{ "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0cc8746c-bf01-32f6-b2d0-6bc96e0d2a39", "version": 1, "metadata": { "timestamp": "2026-07-21T02:05:18Z", "lifecycles": [ { "phase": "build" } ], "tools": { "components": [ { "type": "library", "author": "OWASP Foundation", "group": "org.cyclonedx", "name": "cyclonedx-maven-plugin", "version": "2.9.2", "description": "CycloneDX Maven plugin", "hashes": [ { "alg": "MD5", "content": "843a7130400f75d33f563dc7e9f52dea" }, { "alg": "SHA-1", "content": "2cac5a176b9f48801dfc4910d4f6a34bfbb13445" }, { "alg": "SHA-256", "content": "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e" }, { "alg": "SHA-512", "content": "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407" }, { "alg": "SHA-384", "content": "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8" }, { "alg": "SHA3-384", "content": "9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9" }, { "alg": "SHA3-256", "content": "4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb" }, { "alg": "SHA3-512", "content": "f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137" } ] } ] }, "component": { "type": "library", "bom-ref": "pkg:maven/org.zkoss.themepack/wcag@10.3.1-Eval?type=jar", "group": "org.zkoss.themepack", "name": "wcag", "version": "10.3.1-Eval", "description": "ZK Theme Pack Builder", "licenses": [ { "license": { "name": "ZK Commercial License", "url": "https://www.zkoss.org/license#commercial" } } ], "purl": "pkg:maven/org.zkoss.themepack/wcag@10.3.1-Eval?type=jar", "externalReferences": [ { "type": "website", "url": "https://www.zkoss.org/product/zkthemepack" } ] }, "properties": [ { "name": "maven.goal", "value": "makeBom" }, { "name": "maven.scopes", "value": "compile,provided,runtime,system" } ] }, "components": [ { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zul", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "fc0beae9936c5a58260987eaa2152fac" }, { "alg": "SHA-1", "content": "36dde9d4979caa803172cc0e846a9edb184b3dcc" }, { "alg": "SHA-256", "content": "5053032d2a49235f110b68072570fee750c6b7058c31d443700fcf4f7556ae9e" }, { "alg": "SHA-512", "content": "0df820b3a3556060fc6e6b2649535ca0b7dcb095190b968358e759166d4580475369e72d9368aa5c9a5d853fe105d2a1272edd3d9b78291e615d7f9ac52b3489" }, { "alg": "SHA-384", "content": "510eda19535de09bffd0812920843e0421cb6f5bdc5e37cc5e2d6bbc7de88df8babdfc71079d9fe3f0586cd903a49dcf" }, { "alg": "SHA3-384", "content": "193e347e33e061f82ef16ef62906330553bb8866a071331f97d2c38ad5aec4c759fe032f4b309c6301dd9220277c61ab" }, { "alg": "SHA3-256", "content": "d34d936c65050795a0a86520a6cfc3c260425e5f78a4a71d78425eb0c341e97f" }, { "alg": "SHA3-512", "content": "0f4cb89f983bde02f716b2257f1c194269148d32d26d95c38e3ceef02d65bdd4e1768f983feb198699e0acf01caaecf05e15aa2d42e156b24755b8dee6960d03" } ], "purl": "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zk@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zk", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "db2b25d1dd5d4652205b671699f37912" }, { "alg": "SHA-1", "content": "43a416118b9b2f0d514853d48aeb90a2cdae8e9e" }, { "alg": "SHA-256", "content": "cc36a579be16a815b21c855ed73f479188ab087abbbd7c09704ad7dc7fc0ae88" }, { "alg": "SHA-512", "content": "5af09e48e941b4e56d10785a8282218dbd477eb2029065d06346b5882a79919ecb6dc7acc6a0a7f39f3455b5f395621d1c8a3ddf3d57a513606e08f210a5d5b8" }, { "alg": "SHA-384", "content": "97523373d9dda6add46d55fa9bf364b64a4bd008709383152880fa6708dd5b70634c8309325beebdcbfd9221aedb6de5" }, { "alg": "SHA3-384", "content": "2ddca06636538c56e3fbb0d52a1cd80a7b94c6ced98cc39f05ede20dff88368349bfaaa4830d0eaf9d5a6fde75e57926" }, { "alg": "SHA3-256", "content": "b2f614e644ae138983eb7f371da11435edf651ce39c03a6af4a4e6bd701d2301" }, { "alg": "SHA3-512", "content": "c8f4aaec0a1172796294fc5bda083e2f0f184885206feb38cfbd97709d19a538ae746337cbd3ed757f6f83b77d3c1645fd13d8634a2ef921267205f8b4766761" } ], "purl": "pkg:maven/org.zkoss.zk/zk@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.common/zweb@10.2.1-Eval?type=jar", "group": "org.zkoss.common", "name": "zweb", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "3eba0aabd991a3e468b4bd260a7cf93a" }, { "alg": "SHA-1", "content": "2b8af3a2fa9510f39466dd1a26914bf67053ea09" }, { "alg": "SHA-256", "content": "63b2459e63583d328b76da890cfff3042c6b760e2e5a7c38735f82aca2547255" }, { "alg": "SHA-512", "content": "61aaef333a1b97a5056430313b417940a47df90c59c1fbe7bc8d078c992fa902c7c73ad0b4a4cf04c0629f917d1008064f7f4407036be76506c406fa8070e2c0" }, { "alg": "SHA-384", "content": "42b1c182a37bee55ddb958c732f81a83b630e0317bdb667b3fa1548d108d541f2aa5f75d61aae371ca52b693104871ed" }, { "alg": "SHA3-384", "content": "24db024701d53d28d34bb311eb5815580243af340545e8610016aa751da14eed556368df45de3061f24b1e3e3563cf38" }, { "alg": "SHA3-256", "content": "93873590b7df1cf2bf0e6c12829b25752752c53515f6d13f6c53cc8c88e4690f" }, { "alg": "SHA3-512", "content": "0123ac606014c5c26ff776119dfefd2217875b80c226ede26ef1bc906ab7588f2bf6501b5a10d59edce17ca720ea7f07fa1214f8d9f3f4055dd2d34f2fb669ad" } ], "purl": "pkg:maven/org.zkoss.common/zweb@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.common/zcommon@10.2.1-Eval?type=jar", "group": "org.zkoss.common", "name": "zcommon", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "198f6bc95850e16af5d03aaea1fc4414" }, { "alg": "SHA-1", "content": "398e48db324abd36a6a8c3826457d0f00550535a" }, { "alg": "SHA-256", "content": "4cea2a28d92d3ac34e4f5c4386645a92af799190277d43dc752143074a7af656" }, { "alg": "SHA-512", "content": "0161822cd7e574e2b1bf2456625bffa6a62be68b9168b7694549fac2099fdebc526445ffb052248fbf253f989076365d011c5c7aa8929278dd6872d4ca3662c6" }, { "alg": "SHA-384", "content": "c3fde9087d48c05b26e3448e0023a6c19846fbf8fd435b85429571cfa8bd94c22280ef75e80d14020e7c5eebcf6372e6" }, { "alg": "SHA3-384", "content": "2af947035b8e3f385ed71ecee8dc799e6c3c4fc411b965af3ea2f55a27dc33f00a26d1f0df4ae02e1f1073cbc1069f38" }, { "alg": "SHA3-256", "content": "94c023dd7f06d6cebbe9a5f64cf00e5b2d1a48248bc011326613ef1088027b7f" }, { "alg": "SHA3-512", "content": "fad2bdc5a96c95f3070169b31b8a6e7be03a273dcc651a062b3bab358bfbbfe789a14e25e91a0c7716a06a679f05e87054b83110b4b0a3b48d0de3cf89da9b75" } ], "purl": "pkg:maven/org.zkoss.common/zcommon@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.common/zel@10.2.1-Eval?type=jar", "group": "org.zkoss.common", "name": "zel", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "215dad4e6e6e20178010bfac21f2a0b7" }, { "alg": "SHA-1", "content": "adb57e91b79a48058b13a071f5a734b9761144dd" }, { "alg": "SHA-256", "content": "edf17a460a370a3ac0f8f08c51db5e1b58325e2eccb0b19d9d33d93f4b5a3fe7" }, { "alg": "SHA-512", "content": "e9336abfc223f9fc278bcdda2b2717e8deba978987000685a67d8efbf1f27a213c91fe8e3a69ff44cf68fd7626867fb5a485ab56e2514224f0ef6a6f01789378" }, { "alg": "SHA-384", "content": "99bc083ffb2cad6bbc7ba817a51440f7bf7fe4d09afeebe51a2432f7d24c6b064a08630e3882206fb57c6805823b56de" }, { "alg": "SHA3-384", "content": "22f9ae512e5a5489ec97754ddfcdb1dd6db8485c037f7f08c84a43af2f80491c62ee77dd3fadd2905374100f4d549918" }, { "alg": "SHA3-256", "content": "925287e9acbefc550c1f5ac1e0a05557d7547ec5afc18488575be276a3bb4d75" }, { "alg": "SHA3-512", "content": "eccb97b83ec5accf495297f18cd4b13dc9da3ab2336e030d1e0c34b619968cf85fee52d7cb13688e51287fff52fb2c9b0ab27bebb5d1742d25fcaf56cdc77a8d" } ], "purl": "pkg:maven/org.zkoss.common/zel@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "publisher": "QOS.ch", "group": "org.slf4j", "name": "slf4j-api", "version": "2.0.7", "description": "The slf4j API", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "403dffa46cdd2e3c82da19df4f394a4c" }, { "alg": "SHA-1", "content": "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" }, { "alg": "SHA-256", "content": "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" }, { "alg": "SHA-512", "content": "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" }, { "alg": "SHA-384", "content": "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" }, { "alg": "SHA3-384", "content": "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" }, { "alg": "SHA3-256", "content": "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" }, { "alg": "SHA3-512", "content": "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" } ], "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/license/mit/" } } ], "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.slf4j.org" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "vcs", "url": "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "group": "org.apache-extras.beanshell", "name": "bsh", "version": "2.0b6", "description": "BeanShell is a small, free, embeddable Java source interpreter with object scripting language features, written in Java. BeanShell dynamically executes standard Java syntax and extends it with common scripting conveniences such as loose types, commands, and method closures like those in Perl and JavaScript.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "0f27117d5b4cfeea1d0634125313fac0" }, { "alg": "SHA-1", "content": "fb418f9b33a0b951e9a2978b4b6ee93b2707e72f" }, { "alg": "SHA-256", "content": "a17955976070c0573235ee662f2794a78082758b61accffce8d3f8aedcd91047" }, { "alg": "SHA-512", "content": "a39321a99a8a619a48b65752f6ee6b8f11d3b28ebb051082ec70a70a0d5041e83d144378df191929e3d6562bd5ee4c4f1ccadb0ba42055529d18800a41d8ae18" }, { "alg": "SHA-384", "content": "b45a64491085f76d670f89225d7a54e80e255c96f5f8f4d2ce5f1a56276fef5df2dede1d71dc954e0283e6edef1d8fdb" }, { "alg": "SHA3-384", "content": "800f40bfa0edba4a73b97ea376bf5e4d6b1fdfa3779e9ad292fdc1a06a350dc6c185238efc7f6ce77e3e4f47a5f19150" }, { "alg": "SHA3-256", "content": "2f977780aacfc13d62a0d18f33fd088bc7af72920daaeb0c34f67448712fa5ab" }, { "alg": "SHA3-512", "content": "7136ae9e0df1554547a0234c684c187b8e72ec4470b15d678ab8dedd955b11f819dc8812d055c9c016c6dd5b3b65a39f8f801d0907716cab4dacd565b9f40f49" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/beanshell/beanshell/" }, { "type": "distribution-intake", "url": "https://api.bintray.com/maven/beanshell/Beanshell/bsh" }, { "type": "issue-tracker", "url": "https://github.com/beanshell/beanshell/issues" }, { "type": "vcs", "url": "https://github.com/beanshell/beanshell/" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar", "publisher": "The Apache Software Foundation", "group": "org.apache.httpcomponents.core5", "name": "httpcore5", "version": "5.2.4", "description": "Apache HttpComponents HTTP/1.1 core components", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "5a3d417ea4e65e0f74194263dc5c6c43" }, { "alg": "SHA-1", "content": "34d8332b975f9e9a8298efe4c883ec43d45b7059" }, { "alg": "SHA-256", "content": "a7f62496113f66f9e27c26b84c44f5ce4555c6270083cdf2d45f255336cd52af" }, { "alg": "SHA-512", "content": "9fb4134d85e665e15410af005b21cd2f9b5e60d75112945d37b879f96f769a70be034557526ea7d05f8b83dda91c56d00f946763c44a183d7aea2857549b4481" }, { "alg": "SHA-384", "content": "8ec2da2fd22a23e9f740589947398a907795ab310d4ed166ecc1448ceea7035a50090cf645dad28f3c84c08599f1e57e" }, { "alg": "SHA3-384", "content": "e52f4f1c073ec9d893cffa353a27939054a0b537fe49e4aacfdd6c265dfba037309913a001c025d85ccbb06a1e9e72b0" }, { "alg": "SHA3-256", "content": "23fb185f22dac603ba579c4f707671f43b3b08ab049ae519fb492ea0232c5ba9" }, { "alg": "SHA3-512", "content": "8371cd7e6f94ccb1590bd90d5868a90a3344123b0e6a4f7113d76b816c16d58efc6f2cab124a45ffd93739990fed05201f294f890aa989345f52e736383b4261" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar", "externalReferences": [ { "type": "website", "url": "https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5/" }, { "type": "distribution-intake", "url": "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type": "issue-tracker", "url": "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type": "mailing-list", "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type": "vcs", "url": "https://github.com/apache/httpcomponents-core/tree/5.2.4/httpcore5" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "publisher": "OWASP (Open Web-Application Security Project)", "group": "org.owasp.encoder", "name": "encoder", "version": "1.3.1", "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "c826f7776c4d03adcbf1a2bceef84627" }, { "alg": "SHA-1", "content": "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba" }, { "alg": "SHA-256", "content": "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757" }, { "alg": "SHA-512", "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133" }, { "alg": "SHA-384", "content": "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be" }, { "alg": "SHA3-384", "content": "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11" }, { "alg": "SHA3-256", "content": "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897" }, { "alg": "SHA3-512", "content": "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7" } ], "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "purl": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "externalReferences": [ { "type": "website", "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://github.com/owasp/owasp-java-encoder/issues" }, { "type": "mailing-list", "url": "https://github.com/OWASP/owasp-java-encoder/issues" }, { "type": "vcs", "url": "https://github.com/owasp/owasp-java-encoder/encoder" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zkwebfragment@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zkwebfragment", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "abc4c3a1d5f2f019edb02cbad2804a3a" }, { "alg": "SHA-1", "content": "37144748165a67f7b63d4c57aca8360eeed4452d" }, { "alg": "SHA-256", "content": "1fa6bf6b5c4782d1685e7157f3cfb354949bf5cc6154531d52cdafaf2b557a1e" }, { "alg": "SHA-512", "content": "ecd594ae4cd31b0f9250c0c245cf81e36758ab15f6fa926812b0e90894a82d28623cf29a25ef05672551e958abb188a9ea3c8e618fd9c2c0ca971882822af9db" }, { "alg": "SHA-384", "content": "188c28dec5e6dc079b182f9f7cca1550ab6084247a0b328580f468353053ffd59b692878d5aeba6884762d37974b29f4" }, { "alg": "SHA3-384", "content": "f13ae35dbf7edaa83ce319cdb4e6fa876f08cd76a60f70bb34db14f03186379fc46ae09802c33e878934c65ce68fa4e4" }, { "alg": "SHA3-256", "content": "1b45fb9fcdb752144c466f96a08ec5183588fee9538e117e37614ab8ebe60417" }, { "alg": "SHA3-512", "content": "6120aaea6373ec27f182c1634e2d577c97b68d2f39fdf93e681fbba2715d95ad88ba5194c43798fea5f1bcb993b03f87a62ff1275e2b2373df83d7fd32462e71" } ], "purl": "pkg:maven/org.zkoss.zk/zkwebfragment@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "publisher": "The Apache Software Foundation", "group": "org.apache.commons", "name": "commons-fileupload2-javax", "version": "2.0.0-M4", "description": "The Apache Commons FileUpload Javax component provides a simple yet flexible means of adding support for multipart file upload functionality to Javax servlets and web applications.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "59d0541318ce334e98f047ed472b4304" }, { "alg": "SHA-1", "content": "1655c138db35bd1f4a296a5c1c7d80e6d7ef7588" }, { "alg": "SHA-256", "content": "fbbf2300bb685c573ad2ca9ea71fe390a1269db384d1c1959b3698dbe096dbb3" }, { "alg": "SHA-512", "content": "12774dddd5061eaf4482d3ac3670c77916b17fccd5862f35fa1e760c8985f2040e712d3d268af29d153028e65b6c7785774e579a7b75f1b6a13e82e312df3590" }, { "alg": "SHA-384", "content": "b3435fb5791b83206e67db9d94fa34dca7c10e0b6b675ba2266c642fcd3db07f3b0fc837486a71524e36cddbeb45818f" }, { "alg": "SHA3-384", "content": "b90fbef7a5bffd1bcc340bbef602831fac398801138892166bfd02d89d9f65434890e7b4f5363516dcb2083cfbe48c02" }, { "alg": "SHA3-256", "content": "dfdb20326fd6ac2ab24a895a9009b73d8e63a74b28ee7baecaa442bf1e70cef8" }, { "alg": "SHA3-512", "content": "32f8a803345f94c6d40d8791d0c2ada75486d4a374998cbc977db31c48db9e604f08440a2ad965039d499b464cc36bf10659ae137cf25086c0b803a601845cb1" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "externalReferences": [ { "type": "website", "url": "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-javax/" }, { "type": "build-system", "url": "https://github.com/apache/commons-parent/actions" }, { "type": "distribution-intake", "url": "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type": "issue-tracker", "url": "https://issues.apache.org/jira/browse/FILEUPLOAD" }, { "type": "mailing-list", "url": "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type": "vcs", "url": "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-javax" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "publisher": "The Apache Software Foundation", "group": "org.apache.commons", "name": "commons-fileupload2-core", "version": "2.0.0-M4", "description": "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "e7fb1d376a2cab4732c3c12acf69413d" }, { "alg": "SHA-1", "content": "3284839791dc0130ad07d594a05c7c8750aa4dd6" }, { "alg": "SHA-256", "content": "d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991" }, { "alg": "SHA-512", "content": "c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777" }, { "alg": "SHA-384", "content": "46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129" }, { "alg": "SHA3-384", "content": "b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9" }, { "alg": "SHA3-256", "content": "a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd" }, { "alg": "SHA3-512", "content": "1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "externalReferences": [ { "type": "website", "url": "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/" }, { "type": "build-system", "url": "https://github.com/apache/commons-parent/actions" }, { "type": "distribution-intake", "url": "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type": "issue-tracker", "url": "https://issues.apache.org/jira/browse/FILEUPLOAD" }, { "type": "mailing-list", "url": "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type": "vcs", "url": "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core" } ] }, { "type": "library", "bom-ref": "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "publisher": "The Apache Software Foundation", "group": "commons-io", "name": "commons-io", "version": "2.17.0", "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "f6232d0e290d58bb93f74f67165bf91f" }, { "alg": "SHA-1", "content": "ddcc8433eb019fb48fe25207c0278143f3e1d7e2" }, { "alg": "SHA-256", "content": "4aa4ca48f3dfd30b78220b7881d8cb93eac4093ec94361b6befa9487998a550b" }, { "alg": "SHA-512", "content": "98bc665c16268ff1074f415f493ba66d214ac23665b6e964086b60d523b35b1b03fd2e79211e84aa8ebf0921ea028f992827e4642fd086d7104a408b454d38ce" }, { "alg": "SHA-384", "content": "4dabc3cd47eec79ae537e48739f9abbc64e9b75f63809f35f062d54b8d737de0ba282d7d35a236940b9152e1c54f5918" }, { "alg": "SHA3-384", "content": "fb7a6dec31b6170f729143103c47fead49d50b0d9f58c42ec55a593b23d30c4c43114579790f1e43adfc598f684d4493" }, { "alg": "SHA3-256", "content": "bafc20a1433479b07bd526655f244eee5fe1c99cbf75a0ac27e82237f9c6589b" }, { "alg": "SHA3-512", "content": "47d71f864268c8ced739b8a78a906fdc9777ed0eae3b56218a8d4e19d1787564ab39edf6034b08700c12cfca47edf505551e6352163a9bb50a93279890e241e1" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl": "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "externalReferences": [ { "type": "website", "url": "https://commons.apache.org/proper/commons-io/" }, { "type": "build-system", "url": "https://github.com/apache/commons-parent/actions" }, { "type": "distribution-intake", "url": "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type": "issue-tracker", "url": "https://issues.apache.org/jira/browse/IO" }, { "type": "mailing-list", "url": "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type": "vcs", "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "group": "com.google.guava", "name": "guava", "version": "33.4.8-jre", "description": "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "72920caab34426c5815e3b00f80e3b01" }, { "alg": "SHA-1", "content": "e70a3268e6cd3e7d458aa15787ce6811c34e96ae" }, { "alg": "SHA-256", "content": "f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed" }, { "alg": "SHA-512", "content": "82c43d82fee2b3264e53cd2e9451865f9467ec0baa68d0ddfffa06a1e5465872913150ef96e99ea91daec4387248d832ec9398859f2fa5f08f65caf103306ba3" }, { "alg": "SHA-384", "content": "6645343c3c7a989539d8e77a53b0b848bc1cd739a405353aa6c00b3e4e6c58a93770c988e53d4c0326ed7ea608eb5820" }, { "alg": "SHA3-384", "content": "cc6d1a11626c5ba5fdec819fdc4c0e97afa3e946744dbf9dae10f9ad77f6570703356e301a686c7727b80095d3ec4bea" }, { "alg": "SHA3-256", "content": "b09ae5778552402e8e5780adbee939191ea149cbf0faf2f9c15a818167730df0" }, { "alg": "SHA3-512", "content": "de052d07cf9a308fe4c1a0743534cf8b651fbd6e5f570b0c1a3d9a3269669fbae164bbbfcd089a52729b3a1d8917fbb73c1dac65cb61f93fc200568f32d09a27" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/google/guava" }, { "type": "build-system", "url": "https://github.com/google/guava/actions" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://github.com/google/guava/issues" }, { "type": "vcs", "url": "https://github.com/google/guava/guava" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "group": "com.google.guava", "name": "failureaccess", "version": "1.0.3", "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "29a782e90f6b37218b18bb880d2a8f4a" }, { "alg": "SHA-1", "content": "aeaffd00d57023a2c947393ed251f0354f0985fc" }, { "alg": "SHA-256", "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb" }, { "alg": "SHA-512", "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf" }, { "alg": "SHA-384", "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8" }, { "alg": "SHA3-384", "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3" }, { "alg": "SHA3-256", "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f" }, { "alg": "SHA3-512", "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/google/guava/failureaccess" }, { "type": "build-system", "url": "https://github.com/google/guava/actions" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://github.com/google/guava/issues" }, { "type": "vcs", "url": "https://github.com/google/guava/failureaccess" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "group": "com.google.guava", "name": "listenablefuture", "version": "9999.0-empty-to-avoid-conflict-with-guava", "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "d094c22570d65e132c19cea5d352e381" }, { "alg": "SHA-1", "content": "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg": "SHA-256", "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg": "SHA-512", "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg": "SHA-384", "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg": "SHA3-384", "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg": "SHA3-256", "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg": "SHA3-512", "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/google/guava/listenablefuture" }, { "type": "build-system", "url": "https://travis-ci.org/google/guava" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://github.com/google/guava/issues" }, { "type": "vcs", "url": "https://github.com/google/guava/listenablefuture" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "group": "org.jspecify", "name": "jspecify", "version": "1.0.0", "description": "An artifact of well-named and well-specified annotations to power static analysis checks", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "9133aba420d0ca3b001dbb6ae9992cf6" }, { "alg": "SHA-1", "content": "7425a601c1c7ec76645a78d22b8c6a627edee507" }, { "alg": "SHA-256", "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" }, { "alg": "SHA-512", "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" }, { "alg": "SHA-384", "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" }, { "alg": "SHA3-384", "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" }, { "alg": "SHA3-256", "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" }, { "alg": "SHA3-512", "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "externalReferences": [ { "type": "website", "url": "http://jspecify.org/" }, { "type": "vcs", "url": "https://github.com/jspecify/jspecify/" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "publisher": "Google LLC", "group": "com.google.errorprone", "name": "error_prone_annotations", "version": "2.36.0", "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "0e48e5ba2cd0a8d8d09bad849b99f6a6" }, { "alg": "SHA-1", "content": "227d4d4957ccc3dc5761bd897e3a0ee587e750a7" }, { "alg": "SHA-256", "content": "77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5" }, { "alg": "SHA-512", "content": "bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566" }, { "alg": "SHA-384", "content": "a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529" }, { "alg": "SHA3-384", "content": "00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6" }, { "alg": "SHA3-256", "content": "ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29" }, { "alg": "SHA3-512", "content": "344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "externalReferences": [ { "type": "website", "url": "https://errorprone.info/error_prone_annotations" }, { "type": "vcs", "url": "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "group": "com.google.j2objc", "name": "j2objc-annotations", "version": "3.0.0", "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "f59529b29202a5baf37f491ea5ec8627" }, { "alg": "SHA-1", "content": "7399e65dd7e9ff3404f4535b2f017093bdb134c7" }, { "alg": "SHA-256", "content": "88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64" }, { "alg": "SHA-512", "content": "1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f" }, { "alg": "SHA-384", "content": "24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f" }, { "alg": "SHA3-384", "content": "afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8" }, { "alg": "SHA3-256", "content": "4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152" }, { "alg": "SHA3-512", "content": "b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/google/j2objc/" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "vcs", "url": "http://github.com/google/j2objc" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zkmax@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zkmax", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "4f3af3bdf8b2b56f2252c1e1b2412ffb" }, { "alg": "SHA-1", "content": "6f105ab32169b93120d138f0d7001e9360ddbf80" }, { "alg": "SHA-256", "content": "1251a5ae44741e818eea670e83ed92e9ae6a29b8e2334a9d6297c7a225290e7f" }, { "alg": "SHA-512", "content": "490d8f144247a98aba8d3374d60817ff72b6ef90d464e987bb19a75b28cc51f38969e69109ffafeea644d7b6280c023c58fea97cfbf6998e169c6c495741623b" }, { "alg": "SHA-384", "content": "33ca72c33a254bcc1f82360938e7900b703d36b3f84f236c55beeb50b59e967263cbb8912df498db0aceaac6aefb8fe9" }, { "alg": "SHA3-384", "content": "2be1a193dfc6e5d5275ca721be5ce641728a1df0efa2b67665593871d9e8d0761c3c12d24348d91ff3e066861f0e68df" }, { "alg": "SHA3-256", "content": "ba6a54234587f2dc5f9b49e08d6d59a6e3d1e989b33cc696c0b31a0c384f5867" }, { "alg": "SHA3-512", "content": "3c86e322f0baaee9e6383a9be32da2cf78bd02fda31289f09ecb080efda8640ebe8c92d582d032e3b771f2ee81b9a4c608d0ba6e6546a446ad3434f02157a253" } ], "purl": "pkg:maven/org.zkoss.zk/zkmax@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zkex@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zkex", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "041160f3a79fae94ecd32cb1f3cee619" }, { "alg": "SHA-1", "content": "9c63a27779b5c8c247992dcba9f197f6d66922df" }, { "alg": "SHA-256", "content": "19315f152173419948dc4842383b6ac246de935b640e3fd222be585f6a583ec8" }, { "alg": "SHA-512", "content": "9c48ad38a21899ae180f0e99f10d7c251869252260385281c0414a17178ec6675e704a55fd1d6ca794aa5896e1fa0b3390f1e8507429863aa46f08e0fa338e8e" }, { "alg": "SHA-384", "content": "a2c0ac3a2125e944ffd5bf12423cf345fad59993decc29665cf408e8631317b962b71bd0831ae770a88128fe7f3aa6c7" }, { "alg": "SHA3-384", "content": "739bbe933ce656b3a60d7c93f8b9e261f0d71dd3a11316f89b1b5a914fa60eb2fee610ade595f191e525b401d8e3c33c" }, { "alg": "SHA3-256", "content": "ede95b859f8d5b02acc43bc03fe3a4c007a0ca8bb62f0a59ebae7efb4f8c6139" }, { "alg": "SHA3-512", "content": "1601b2dddf3a8b59dac30329dd45c900a651051806c34f7f3cc39c7cdc0a171ae4bbf460c2282802952be70211048fc158e510d3b85652154a08f5d8783e0a21" } ], "purl": "pkg:maven/org.zkoss.zk/zkex@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zkbind@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zkbind", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "84d23f18075b29d061f0dbef58d5361f" }, { "alg": "SHA-1", "content": "a434ccb8be7a77ceda231c671e3977a87f52b94c" }, { "alg": "SHA-256", "content": "148e2acaac6e72cb25bdc138dcef37ab37ab6fdd606a3cba53cd62c5966df0c5" }, { "alg": "SHA-512", "content": "50d1085db5a0828b3840606ccc447be4b86ede3611cf7972abc4e21c02434f981d2b002c2a96d13a3f6796e633ca0c8b6ff8cf67c9ed8599707dad3dbd722ee8" }, { "alg": "SHA-384", "content": "877f248eddf5a8dffc123464282a4d48ad7d8dcbb53824d38583a94f723da597fda2dd41fdbf3192cb996cb2283d03ae" }, { "alg": "SHA3-384", "content": "35a522edbfa4abde5b691acab9b324752a03c090bd8bceb4ca8abd20fc77a00ee83299c9db15725fab9506de926a6fb9" }, { "alg": "SHA3-256", "content": "1d7f568891b1b8a00c899d55be651f8560aef61281eaba7d6d5a7e4bd918e1c4" }, { "alg": "SHA3-512", "content": "bf9095f2dcf5f719c3eaedc3677750a9e897e345d9e5007c545fd44fbfd5e8efaba99f981817feff161f6d66c3266b67a6d8737bd2014a490e7f402707077d68" } ], "purl": "pkg:maven/org.zkoss.zk/zkbind@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss.zk/zhtml@10.2.1-Eval?type=jar", "group": "org.zkoss.zk", "name": "zhtml", "version": "10.2.1-Eval", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "b3080f3973b51bb1fc11547bf50fb77f" }, { "alg": "SHA-1", "content": "7adb004088afe508dab484c76579c960f9dd6b94" }, { "alg": "SHA-256", "content": "9a945506df354f84c1f39bcfc7de5531596f22abb5d6487ff0644e2a7277f6b6" }, { "alg": "SHA-512", "content": "a95aec07a53278bdb7431cd3ae0cc31042d414f4f17c28e85bc1532b7204f21fd46d81cf37269cdd514f2925b0d39b08fade51e517f772328ff2fb0cd93c589e" }, { "alg": "SHA-384", "content": "865627c8df17210736eb12779871c5d4b3c84004f63ffc98edd37526f53ec34e32d30ffa8007f041a78a70a84564d09c" }, { "alg": "SHA3-384", "content": "de84ff12b2bd54a403521f1151505176f9b360e7f4b2e9f2405468f322fcc0ee0cb3d39d6f5683716dad704593ae29b6" }, { "alg": "SHA3-256", "content": "1d9a7c94c0996a20603e8268ddb9c011eb8c656d4ddf8206fe80a81570690fb9" }, { "alg": "SHA3-512", "content": "2ef6f42ecb40cc6d9d199d9f1c4b8d2a1abaeef23feb925da85f4ce9eaf6b1a6f492595de738ee6f2265742e1fd48a55bcbcc34bf3b6fd0ac7e7c7d0a85fa8fc" } ], "purl": "pkg:maven/org.zkoss.zk/zhtml@10.2.1-Eval?type=jar" }, { "type": "library", "bom-ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar", "publisher": "Potix", "group": "org.zkoss", "name": "zsoup", "version": "1.8.2.5", "description": "zsoup HTML parser", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "4d2d03a78503aca4bd2ddd1289dc25f1" }, { "alg": "SHA-1", "content": "7e0a355052c9403ef51d91d315aeaca76967afcf" }, { "alg": "SHA-256", "content": "39dafc2baef6a7f8aaf0a7200c6df8d59d9cf3e91f35d396473aad585e70e1e6" }, { "alg": "SHA-512", "content": "4856dd54958eab0302633ea17532ec08cd60c3e268616e2ef5ffe8efa77fb55898290d1a9b41ffa5d12933e9c67bf3837bb5b3b0416476a2cd7060ac8d1521cc" }, { "alg": "SHA-384", "content": "47c29b0fbc355f469d37cff489b07ebc2a5e9676d90a65f40757d6f1f554c177abe100f06daa82a05017a466a0d50c56" }, { "alg": "SHA3-384", "content": "d95491aa37d14dbaba2429b6136a22e82e5b07e06be24626b238c825713d6d20a17d3b93e85e7413a4d975b4d95794f0" }, { "alg": "SHA3-256", "content": "f07af8ba3106f37612b14ccc39e4b01150d290318252a1b34544581f51c63f01" }, { "alg": "SHA3-512", "content": "1becfb80bc3878ac341cf8d75bdee5c58c457605bbc9e4d7c3c7eda6b0debfcbdeb5eb8f5606b28d075a33dbb24d5f138b1cd6ba380a482c9f427addb7d5f0e4" } ], "licenses": [ { "license": { "id": "MIT" } } ], "purl": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.zkoss.org" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "http://github.com/zkoss/zsoup/issues" }, { "type": "vcs", "url": "https://github.com/zkoss/zsoup" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "publisher": "Shigeru Chiba, www.javassist.org", "group": "org.javassist", "name": "javassist", "version": "3.29.2-GA", "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "9783c90ffa4d36eddda9526fde06f3ea" }, { "alg": "SHA-1", "content": "6c32028609e5dd4a1b78e10fbcd122b09b3928b1" }, { "alg": "SHA-256", "content": "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f" }, { "alg": "SHA-512", "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657" }, { "alg": "SHA-384", "content": "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa" }, { "alg": "SHA3-384", "content": "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e" }, { "alg": "SHA3-256", "content": "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50" }, { "alg": "SHA3-512", "content": "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2" } ], "licenses": [ { "license": { "id": "MPL-1.1" } }, { "license": { "id": "LGPL-2.1-only" } }, { "license": { "id": "Apache-2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.javassist.org/" }, { "type": "distribution-intake", "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://jira.jboss.org/jira/browse/JASSIST/" }, { "type": "vcs", "url": "scm:git:git@github.com:jboss-javassist/javassist.git" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "publisher": "JFree.org", "group": "org.jfree", "name": "jfreechart", "version": "1.0.19", "description": "JFreeChart is a class library, written in Java, for generating charts. Utilising the Java2D APIs, it currently supports bar charts, pie charts, line charts, XY-plots and time series plots.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "4ff3762bd04a7239cfb98de542134bec" }, { "alg": "SHA-1", "content": "ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20" }, { "alg": "SHA-256", "content": "153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263" }, { "alg": "SHA-512", "content": "4461b94a95fff1dccd45b504e2cebd37e294257ac743af4296a55b1513d9133aee0f69d05fc737406ee2246c7e1f20536cf235b02053d5ca7aed58586841c2bd" }, { "alg": "SHA-384", "content": "dd30f229cbcf06cfd825f9acbdb2a8026a8c81c49f9919b5708561199a8464df87730a04bd083a3bf252184a71349549" }, { "alg": "SHA3-384", "content": "0a60de6e3640d63ec6d5fd98a1ddc3e3829ef4b20bd9a236ff7055968ffd826b1c92fbcfefa16ed3a2ce82622e168a9a" }, { "alg": "SHA3-256", "content": "ff29553d392a5f5e3d56fb495c3d4829adb08aeb4a11e5c11a9b3dc12aa47ffb" }, { "alg": "SHA3-512", "content": "1f244620552183a5abae81b5a4f6a8a465f9165fa23d273aad01bfde1c1cd7c0fbb21a2f60e26d5ba057ed29115bc274af6bc5cedc90560c5b239ab017accaef" } ], "licenses": [ { "license": { "name": "GNU Lesser General Public Licence", "url": "http://www.gnu.org/licenses/lgpl.txt" } } ], "purl": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.jfree.org/jfreechart/" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "http://sourceforge.net/tracker/?group_id=15494" }, { "type": "mailing-list", "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev" }, { "type": "vcs", "url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/" } ] }, { "type": "library", "bom-ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "publisher": "JFree.org", "group": "org.jfree", "name": "jcommon", "version": "1.0.23", "description": "JCommon is a free general purpose Java class library that is used in several projects at www.jfree.org, including JFreeChart and JFreeReport.", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "1b059adc60fef2da40b7130f9a67f977" }, { "alg": "SHA-1", "content": "a316f336ca996e0c6bec4e4fbd49be8f5e1c3968" }, { "alg": "SHA-256", "content": "1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c" }, { "alg": "SHA-512", "content": "f4574e35698f66ac02c868e49ca4d238eb103390f1b842dee5afe0adfdaaca5d86f3e149449c3dbaf83b4965be4829679c201393df33764c489288637eff0a44" }, { "alg": "SHA-384", "content": "72bf196da43a02ccfc2ba006de10335bb0d32a4b64e67303a0b8e8e15464f2d7e3275ac4b9a52eb3c0bdcb112f8a1b00" }, { "alg": "SHA3-384", "content": "c0b2735bd3e247210e15e7b907f014d65208c2e4b4c9af2c7617befc01aa160906d4a2c3e3251162d004e7f2fff232e6" }, { "alg": "SHA3-256", "content": "c08d3478dc33b5df4ca75e86c746b2c857a3c60eac854c66cb11d16725b13c1b" }, { "alg": "SHA3-512", "content": "e5ee3b35a3155a01825a58e8c3107403e40c565cf21484a058e184eec72ea415dc750d594aea5bfdd61721ceba4e34fc52fc3e5c76159e3d34c69e7bbe039932" } ], "licenses": [ { "license": { "name": "GNU Lesser General Public Licence", "url": "http://www.gnu.org/licenses/lgpl.txt" } } ], "purl": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.jfree.org/jcommon/" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "http://sourceforge.net/tracker/?group_id=15494" }, { "type": "mailing-list", "url": "http://sourceforge.net/mailarchive/forum.php?forum=jfreechart-dev" }, { "type": "vcs", "url": "http://cvs.sourceforge.net/viewcvs.py/jfreechart/jcommon" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "group": "com.jhlabs", "name": "filters", "version": "2.0.235-1", "description": "Java Image Processing Pages", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "ca3edff32f4433906c484fdfab2c4043" }, { "alg": "SHA-1", "content": "fff65ebe39d1097cee431087858b3caf957ecfb7" }, { "alg": "SHA-256", "content": "a37202f03eae99ab1faf2a89eeaee3665c8489f45b1aeb0d5926d78a54c613bf" }, { "alg": "SHA-512", "content": "b58fb0a93408f09fd32afa421a875019d1ff1dd6fc18915d5bd9b8e6c65a7353c366c7777d85ca3ec0f2007e5f7d87821b4bf1884ae1c11772704ecd646074f1" }, { "alg": "SHA-384", "content": "8ec503cdbb8178fd514dbfcb4331ad80c160784e384ac0e34d8598d78a50774e6c850cefa439a2635cd90fec3d09688d" }, { "alg": "SHA3-384", "content": "49b98b9d7837d2be0ef6a9693004256b80bf25b9243a95f7bce7174b4413829f8aa8d888f5cedcbf342480c92538f4f0" }, { "alg": "SHA3-256", "content": "4283ea6a74ae06312078ca5d39b7d5971ee33a80b28848b19767785742f51014" }, { "alg": "SHA3-512", "content": "ee6808ef4ff33cf1aca2efc475037e3644e022cfc8038a667280adf91ef0b5cd69b69da4176de3a097bfb9e17caf216e21223f8e2a9b432c0df2daaa84a76d95" } ], "licenses": [ { "license": { "id": "Apache-2.0" } } ], "purl": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "externalReferences": [ { "type": "website", "url": "http://www.jhlabs.com/ip/filters/" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "vcs", "url": "https://github.com/axet/jhlabs" } ] }, { "type": "library", "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", "group": "com.google.code.gson", "name": "gson", "version": "2.10.1", "description": "Gson JSON library", "scope": "optional", "hashes": [ { "alg": "MD5", "content": "df6097815738cb31fc56391553210843" }, { "alg": "SHA-1", "content": "b3add478d4382b78ea20b1671390a858002feb6c" }, { "alg": "SHA-256", "content": "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" }, { "alg": "SHA-512", "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" }, { "alg": "SHA-384", "content": "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" }, { "alg": "SHA3-384", "content": "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" }, { "alg": "SHA3-256", "content": "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" }, { "alg": "SHA3-512", "content": "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" } ], "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", "externalReferences": [ { "type": "website", "url": "https://github.com/google/gson/gson" }, { "type": "distribution-intake", "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type": "issue-tracker", "url": "https://github.com/google/gson/issues" }, { "type": "vcs", "url": "https://github.com/google/gson/gson/" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.zkoss.themepack/theme-pack-builder@10.3.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "pkg:maven/org.zkoss.zk/zkmax@10.2.1-Eval?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zk@10.2.1-Eval?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.zk/zk@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.common/zweb@10.2.1-Eval?type=jar", "pkg:maven/org.zkoss.zk/zkwebfragment@10.2.1-Eval?type=jar", "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.common/zweb@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.common/zcommon@10.2.1-Eval?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.common/zcommon@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.common/zel@10.2.1-Eval?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar", "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.common/zel@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar" ] }, { "ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.apache-extras.beanshell/bsh@2.0b6?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.zkoss.zk/zkwebfragment@10.2.1-Eval?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.apache.commons/commons-fileupload2-javax@2.0.0-M4?type=jar", "dependsOn": [ "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref": "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar", "dependsOn": [ "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ] }, { "ref": "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar", "dependsOn": [ "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar" ] }, { "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.zkoss.zk/zkmax@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zkex@10.2.1-Eval?type=jar", "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.zk/zkex@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "pkg:maven/org.zkoss.zk/zkbind@10.2.1-Eval?type=jar", "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.zk/zkbind@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "pkg:maven/org.zkoss.zk/zhtml@10.2.1-Eval?type=jar", "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar" ] }, { "ref": "pkg:maven/org.zkoss.zk/zhtml@10.2.1-Eval?type=jar", "dependsOn": [ "pkg:maven/org.zkoss.zk/zul@10.2.1-Eval?type=jar", "pkg:maven/commons-io/commons-io@2.17.0?type=jar", "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar" ] }, { "ref": "pkg:maven/org.zkoss/zsoup@1.8.2.5?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/org.jfree/jfreechart@1.0.19?type=jar", "dependsOn": [ "pkg:maven/org.jfree/jcommon@1.0.23?type=jar" ] }, { "ref": "pkg:maven/org.jfree/jcommon@1.0.23?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.jhlabs/filters@2.0.235-1?type=jar", "dependsOn": [] }, { "ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", "dependsOn": [] } ] }