d0c4cbf8540aab944db73aae11c2d401f001e3f9ef1f1615c2443c16fa92bebced5fac87906b5d928"
                },
                {
                    "alg": "SHA3-384",
                    "content": "a68c9f36848478ff24d62e6e44a46980cea563bf1aef085593c9508a2e7232de7a4865acbc993afb0a555c8ac9085dfe"
                },
                {
                    "alg": "SHA3-256",
                    "content": "09ab4b3d6c1d985d4dcf4c7bdff83a36e092a43b637353acc925306376c45ef1"
                },
                {
                    "alg": "SHA3-512",
                    "content": "81ab58a54e8f9ac5977c1617d3f399270e2a2077399633b9b08239be8d1c9bbf50ce0852e8a79bcc7b8c26d0db434ce830e8cf31d366af485e2f132e4475c4c1"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "modified": false,
            "supplier": {
                "name": "Immutables",
                "url": [
                    "https://immutables.github.io"
                ]
            },
            "manufacturer": {
                "name": "Immutables",
                "url": [
                    "https://immutables.github.io"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.immutables/value@2.8.8?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "be6bc50ed577bb42389d7c1cd50dfa8fa499c9ba6459d3f87c5404fc29bfa26e877db6b49faaf5ab4cbd652ba95d66e46de7e15ef396f82664a5fefded9db697"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "value-2.8.8.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "publisher": "Codehaus",
            "group": "org.mvel",
            "name": "mvel14",
            "version": "1.2.21",
            "description": "",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "67b9f1dd16b353327a9ef4fe708a8b62"
                },
                {
                    "alg": "SHA-1",
                    "content": "c47f62efc5ad5e7f0bbb8334d2a1f83af85863ff"
                },
                {
                    "alg": "SHA-256",
                    "content": "2c1dc80c330f7d086de63fac3e138940ab982270e87cd8d85fed4356b56db5ce"
                },
                {
                    "alg": "SHA-512",
                    "content": "ebb7cf7af63a4b3cb105946e165357daea805c465c7295ea546da170866930a57230e77246f2785167b455be7595d1d5d66ffcc6a9d7bee41d49f8deae19d6c2"
                },
                {
                    "alg": "SHA-384",
                    "content": "0868519634038b9b0f3e5845af411a76214d3258edfae6149432177ec8064a324592212a6e53f5302b509068ae44dbd6"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3cb61e23d651759de77758710be3ffb5ec1ce9d8274280f073bc60f2413023a254050d78176ebcb1f6c21dd147681c05"
                },
                {
                    "alg": "SHA3-256",
                    "content": "d1898f39b3becd1e18ba87b6737d6b6f0fb481c3d8ef2c2f91832efb71f36e8b"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f844c28c6c82222ad6fc0e936112ad3db09d8488f449bea82dd0c927cd2686de457d0cdeae113be33d38b76159523241bd36d189cbd12d945b4c2360a3384a42"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://codehaus.org"
                },
                {
                    "type": "issue-tracker",
                    "url": "http://jira.codehaus.org/browse/MVEL"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.mvel.codehaus.org/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ebb7cf7af63a4b3cb105946e165357daea805c465c7295ea546da170866930a57230e77246f2785167b455be7595d1d5d66ffcc6a9d7bee41d49f8deae19d6c2"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "MVEL",
                "url": [
                    "https://github.com/mvel/mvel"
                ]
            },
            "manufacturer": {
                "name": "MVEL",
                "url": [
                    "https://github.com/mvel/mvel"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "mvel14-1.2.21.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "group": "com.fasterxml.jackson.core",
            "name": "jackson-core",
            "version": "2.22.1",
            "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "09e866bcd73613665ef49f5086704fb1"
                },
                {
                    "alg": "SHA-1",
                    "content": "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
                },
                {
                    "alg": "SHA-256",
                    "content": "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
                },
                {
                    "alg": "SHA-512",
                    "content": "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
                },
                {
                    "alg": "SHA-384",
                    "content": "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
                },
                {
                    "alg": "SHA3-384",
                    "content": "5c432f1a2f3369485c4ed7d3c3c4499342c23efd0d7a574b73421345df9762bd27643cc469b01632400691f3c09b5d8b"
                },
                {
                    "alg": "SHA3-256",
                    "content": "48fc6e17c36e14b8bae387b92248a43da12293b68a61dd2517c708dbb24ed010"
                },
                {
                    "alg": "SHA3-512",
                    "content": "f72ef2d2a1012be8b1c972323527a396bbaea0b543bd79fac6d380f8e4855c6d98190b067ccec92ece9ed8e1ece1e6046b1d93f9c85944fcb7133fe0b4dc60e4"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/jackson-core"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jackson-core-2.22.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "group": "org.apache.commons",
            "name": "commons-collections4",
            "version": "4.2",
            "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b290524be8a0dbb6521df95f4ce80c8d"
                },
                {
                    "alg": "SHA-1",
                    "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
                },
                {
                    "alg": "SHA-256",
                    "content": "6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e"
                },
                {
                    "alg": "SHA-512",
                    "content": "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e"
                },
                {
                    "alg": "SHA-384",
                    "content": "5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710"
                },
                {
                    "alg": "SHA3-384",
                    "content": "218724de0d35fb21a3f88ae22dc711568d68baee0016dbba9ee36fd16e5e5954b555683f8b96476f10d859a87c4c404c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a4bac19481860f0aca6abdcc68c89f6198422855efa9c3c596f1c96ad6110f4d"
                },
                {
                    "alg": "SHA3-512",
                    "content": "b738176217e3233e94ad8e88d89f3c75c8c55b1990636fed72f7813f537989dbda38faa04c3f152275205f887c773f7ced867c6f5332d61e9442641e5fd8b3d5"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/COLLECTIONS"
                },
                {
                    "type": "vcs",
                    "url": "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-collections4-4.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "group": "org.owasp.encoder",
            "name": "encoder",
            "version": "1.3.1",
            "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "c826f7776c4d03adcbf1a2bceef84627"
                },
                {
                    "alg": "SHA-1",
                    "content": "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba"
                },
                {
                    "alg": "SHA-256",
                    "content": "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757"
                },
                {
                    "alg": "SHA-512",
                    "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
                },
                {
                    "alg": "SHA-384",
                    "content": "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be"
                },
                {
                    "alg": "SHA3-384",
                    "content": "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11"
                },
                {
                    "alg": "SHA3-256",
                    "content": "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897"
                },
                {
                    "alg": "SHA3-512",
                    "content": "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7"
                }
            ],
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "modified": false,
            "supplier": {
                "name": "OWASP Foundation",
                "url": [
                    "https://owasp.org/www-project-java-encoder/"
                ]
            },
            "manufacturer": {
                "name": "OWASP Foundation",
                "url": [
                    "https://owasp.org/www-project-java-encoder/"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "encoder-1.3.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "publisher": "fasterxml.com",
            "group": "org.codehaus.woodstox",
            "name": "stax2-api",
            "version": "4.2.1",
            "description": "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "af8377bc7882332e22456616a9f164f6"
                },
                {
                    "alg": "SHA-1",
                    "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
                },
                {
                    "alg": "SHA-256",
                    "content": "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
                },
                {
                    "alg": "SHA-512",
                    "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
                },
                {
                    "alg": "SHA-384",
                    "content": "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
                },
                {
                    "alg": "SHA3-384",
                    "content": "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
                },
                {
                    "alg": "SHA3-512",
                    "content": "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
                }
            ],
            "licenses": [
                {
                    "expression": "BSD-4-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://fasterxml.com"
                },
                {
                    "type": "vcs",
                    "url": "http://github.com/FasterXML/stax2-api"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML/stax2-api"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML/stax2-api"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "stax2-api-4.2.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "group": "com.github.librepdf",
            "name": "openpdf",
            "version": "1.3.30.jaspersoft.2",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "71e298f9eeb2df0edab3dbe34064ba87"
                },
                {
                    "alg": "SHA-1",
                    "content": "d78a17a6e9c09c18a0f7787f8d3f4bccabf3fc12"
                },
                {
                    "alg": "SHA-256",
                    "content": "3d69dce074ee5b0b995d526c47f8c5281ceb83144ebaab5c52b66cf98655df06"
                },
                {
                    "alg": "SHA-512",
                    "content": "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3"
                },
                {
                    "alg": "SHA-384",
                    "content": "a486b40434eb69931041ac733051ba2fe7b095a8f671930d2ec77fc2fed4eef200cab2fdc605bcf3b6ae9f48d4958b8e"
                },
                {
                    "alg": "SHA3-384",
                    "content": "eea346c17dda36f1adb5f8c1af9cdffa644f68346cd03306e2f2b8dc14cf102b1c51e97fff30508690bcf8290ab7a92c"
                },
                {
                    "alg": "SHA3-256",
                    "content": "62babf8d804d2567e9fce0c1ea403e0ba8c976e18ed72dd1191543bca8e2ca02"
                },
                {
                    "alg": "SHA3-512",
                    "content": "ad2bd48080273d92bddd30474dcc49f5d0a98ab0550aea26b267edeb0660014a3e6246e3dbc2756860ff3058191c3f35f51cba83a70b891fea15c04f43dbaf8b"
                }
            ],
            "purl": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "modified": false,
            "supplier": {
                "name": "LibrePDF",
                "url": [
                    "https://github.com/LibrePDF/OpenPDF"
                ]
            },
            "manufacturer": {
                "name": "LibrePDF",
                "url": [
                    "https://github.com/LibrePDF/OpenPDF"
                ]
            },
            "licenses": [
                {
                    "expression": "LGPL-2.1-only OR MPL-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "openpdf-1.3.30.jaspersoft.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "publisher": "Shigeru Chiba, www.javassist.org",
            "group": "org.javassist",
            "name": "javassist",
            "version": "3.29.2-GA",
            "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "9783c90ffa4d36eddda9526fde06f3ea"
                },
                {
                    "alg": "SHA-1",
                    "content": "6c32028609e5dd4a1b78e10fbcd122b09b3928b1"
                },
                {
                    "alg": "SHA-256",
                    "content": "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f"
                },
                {
                    "alg": "SHA-512",
                    "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
                },
                {
                    "alg": "SHA-384",
                    "content": "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e"
                },
                {
                    "alg": "SHA3-256",
                    "content": "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50"
                },
                {
                    "alg": "SHA3-512",
                    "content": "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2"
                }
            ],
            "licenses": [
                {
                    "expression": "MPL-1.1 OR LGPL-2.1-only OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://jira.jboss.org/jira/browse/JASSIST/"
                },
                {
                    "type": "vcs",
                    "url": "scm:git:git@github.com:jboss-javassist/javassist.git"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Shigeru Chiba",
                "url": [
                    "https://www.javassist.org"
                ]
            },
            "manufacturer": {
                "name": "Shigeru Chiba",
                "url": [
                    "https://www.javassist.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "javassist-3.29.2-GA.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "group": "org.reflections",
            "name": "reflections",
            "version": "0.10.2",
            "description": "Reflections - Java runtime metadata analysis",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "1d0070839d825f57fe6f4d8e2a82989b"
                },
                {
                    "alg": "SHA-1",
                    "content": "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
                },
                {
                    "alg": "SHA-256",
                    "content": "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
                },
                {
                    "alg": "SHA-512",
                    "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
                },
                {
                    "alg": "SHA-384",
                    "content": "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
                },
                {
                    "alg": "SHA3-384",
                    "content": "7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54"
                },
                {
                    "alg": "SHA3-256",
                    "content": "b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf"
                },
                {
                    "alg": "SHA3-512",
                    "content": "023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c"
                }
            ],
            "licenses": [
                {
                    "expression": "WTFPL OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/ronmamo/reflections/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/ronmamo/reflections/issues"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "Reflections",
                "url": [
                    "https://github.com/ronmamo/reflections"
                ]
            },
            "manufacturer": {
                "name": "Reflections",
                "url": [
                    "https://github.com/ronmamo/reflections"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "reflections-0.10.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
            "group": "org.zkoss.common",
            "name": "zel",
            "version": "11.0.0.FL.20261111-Eval",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "0f1239957257212960e5f2bb76590435"
                },
                {
                    "alg": "SHA-1",
                    "content": "782ddd6e9b5785c6aa8720438274a76ebf0795cf"
                },
                {
                    "alg": "SHA-256",
                    "content": "1e11a242af7852800f0b3cd6ffe5065984f8db5703fd3f57a60d17ab03fd0fa3"
                },
                {
                    "alg": "SHA-512",
                    "content": "a32dbc2d1d0ae963dac9e3d48260e4797dfe17d877835d71f449ac40e83a923800c327822c139f838c6eaca8475b055435faf55fa22c1e23a2fabacbff307092"
                },
                {
                    "alg": "SHA-384",
                    "content": "5575ddb8a7e37d94b2e16b1f4bd0e4ecec5a4f51ee73223c0a8244afbdf8995aadd9bd123795aedf6cb44db9fe87e3f0"
                },
                {
                    "alg": "SHA3-384",
                    "content": "995b6cf4d5c603815573c4f280b81110e6a30a7ee70b4c33b56b6f6b4d9a75844c4004f5bc4653192389eb3a0323b158"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7b22135ee7c4cb53447a796a685a72307751fe7c79f6362d08d8fe6634729650"
                },
                {
                    "alg": "SHA3-512",
                    "content": "d5290ebc6b0ea1c4f8875b692bf6212e2b0ad2f6ed75aa739bfdb82c5b5d26998b326ebf5745774469e654f641e6ba8c45209eb10b7967698d79b7348428722c"
                }
            ],
            "purl": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
            "modified": false,
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a32dbc2d1d0ae963dac9e3d48260e4797dfe17d877835d71f449ac40e83a923800c327822c139f838c6eaca8475b055435faf55fa22c1e23a2fabacbff307092"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zel-11.0.0.FL.20261111-Eval.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "group": "commons-logging",
            "name": "commons-logging",
            "version": "1.0.3",
            "description": "Commons Logging",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "5bc8bdd15b18018e84fd862993aaca42"
                },
                {
                    "alg": "SHA-1",
                    "content": "760c711c71588bc273d3e56d196d720a7678cd93"
                },
                {
                    "alg": "SHA-256",
                    "content": "bcfa023daea8525d6db029ea82e8f58dbf1a06006db6526d9f984dbf215d8a75"
                },
                {
                    "alg": "SHA-512",
                    "content": "0ea5efb79865fd978c4075e381f35229ad938b2860eda8c506ee98c5615ecddffbea1173ea7a130dbfbadbbed8f9a425e5c19fa62b5a2b98144921a7992737b3"
                },
                {
                    "alg": "SHA-384",
                    "content": "bf1f5643aa7d1c1c3d60775aa77e88d5073f2e48e04aac27c2ccfe2312244ca17649a2f238145c119fb5523204516815"
                },
                {
                    "alg": "SHA3-384",
                    "content": "0595697cea906ee89e2607af278a8d93b75d38414fceb2739a40338c7b18e9e4684f736c55fc094778603cf4c52b8ade"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f291115a0eaa02879dfb0cfb31a697b5dfd374cca62a578b609ddfc1b2fb9d63"
                },
                {
                    "alg": "SHA3-512",
                    "content": "1238b9bda3666c0ca07e9bfd988196e247913581bb243bf768495633d1bf9caa4cffe47d35f64ea48120e9ddabfcb4f066f4246c5ea4875e1906a0c83a63e7b2"
                }
            ],
            "purl": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "modified": false,
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "licenses": [
                {
                    "expression": "Apache-1.1",
                    "acknowledgement": "concluded"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0ea5efb79865fd978c4075e381f35229ad938b2860eda8c506ee98c5615ecddffbea1173ea7a130dbfbadbbed8f9a425e5c19fa62b5a2b98144921a7992737b3"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-logging-1.0.3.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "group": "com.google.guava",
            "name": "listenablefuture",
            "version": "9999.0-empty-to-avoid-conflict-with-guava",
            "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "d094c22570d65e132c19cea5d352e381"
                },
                {
                    "alg": "SHA-1",
                    "content": "b421526c5f297295adef1c886e5246c39d4ac629"
                },
                {
                    "alg": "SHA-256",
                    "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
                },
                {
                    "alg": "SHA-512",
                    "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
                },
                {
                    "alg": "SHA-384",
                    "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
                },
                {
                    "alg": "SHA3-384",
                    "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
                },
                {
                    "alg": "SHA3-256",
                    "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
                },
                {
                    "alg": "SHA3-512",
                    "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "group": "org.jspecify",
            "name": "jspecify",
            "version": "1.0.1",
            "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "d4fe1ea4d953b66fcb1d6043c22bffcf"
                },
                {
                    "alg": "SHA-1",
                    "content": "3d60fd98eb8ade73004f4195c37b6317e02cf3d7"
                },
                {
                    "alg": "SHA-256",
                    "content": "070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66"
                },
                {
                    "alg": "SHA-512",
                    "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
                },
                {
                    "alg": "SHA-384",
                    "content": "f7c6aea402675ed6d9286e6107d4bf6c2d1f757f9fce4c74807cbd43d426569324cf4c7faed28dc777e90ddb3a63db68"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d462ead4749cc7b404b1699aedf472664e9bb38db769f2ec78a6457d2d080602f673af8b3114724dd92ee2262f464c41"
                },
                {
                    "alg": "SHA3-256",
                    "content": "f9392a7b674c37a7617d7e5ab4a6197c235c0a036244eaf550291d6756c0f1c9"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3154b4940937103d74b77eede7abc7034168dc986284ef00ab4e4d5b537ed6370c6856787ae50711e62906b3011243c9a656b659ddd025c1e6b828c44b980855"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "vcs",
                    "url": "https://github.com/jspecify/jspecify/"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8f5ca6f5c25ee353bfbe3e5e5cd9847b3b3ed1e954a14a52c9aa016c673e02bfbc2e0f9308ad576c2a58720f8bf2139ad9883c7a881050fe96a2f87e2e623711"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "JSpecify",
                "url": [
                    "https://jspecify.dev"
                ]
            },
            "manufacturer": {
                "name": "JSpecify",
                "url": [
                    "https://jspecify.dev"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jspecify-1.0.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "group": "commons-logging",
            "name": "commons-logging",
            "version": "1.2",
            "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
                },
                {
                    "alg": "SHA-1",
                    "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
                },
                {
                    "alg": "SHA-256",
                    "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
                },
                {
                    "alg": "SHA-512",
                    "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
                },
                {
                    "alg": "SHA-384",
                    "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
                },
                {
                    "alg": "SHA3-384",
                    "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
                },
                {
                    "alg": "SHA3-256",
                    "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
                },
                {
                    "alg": "SHA3-512",
                    "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "issue-tracker",
                    "url": "http://issues.apache.org/jira/browse/LOGGING"
                },
                {
                    "type": "vcs",
                    "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "commons-logging-1.2.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "group": "com.google.code.gson",
            "name": "gson",
            "version": "2.10.1",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "df6097815738cb31fc56391553210843"
                },
                {
                    "alg": "SHA-1",
                    "content": "b3add478d4382b78ea20b1671390a858002feb6c"
                },
                {
                    "alg": "SHA-256",
                    "content": "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
                },
                {
                    "alg": "SHA-512",
                    "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
                },
                {
                    "alg": "SHA-384",
                    "content": "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
                },
                {
                    "alg": "SHA3-384",
                    "content": "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
                },
                {
                    "alg": "SHA3-256",
                    "content": "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
                },
                {
                    "alg": "SHA3-512",
                    "content": "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "gson-2.10.1.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "group": "com.google.guava",
            "name": "guava",
            "version": "33.7.2-jre",
            "description": "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "b07f61705f717d9ae7946c7fdb1efd7a"
                },
                {
                    "alg": "SHA-1",
                    "content": "e70def5b06cfb109ea050de99870e79c8ce80dbc"
                },
                {
                    "alg": "SHA-256",
                    "content": "b530942257fb935f8b2cfaa5f8eb5bd59c555fd8e8d01b8ce98912e077ea606c"
                },
                {
                    "alg": "SHA-512",
                    "content": "bd663dc02f2293a552d82829518435b8cfcd77b7c73eeb638aef93918ef7613ad2a869003b09d1afb4446fa74308041daa7a6aea85c1bedb17db1f5f0c2c5c0b"
                },
                {
                    "alg": "SHA-384",
                    "content": "7c1d8db6504620e2feb70d56e4bffb479e5ba292c1d911da060cb66f2ac3d4050c718a72e6cfd6c82a36fd840c499942"
                },
                {
                    "alg": "SHA3-384",
                    "content": "13dcb7e8318a75368b33e1abc3a5b9b674bed950d6cfe1e7ca8be8f42f642816e69ae5d39d5ddbe998fe2c9acbf6ee28"
                },
                {
                    "alg": "SHA3-256",
                    "content": "adee2b0b99a4777a1fb04eb1a26d6b44aa47457c850dbf43d743d17801615c18"
                },
                {
                    "alg": "SHA3-512",
                    "content": "5bff0e702aaa6bfbf3fdd8fb963b6242d5dbecd8b7601afc0bfe158314887352d48c79c4ef9e256a0510474ac39493c59ca277bd1989a04705a723c6045fe4b7"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "modified": false,
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://opensource.google"
                ]
            },
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bd663dc02f2293a552d82829518435b8cfcd77b7c73eeb638aef93918ef7613ad2a869003b09d1afb4446fa74308041daa7a6aea85c1bedb17db1f5f0c2c5c0b"
                        }
                    ]
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "guava-33.7.2-jre.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "publisher": "FasterXML",
            "group": "com.fasterxml.woodstox",
            "name": "woodstox-core",
            "version": "6.4.0",
            "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
            "hashes": [
                {
                    "alg": "MD5",
                    "content": "afcba1114fca8199ef26346dd6011e90"
                },
                {
                    "alg": "SHA-1",
                    "content": "c47579857bbf12c85499f431d4ecf27d77976b7c"
                },
                {
                    "alg": "SHA-256",
                    "content": "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
                },
                {
                    "alg": "SHA-512",
                    "content": "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
                },
                {
                    "alg": "SHA-384",
                    "content": "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
                },
                {
                    "alg": "SHA3-384",
                    "content": "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e"
                },
                {
                    "alg": "SHA3-256",
                    "content": "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee"
                },
                {
                    "alg": "SHA3-512",
                    "content": "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6"
                }
            ],
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "modified": false,
            "externalReferences": [
                {
                    "type": "website",
                    "url": "http://fasterxml.com"
                },
                {
                    "type": "issue-tracker",
                    "url": "https://github.com/FasterXML/woodstox/issues"
                },
                {
                    "type": "vcs",
                    "url": "https://github.com/FasterXML/woodstox"
                },
                {
                    "type": "distribution",
                    "url": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
                        }
                    ]
                }
            ],
            "supplier": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "manufacturer": {
                "name": "FasterXML, LLC",
                "url": [
                    "https://github.com/FasterXML"
                ]
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "woodstox-core-6.4.0.jar"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "structured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/spel2js@0.2.8",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "spel2js",
            "version": "0.2.8",
            "purl": "pkg:npm/spel2js@0.2.8",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "spel2js",
                        "version": "0.2.8",
                        "purl": "pkg:npm/spel2js@0.2.8"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "spel2js.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "9cf7c592cfedaf15070d6585474fe864e64365523a289ce756026035ca6e3369"
                },
                {
                    "alg": "SHA-512",
                    "content": "1823daef9fc4d290e0302efebbe37bae58a19552b6e666be49aab066adca5e2334d19bc6781c6bb9c26ab0c6eaa11b9c4ee46ddc4ce41aee3024cbbe98257c77"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar#web/js/clientbind/ext/spel2js.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "1823daef9fc4d290e0302efebbe37bae58a19552b6e666be49aab066adca5e2334d19bc6781c6bb9c26ab0c6eaa11b9c4ee46ddc4ce41aee3024cbbe98257c77"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/mobx@6.6.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "mobx",
            "version": "6.6.1",
            "purl": "pkg:npm/mobx@6.6.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "mobx",
                        "version": "6.6.1",
                        "purl": "pkg:npm/mobx@6.6.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "mobx.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "51db4ee9eadd1adca0aa33c7766ac68e632f3e0c02027be59533f02e372732c4"
                },
                {
                    "alg": "SHA-512",
                    "content": "a128757567f0408f9e68bb01f6812fd8f6a169affda3b25b380b1795debeee6262ea75724ea3c129ceff4acd9d27afab03e552b30230f2ea35b986adf008ca96"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar#web/js/clientbind/ext/mobx.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a128757567f0408f9e68bb01f6812fd8f6a169affda3b25b380b1795debeee6262ea75724ea3c129ceff4acd9d27afab03e552b30230f2ea35b986adf008ca96"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/zone.js@0.15.0",
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "name": "zone.js",
            "version": "0.15.0",
            "purl": "pkg:npm/zone.js@0.15.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zone.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ea378eae6dc49f1d7913148f33849a09e0f533c1d53e9e30f04341cc70637e26"
                },
                {
                    "alg": "SHA-512",
                    "content": "c50860936b3c175e66cfaceff211ad335adb1d13e20cae0a7652258c61190de5c684fdeef4ae0b39881365303165183f8ef5c88e263b34e19d389ac57ec29546"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar#web/js/clientbind/ext/zone.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c50860936b3c175e66cfaceff211ad335adb1d13e20cae0a7652258c61190de5c684fdeef4ae0b39881365303165183f8ef5c88e263b34e19d389ac57ec29546"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/benjiman/lambda-type-references",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lambda-type-references",
            "version": "2024-05-22T16:34:40+08:00",
            "purl": "pkg:github/benjiman/lambda-type-references",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lambda-type-references",
                        "purl": "pkg:github/benjiman/lambda-type-references",
                        "supplier": {
                            "name": "Benji Weber",
                            "url": [
                                "https://github.com/benjiman/lambda-type-references"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/apache/xml-schema-dtd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "XMLSchema.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "5ab6a0e0a2fe3ba27643ab9c8953a90b53a079a5e3702d1e90e4563534654087"
                },
                {
                    "alg": "SHA-512",
                    "content": "5aa7421da50d307becec7ebd0d5abe9c94aca2863e8afbb8773e066708459d95873748236a3603b6041b501d175c23c5fb19f8509529cf6f5a7875de8a8c370a"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/XMLSchema.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5aa7421da50d307becec7ebd0d5abe9c94aca2863e8afbb8773e066708459d95873748236a3603b6041b501d175c23c5fb19f8509529cf6f5a7875de8a8c370a"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "datatypes.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "ec710bcaf10c273aa9a25bf1a315581f5d8c4ab4ae20b5b9a754e8b0accc3d4d"
                },
                {
                    "alg": "SHA-512",
                    "content": "19035a455f1c2599bd81b6d38deae9a05ad02d9f014e399ee4c7481c0c9e1a0ad26b985ebba55e1d35814ba5754abdcea4385ce146061e536195b08a18abbd99"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "19035a455f1c2599bd81b6d38deae9a05ad02d9f014e399ee4c7481c0c9e1a0ad26b985ebba55e1d35814ba5754abdcea4385ce146061e536195b08a18abbd99"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
            "supplier": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "manufacturer": {
                "name": "The Apache Software Foundation",
                "url": [
                    "https://www.apache.org"
                ]
            },
            "name": "xml-schema-dtd",
            "version": "1.0",
            "purl": "pkg:generic/apache/xml-schema-dtd",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xml.xsd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "916bf9bfdd32b5782b9a7154324ecf14d56ffdd5a6d41b255731132d84e3da7c"
                },
                {
                    "alg": "SHA-512",
                    "content": "79a1d1d552246a6cafc4a842e8061bfb4da256243c92c814daf997da943f04c3e60e6742833f418fc42e5b0e7322e91a5d7bc0dab713da76b908304d11a01401"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "79a1d1d552246a6cafc4a842e8061bfb4da256243c92c814daf997da943f04c3e60e6742833f418fc42e5b0e7322e91a5d7bc0dab713da76b908304d11a01401"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/w3c/xhtml1-dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-strict.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "56cd2441229d82e30fb936b98adae91dd5a72e96fa78e822aa7d7bc4f21da13c"
                },
                {
                    "alg": "SHA-512",
                    "content": "5d14b52c298b22cf5f21ce369b0fbb01ea578823cbf915b30b4a0cf8ff053164dbc4cf9e765429ceccff6f8fb4be4aa8ccfe3fa927e9bce9de72553c8f8b6cab"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-strict.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5d14b52c298b22cf5f21ce369b0fbb01ea578823cbf915b30b4a0cf8ff053164dbc4cf9e765429ceccff6f8fb4be4aa8ccfe3fa927e9bce9de72553c8f8b6cab"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-transitional.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c5c60018edeb3e007d86958bf03cef67b634c55c7986b0b5fe5946e489cd4058"
                },
                {
                    "alg": "SHA-512",
                    "content": "891be3ef202b2a565bcdcc488594373172b63eae58b4931a1247f0e2f939191ffc3dc248598a799347b0f627aae72c2c4ff4f349c7e52b4196a2f3c1e2a01d1d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "891be3ef202b2a565bcdcc488594373172b63eae58b4931a1247f0e2f939191ffc3dc248598a799347b0f627aae72c2c4ff4f349c7e52b4196a2f3c1e2a01d1d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml1-frameset.dtd"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "bd2a72b0060a0e4600d2c3b3c2a7d39e63981d46f9ac777715051777017c9aec"
                },
                {
                    "alg": "SHA-512",
                    "content": "5acaf56e0e943a8bada94e713b7e994e400b4704f0ef3631cc46885ad056d4db0a53cd43b6d1fc64d2fd1f4b7cd7cc1325b99ae9f024dc2cf7f522e4f21b4cf7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "5acaf56e0e943a8bada94e713b7e994e400b4704f0ef3631cc46885ad056d4db0a53cd43b6d1fc64d2fd1f4b7cd7cc1325b99ae9f024dc2cf7f522e4f21b4cf7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-lat1.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "3da1daad08f93b8aff7a32d5447f94853d517561d9c7d0c7bc3ee5c002d12a38"
                },
                {
                    "alg": "SHA-512",
                    "content": "cf87ff36a3a55e9aa5e6aaf7bff31df58fb7f809520f47b1974ed5c63adbc344376561521e7fcb731a07a1bd75f241fabd46f9338c8c58f3df14babcef8b2b90"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "cf87ff36a3a55e9aa5e6aaf7bff31df58fb7f809520f47b1974ed5c63adbc344376561521e7fcb731a07a1bd75f241fabd46f9338c8c58f3df14babcef8b2b90"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-special.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7f9518026c59ccee47a02ed74e43f8946d92207d438a7f540a0f3c28f05fa27e"
                },
                {
                    "alg": "SHA-512",
                    "content": "488a69173b167e6bba1c27c0c67551a4812620e882db5370b59efa18f5ac1ba4bdee0e5689cb7080943abe5e72ec8daed369dde510115d59360a977438cbeeec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "488a69173b167e6bba1c27c0c67551a4812620e882db5370b59efa18f5ac1ba4bdee0e5689cb7080943abe5e72ec8daed369dde510115d59360a977438cbeeec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
            "supplier": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "manufacturer": {
                "name": "World Wide Web Consortium",
                "url": [
                    "https://www.w3.org"
                ]
            },
            "name": "xhtml1-dtd",
            "version": "1.0",
            "purl": "pkg:generic/w3c/xhtml1-dtd",
            "licenses": [
                {
                    "expression": "W3C",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "xhtml-symbol.ent"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a6cd0f9c59e488b8c8e2de80c31c6811f316a3919cd9a0725b5390a8fc785d61"
                },
                {
                    "alg": "SHA-512",
                    "content": "f030479c09a6f664b96783a55e45032d4493be5094d9ec1b5d679d23edc2dca4f93b6846ac97e5e92fcb762559836295361918eb7c5eb7dd617519aebe96b1f2"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f030479c09a6f664b96783a55e45032d4493be5094d9ec1b5d679d23edc2dca4f93b6846ac97e5e92fcb762559836295361918eb7c5eb7dd617519aebe96b1f2"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.unbescape/unbescape",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "unbescape",
            "version": "2021-10-12T11:41:34+08:00",
            "purl": "pkg:maven/org.unbescape/unbescape",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "unbescape",
                        "purl": "pkg:maven/org.unbescape/unbescape",
                        "supplier": {
                            "name": "The UNBESCAPE team",
                            "url": [
                                "https://www.unbescape.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.jdom/jdom2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jdom2",
            "version": "2021-10-12T11:41:34+08:00",
            "purl": "pkg:maven/org.jdom/jdom2",
            "licenses": [
                {
                    "expression": "LicenseRef-scancode-jdom",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jdom2",
                        "purl": "pkg:maven/org.jdom/jdom2",
                        "supplier": {
                            "name": "Jason Hunter & Brett McLaughlin",
                            "url": [
                                "http://www.jdom.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.googlecode.json-simple/json-simple",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "json-simple",
            "version": "2024-02-26T17:08:34+08:00",
            "purl": "pkg:maven/com.googlecode.json-simple/json-simple",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "json-simple",
                        "purl": "pkg:maven/com.googlecode.json-simple/json-simple",
                        "supplier": {
                            "name": "Yidong Fang",
                            "url": [
                                "https://code.google.com/archive/p/json-simple/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/apache/tomcat",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "apache-tomcat",
            "version": "2023-04-14T11:51:32+08:00",
            "purl": "pkg:github/apache/tomcat",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "apache-tomcat",
                        "purl": "pkg:github/apache/tomcat",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://tomcat.apache.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar#apache-tomcat",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "apache-tomcat",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:github/apache/tomcat",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "apache-tomcat",
                        "purl": "pkg:github/apache/tomcat",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://tomcat.apache.org"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery@3.5.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery",
            "version": "3.5.1",
            "purl": "pkg:npm/jquery@3.5.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery",
                        "version": "3.5.1",
                        "purl": "pkg:npm/jquery@3.5.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a057fdf4a0d2e506bac659da519d4980c5b542f97ebcfe65bae037d44e7b428e"
                },
                {
                    "alg": "SHA-512",
                    "content": "44396c32e32ef48cda47e0793d0c7a0781309aa3a1954039288b539d2eaa19683f5a9a14d64b800cc3916e18dbc392e80e3856e44e7e07efbafd456b88fb9bba"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "44396c32e32ef48cda47e0793d0c7a0781309aa3a1954039288b539d2eaa19683f5a9a14d64b800cc3916e18dbc392e80e3856e44e7e07efbafd456b88fb9bba"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/douglascrockford/json-js",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "json2.js",
            "version": "2009-06-18",
            "purl": "pkg:github/douglascrockford/json-js",
            "licenses": [
                {
                    "expression": "LicenseRef-scancode-public-domain",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "json2.js",
                        "version": "2009-06-18",
                        "purl": "pkg:github/douglascrockford/json-js"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.json.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "bb2b7c56fe2703708feb1a4b6c5f1ad7a44767d4e698e216d2b01801420acae4"
                },
                {
                    "alg": "SHA-512",
                    "content": "4304097c1a1a2a4be50776fa53e21f739b499f361a82a8a037d0d7c349f92283e20f5429be3dde0e44926de000940e920647f96b0d82f09b4d887bebabcc663d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.json.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "4304097c1a1a2a4be50776fa53e21f739b499f361a82a8a037d0d7c349f92283e20f5429be3dde0e44926de000940e920647f96b0d82f09b4d887bebabcc663d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery-mousewheel@3.1.13",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery-mousewheel",
            "version": "3.1.13",
            "purl": "pkg:npm/jquery-mousewheel@3.1.13",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery-mousewheel",
                        "version": "3.1.13",
                        "purl": "pkg:npm/jquery-mousewheel@3.1.13"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.mousewheel.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "43f05c6ae019e848c6c898e625ded8540b7dc861f97f8278facdc231b880a4b5"
                },
                {
                    "alg": "SHA-512",
                    "content": "9f0d7bcfee468f3ea83bc9ea60b3c81a5707f4049ca4c25e9cd86c04ed1851124f2028739c86ccc641778d8f43930945a29a9f208f69b2694dc90c65bb13f0b7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.mousewheel.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9f0d7bcfee468f3ea83bc9ea60b3c81a5707f4049ca4c25e9cd86c04ed1851124f2028739c86ccc641778d8f43930945a29a9f208f69b2694dc90c65bb13f0b7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery.transit@0.9.12",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery.transit",
            "version": "0.9.12",
            "purl": "pkg:npm/jquery.transit@0.9.12",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery.transit",
                        "version": "0.9.12",
                        "purl": "pkg:npm/jquery.transit@0.9.12"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.transit.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "c315f2bdf0a64d2ea7df7a26a021f2b9ed7cbccf4983d228d171488b72a43014"
                },
                {
                    "alg": "SHA-512",
                    "content": "1d6b6f662254f55db6c0f143e276bc0eec51d447c8c72f228289ccc2dddaa83a520e1be5010f88f11d7e5be70ebb03f37eb7a4472d96aa2f0c0a3fc1b2447488"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/jquery.transit.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "1d6b6f662254f55db6c0f143e276bc0eec51d447c8c72f228289ccc2dddaa83a520e1be5010f88f11d7e5be70ebb03f37eb7a4472d96aa2f0c0a3fc1b2447488"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/moment@2.31.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "moment",
            "version": "2.31.0",
            "purl": "pkg:npm/moment@2.31.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "moment",
                        "version": "2.31.0",
                        "purl": "pkg:npm/moment@2.31.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "moment.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "89b420f3a341a0b000ba1871665f5186015be0d9de9dc0650eae94ed75a5fdc3"
                },
                {
                    "alg": "SHA-512",
                    "content": "62ad8627a8df0c510540ef2694b888ed91d38a2a4319632ca82c64a00c46df56bc53371680833acf8f8d08c4fbdd62401a5af5c65ccad36221cd957710c69f10"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/moment.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "62ad8627a8df0c510540ef2694b888ed91d38a2a4319632ca82c64a00c46df56bc53371680833acf8f8d08c4fbdd62401a5af5c65ccad36221cd957710c69f10"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/moment-timezone@0.5.48",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "moment-timezone",
            "version": "0.5.48",
            "purl": "pkg:npm/moment-timezone@0.5.48",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "moment-timezone",
                        "version": "0.5.48",
                        "purl": "pkg:npm/moment-timezone@0.5.48"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "moment-timezone-with-data.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a4540b0b9dbaaa8ec4368648895375fe6638ce47feba9fa67496b1fcf661594d"
                },
                {
                    "alg": "SHA-512",
                    "content": "82a0a517f0f16b1260d4429e9c4ec3b7a2252e2fc25a436606e1ce90c9c87df849e31f330446fd881776bee08944e395ee700e47f57517646beaea432609c3d5"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/moment-timezone-with-data.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "82a0a517f0f16b1260d4429e9c4ec3b7a2252e2fc25a436606e1ce90c9c87df849e31f330446fd881776bee08944e395ee700e47f57517646beaea432609c3d5"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/dompurify@3.4.17",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "dompurify",
            "version": "3.4.17",
            "purl": "pkg:npm/dompurify@3.4.17",
            "licenses": [
                {
                    "expression": "MPL-2.0 OR Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "dompurify",
                        "version": "3.4.17",
                        "purl": "pkg:npm/dompurify@3.4.17"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "purify.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "d3bdd8ed48377c3b0b845992e759577c9517bb35fba67ce8fda5c5f41df5d31d"
                },
                {
                    "alg": "SHA-512",
                    "content": "f65465e8451f7c8854b05a097ed3c40b7b469de9cda14262aaa487701e1df79db3e5d414c27753925e2eac134b7bc1d30d3aacbdb23b51ec36a408db5355ec23"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/purify.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f65465e8451f7c8854b05a097ed3c40b7b469de9cda14262aaa487701e1df79db3e5d414c27753925e2eac134b7bc1d30d3aacbdb23b51ec36a408db5355ec23"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/whatwg-fetch@0.11.1",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "whatwg-fetch",
            "version": "0.11.1",
            "purl": "pkg:npm/whatwg-fetch@0.11.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "whatwg-fetch",
                        "version": "0.11.1",
                        "purl": "pkg:npm/whatwg-fetch@0.11.1"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "fetch.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "feddf7cb3d63fca89fb9a9c80cc4d1c3f08d2ae61fbedbd5b3588959943be6a1"
                },
                {
                    "alg": "SHA-512",
                    "content": "695db10e4d236479b68d7b2464ed604e716d8fa0fbc0879434e44af0a84fad8a8431673f9072a42042d0d6495829c8873129a7187cddacf0e6087198607c72a7"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/fetch.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "695db10e4d236479b68d7b2464ed604e716d8fa0fbc0879434e44af0a84fad8a8431673f9072a42042d0d6495829c8873129a7187cddacf0e6087198607c72a7"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/focus-options-polyfill@1.6.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "focus-options-polyfill",
            "version": "1.6.0",
            "purl": "pkg:npm/focus-options-polyfill@1.6.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "focus-options-polyfill",
                        "version": "1.6.0",
                        "purl": "pkg:npm/focus-options-polyfill@1.6.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "focus-options-polyfill.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "fbd15448a3e35061305ae9c5bba1d288e75343d8a094c85415d0fb59e088615e"
                },
                {
                    "alg": "SHA-512",
                    "content": "bb8990b4413a5e01ec23ae6e2af7bccd6b5beddd340ea9f46d1a8ee797e735dd92c671c0cd4d7691286dd6d2f3f1d883ad46056b896884a2600e2bedf895b650"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/focus-options-polyfill.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bb8990b4413a5e01ec23ae6e2af7bccd6b5beddd340ea9f46d1a8ee797e735dd92c671c0cd4d7691286dd6d2f3f1d883ad46056b896884a2600e2bedf895b650"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/wicg/input-device-capabilities",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "inputdevicecapabilities-polyfill",
            "version": "2024-02-21T10:23:32+08:00",
            "purl": "pkg:github/wicg/input-device-capabilities",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "inputdevicecapabilities-polyfill",
                        "purl": "pkg:github/wicg/input-device-capabilities"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "inputdevicecapabilities-polyfill.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "941c8f526312c8395c6f56e47460f35d629dbafc0ad13313594fa8798f2da3ff"
                },
                {
                    "alg": "SHA-512",
                    "content": "91a340c5eeaf8ccc0a75b4518edbc795e9086050ae2400e0cd837d98b5cede2333eb1b217153a266adf14816434954ad5fe600cafec458746a3a09bc65b59a44"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar#web/js/zk/ext/inputdevicecapabilities-polyfill.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "91a340c5eeaf8ccc0a75b4518edbc795e9086050ae2400e0cd837d98b5cede2333eb1b217153a266adf14816434954ad5fe600cafec458746a3a09bc65b59a44"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-fileupload/commons-fileupload",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "commons-fileupload",
            "version": "2025-06-23T12:47:52+08:00",
            "purl": "pkg:maven/commons-fileupload/commons-fileupload",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "commons-fileupload",
                        "purl": "pkg:maven/commons-fileupload/commons-fileupload",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://commons.apache.org/proper/commons-fileupload/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/commons-codec/commons-codec",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "commons-codec",
            "version": "2024-09-09T15:36:50+08:00",
            "purl": "pkg:maven/commons-codec/commons-codec",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "commons-codec",
                        "version": "1.8",
                        "purl": "pkg:maven/commons-codec/commons-codec@1.8",
                        "supplier": {
                            "name": "The Apache Software Foundation",
                            "url": [
                                "https://commons.apache.org/proper/commons-codec/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/madrobby/scriptaculous",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "script.aculo.us",
            "version": "2025-05-13T16:24:00+08:00",
            "purl": "pkg:github/madrobby/scriptaculous",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "script.aculo.us",
                        "version": "1.7.0",
                        "purl": "pkg:github/madrobby/scriptaculous",
                        "supplier": {
                            "name": "Thomas Fuchs",
                            "url": [
                                "http://script.aculo.us"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.cojen/cojen",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "cojen",
            "version": "2024-01-18T17:22:20+08:00",
            "purl": "pkg:maven/org.cojen/cojen",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "cojen",
                        "purl": "pkg:maven/org.cojen/cojen",
                        "supplier": {
                            "name": "Brian S O'Neill",
                            "url": [
                                "https://github.com/cojen/Cojen"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "paranamer",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "paranamer",
                        "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer",
                        "supplier": {
                            "name": "Paul Hammant",
                            "url": [
                                "https://github.com/paul-hammant/paranamer"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.ow2.asm/asm",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "asm",
            "version": "2026-09-24T09:42:34+08:00",
            "purl": "pkg:maven/org.ow2.asm/asm",
            "licenses": [
                {
                    "expression": "BSD-3-Clause",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "asm",
                        "purl": "pkg:maven/org.ow2.asm/asm",
                        "supplier": {
                            "name": "INRIA, France Telecom",
                            "url": [
                                "https://asm.ow2.io"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/pdfjs-dist@4.10.38",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "pdfjs-dist",
            "version": "4.10.38",
            "purl": "pkg:npm/pdfjs-dist@4.10.38",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "pdfjs-dist",
                        "version": "4.10.38",
                        "purl": "pkg:npm/pdfjs-dist@4.10.38"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "pdf.mjs"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "809a9ebda41264dab8447c9fae6fc375ba91bb848536e57d5979c83c9af36171"
                },
                {
                    "alg": "SHA-512",
                    "content": "712c8be7d35bfafe3c4a1165ee9dc29e87b3e84b59c12ef40672086fafdd9688bd4e540e286ded7f541e93a15153e3d994415e89aee9f57af5b785bfde368604"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.mjs",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "712c8be7d35bfafe3c4a1165ee9dc29e87b3e84b59c12ef40672086fafdd9688bd4e540e286ded7f541e93a15153e3d994415e89aee9f57af5b785bfde368604"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "pdfjs-dist",
            "version": "4.10.38",
            "purl": "pkg:npm/pdfjs-dist@4.10.38",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "pdfjs-dist",
                        "version": "4.10.38",
                        "purl": "pkg:npm/pdfjs-dist@4.10.38"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "pdf.worker.mjs"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7c237f83fa56bce645d8af51d183c9c56ba7b2d2928ff42754dc7020bea36323"
                },
                {
                    "alg": "SHA-512",
                    "content": "d6a3c3f8741d859bda32406b216cf7cf7e56032135c4dd37095420734dc5e1cd1ec4de4459505af879a256368735ca86bd01f95cb5e5c93ce16e3a983d2a2da8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d6a3c3f8741d859bda32406b216cf7cf7e56032135c4dd37095420734dc5e1cd1ec4de4459505af879a256368735ca86bd01f95cb5e5c93ce16e3a983d2a2da8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/schlichtherle/truelicense",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "truelicense",
            "version": "2026-01-20T16:00:37+08:00",
            "purl": "pkg:generic/schlichtherle/truelicense",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "truelicense",
                        "purl": "pkg:generic/schlichtherle/truelicense",
                        "supplier": {
                            "name": "Schlichtherle IT Services",
                            "url": [
                                "http://truelicense.java.net"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:generic/source-code.biz/base64coder",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "base64coder",
            "version": "2011-03-24T10:42:09Z",
            "purl": "pkg:generic/source-code.biz/base64coder",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "base64coder",
                        "purl": "pkg:generic/source-code.biz/base64coder",
                        "supplier": {
                            "name": "Christian d'Heureuse, Inventec Informatik AG",
                            "url": [
                                "http://www.source-code.biz/base64coder/java/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/lucide-static",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lucide-static",
            "version": "2026-10-28T15:04:49+08:00",
            "purl": "pkg:npm/lucide-static",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lucide-static",
                        "purl": "pkg:npm/lucide-static",
                        "supplier": {
                            "name": "Lucide Icons and Contributors",
                            "url": [
                                "https://lucide.dev"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/signature_pad@5.0.7",
            "supplier": {
                "name": "Szymon Nowak",
                "url": [
                    "https://github.com/szimek/signature_pad"
                ]
            },
            "manufacturer": {
                "name": "Szymon Nowak",
                "url": [
                    "https://github.com/szimek/signature_pad"
                ]
            },
            "name": "signature_pad",
            "version": "5.0.7",
            "purl": "pkg:npm/signature_pad@5.0.7",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "signature_pad.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "1e403dfaee9c836207d64f86337e7dfb422df37051262908b3c7c0143208e115"
                },
                {
                    "alg": "SHA-512",
                    "content": "d3997da54ed2146319fa0cd5d4597ef938c1a95b8350d506e5dad04614f0cdb125f595d946fe9bba0a6bbb5706e2662c81f839fab40af32522fc49bf5d1c03ab"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/signature/ext/signature_pad.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d3997da54ed2146319fa0cd5d4597ef938c1a95b8350d506e5dad04614f0cdb125f595d946fe9bba0a6bbb5706e2662c81f839fab40af32522fc49bf5d1c03ab"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40zxing/library@0.21.3",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "@zxing/library",
            "version": "0.21.3",
            "purl": "pkg:npm/%40zxing/library@0.21.3",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "@zxing/library",
                        "version": "0.21.3",
                        "purl": "pkg:npm/%40zxing/library@0.21.3"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "zxing.min.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "2321bf5a3b42457b3c5b9b5906eac8edc8d91fcdac54cd18f1e8f7fcb8a863a6"
                },
                {
                    "alg": "SHA-512",
                    "content": "2bb89ae1a1a94c4a21744f9a96148b2be5755aaa3bb492f7e3146565458e795527e8fc719431f91516181315156c017a2b084228bd41848b11b0d2774d5eff8f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/barscanner/ext/zxing.min.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2bb89ae1a1a94c4a21744f9a96148b2be5755aaa3bb492f7e3146565458e795527e8fc719431f91516181315156c017a2b084228bd41848b11b0d2774d5eff8f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/iscroll@4.2.2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "iscroll",
            "version": "4.2.2",
            "purl": "pkg:npm/iscroll@4.2.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "iscroll",
                        "version": "4.2.2",
                        "purl": "pkg:npm/iscroll@4.2.2"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "iscroll.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "aa48b761d0b60a63884e01aa397052dfc0deddea097c4833d7423ff4a428590b"
                },
                {
                    "alg": "SHA-512",
                    "content": "f51fa395ce7d25f838c87d630bfa800f5cc15d72d01784c99820a87c074b59eb964c22f44ca613352357e6e9e15fbe3e0c0e3aa901b5fc00361ec948cf9e3808"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/touch/ext/iscroll.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f51fa395ce7d25f838c87d630bfa800f5cc15d72d01784c99820a87c074b59eb964c22f44ca613352357e6e9e15fbe3e0c0e3aa901b5fc00361ec948cf9e3808"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/trumbowyg@2.31.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "trumbowyg",
            "version": "2.31.0",
            "purl": "pkg:npm/trumbowyg@2.31.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "trumbowyg",
                        "version": "2.31.0",
                        "purl": "pkg:npm/trumbowyg@2.31.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "trumbowyg.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "7d5fa745b44c62502d10b8375d80dc748b32a73e8fb88c4cde6f7ec07c7e4f59"
                },
                {
                    "alg": "SHA-512",
                    "content": "45a772280311bf628a2c9c040a464c42d0bc173ecd644f803bab02e3cde637e9d5d9e83467bc03fc757c12dc4f36707ed0572f4dc6eac94a6b5c1b1bdbe34e81"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/tbeditor/ext/trumbowyg.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "45a772280311bf628a2c9c040a464c42d0bc173ecd644f803bab02e3cde637e9d5d9e83467bc03fc757c12dc4f36707ed0572f4dc6eac94a6b5c1b1bdbe34e81"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/trumbowyg@2.7.2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "trumbowyg",
            "version": "2.7.2",
            "purl": "pkg:npm/trumbowyg@2.7.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "trumbowyg",
                        "version": "2.7.2",
                        "purl": "pkg:npm/trumbowyg@2.7.2"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "icons.svg"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "6cb6791196965ffd0c22e35f0ff96cf4d906ab6bf0f289010ba684277b03ef5c"
                },
                {
                    "alg": "SHA-512",
                    "content": "2bcd85f1ad7f4465dc63af6093e0f8305d9eb63195e58a82826a5a8cafa95566cdf4c1e68295aab8ca03731386f3c2357ffe1abe21936f0f2762768d32de6026"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/tbeditor/ext/icons.svg",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "2bcd85f1ad7f4465dc63af6093e0f8305d9eb63195e58a82826a5a8cafa95566cdf4c1e68295aab8ca03731386f3c2357ffe1abe21936f0f2762768d32de6026"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jquery-jcrop@0.9.15",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jquery-jcrop",
            "version": "0.9.15",
            "purl": "pkg:npm/jquery-jcrop@0.9.15",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jquery-jcrop",
                        "version": "0.9.15",
                        "purl": "pkg:npm/jquery-jcrop@0.9.15"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jquery.Jcrop.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "f2dd073bc3aca6cdeba3aceb6192af14eeeb01761c7b1bc8989b676fcf59bebf"
                },
                {
                    "alg": "SHA-512",
                    "content": "fb232c10bde2b5da5d1cc27e965967027ba6fc5a27887971d7e863a8d4eadb1ab7c9e21d4e41268a20b4b8191e1c01fb0dab5b2f24e74cf1a4efe5abd3b9c623"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/cropper/ext/jquery.Jcrop.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "fb232c10bde2b5da5d1cc27e965967027ba6fc5a27887971d7e863a8d4eadb1ab7c9e21d4e41268a20b4b8191e1c01fb0dab5b2f24e74cf1a4efe5abd3b9c623"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/golden-layout@1.5.8",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "golden-layout",
            "version": "1.5.8",
            "purl": "pkg:npm/golden-layout@1.5.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "golden-layout",
                        "version": "1.5.8",
                        "purl": "pkg:npm/golden-layout@1.5.8"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "goldenlayout.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "b41d47ae08542f07ad3d450a03e07baada754261a5a2120552c0776eb938b16b"
                },
                {
                    "alg": "SHA-512",
                    "content": "8716a3fd3799e49d6ba30847795324402f23458db47036780814a8a1e2982cbecfed8c8259f153bc1d30752a38552464ff2c53992b4efb78072b5ef6aff33c52"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/goldenlayout/ext/goldenlayout.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8716a3fd3799e49d6ba30847795324402f23458db47036780814a8a1e2982cbecfed8c8259f153bc1d30752a38552464ff2c53992b4efb78072b5ef6aff33c52"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/qrcode-generator",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "qrcode-generator",
            "version": "2021-10-12T17:09:47+08:00",
            "purl": "pkg:npm/qrcode-generator",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "qrcode-generator",
                        "purl": "pkg:npm/qrcode-generator"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "qrcode.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "38c561f97390417c7d4b2df208bbeef32e00e65edb1cd9af2d1bea74764ee636"
                },
                {
                    "alg": "SHA-512",
                    "content": "3b2fc92fbf682e0815bb13949502ac76ce741b630bf9764c4d357869020d2663331cb2465995fa2d46a9c24be5de5dd12f870537d3edfd70e916f4e76406272f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/barcode/ext/qrcode.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "3b2fc92fbf682e0815bb13949502ac76ce741b630bf9764c4d357869020d2663331cb2465995fa2d46a9c24be5de5dd12f870537d3edfd70e916f4e76406272f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/jsbarcode@3.8.0",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "jsbarcode",
            "version": "3.8.0",
            "purl": "pkg:npm/jsbarcode@3.8.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "jsbarcode",
                        "version": "3.8.0",
                        "purl": "pkg:npm/jsbarcode@3.8.0"
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix; keeps the upstream version so advisories still match"
            },
            "properties": [
                {
                    "name": "bsi:component:filename",
                    "value": "jsbarcode.js"
                },
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-256",
                    "content": "a93e692945b037a1d3d26f28220abb730ddba22f59f4c01e9c90803ad344229b"
                },
                {
                    "alg": "SHA-512",
                    "content": "d5b611114e6133dceb10a8478d6273ea4b961d24b36b5c2b6ee3bd946bcc068d065e1b2869d4f18328a7bae2d22a1eeee2cc10d422b0ef6106295676833628d1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#web/js/zkmax/barcode/ext/jsbarcode.js",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d5b611114e6133dceb10a8478d6273ea4b961d24b36b5c2b6ee3bd946bcc068d065e1b2869d4f18328a7bae2d22a1eeee2cc10d422b0ef6106295676833628d1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/com.google.collections/google-collections",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "google-collections",
            "version": "2024-01-17T09:18:39+08:00",
            "purl": "pkg:maven/com.google.collections/google-collections",
            "licenses": [
                {
                    "expression": "Apache-2.0",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "google-collections",
                        "purl": "pkg:maven/com.google.collections/google-collections",
                        "supplier": {
                            "name": "Google Inc.",
                            "url": [
                                "https://code.google.com/archive/p/google-collections/"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:github/paulirish/matchmedia.js",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "matchMedia.js",
            "version": "2024-10-17T16:01:11+08:00",
            "purl": "pkg:github/paulirish/matchmedia.js",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "matchMedia.js",
                        "version": "0.1.0",
                        "purl": "pkg:github/paulirish/matchmedia.js",
                        "supplier": {
                            "name": "Scott Jehl, Paul Irish, Nicholas Zakas",
                            "url": [
                                "https://github.com/paulirish/matchMedia.js"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/backo2",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "backo2",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/backo2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "backo2",
                        "purl": "pkg:npm/backo2",
                        "supplier": {
                            "name": "Mark Mokryn, TJ Holowaychuk",
                            "url": [
                                "https://github.com/mokesmokes/backo"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/socket.io-client",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "socket.io-client",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/socket.io-client",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "socket.io-client",
                        "purl": "pkg:npm/socket.io-client",
                        "supplier": {
                            "name": "Guillermo Rauch",
                            "url": [
                                "https://github.com/socketio/socket.io-client"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/engine.io-client",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "engine.io-client",
            "version": "2025-12-30T15:18:45+08:00",
            "purl": "pkg:npm/engine.io-client",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "engine.io-client",
                        "purl": "pkg:npm/engine.io-client",
                        "supplier": {
                            "name": "Automattic",
                            "url": [
                                "https://github.com/socketio/engine.io-client"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#lucide-static",
            "supplier": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "manufacturer": {
                "name": "Potix Corporation",
                "url": [
                    "https://www.zkoss.org"
                ]
            },
            "name": "lucide-static",
            "version": "2026-10-28T15:04:49+08:00",
            "purl": "pkg:npm/lucide-static",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "pedigree": {
                "ancestors": [
                    {
                        "type": "library",
                        "name": "lucide-static",
                        "purl": "pkg:npm/lucide-static",
                        "supplier": {
                            "name": "Lucide Icons and Contributors",
                            "url": [
                                "https://lucide.dev"
                            ]
                        }
                    }
                ],
                "patches": [
                    {
                        "type": "unofficial"
                    }
                ],
                "notes": "Copy bundled in ZK and patched for it, maintained by Potix"
            },
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/zone.js@0.11.8",
            "supplier": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "manufacturer": {
                "name": "Google LLC",
                "url": [
                    "https://github.com/angular/angular"
                ]
            },
            "name": "zone.js",
            "version": "0.11.8",
            "purl": "pkg:npm/zone.js@0.11.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f366dcb4183684a704276d61ba65889174652c1066adcde737b0c58792c61a1732c9c3b64bb14df0d99dbe570a6861433552f8ffd9052e6c262274dabdd24444"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/zone.js/-/zone.js-0.11.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f366dcb4183684a704276d61ba65889174652c1066adcde737b0c58792c61a1732c9c3b64bb14df0d99dbe570a6861433552f8ffd9052e6c262274dabdd24444"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/tslib@2.6.2",
            "supplier": {
                "name": "Microsoft Corporation",
                "url": [
                    "https://github.com/microsoft/tslib"
                ]
            },
            "manufacturer": {
                "name": "Microsoft Corporation",
                "url": [
                    "https://github.com/microsoft/tslib"
                ]
            },
            "name": "tslib",
            "version": "2.6.2",
            "purl": "pkg:npm/tslib@2.6.2",
            "licenses": [
                {
                    "expression": "0BSD",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "0046311fdde31853e7fdada2540c16f3b56e508911d45554281efb370305ee70530e40ebad3fc7a6dfc8ac2274417856dbb8d304371fe5963bc3a462a93330d9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "0046311fdde31853e7fdada2540c16f3b56e508911d45554281efb370305ee70530e40ebad3fc7a6dfc8ac2274417856dbb8d304371fe5963bc3a462a93330d9"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/ts-custom-error@3.3.1",
            "supplier": {
                "name": "Adrien Gibrat",
                "url": [
                    "https://github.com/adriengibrat/ts-custom-error"
                ]
            },
            "manufacturer": {
                "name": "Adrien Gibrat",
                "url": [
                    "https://github.com/adriengibrat/ts-custom-error"
                ]
            },
            "name": "ts-custom-error",
            "version": "3.3.1",
            "purl": "pkg:npm/ts-custom-error@3.3.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "e4e5f5b733a3c56120b2bfd8114592b8fad0d3475e28b87a0fb39359cbcd1e6d76ffb40fc9187c498a725af038219bfc1fff8641640487f930a3de50f4e556d4"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/ts-custom-error/-/ts-custom-error-3.3.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e4e5f5b733a3c56120b2bfd8114592b8fad0d3475e28b87a0fb39359cbcd1e6d76ffb40fc9187c498a725af038219bfc1fff8641640487f930a3de50f4e556d4"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "supplier": {
                "name": "The Inter Project Authors",
                "url": [
                    "https://github.com/rsms/inter"
                ]
            },
            "manufacturer": {
                "name": "The Inter Project Authors",
                "url": [
                    "https://github.com/rsms/inter"
                ]
            },
            "name": "@fontsource-variable/inter",
            "version": "5.2.8",
            "purl": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "licenses": [
                {
                    "expression": "OFL-1.1",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "90e7cfd83fb291b717fcfdc8167a243a15513684e8ce8e7f27184021560ba5e6bf50198243f6163c17d6203b812265d7ff5e4a1fe78a878c69114c92dac41019"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@fontsource-variable/inter/-/inter-5.2.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "90e7cfd83fb291b717fcfdc8167a243a15513684e8ce8e7f27184021560ba5e6bf50198243f6163c17d6203b812265d7ff5e4a1fe78a878c69114c92dac41019"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/lucide-static@1.11.0",
            "supplier": {
                "name": "Lucide Icons and Contributors",
                "url": [
                    "https://lucide.dev"
                ]
            },
            "manufacturer": {
                "name": "Lucide Icons and Contributors",
                "url": [
                    "https://lucide.dev"
                ]
            },
            "name": "lucide-static",
            "version": "1.11.0",
            "purl": "pkg:npm/lucide-static@1.11.0",
            "licenses": [
                {
                    "expression": "ISC AND MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "non-executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "fb54b74247da0c99e34c6ec689feb9eb608e2d4dfa6d18099246f7af48280df129ad1c1a461fe2bdb225977ec3529a663754c37865203e26ff0716915e7dd2e8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/lucide-static/-/lucide-static-1.11.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "fb54b74247da0c99e34c6ec689feb9eb608e2d4dfa6d18099246f7af48280df129ad1c1a461fe2bdb225977ec3529a663754c37865203e26ff0716915e7dd2e8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/state@6.7.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/state",
            "version": "6.7.1",
            "purl": "pkg:npm/%40codemirror/state@6.7.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f50ccd0e01381180e70077eb4e547697088f72288eca62edc0a2bef321d0cc273b1978403fdc5d11b109172d88581d63f5419497d06c80c993a3f226034d93ec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/state/-/state-6.7.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f50ccd0e01381180e70077eb4e547697088f72288eca62edc0a2bef321d0cc273b1978403fdc5d11b109172d88581d63f5419497d06c80c993a3f226034d93ec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/view@6.43.6",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/view",
            "version": "6.43.6",
            "purl": "pkg:npm/%40codemirror/view@6.43.6",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "115ba719260dd70cf5a7be56635b375e0eedde2f18a25d241991a2ccd757f4150580c1482d855ef3fbba115a68ec57f93f06d9b882dbe1002aec86682b320440"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/view/-/view-6.43.6.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "115ba719260dd70cf5a7be56635b375e0eedde2f18a25d241991a2ccd757f4150580c1482d855ef3fbba115a68ec57f93f06d9b882dbe1002aec86682b320440"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/commands@6.10.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/commands",
            "version": "6.10.4",
            "purl": "pkg:npm/%40codemirror/commands@6.10.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "47293dcbd4f4145545d1c506840927bde03250e97f035a91793162faa3cab4e87667d178014073dd73ab603e19120662addba05731ef77fdbf59cc32e4e9624e"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/commands/-/commands-6.10.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "47293dcbd4f4145545d1c506840927bde03250e97f035a91793162faa3cab4e87667d178014073dd73ab603e19120662addba05731ef77fdbf59cc32e4e9624e"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/language@6.12.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/language",
            "version": "6.12.4",
            "purl": "pkg:npm/%40codemirror/language@6.12.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "d6ae0f693fa8e8f6e0a6426de10f05bf95c9c53cb8154678316113b72883c372743f2afd136bea70a2fe93dc1cbe335322c6aec6f13b39f9968f71513c743be8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/language/-/language-6.12.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "d6ae0f693fa8e8f6e0a6426de10f05bf95c9c53cb8154678316113b72883c372743f2afd136bea70a2fe93dc1cbe335322c6aec6f13b39f9968f71513c743be8"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/highlight@1.2.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/highlight",
            "version": "1.2.3",
            "purl": "pkg:npm/%40lezer/highlight@1.2.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "a97747ed4a93bc67dd54120dae02a10ec553253c5a72d34dc4b93bf94330661535de530768e06525ef55aa9f74ef26b9e98dfe79ddad96acf2b3b8c3913996d2"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/highlight/-/highlight-1.2.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a97747ed4a93bc67dd54120dae02a10ec553253c5a72d34dc4b93bf94330661535de530768e06525ef55aa9f74ef26b9e98dfe79ddad96acf2b3b8c3913996d2"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-xml",
            "version": "6.1.0",
            "purl": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "df3d1b96189c1cb7f08b65209196113e2a128154e8f4f57918fe5db9c147e85687cb420025183e8b18f98134758274ff8250080bcc6fe30d952f52e865fb3e26"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-xml/-/lang-xml-6.1.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "df3d1b96189c1cb7f08b65209196113e2a128154e8f4f57918fe5db9c147e85687cb420025183e8b18f98134758274ff8250080bcc6fe30d952f52e865fb3e26"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-java",
            "version": "6.0.2",
            "purl": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "9b936dd6643f7339c963bb4c7d04c97219ab8dd8d0ef5203b3ee797751806bc0c6681f095d6b150a4553dbce02dd14c049a638dd8927acad97de13cefc9dcc39"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-java/-/lang-java-6.0.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "9b936dd6643f7339c963bb4c7d04c97219ab8dd8d0ef5203b3ee797751806bc0c6681f095d6b150a4553dbce02dd14c049a638dd8927acad97de13cefc9dcc39"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-javascript",
            "version": "6.2.5",
            "purl": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "cc3e1ee664bee7486d4bb17e4d88c13ec8881466a77d5aa0e07c94cfa58d16292038f7f60602a5c7e4d079d235c3a9ff22a4415416c15a618574b07feeec4ee0"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-javascript/-/lang-javascript-6.2.5.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "cc3e1ee664bee7486d4bb17e4d88c13ec8881466a77d5aa0e07c94cfa58d16292038f7f60602a5c7e4d079d235c3a9ff22a4415416c15a618574b07feeec4ee0"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-css",
            "version": "6.3.1",
            "purl": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "92be5fc011a21ad9b3ea5d0b48921b9e8f50ae27cd314bac8af1db9c0d47e839aacb81d916d7b75002028b1d55b8aa3494c3ca42bdaba81fb40642a2fd2dc48e"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-css/-/lang-css-6.3.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "92be5fc011a21ad9b3ea5d0b48921b9e8f50ae27cd314bac8af1db9c0d47e839aacb81d916d7b75002028b1d55b8aa3494c3ca42bdaba81fb40642a2fd2dc48e"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-json",
            "version": "6.0.2",
            "purl": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "c763ad3be02fc041eb130474172c8fb5f0d48a5a06deb9d54d2655d56f14b5e68b2fcfcc6a341df03a6f51bd985730befd3d7c6920efd07f66bbec70d044ada1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-json/-/lang-json-6.0.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c763ad3be02fc041eb130474172c8fb5f0d48a5a06deb9d54d2655d56f14b5e68b2fcfcc6a341df03a6f51bd985730befd3d7c6920efd07f66bbec70d044ada1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-html",
            "version": "6.4.11",
            "purl": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "f4db17a7b370a7cf75a5072123b80f753c01b92b93dcaeb93464c7587349e791e361c1cb965af4adb21935d3b36acf73b5cd445150651e8bbce451594b804d9f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-html/-/lang-html-6.4.11.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "f4db17a7b370a7cf75a5072123b80f753c01b92b93dcaeb93464c7587349e791e361c1cb965af4adb21935d3b36acf73b5cd445150651e8bbce451594b804d9f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-sql",
            "version": "6.10.0",
            "purl": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "e9ac8f90477fc91c345ca071e6e0224e84a01840a8fc66363682481d7208421d445702ee2a853c04ffea2b4a87e4d2d701bb4944bb93ef7871ecff57df888ee3"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-sql/-/lang-sql-6.10.0.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "e9ac8f90477fc91c345ca071e6e0224e84a01840a8fc66363682481d7208421d445702ee2a853c04ffea2b4a87e4d2d701bb4944bb93ef7871ecff57df888ee3"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/lang-markdown",
            "version": "6.5.1",
            "purl": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "eab7b96af08d7f244c2288b75cd8db11f40cd6f4de543dc94b783f1727a0caca3f7a800d14cef50b2bdb6fae8b0f262d40b304711165ce2a32c02a83a3d4a52c"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/lang-markdown/-/lang-markdown-6.5.1.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "eab7b96af08d7f244c2288b75cd8db11f40cd6f4de543dc94b783f1727a0caca3f7a800d14cef50b2bdb6fae8b0f262d40b304711165ce2a32c02a83a3d4a52c"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@codemirror/autocomplete",
            "version": "6.20.3",
            "purl": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "b65a2c52a6fedc16f10b165dbb8b4a7918213c50be40ceeae17e5884a57678298f1bed6bd85ddfe00692cf9b02ac5a94b57e09876d1515329e725d7a320895f6"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@codemirror/autocomplete/-/autocomplete-6.20.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b65a2c52a6fedc16f10b165dbb8b4a7918213c50be40ceeae17e5884a57678298f1bed6bd85ddfe00692cf9b02ac5a94b57e09876d1515329e725d7a320895f6"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/common@1.5.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/common",
            "version": "1.5.2",
            "purl": "pkg:npm/%40lezer/common@1.5.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "b31404e3ad1f3d9c94dec75cf2569fc623f0247073651cbfb9d345ca7190932d5278f60176190197590e6a003db93de9c51f0ad3d6ceae64d4a80f706ff3e349"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/common/-/common-1.5.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "b31404e3ad1f3d9c94dec75cf2569fc623f0247073651cbfb9d345ca7190932d5278f60176190197590e6a003db93de9c51f0ad3d6ceae64d4a80f706ff3e349"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/css@1.3.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/css",
            "version": "1.3.4",
            "purl": "pkg:npm/%40lezer/css@1.3.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "37eb67f6d7a3da13efc8a807100a4c3907c77330c90b0c6b4454b748f9fd42360dfaec07bc40e70a0291adbde6c43631452f2c28c33c7e10b7fa5734e006f3e5"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/css/-/css-1.3.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "37eb67f6d7a3da13efc8a807100a4c3907c77330c90b0c6b4454b748f9fd42360dfaec07bc40e70a0291adbde6c43631452f2c28c33c7e10b7fa5734e006f3e5"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/html@1.3.13",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/html",
            "version": "1.3.13",
            "purl": "pkg:npm/%40lezer/html@1.3.13",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "a08ee7e8d26697bdbd9bba639bd96f2ef9976dda0ca22d9ffb5a7048326497d77af331abedaf41b73f0d7474c6419b56d83036e726debaffd2c836fd0f9b6c7a"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/html/-/html-1.3.13.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "a08ee7e8d26697bdbd9bba639bd96f2ef9976dda0ca22d9ffb5a7048326497d77af331abedaf41b73f0d7474c6419b56d83036e726debaffd2c836fd0f9b6c7a"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/java@1.1.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/java",
            "version": "1.1.3",
            "purl": "pkg:npm/%40lezer/java@1.1.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "c87aae51fba3c20e98bb815dd463470af89d22f2708bfd57bb60da2a5fe97d6200d9cd685e456f6b01f73725e109a171e0e765601557e70bf3d9fec0a1aff85f"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/java/-/java-1.1.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "c87aae51fba3c20e98bb815dd463470af89d22f2708bfd57bb60da2a5fe97d6200d9cd685e456f6b01f73725e109a171e0e765601557e70bf3d9fec0a1aff85f"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/javascript@1.5.4",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/javascript",
            "version": "1.5.4",
            "purl": "pkg:npm/%40lezer/javascript@1.5.4",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "bef631dcc856a9e66d18fc034ad3367708258dde6c9a89580f6951d94c857077f16c141e6eac7cca39859b1b49fc4ea737abb50fdb2b3a25569b745be2d99c50"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/javascript/-/javascript-1.5.4.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "bef631dcc856a9e66d18fc034ad3367708258dde6c9a89580f6951d94c857077f16c141e6eac7cca39859b1b49fc4ea737abb50fdb2b3a25569b745be2d99c50"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/json@1.0.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/json",
            "version": "1.0.3",
            "purl": "pkg:npm/%40lezer/json@1.0.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "04ff4acdd17d637e4f0e9bf4e2bd157924ca0dea31e6f56bdde7c4ede05bc77af8b37a0d2dfba77217a36618c0ae67a27811fe9d53a9808881269100bfc8a5a9"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/json/-/json-1.0.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "04ff4acdd17d637e4f0e9bf4e2bd157924ca0dea31e6f56bdde7c4ede05bc77af8b37a0d2dfba77217a36618c0ae67a27811fe9d53a9808881269100bfc8a5a9"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/markdown@1.7.2",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/markdown",
            "version": "1.7.2",
            "purl": "pkg:npm/%40lezer/markdown@1.7.2",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "893918be855c2addd691e2fba940f25c738d644c0b8a8e308fc293362d9d9e34045c164a315eb706942b3ea7ec33e3a4bee45b8924c073271802c4332e144da1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/markdown/-/markdown-1.7.2.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "893918be855c2addd691e2fba940f25c738d644c0b8a8e308fc293362d9d9e34045c164a315eb706942b3ea7ec33e3a4bee45b8924c073271802c4332e144da1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/lr@1.4.10",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/lr",
            "version": "1.4.10",
            "purl": "pkg:npm/%40lezer/lr@1.4.10",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "ae70a94c805a7cec78991a78df13b10c96c58a9266fdcd1c89afd5e5388696198c6bec2c49da06994377c3906aae4b3fd3d43f0f8b4d02659a4fca7a3518bbec"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/lr/-/lr-1.4.10.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "ae70a94c805a7cec78991a78df13b10c96c58a9266fdcd1c89afd5e5388696198c6bec2c49da06994377c3906aae4b3fd3d43f0f8b4d02659a4fca7a3518bbec"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40lezer/xml@1.0.6",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@lezer/xml",
            "version": "1.0.6",
            "purl": "pkg:npm/%40lezer/xml@1.0.6",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "09d0f08ab2f4384692b45b9effae9998549ea69b8be83c23964f2a935e779924308921ff0e5ae2e063729ab3569d498f976526ed07d5d453bd2855325f74f0c3"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@lezer/xml/-/xml-1.0.6.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "09d0f08ab2f4384692b45b9effae9998549ea69b8be83c23964f2a935e779924308921ff0e5ae2e063729ab3569d498f976526ed07d5d453bd2855325f74f0c3"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/style-mod@4.1.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "style-mod",
            "version": "4.1.3",
            "purl": "pkg:npm/style-mod@4.1.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "8bf9fc56c67276bba08f722ece597cfb1ff4d061f6be762c9357a8983f10891ad201e5ba22d6c2403b5f5c27891ddd22c2235a82a8d092fa6f44410fb56dc8a1"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/style-mod/-/style-mod-4.1.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "8bf9fc56c67276bba08f722ece597cfb1ff4d061f6be762c9357a8983f10891ad201e5ba22d6c2403b5f5c27891ddd22c2235a82a8d092fa6f44410fb56dc8a1"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "@marijn/find-cluster-break",
            "version": "1.0.3",
            "purl": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "158f8c28b0684ec2cd245fde2d668eb1719dcfaba1dc8bb56b18cf7fa4d4abdd8862e99c4dc5d61e84bbe3b24044b91c76527f59a89ac5ce7041f14ef230ba34"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/@marijn/find-cluster-break/-/find-cluster-break-1.0.3.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "158f8c28b0684ec2cd245fde2d668eb1719dcfaba1dc8bb56b18cf7fa4d4abdd8862e99c4dc5d61e84bbe3b24044b91c76527f59a89ac5ce7041f14ef230ba34"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/w3c-keyname@2.2.8",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "w3c-keyname",
            "version": "2.2.8",
            "purl": "pkg:npm/w3c-keyname@2.2.8",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "769a2306136c08d37b4fcd939bb936e80e86f4c2f7364843b27c3d9ff7a8c52465541078084b4843f29308b2361707f76ad6925d1858164422dd29671703ef3d"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/w3c-keyname/-/w3c-keyname-2.2.8.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "769a2306136c08d37b4fcd939bb936e80e86f4c2f7364843b27c3d9ff7a8c52465541078084b4843f29308b2361707f76ad6925d1858164422dd29671703ef3d"
                        }
                    ]
                }
            ]
        },
        {
            "type": "library",
            "bom-ref": "pkg:npm/crelt@1.0.7",
            "supplier": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "manufacturer": {
                "name": "Marijn Haverbeke",
                "url": [
                    "https://codemirror.net"
                ]
            },
            "name": "crelt",
            "version": "1.0.7",
            "purl": "pkg:npm/crelt@1.0.7",
            "licenses": [
                {
                    "expression": "MIT",
                    "acknowledgement": "concluded"
                }
            ],
            "properties": [
                {
                    "name": "bsi:component:executable",
                    "value": "executable"
                },
                {
                    "name": "bsi:component:archive",
                    "value": "no archive"
                },
                {
                    "name": "bsi:component:structured",
                    "value": "unstructured"
                }
            ],
            "hashes": [
                {
                    "alg": "SHA-512",
                    "content": "68ae816d67e17f853fc0270b1ca3c997fc5ae95915b2d45a3f2c16b4c286c2e38b73fc194f2418ba8c60bd99cdb01befeca83761305061804282072f890733b8"
                }
            ],
            "externalReferences": [
                {
                    "type": "distribution",
                    "url": "https://registry.npmjs.org/crelt/-/crelt-1.0.7.tgz",
                    "hashes": [
                        {
                            "alg": "SHA-512",
                            "content": "68ae816d67e17f853fc0270b1ca3c997fc5ae95915b2d45a3f2c16b4c286c2e38b73fc194f2418ba8c60bd99cdb01befeca83761305061804282072f890733b8"
                        }
                    ]
                }
            ]
        }
    ],
    "dependencies": [
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
            "dependsOn": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
            "dependsOn": [
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
            "dependsOn": [
                "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
            "dependsOn": [
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
            "dependsOn": [
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-el/commons-el@1.0?type=jar",
            "dependsOn": [
                "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
            "dependsOn": [
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/ognl/ognl@3.1.28?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
            "dependsOn": [
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
            "dependsOn": [
                "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
            "dependsOn": [
                "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.immutables/value@2.8.8?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
            "dependsOn": [
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                "pkg:generic/apache/xml-schema-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
                "pkg:generic/w3c/xhtml1-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
                "pkg:maven/org.unbescape/unbescape",
                "pkg:maven/org.jdom/jdom2",
                "pkg:maven/com.googlecode.json-simple/json-simple",
                "pkg:github/apache/tomcat"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar#apache-tomcat"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:npm/spel2js@0.2.8",
                "pkg:npm/mobx@6.6.1",
                "pkg:npm/zone.js@0.15.0",
                "pkg:npm/zone.js@0.11.8"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.immutables/value@2.8.8?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:github/benjiman/lambda-type-references"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                "pkg:npm/jquery@3.5.1",
                "pkg:github/douglascrockford/json-js",
                "pkg:npm/jquery-mousewheel@3.1.13",
                "pkg:npm/jquery.transit@0.9.12",
                "pkg:npm/moment@2.31.0",
                "pkg:npm/moment-timezone@0.5.48",
                "pkg:npm/dompurify@3.4.17",
                "pkg:npm/whatwg-fetch@0.11.1",
                "pkg:npm/focus-options-polyfill@1.6.0",
                "pkg:github/wicg/input-device-capabilities",
                "pkg:maven/commons-fileupload/commons-fileupload",
                "pkg:maven/commons-codec/commons-codec",
                "pkg:github/madrobby/scriptaculous"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.cojen/cojen",
                "pkg:maven/com.thoughtworks.paranamer/paranamer",
                "pkg:maven/org.ow2.asm/asm"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkcml@11.0.0.FL.20261111-Eval?type=pom",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                "pkg:npm/pdfjs-dist@4.10.38",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                "pkg:generic/schlichtherle/truelicense",
                "pkg:generic/source-code.biz/base64coder",
                "pkg:npm/lucide-static"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                "pkg:maven/commons-el/commons-el@1.0?type=jar",
                "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                "pkg:maven/ognl/ognl@3.1.28?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:npm/signature_pad@5.0.7",
                "pkg:npm/%40zxing/library@0.21.3",
                "pkg:npm/iscroll@4.2.2",
                "pkg:npm/trumbowyg@2.31.0",
                "pkg:npm/trumbowyg@2.7.2",
                "pkg:npm/jquery-jcrop@0.9.15",
                "pkg:npm/golden-layout@1.5.8",
                "pkg:npm/qrcode-generator",
                "pkg:npm/jsbarcode@3.8.0",
                "pkg:maven/com.google.collections/google-collections",
                "pkg:github/paulirish/matchmedia.js",
                "pkg:npm/backo2",
                "pkg:npm/socket.io-client",
                "pkg:npm/engine.io-client",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#lucide-static",
                "pkg:npm/ts-custom-error@3.3.1"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:npm/%40fontsource-variable/inter@5.2.8",
                "pkg:npm/lucide-static@1.11.0",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40codemirror/commands@6.10.4",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40codemirror/lang-xml@6.1.0",
                "pkg:npm/%40codemirror/lang-java@6.0.2",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-json@6.0.2",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/lang-sql@6.10.0",
                "pkg:npm/%40codemirror/lang-markdown@6.5.1"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
            "dependsOn": [
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/spel2js@0.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/mobx@6.6.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/zone.js@0.15.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/benjiman/lambda-type-references",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/apache/xml-schema-dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/w3c/xhtml1-dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.unbescape/unbescape",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.jdom/jdom2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.googlecode.json-simple/json-simple",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/apache/tomcat",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar#apache-tomcat",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jquery@3.5.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/douglascrockford/json-js",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/jquery-mousewheel@3.1.13",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/jquery.transit@0.9.12",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/moment@2.31.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/moment-timezone@0.5.48",
            "dependsOn": [
                "pkg:npm/moment@2.31.0"
            ]
        },
        {
            "ref": "pkg:npm/dompurify@3.4.17",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/whatwg-fetch@0.11.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/focus-options-polyfill@1.6.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/wicg/input-device-capabilities",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-fileupload/commons-fileupload",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/commons-codec/commons-codec",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/madrobby/scriptaculous",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.cojen/cojen",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.thoughtworks.paranamer/paranamer",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.ow2.asm/asm",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/pdfjs-dist@4.10.38",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/schlichtherle/truelicense",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:generic/source-code.biz/base64coder",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/lucide-static",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/signature_pad@5.0.7",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40zxing/library@0.21.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/iscroll@4.2.2",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/trumbowyg@2.31.0",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/trumbowyg@2.7.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jquery-jcrop@0.9.15",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/golden-layout@1.5.8",
            "dependsOn": [
                "pkg:npm/jquery@3.5.1"
            ]
        },
        {
            "ref": "pkg:npm/qrcode-generator",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/jsbarcode@3.8.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/com.google.collections/google-collections",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:github/paulirish/matchmedia.js",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/backo2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/socket.io-client",
            "dependsOn": [
                "pkg:npm/backo2",
                "pkg:npm/engine.io-client"
            ]
        },
        {
            "ref": "pkg:npm/engine.io-client",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#lucide-static",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/zone.js@0.11.8",
            "dependsOn": [
                "pkg:npm/tslib@2.6.2"
            ]
        },
        {
            "ref": "pkg:npm/tslib@2.6.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/ts-custom-error@3.3.1",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40fontsource-variable/inter@5.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/lucide-static@1.11.0",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/state@6.7.1",
            "dependsOn": [
                "pkg:npm/%40marijn/find-cluster-break@1.0.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/view@6.43.6",
            "dependsOn": [
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/crelt@1.0.7",
                "pkg:npm/style-mod@4.1.3",
                "pkg:npm/w3c-keyname@2.2.8"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/commands@6.10.4",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/language@6.12.4",
            "dependsOn": [
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10",
                "pkg:npm/style-mod@4.1.3"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/highlight@1.2.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-xml@6.1.0",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/xml@1.0.6"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-java@6.0.2",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/java@1.1.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-javascript@6.2.5",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/javascript@1.5.4"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-css@6.3.1",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-json@6.0.2",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/json@1.0.3"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-html@6.4.11",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4",
                "pkg:npm/%40lezer/html@1.3.13"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-sql@6.10.0",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/lang-markdown@6.5.1",
            "dependsOn": [
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/markdown@1.7.2"
            ]
        },
        {
            "ref": "pkg:npm/%40codemirror/autocomplete@6.20.3",
            "dependsOn": [
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/common@1.5.2",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/css@1.3.4",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/html@1.3.13",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/java@1.1.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/javascript@1.5.4",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/json@1.0.3",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/markdown@1.7.2",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/lr@1.4.10",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2"
            ]
        },
        {
            "ref": "pkg:npm/%40lezer/xml@1.0.6",
            "dependsOn": [
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40lezer/lr@1.4.10"
            ]
        },
        {
            "ref": "pkg:npm/style-mod@4.1.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/%40marijn/find-cluster-break@1.0.3",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/w3c-keyname@2.2.8",
            "dependsOn": [
                
            ]
        },
        {
            "ref": "pkg:npm/crelt@1.0.7",
            "dependsOn": [
                
            ]
        }
    ],
    "compositions": [
        {
            "aggregate": "complete",
            "dependencies": [
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
                "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
                "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
                "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
                "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
                "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
                "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar",
                "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
                "pkg:maven/com.google.guava/guava@33.7.2-jre?type=jar",
                "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
                "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
                "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
                "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
                "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
                "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
                "pkg:maven/commons-el/commons-el@1.0?type=jar",
                "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
                "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
                "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
                "pkg:maven/ognl/ognl@3.1.28?type=jar",
                "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
                "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar",
                "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar",
                "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.120?type=jar",
                "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.120?type=jar",
                "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
                "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
                "pkg:maven/org.immutables/value@2.8.8?type=jar",
                "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
                "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
                "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
                "pkg:maven/org.jspecify/jspecify@1.0.1?type=jar",
                "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
                "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
                "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
                "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.common/zweb@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/client-bind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless-immutable@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/stateless@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/za11y@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zhtml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zk@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkbind@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkcml@11.0.0.FL.20261111-Eval?type=pom",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zkwebfragment@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zml@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zul@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss.zk/zuti@11.0.0.FL.20261111-Eval?type=jar",
                "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
                "pkg:npm/spel2js@0.2.8",
                "pkg:npm/mobx@6.6.1",
                "pkg:npm/zone.js@0.15.0",
                "pkg:github/benjiman/lambda-type-references",
                "pkg:generic/apache/xml-schema-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/datatypes.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xml.xsd",
                "pkg:generic/w3c/xhtml1-dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-transitional.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml1-frameset.dtd",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-lat1.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-special.ent",
                "pkg:maven/org.zkoss.common/zcommon@11.0.0.FL.20261111-Eval?type=jar#metainfo/xml/xhtml-symbol.ent",
                "pkg:maven/org.unbescape/unbescape",
                "pkg:maven/org.jdom/jdom2",
                "pkg:maven/com.googlecode.json-simple/json-simple",
                "pkg:github/apache/tomcat",
                "pkg:maven/org.zkoss.common/zel@11.0.0.FL.20261111-Eval?type=jar#apache-tomcat",
                "pkg:npm/jquery@3.5.1",
                "pkg:github/douglascrockford/json-js",
                "pkg:npm/jquery-mousewheel@3.1.13",
                "pkg:npm/jquery.transit@0.9.12",
                "pkg:npm/moment@2.31.0",
                "pkg:npm/moment-timezone@0.5.48",
                "pkg:npm/dompurify@3.4.17",
                "pkg:npm/whatwg-fetch@0.11.1",
                "pkg:npm/focus-options-polyfill@1.6.0",
                "pkg:github/wicg/input-device-capabilities",
                "pkg:maven/commons-fileupload/commons-fileupload",
                "pkg:maven/commons-codec/commons-codec",
                "pkg:github/madrobby/scriptaculous",
                "pkg:maven/org.cojen/cojen",
                "pkg:maven/com.thoughtworks.paranamer/paranamer",
                "pkg:maven/org.ow2.asm/asm",
                "pkg:npm/pdfjs-dist@4.10.38",
                "pkg:maven/org.zkoss.zk/zkex@11.0.0.FL.20261111-Eval?type=jar#web/js/zkex/pdfviewer/ext/pdf.worker.mjs",
                "pkg:generic/schlichtherle/truelicense",
                "pkg:generic/source-code.biz/base64coder",
                "pkg:npm/lucide-static",
                "pkg:npm/signature_pad@5.0.7",
                "pkg:npm/%40zxing/library@0.21.3",
                "pkg:npm/iscroll@4.2.2",
                "pkg:npm/trumbowyg@2.31.0",
                "pkg:npm/trumbowyg@2.7.2",
                "pkg:npm/jquery-jcrop@0.9.15",
                "pkg:npm/golden-layout@1.5.8",
                "pkg:npm/qrcode-generator",
                "pkg:npm/jsbarcode@3.8.0",
                "pkg:maven/com.google.collections/google-collections",
                "pkg:github/paulirish/matchmedia.js",
                "pkg:npm/backo2",
                "pkg:npm/socket.io-client",
                "pkg:npm/engine.io-client",
                "pkg:maven/org.zkoss.zk/zkmax@11.0.0.FL.20261111-Eval?type=jar#lucide-static",
                "pkg:npm/zone.js@0.11.8",
                "pkg:npm/tslib@2.6.2",
                "pkg:npm/ts-custom-error@3.3.1",
                "pkg:npm/%40fontsource-variable/inter@5.2.8",
                "pkg:npm/lucide-static@1.11.0",
                "pkg:npm/%40codemirror/state@6.7.1",
                "pkg:npm/%40codemirror/view@6.43.6",
                "pkg:npm/%40codemirror/commands@6.10.4",
                "pkg:npm/%40codemirror/language@6.12.4",
                "pkg:npm/%40lezer/highlight@1.2.3",
                "pkg:npm/%40codemirror/lang-xml@6.1.0",
                "pkg:npm/%40codemirror/lang-java@6.0.2",
                "pkg:npm/%40codemirror/lang-javascript@6.2.5",
                "pkg:npm/%40codemirror/lang-css@6.3.1",
                "pkg:npm/%40codemirror/lang-json@6.0.2",
                "pkg:npm/%40codemirror/lang-html@6.4.11",
                "pkg:npm/%40codemirror/lang-sql@6.10.0",
                "pkg:npm/%40codemirror/lang-markdown@6.5.1",
                "pkg:npm/%40codemirror/autocomplete@6.20.3",
                "pkg:npm/%40lezer/common@1.5.2",
                "pkg:npm/%40lezer/css@1.3.4",
                "pkg:npm/%40lezer/html@1.3.13",
                "pkg:npm/%40lezer/java@1.1.3",
                "pkg:npm/%40lezer/javascript@1.5.4",
                "pkg:npm/%40lezer/json@1.0.3",
                "pkg:npm/%40lezer/markdown@1.7.2",
                "pkg:npm/%40lezer/lr@1.4.10",
                "pkg:npm/%40lezer/xml@1.0.6",
                "pkg:npm/style-mod@4.1.3",
                "pkg:npm/%40marijn/find-cluster-break@1.0.3",
                "pkg:npm/w3c-keyname@2.2.8",
                "pkg:npm/crelt@1.0.7"
            ]
        }
    ]
}