{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:8d59ce74-1abb-3e23-8f6e-a8a98a011e14",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-10-14T06:16:13Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.2",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "843a7130400f75d33f563dc7e9f52dea"
            },
            {
              "alg" : "SHA-1",
              "content" : "2cac5a176b9f48801dfc4910d4f6a34bfbb13445"
            },
            {
              "alg" : "SHA-256",
              "content" : "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e"
            },
            {
              "alg" : "SHA-512",
              "content" : "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407"
            },
            {
              "alg" : "SHA-384",
              "content" : "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zkcml-parent@9.6.7.FL.20261014-Eval?type=pom",
      "group" : "org.zkoss.zk",
      "name" : "zkcml-parent",
      "version" : "9.6.7.FL.20261014-Eval",
      "description" : "ZKCML Parent POM Module",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zkcml-parent@9.6.7.FL.20261014-Eval?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/zkcml-parent"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zkex",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Professional Utilities",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zkex"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/zkex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zul",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK XUL components (XML user interface markup language)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f12870ef981f72515971d694b6ea565"
        },
        {
          "alg" : "SHA-1",
          "content" : "546f70664273074740e0c84e08237577637839aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1833df0825d7403c3b8bfd38789bb5754488dc29618acd9e3ac9d33a5f998f16"
        },
        {
          "alg" : "SHA-512",
          "content" : "19e29f9dd1b5fe95f9374ece97868495f3732c4d17cac7d3a5f53c66e76f0d1812bbff5676290b22251a263f01f304e981b37c892314acb0ad9365c957be456f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfb9a320d7d7d551668938d9240e88b7dd3d0eabdb2e854f84c6835966fa8f5a6e949318dbb968f3bb49caa41b0d9bbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zul"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zul"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zk",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Kernel",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80ba85caada1f466b007d184fb193887"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e666d321b3a937859d9899cc8c31cb039e2bb05"
        },
        {
          "alg" : "SHA-256",
          "content" : "607bd541a581e6c599ecb066ec0f3835a25a909fd9135be003730fa0f548ff59"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6cefe229bd5072627c04b5d862962cf8f65879634cd8a787fdf9a9bd1131bb4646d0ceda428e32fd934ab2598dbeb23ad4a3234692f692becaf6451f74e0a16"
        },
        {
          "alg" : "SHA-384",
          "content" : "66b5447445c33430c81694ae8f7fac7981def3b932e95738dae5c94e591e5d4a0312eb4fdcb116ac8c1f6871cc518d46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zk"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.common",
      "name" : "zweb",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "The ZKoss Web library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df31f5fa2b9f9185e728b0c8b304304f"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c7471833cc6807184f5c5c9cfb90ffb2fc21aee"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a46464ef3df83517bfe4d59d610eb7850b9205e9a4d790077fe833a714ead7f"
        },
        {
          "alg" : "SHA-512",
          "content" : "df1a117b83879e34afdfd8fbe6483e515d70f45ed15a3298238b34b28fe92b0ef80fd64342a303ea4a7f12442ae3645f421f9e9e4553cc5ef8aad91eab0a0cb1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ec3950d209afdb47e2b20591a0be9a20e437fec2f423a15d6354e3650dc3da620756c7f6a31b3549237c19c87b6fd89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/web"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zweb"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.common",
      "name" : "zcommon",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "The ZKoss common library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16d3e505d060e08f00eefd76ce097f09"
        },
        {
          "alg" : "SHA-1",
          "content" : "943038c0bd93732aafb8ea473cb203297d5377eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e3f65326d82331b7b7b44bb3e3bbb8e11dbbdfc55467683cf4f238c605e0506"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad43cca335bffed24ecd497d617663a968d543acd4d5343a5429bdb0038479b10c57eaa928dee62fd2ab5553c1517e008f2fb570be261f573a348036e96e5626"
        },
        {
          "alg" : "SHA-384",
          "content" : "15ca5cf25d6da251f8f26ecf95dea5b6390cffedd0200337a239b26977e5dae80983b699e04d52a91d45bffa2b07eb36"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/common"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zcommon"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.common",
      "name" : "zel",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "The ZK EL library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87c8a54e430c828396ef314f3674e9ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "04c63d8e72654ee997863345b3418120b6b6406e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d15df12df90ed0ef3b1b6e1c08ae9e3060e949d9b31e4f19dbb753e9289233d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "652d75a73537137ac94e12b5580d9e0f1e42dfa83f1173a22271cdbf2fa2e05fa2d0af3b592fdf6ed74f9f577e950890f4a09e5b626d37233ccc7a285797548a"
        },
        {
          "alg" : "SHA-384",
          "content" : "544674123c1cc19efec542b92167f7758cf666b23a298c237ed3cb9f705e1ca3ac0e4205af672aae91a8eda3aa9a39e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/common"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zel"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
      "group" : "org.apache-extras.beanshell",
      "name" : "bsh",
      "version" : "2.0b6",
      "description" : "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f27117d5b4cfeea1d0634125313fac0"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047"
        },
        {
          "alg" : "SHA-512",
          "content" : "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18"
        },
        {
          "alg" : "SHA-384",
          "content" : "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/beanshell/beanshell/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://api.bintray.com/maven/beanshell/Beanshell/bsh"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/beanshell/beanshell/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/beanshell/beanshell/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar",
      "publisher" : "Google",
      "group" : "com.google.javascript",
      "name" : "closure-compiler-unshaded",
      "version" : "v20220601",
      "description" : "Closure Compiler is a JavaScript optimizing compiler. It parses your JavaScript, analyzes it, removes dead code and rewrites and minimizes what's left. It also checks syntax, variable references, and types, and warns about common JavaScript pitfalls. It is used in many of Google's JavaScript apps, including Gmail, Google Web Search, Google Maps, and Google Docs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "88fd6fcab15b28604c8b5446ad21f6e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "725cc70cff4305cb2869d8f4287d498260378241"
        },
        {
          "alg" : "SHA-256",
          "content" : "c13cee5f9ed2669a760f1162750c115b472e097b4f37ed974d3e44026e5f515c"
        },
        {
          "alg" : "SHA-512",
          "content" : "24dbfa9eae878d351b8106a8ccdfcde215802a294c69ace513021cce39ec364098b7529ddcf958faf907ebaed74ed52dde536a20cd1fdd6bcca3005cb848ab81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc377d206480638ee5110a0324cee66fbbd340a67f8aaa1a416dc3e8774ed4effb581069cff39923baa4bef2609924f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/closure/compiler/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/google/closure-compiler/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/closure-compiler/closure-compiler-main/closure-compiler-unshaded"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zkwebfragment",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Web Fragment",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a2d73a5e43bcdd37b612f64d991449c"
        },
        {
          "alg" : "SHA-1",
          "content" : "88f499e811c3c562fa9437d66616bcc47f99ad35"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c22bd219121279cf58a2b013673ba53eec4227ab9af1402d7ec88265c9dda06"
        },
        {
          "alg" : "SHA-512",
          "content" : "20a455c1e96d6205e3f8bdcf9aa2360059b8b67536617788d31fcae98d49a19c4d2340349b30ebc453a57aad7674fbbd2811e3ad8e41463dbdd5d545bc362fad"
        },
        {
          "alg" : "SHA-384",
          "content" : "785e1f0b34c022e6872f4a2995b55d4bb5f4fe9b69857b0dba7bf70eb7155d60c537e9f053cbc93cea1d89081ae2420a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.zkoss.org/zkwebfragment"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zkwebfragment"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-fileupload",
      "name" : "commons-fileupload",
      "version" : "1.6.0",
      "description" : "The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c10bfd8952ec31282fffd3b2625d87ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "2392704cccb4632b3ccd9b8cfbe2943cca6fc455"
        },
        {
          "alg" : "SHA-256",
          "content" : "9383272c93569afeabedb16923a94a6dc8a5bd7a2f9f83bf326af4ee68434629"
        },
        {
          "alg" : "SHA-512",
          "content" : "f34e90d1985ac2da5295bc23b3c9b9674f157d2697b637dcbbb28e1de9168ab82f7e4b5ab169efc5559a427f28b2c940116a26b8f19c2b7d52346821e323a4d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "21b23210f9d0af359d4f1d5451b3552315518f5bb7c7a73ec2592ab9502e848fbb71d47090f207224ef592baaac12909"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-fileupload/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.17.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6232d0e290d58bb93f74f67165bf91f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddcc8433eb019fb48fe25207c0278143f3e1d7e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aa4ca48f3dfd30b78220b7881d8cb93eac4093ec94361b6befa9487998a550b"
        },
        {
          "alg" : "SHA-512",
          "content" : "98bc665c16268ff1074f415f493ba66d214ac23665b6e964086b60d523b35b1b03fd2e79211e84aa8ebf0921ea028f992827e4642fd086d7104a408b454d38ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dabc3cd47eec79ae537e48739f9abbc64e9b75f63809f35f062d54b8d737de0ba282d7d35a236940b9152e1c54f5918"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zkbind",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Bind",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "035c3a073af9291fecd9c3af566655e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "35935360f58ccfd39165ef458287312392002701"
        },
        {
          "alg" : "SHA-256",
          "content" : "42a7c155bb11a396fcdfd7ff05b672ec2f0ab23d2424e6a85b100b18a8878c8f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbff94d38ba8293d88286d63b2f37efa4fb2c92f4498939f8b884f724f16724d02cb304e27336a6a484abaae7cf2b84774a0beadc111bfe61f138486d26f5a4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "367d3382d8cd3f168dd7486b6d4294b9d3c359d8686edd1c52b460c2e951dfd1faac45735b806979a4ca456a8ff6dada"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zkbind"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zkbind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.28.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a2dd8c76321cef26cc2669fe70a2557"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a958811a88381bb159cc2f5ed79c34a45c4af7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.0.1",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ef236ac4c24850cd54abff60be25f35"
        },
        {
          "alg" : "SHA-1",
          "content" : "6bf0ebb7efd993e222fc1112377b5e92a13b38dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "377d8bde87ac6bc7f83f27df8e02456d5870bb78c832dac656ceacc28b016e56"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e087f1e4632048f1c6ea12e3820a30c7a6e66b13277ec8e784d8c5aba99335cd90cdb08e23756e815324cc9c8dc22d0937c7ccf4b89ee00222cd5e4a1d2a0de"
        },
        {
          "alg" : "SHA-384",
          "content" : "400399c84adfb450fe8f181c43ce7036d47a27c904707454abc97c8ddb89ec57033d740af53fb48e5c1a1a0da5649096"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://servlet-spec.java.net"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "mailing-list",
          "url" : "users@servlet-spec.java.net"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/glassfish~svn/tags/javax.servlet-api-3.0.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
      "publisher" : "Cloud Software Group, Inc.",
      "group" : "net.sf.jasperreports",
      "name" : "jasperreports",
      "version" : "6.20.5",
      "description" : "Free Java Reporting Library",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "868896e5f176b93aa8c8b6b8e6ce50ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "c91cc68132f154dc3301dec4b71f0b90e3422d1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2c02b051438eefa9f272fedeb023334faee72382edee0b495137e3a32831ced"
        },
        {
          "alg" : "SHA-512",
          "content" : "567e6a7f5f14b8197f99e547663c14e9213832b299cc8b572a67299a53d045a3d872fcd7134aedd01fb988062b1d9e72f21f41f7412b635512e434bc241ac876"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8d5fcae0e3755381aa40f0386b7fefc045eac9a4f5c01be7cd300822c2989c4743d88eed84375218477af0f16148b3e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://jasperreports.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jasperreports.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/TIBCOSoftware/jasperreports"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "2.1",
      "description" : "The Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "528445033f22da28f5047b6abcd1c7c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "73a8001e7a54a255eef0f03521ec1805dc738ca0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2c822690786b41e0a02506c7aaf7e8a4b8251ea71d6978ee03e82b11ca242e49386d6da84dbc7182d5a6fb167822aed200da2d97e2f264d63ccf8f1b9681ac8"
        },
        {
          "alg" : "SHA-384",
          "content" : "2aaaa152e6e5fa4c632065e18bb17f8a223de0713be0610b62939b179fccdd37645f2e3073896f455ea95566274e14c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/digester/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIGESTER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_2_1_RC2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.1",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed448347fc0104034aa14c8189bf37de"
        },
        {
          "alg" : "SHA-1",
          "content" : "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f"
        },
        {
          "alg" : "SHA-512",
          "content" : "470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff"
        },
        {
          "alg" : "SHA-384",
          "content" : "264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/logging"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-commits/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.2",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b290524be8a0dbb6521df95f4ce80c8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
      "group" : "com.github.librepdf",
      "name" : "openpdf",
      "version" : "1.3.30.jaspersoft.2",
      "description" : "Open and Free PDF library.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71e298f9eeb2df0edab3dbe34064ba87"
        },
        {
          "alg" : "SHA-1",
          "content" : "d78a17a6e9c09c18a0f7787f8d3f4bccabf3fc12"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d69dce074ee5b0b995d526c47f8c5281ceb83144ebaab5c52b66cf98655df06"
        },
        {
          "alg" : "SHA-512",
          "content" : "02f0f908099e5f8162c63934ca9baa57305b14cbf3ef93e3de5ad6c9acb6fda98d796f216197cd238a3cb4e7cd765a40720fe9a8d90282dde4b3210d30e4c4d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "a486b40434eb69931041ac733051ba2fe7b095a8f671930d2ec77fc2fed4eef200cab2fdc605bcf3b6ae9f48d4958b8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        },
        {
          "license" : {
            "name" : "Mozilla Public License Version 2.0",
            "url" : "https://www.mozilla.org/en-US/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/LibrePDF/OpenPDF/openpdf"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/LibrePDF/OpenPDF/openpdf"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
      "publisher" : "JFree.org",
      "group" : "org.jfree",
      "name" : "jcommon",
      "version" : "1.0.23",
      "description" : "JCommon is a free general purpose Java class library that is used in several projects at www.jfree.org, including JFreeChart and JFreeReport.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b059adc60fef2da40b7130f9a67f977"
        },
        {
          "alg" : "SHA-1",
          "content" : "a316f336ca996e0c6bec4e4fbd49be8f5e1c3968"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44"
        },
        {
          "alg" : "SHA-384",
          "content" : "72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public Licence",
            "url" : "http://www.gnu.org/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jfree.org/jcommon/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/tracker/?group_id=15494"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.jdt",
      "name" : "ecj",
      "version" : "3.21.0",
      "description" : "Eclipse Compiler for Java(TM)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d1404f81be38fdf9186c9556c4ad3e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d06974eec06892e5594bdb8fbbc95cd81f1c57b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "9082211f48782750093f07822d1ae481e8ece250449578f372334da626ccdead"
        },
        {
          "alg" : "SHA-512",
          "content" : "41311832a593d13ea84eebea087baa3bab16df381c70bd4c0f425caeb69eac1b41be2af27e40735ae16c039df4861fa93c3cfc4c21f84bad1c5eb1cb0e7ad351"
        },
        {
          "alg" : "SHA-384",
          "content" : "5123d5e6e30cc26bf70723fdd92ea3eab41b0c694197bee305459b5bd431ee8bb66c4b7f39dc91b5fb4b533a103f70f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jdt"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/c/jdt/eclipse.jdt.core.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9604a5f31129cdb7db4bdec90111850"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e3e7aab8799ccc169b10f244e6fb5b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "268524b9056cae1211b9f1f52560ef19347f4d17"
        },
        {
          "alg" : "SHA-256",
          "content" : "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
        },
        {
          "alg" : "SHA-384",
          "content" : "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.1",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da4742ba6aeb24bf1bd29382fd95647b"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a6ad504d591a7903ffdec76b5b7252819a2d162"
        },
        {
          "alg" : "SHA-256",
          "content" : "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.14.1",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c95952b32a6b42880ec626e5f2bc8563"
        },
        {
          "alg" : "SHA-1",
          "content" : "ccd98bd674080338a6ca4bcdd52be7fb465cec1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "90fa6199c194cf3bad58073d3913b3e8a812d06a5db16faa554ba10f5d859436"
        },
        {
          "alg" : "SHA-512",
          "content" : "f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0e29643d970e756b3aa734c161c5ef6db7aa0839a9510362a89a75cd5787b83a00df867eaeb93f80cdebccf84a46776"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.4.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "afcba1114fca8199ef26346dd6011e90"
        },
        {
          "alg" : "SHA-1",
          "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
        },
        {
          "alg" : "SHA-512",
          "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
      "publisher" : "JFree.org",
      "group" : "org.jfree",
      "name" : "jfreechart",
      "version" : "1.0.19",
      "description" : "JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts, pie charts, line charts, XY-plots and time series plots.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ff3762bd04a7239cfb98de542134bec"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20"
        },
        {
          "alg" : "SHA-256",
          "content" : "153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263"
        },
        {
          "alg" : "SHA-512",
          "content" : "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public Licence",
            "url" : "http://www.gnu.org/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jfree.org/jfreechart/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/tracker/?group_id=15494"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
      "group" : "com.jhlabs",
      "name" : "filters",
      "version" : "2.0.235-1",
      "description" : "Java Image Processing Pages",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca3edff32f4433906c484fdfab2c4043"
        },
        {
          "alg" : "SHA-1",
          "content" : "fff65ebe39d1097cee431087858b3caf957ecfb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "a37202f03eae99ab1faf2a89eeaee3665c8489f45b1aeb0d5926d78a54c613bf"
        },
        {
          "alg" : "SHA-512",
          "content" : "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ec503cdbb8178fd514dbfcb4331ad80c160784e384ac0e34d8598d78a50774e6c850cefa439a2635cd90fec3d09688d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jhlabs.com/ip/filters/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/axet/jhlabs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zkmax@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zkmax",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Enterprise Utilities",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zkmax@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zkmax"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/zkmax"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.el/javax.el-api@2.2.5?type=jar",
      "publisher" : "GlassFish Community",
      "group" : "javax.el",
      "name" : "javax.el-api",
      "version" : "2.2.5",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2175d1f7cb694bc06db07e445d37f8b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "370140e991eefb212a6d6baedbce585f00ef76e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "07bed15032caa7203b43a145d8f0a0fd7a8fd74452e089627f1abe36bbb7648e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c634878a71ff02884321de1bd66888aa537a3deca1fd7a14b23d2569b86b44cf0189752e2df1a1ef45535ddd3ef9f2ab1a79e5da3555bd4ec53de41f4198d47a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3efce46b921ecf5f00b1e3cab93dfd10c891088ef8f889fa02d530018f913ee3d0e8dbf3cd5608db099bcc544c7f27fc"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.el/javax.el-api@2.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://uel.java.net"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/UEL"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@uel.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/uel/sources/svn/show/tags/javax.el-api-2.2.5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.validation/validation-api@1.0.0.GA?type=jar",
      "group" : "javax.validation",
      "name" : "validation-api",
      "version" : "1.0.0.GA",
      "description" : "Bean Validation (JSR-303) API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40c1ee909493066397a6d4d9f8d375d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b6bd7f9d78f6fdaa3c37dae18a4bd298915f328e"
        },
        {
          "alg" : "SHA-256",
          "content" : "e459f313ebc6db2483f8ceaad39af07086361b474fa92e40f442e8de5d9895dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "af6714687690d007b56b67cb430fbe2e32e0802ab8b7220daa6ad1559dbd3e08af4eada7ece48be9a2472589e703258d4a21e98582961273051244fe9a08fa2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "267997100d5700caa6e1150dc03a1651a4f5fa902db2755bb3f3111c485a408d9e1182072259f82843cc3a1f9f474761"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.validation/validation-api@1.0.0.GA?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://opensource.atlassian.com/projects/hibernate/browse/BVAL"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.jboss.org/browse/Hibernate/beanvalidation/api/tags/v1_0_0_GA"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.3?type=jar",
      "publisher" : "Oracle",
      "group" : "javax.servlet.jsp",
      "name" : "javax.servlet.jsp-api",
      "version" : "2.3.3",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6676a5961328c41c5e722da5e48d047"
        },
        {
          "alg" : "SHA-1",
          "content" : "81191ab80e342912dc9cea735c30ff4eddc64de3"
        },
        {
          "alg" : "SHA-256",
          "content" : "409a534d275ef0958a2c1692472da30e3706bfe6933d56c039376f53f13689b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "9ac69ebc00d00e5edb28302fdd515c8e678cad1c2cbacbad487b3d84c74827563fca378383061ce03b8d9ee50f99ced9418cc9d8d64e49eef32270232d660c8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f9e54c75a0449a64501ec54f41bf834dd1131345666c48eada30e296f5c46695290088f1b0be6c8b13f719380722408a"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://javaee.github.io/javaee-jsp-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javaee-jsp-api/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@jsp.java.net"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javaee-jsp-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.websocket/javax.websocket-api@1.1?type=jar",
      "publisher" : "Oracle",
      "group" : "javax.websocket",
      "name" : "javax.websocket-api",
      "version" : "1.1",
      "description" : "JSR 356: Java API for WebSocket",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "be29e11a4a15742aa6fb418fa46345e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "eeeb68631711256418dfbb47b11c731b6c8f6235"
        },
        {
          "alg" : "SHA-256",
          "content" : "a260973517bf6411d659b588a719aa27e7e4e47dfbd510fceb5bf1023a2c45e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "f11e66b42ec76d022d91dcc9e5922bf751cf3b116fa8de882efe5a7e2926b2a45d86a5de925df8bd01e389b1cc65bafaaa5c7aaad310bc9d755e747962570053"
        },
        {
          "alg" : "SHA-384",
          "content" : "d11b4684f2f44cc76b7179b028d4acfa4336e5ec77b898aac1b8a0977d52d907e806d5abaffebcc37df892cf76e94611"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.1 OR GPL-2.0-only)"
        }
      ],
      "purl" : "pkg:maven/javax.websocket/javax.websocket-api@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://websocket-spec.java.net"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://java.net/projects/websocket-spec/sources/code/show/javax.websocket-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-el/commons-el@1.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-el",
      "name" : "commons-el",
      "version" : "1.0",
      "description" : "JSP 2.0 Expression Language Interpreter Implementation",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c98594df7c126f33688fa6d93169639"
        },
        {
          "alg" : "SHA-1",
          "content" : "1df2c042b3f2de0124750241ac6c886dbfa2cc2c"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d67550ec0022b653453c759f063a643c2fe64bc48faa8b25f95a220e2a282e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f2dd90e725a465a266fab7d6f7b4a68df0b4ad846ae379766939d14be4f8016381b445975ca2c4717e0fd2b4ba67516"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-el/commons-el@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/el/"
        },
        {
          "type" : "distribution-intake",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/el/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/el/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.0.3",
      "description" : "Commons Logging",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5bc8bdd15b18018e84fd862993aaca42"
        },
        {
          "alg" : "SHA-1",
          "content" : "760c711c71588bc273d3e56d196d720a7678cd93"
        },
        {
          "alg" : "SHA-256",
          "content" : "bcfa023daea8525d6db029ea82e8f58dbf1a06006db6526d9f984dbf215d8a75"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ea5efb79865fd978c4075e381f35229ad938b2860eda8c506ee98c5615ecddffbea1173ea7a130dbfbadbbed8f9a425e5c19fa62b5a2b98144921a7992737b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf1f5643aa7d1c1c3d60775aa77e88d5073f2e48e04aac27c2ccfe2312244ca17649a2f238145c119fb5523204516815"
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/logging/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
      "publisher" : "Codehaus",
      "group" : "org.mvel",
      "name" : "mvel14",
      "version" : "1.2.21",
      "description" : "",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67b9f1dd16b353327a9ef4fe708a8b62"
        },
        {
          "alg" : "SHA-1",
          "content" : "c47f62efc5ad5e7f0bbb8334d2a1f83af85863ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c1dc80c330f7d086de63fac3e138940ab982270e87cd8d85fed4356b56db5ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebb7cf7af63a4b3cb105946e165357daea805c465c7295ea546da170866930a57230e77246f2785167b455be7595d1d5d66ffcc6a9d7bee41d49f8deae19d6c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0868519634038b9b0f3e5845af411a76214d3258edfae6149432177ec8064a324592212a6e53f5302b509068ae44dbd6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://wiki.mvflex.org/index.php?title=MVFLEX_Expression_Language"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MVEL"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.mvel.codehaus.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/ognl/ognl@3.1.28?type=jar",
      "publisher" : "OpenSymphony",
      "group" : "ognl",
      "name" : "ognl",
      "version" : "3.1.28",
      "description" : "OGNL - Object Graph Navigation Library",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ff23ca36eb2ba1cb076091d0440144d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "4160525fe152e5dd5b53e12b2c59da84156517c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa357126ac26a29cf1a64554719272a8f36253ec072a7fbafa030aa7324ef1d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "9ca433e37f59b14cd0ba17242de25f97c10f02dd45de2368028586375f7f1bc372afd5dd2283330914a43433c00092738afde6d23503f4235601267a162cb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "9fae5632abbb35b7946157903012462b2c1ad9c30a18d31b8cfb96950294ad7d7e5bfa43bf12010850997b49c52feeeb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/ognl/ognl@3.1.28?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ognl.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.opensymphony.com/browse/OGNL"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.121?type=jar",
      "group" : "org.apache.tomcat",
      "name" : "tomcat-jasper-el",
      "version" : "9.0.121",
      "description" : "Jasper Expression Language Impl",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f08e9d9207fcd81eab8f09ce4918ec9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fb7a5841fe3026360e0edcd5f30bf3e2eb5dad5"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d2ac45bfa24e9dad7e5da0a55c2158274b8ee8443cf7dd46666634b1c5812fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "78d0ec8c83d8733660f62d4ebbb037536cf242fdf3d1111c32a26ecd5100022bd800cd791e0e510cb383119c0bf068b9bf2eaff8cf7f8d5caa0a5c93af61a32c"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e4e4d1781a1f330211df12a0dd93e3d58f578cd6d29034bc2df2daa34d4d390c2145b419a6d6f9ad590402bc3f5e036"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.121?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tomcat.apache.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.121?type=jar",
      "group" : "org.apache.tomcat",
      "name" : "tomcat-el-api",
      "version" : "9.0.121",
      "description" : "Expression language package",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee0d945df532fa5148d2de0ee958788d"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c2f022fecc3de1cfb5513dc9dc3cabe64793407"
        },
        {
          "alg" : "SHA-256",
          "content" : "0180bffba911192f08b5f64d18aeba90df16343271215c967c38fde9225cd01d"
        },
        {
          "alg" : "SHA-512",
          "content" : "aed5789fd28040f5bc88336a3fef1372d6949e2fc912381c7a32594514f18250e7b45f671260932ea04d472675d5f2f35010ef2109dce0416b0706ffc0c701bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "834d7807fec9b3c1993996b46c93898b14753b2a99f91e92e8749a5c777696e0a1dd22a44e8f76fcb2132fdeb862a069"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.121?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tomcat.apache.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.8.9",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg" : "SHA-512",
          "content" : "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.22.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df2dcf8d581836d48aae7387311cba93"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e2fb91831cce9cb9262909cd76647508949f232"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.22",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04c11c456fd1e21b9a21c25c665109cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "15c67f9498d6934cff9510fc70c5a12e52290457"
        },
        {
          "alg" : "SHA-256",
          "content" : "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.22.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "09e866bcd73613665ef49f5086704fb1"
        },
        {
          "alg" : "SHA-1",
          "content" : "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
        },
        {
          "alg" : "SHA-256",
          "content" : "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
        },
        {
          "alg" : "SHA-384",
          "content" : "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zml",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK XML components",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zml"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/zml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zuti@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zuti",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK UI Template Injection",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zuti@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zuti"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/zuti"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/zhtml@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "zhtml",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK XHTML components",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ec50e00c1cb2584f4066c55c7527097"
        },
        {
          "alg" : "SHA-1",
          "content" : "db5c4269a59b70a53a224c1f7bdfe65a07d08150"
        },
        {
          "alg" : "SHA-256",
          "content" : "26c96a3550c27403a1e53578aa0c9f4999cb9f7de37c5d6d75af6a821d894475"
        },
        {
          "alg" : "SHA-512",
          "content" : "b20c559dcc739b6b7668e9da962af76a3d9dfb654f7f99e17528b0e81cedf6541b4a4a1ed7d3286e530d1d68bea1bec5e0f2cf40f8a57a2d294129a7a9026c89"
        },
        {
          "alg" : "SHA-384",
          "content" : "e218bc399d8b41d3c5ceb1e0941427bc0e9f7c08a245c33aeff78796d297ece07384b057c79b81ec764d47939ab82223"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/zhtml@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/zhtml"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/zhtml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
      "publisher" : "Potix",
      "group" : "org.zkoss",
      "name" : "zsoup",
      "version" : "1.8.2.5",
      "description" : "zsoup HTML parser",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d2d03a78503aca4bd2ddd1289dc25f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e0a355052c9403ef51d91d315aeaca76967afcf"
        },
        {
          "alg" : "SHA-256",
          "content" : "39dafc2baef6a7f8aaf0a7200c6df8d59d9cf3e91f35d396473aad585e70e1e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "47c29b0fbc355f469d37cff489b07ebc2a5e9676d90a65f40757d6f1f554c177abe100f06daa82a05017a466a0d50c56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.zkoss.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/zkoss/zsoup/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/zkoss/zsoup"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.zkoss.zk/za11y@9.6.7-SNAPSHOT?type=jar",
      "group" : "org.zkoss.zk",
      "name" : "za11y",
      "version" : "9.6.7-SNAPSHOT",
      "description" : "ZK Accessibility",
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 3",
            "url" : "https://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.zkoss.zk/za11y@9.6.7-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.zkoss.org/za11y"
        },
        {
          "type" : "vcs",
          "url" : "https://mavensync.zkoss.org/maven2/za11y"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
        "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
        "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
        "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar",
        "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.common/zcommon@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.common/zel@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.javascript/closure-compiler-unshaded@v20220601?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zkwebfragment@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-fileupload/commons-fileupload@1.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.jasperreports/jasperreports@6.20.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
        "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
        "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
        "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
        "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.librepdf/openpdf@1.3.30.jaspersoft.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jfree/jcommon@1.0.23?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jfree/jcommon@1.0.23?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jdt/ecj@3.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zkmax@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
        "pkg:maven/javax.el/javax.el-api@2.2.5?type=jar",
        "pkg:maven/javax.validation/validation-api@1.0.0.GA?type=jar",
        "pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.3?type=jar",
        "pkg:maven/javax.websocket/javax.websocket-api@1.1?type=jar",
        "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/commons-el/commons-el@1.0?type=jar",
        "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
        "pkg:maven/ognl/ognl@3.1.28?type=jar",
        "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.121?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.el/javax.el-api@2.2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.validation/validation-api@1.0.0.GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet.jsp/javax.servlet.jsp-api@2.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.websocket/javax.websocket-api@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-el/commons-el@1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mvel/mvel14@1.2.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ognl/ognl@3.1.28?type=jar",
      "dependsOn" : [
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tomcat/tomcat-jasper-el@9.0.121?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.121?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.121?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zml@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zuti@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.common/zweb@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zhtml@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zk@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zkex@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/org.zkoss.zk/zkbind@9.6.7-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zhtml@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.zkoss.zk/zul@9.6.7-SNAPSHOT?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/za11y@9.6.7-SNAPSHOT?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.zkoss.zk/zkcml-parent@9.6.7.FL.20261014-Eval?type=pom",
      "dependsOn" : [ ]
    }
  ]
}