{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:6db00260-92ec-30ef-a24e-ebb4875aece2",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-dist@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-dist",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-dist@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-dist/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-dist"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-core",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68b64643c8c46b8905d7574b7dc438a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c2c088025245b74a4a99d27ae77e309b78cfbd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "7cc8cd983dffd72b8ebd78388cdf7a572d599ea0f755031477a59481fe92f62f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e3c7000956e056c8fcd977797bdafe2376bab62afad97b1fd0f8d7e9fb49da185ff6a7d51dc2cae5946fae7d296590ae98e89eba8c3bbc99e2cec6077c740bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "90dc7e044dd4ceaace16609fe28c05fce33634528e6c384ea7277afdd6015d3b380da95d69438d79eb5e08a080824e49"
        },
        {
          "alg" : "SHA3-384",
          "content" : "31407e9b87426c5806ef63c364bbfc974c7a60d90f8b4de8c5b07f15845163dc4d97a259e8e76aa2b9432774e5390be4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b01b5f58351fc3e2510e3217517b27ff6e2643069812893818c67036f7b7be08"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ddf3928ea6bd51c02678db824327b342da028bc080e8d9a95fe0041cbeaafb2bcae4305f447807a078356fec3ff88f8246163b4bb40ebd807e7782e3d4f915a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "1.7.36",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg" : "SHA-384",
          "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar",
      "publisher" : "Saxonica",
      "group" : "net.sf.saxon",
      "name" : "Saxon-HE",
      "version" : "12.9",
      "description" : "The XSLT and XQuery Processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0da2a0f62cf07d1ae5f76d65569cd3f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "1397a02bd22c63db3e902b28b23c59009fa3b5c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41"
        },
        {
          "alg" : "SHA-512",
          "content" : "91712b90b683ff0a7e027f9a9bf48902c427057c9cc1868accca77e39100b0dcb90a2415c5783df188a12f7aa425f93e7832e3cb97b404dc34c24c5fad93e469"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7e19e138ba41b69b802572da415e740dac73b191b38bacfa12a77d52d3cc2314c9ba269b50dce6de9ff6f0493a3612"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2ab479d9f0acbd57995af68b794c492621f50851f77d0d23319aea782a8bc94a396dbfb674724e16cdd554cf01b2fa73"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54afc8248603183f15d4be5a34383793c10c9ec3c0f13c9e19696222430ddc29"
        },
        {
          "alg" : "SHA3-512",
          "content" : "092271bf758a1d137102b1ddec19d4b13d528ba2bc9ee1c35859f16c3fe50a573e3bae623e770c940aa43a1631a15303cfbe33e600ac0ff07a1611d3b4f9be9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0",
            "url" : "https://www.mozilla.org/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.saxonica.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://saxonica.plan.io/projects/saxon"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=saxon-help"
        },
        {
          "type" : "vcs",
          "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.3.3",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e883f28e14ce902f66941bd8bc25233a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b838b0d69eef8d46c813d88a604e3cb4c6035fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "e426f802202b69004b94d7ff67c907b1e10e3005854ed4b9fcf4898a8f727c782e06da58ebc746345e9ed30881a6006c8d588e604f3fd28a107b49f55a632f0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "78c42fec61b2008f922152fdee78811bec25da32a27adce0eb228297b62b586bb8d7bd344fac914962c2d0393f66de32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bea5e339f64751df3e0606c53a850ff1f1e40cdc3c37ad2c3465d6f218e8a8fcde880652008ccfc2cc0a133ce91cd19c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c8c61aad263d72404d0ff57bc173d9195cb30cd320c6cf73a917ca44ee12ca21"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7b0fab3b03366830d7bd8c1b2c6465971d80bb8cac00fb51f52f95f51040f5178a42abf469a3e31a74d8ae21c9578f16e0c90548b4eccc6da132c653c44cd038"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.3.3",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59c51b08ba448bc9473d92e68bf84873"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c"
        },
        {
          "alg" : "SHA-512",
          "content" : "3968f78e0c36009f9bbb6e6ce3c0b95a91f6f723a71d93ef9855fe4de674a22c7fc0d426d0bf95d4cdfed4b2cd8213ab8a21d235f64cdd8add9729bac948af8c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f79c1d4557cf6045010c01a9467f966f70120e7979281bfc4211960f3680285d8936143254de92307d0c32fd2f55f2a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "638fa3393665ade60320cb93378e6592da92f3fcb3d50d6d9331b7a01086e8f67c7f13ace73bb7a747f45f0574ab15dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eb68a8a8de6126987953b82f58b2bb58da107aed2cb22bfd169e0028b079174b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "87b5283102a265524dc2259b2518cfb08db450a7bb738fea34cc666cea9d2e557abc73e50a2e542bb1874df6afa3d767e75875fa0a404c8387da5432e6a2688d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.9.1",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1888ad1f49038441bb2d12aa6dffe396"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807"
        },
        {
          "alg" : "SHA-384",
          "content" : "9448b1eeafccfe061a7533a633b3cf7445312f916d372a3b6bbae8747267b6d6a9387fd100aec22bc22160007a819fa9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b684b8c0bc4d7cb21245b2d9e20e103460686e80b16d2b4ea5452c82948ba74fc2bcb093f4ab1d6b010448da5dc12457"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f59abda303b133b832ad3d81076241d924dce6304dce5a1a60f8d816797dbbc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d42ab2d7dfb1e11b896a1aad31d945639b5aa85ac9b5c2e33fc2e9174c4333eaa018217b58147930fb8017c7f569a6390c242c0e500f5b70600a2100bd08035b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.13.2",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2c47e14ce5e956105458fe455f5d542"
        },
        {
          "alg" : "SHA-1",
          "content" : "48b8230771e573b54ce6e867a9001e75977fe78e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947"
        },
        {
          "alg" : "SHA-384",
          "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.41.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75e3b25da8b8a2136463c4674f5e49bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30"
        },
        {
          "alg" : "SHA-384",
          "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.54.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c37e1dfa8c74da0e2284d4ab6760b44"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3ce292a54faccba14e2a9f3077a4dc05e5770a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "20b88b0fe12233933f3c88848c276758da1c14bafe5c686ad21e2eb6abc8c4cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "294560350e591e8c8f054c3e02f9b92cb7e3460a5078919401889792a8a1ab28788464e217b3c90611e9223d5d3ff36b2ed40de00d2e5d39e9bc6c504377ac3f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aa9e889f5e0f7492e421330a3f21b62f840b5e72c418a00b1f0907e7c01774ed4f9c5e6c1bdf67f0c900e639e1392db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7587ac0354a4a05487426c209bc7713d3269067843eea00799231c2d0b698a4f0ac61e4431b11d1f90571d5c0baf9150"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05445c4ad1848a3830b0bd459dcfc33ecbb347572a3e446d89f7ee2ea4968191"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce79ff20b6ce9f517baee86161e85b81c743ede9d4a638ec58cc6e41068cf2ced7f0335a2a6b2a44a8a46e04fd70b4c6891746c15ccb8a18fdd498b8d0e98a84"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "group" : "org.pcollections",
      "name" : "pcollections",
      "version" : "4.0.2",
      "description" : "A Persistent Java Collections Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc80c4568bb9766e119df617ef8b553"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338"
        },
        {
          "alg" : "SHA3-256",
          "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hrldcpr/pcollections"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hrldcpr/pcollections"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "group" : "com.github.oowekyala.ooxml",
      "name" : "nice-xml-messages",
      "version" : "3.1",
      "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c913451ff2d2ec740c58a77a26fa16"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-cli@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-cli",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c7dc206f825eb545c6f86b6b9b64f1bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "5f7e1b9530080080de454371bf18eb0d6104f0f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c5b516a47d6f39b5cc750611af811b8f594d279bb72f339b7ed9a9be26e222f"
        },
        {
          "alg" : "SHA-512",
          "content" : "b5953fb7b7aee38a11deae13309c9d9b6578c535cb11e50e01130cc916d3386d279b3e3f960552638a92f5439745291886f353733f3c865f40a0b8fcd8e30775"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a2ff6dcc7f27227ba2749842d8ed50300a30b849c2d620cfe05b47a205f58a27be7d744be7653aee02ab5816467ac1b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd80f1288992903a5e076875f28e101266ece6f6282d572ebea3de3c92d90e7aba2c645aa678dcebe853e4f47104fdc0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15abde9cc46ab9803f14317b3549ea97647b1a92348f57f11667213b12859098"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6cdd83e653c05be6f8084b105a78d97c2a908dc546b856e2368ac935f5a1ad5727c1d5d691564b3f784f6fd6810ab4dfbf168c77c766d405641ad52a0086f45"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-cli@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-cli"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/info.picocli/picocli@4.7.7?type=jar",
      "group" : "info.picocli",
      "name" : "picocli",
      "version" : "4.7.7",
      "description" : "Java command line parser with both an annotations API and a programmatic API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands. Easily included as source to avoid adding a dependency.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "149402d1c0939a9afbf9ed7d6a2ae180"
        },
        {
          "alg" : "SHA-1",
          "content" : "82bcae3dc45ddeb08b4954e2f596772a42219715"
        },
        {
          "alg" : "SHA-256",
          "content" : "f86e30fffd10d2b13b8caa8d4b237a7ee61f2ffccf5b1941de718b765d235bf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "125a8d5cf9dac7f2d67ac82e281d47aab4f15643b4dd5e09199dd5048e385fa74f7f287ebd1162c9f23c488e0d616f1e46591015fe5319c6ad796cc4beddfff6"
        },
        {
          "alg" : "SHA-384",
          "content" : "91d445fc22d81964883a8b520771ea62bb6ba0fd4093a5b22ac00b9d025a302e16a2cb52c50bb33b9f29d380990a8a30"
        },
        {
          "alg" : "SHA3-384",
          "content" : "056eac83d293fa1fea73d5fa79da9216fc2af9c396971f700df3964985660e79ce362211a3de7f38e781ecbe77ef491b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "916249db6baafc31296ce795a9eae35f7ecd253d15e20e5c37e26fc6c206fd0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "38586c496881613573c77b3edf24afc3325726698641cfd7236b197997b8264e8fbfa732731c8ca737b64e03be8ef7d0da9d93ffe300ffa82be0bf4dbe957419"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/info.picocli/picocli@4.7.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://picocli.info"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/remkop/picocli/tree/master"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/me.tongfei/progressbar@0.9.5?type=jar",
      "group" : "me.tongfei",
      "name" : "progressbar",
      "version" : "0.9.5",
      "description" : "A terminal-based progress bar for JVM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7bda2e0d24c326b6af99f8ff28239c28"
        },
        {
          "alg" : "SHA-1",
          "content" : "aaf7a04a9e9e6bd0aa03268cfcd6168e903bcf2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1a086fa66f85c49bb3ca701a78cebb33647f367d4a5be8588c784d56272cc6e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9f29b15cea7746c02288645c92633ec2a30b19fc1273a71608df5d42140ecaf69339c576bf263093148f4548a85924a62eb4e24013128cf61053b4c97df82c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "126db35d39f280298d6395de0f90df954a8e64b41db424b00f565dda1bde0f66f017237a42094adee4d72a453e6b1b7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7452d8b7785cab60dfb10e5c36f8547c8bc0e6df985b2c9fde5134481bce5426e83ba59efbdcdb38538f0168a5aecb7e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e02f1576f6ec76e457b728b6049cb4b859fa342dcfcd467e9347fb82f307355d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b8cbcbc1d4e126305d354382d44fb4b6999fd03d67c0770677f5067e8926be3903be3a34982cc0795eec2b39a48395574ca11b0da34229c923b255cc44630782"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/me.tongfei/progressbar@0.9.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/ctongfei/progressbar"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jline/jline@3.21.0?type=jar",
      "group" : "org.jline",
      "name" : "jline",
      "version" : "3.21.0",
      "description" : "JLine",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "859778f9cdd3bd42bbaaf0f6f7fe5e6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bf6f2311356f309fda0412e9389d2499346b5a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e7d63a2bd1c26354ca1987e55469ea4327c4a3845c10d7a7790ca9729c49c02"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a2321279254bd9782b76bf6afe4dbb137ad2efb73e441f7a0d8fd568eee9f600ce812223b0aa579d598071f43a1663e345f44d07b24a9469698f7224c56771b"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bbcb0d0e3018e29cf03853efdae4e275541f9c4e4424228a5fbc83d0f8ae7eb3bef6d8ae4c85c4c69e11e2a67eb4eb7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f45c0ef812ad0726f79a5399dbf034984f7e5eae482948d90220f98dec4a354e75116369734a0a44c6a614fd025ddb6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a3650ce5b31b44e5d07c3405f7a279483fa2e7768a57f7f284e99c75733d52db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2906a3597c98169b426946afb079c2429a3b6041985651b50526d0fc98c21e514d44c6d3f1b4e7a5b508469c4783535c3eea5d2161d33270c6d052b67c48fe8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jline/jline@3.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/jline-parent/jline"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/jline/jline3"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jline/jline3/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/jline-users"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/jline/jline3/jline"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-ant",
      "version" : "7.23.0",
      "description" : "Apache Ant integration for PMD.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "327b38b331828d5ab80cf1adb8b26471"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c6d0fe98ed2527f5fe91ec272ce7cda5d87b2b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "d38d4ef9a43d1911f65219a79179fbe266da7f73aac50aa576400b1ae23d9ceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "cadbe495f63f93b6752e3ade7246f6eacb8192f0ee53f2dfb469c921508e1399e54701f0f97df802e7926d4eb7691211a5f6a7d0773a4b1ef686604266bca0d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "45724036cbae070fb51997026a596eceb37fa0872c5bd752f729986485af383f8b98f323e1390d32c248c54d17bd91d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4069204798cee4c0bd20c6fc8615862621d3c102d8b267630cc5d7d845539af7ad6c5d2f223dc572b7c3ca0c42f602b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ccae1238128fecb9f988f904cf8826b1a4e3d422ffe56dda963298d574a4322f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78d813dc9b22b42e2cb49c6e8d9e35581b70a93020b7ad643b0f0525faad7d73d8d3d4c72392bf38718b1b056e6ef122ff474fc29a3a2914dbcb39380e1cf077"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-ant/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-ant"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-designer@7.19.2?type=jar",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-designer",
      "version" : "7.19.2",
      "description" : "The Rule Designer is a graphical tool that helps PMD users develop their custom rules.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "18e7047b1ed0b7332d2cbbaac6c3b61e"
        },
        {
          "alg" : "SHA-1",
          "content" : "f306371f8e62758f9616b64632ca3cd9fd616ddf"
        },
        {
          "alg" : "SHA-256",
          "content" : "545a6fc6e6ccd4d1b52a93a69315a708b675014c00881e34245f24a9c68521cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "f273633925c4c316dd4ac235cb68273001962504ec64013479d0be9614c301cf7d2ca9c8dfede71f70b101ac3bb5e316710d4193eea884b39e3f7c2cfa6dda52"
        },
        {
          "alg" : "SHA-384",
          "content" : "988a0104405db3ae9c52d3c42e73154c4e3b76398f0ad657cbaf0797626b2086a1bf2fb630a9fd9f9ea7b43a2b725839"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd450e4fbc79929d33915d6e9052aa8d7d4fe2037390991e04a39b5b725e7a0e91ef9aaf9e777514018df945379af5e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4dbe92771d079fd0bc0baea3b493e5d09ce4c0a514bc192e7a62c25b39f08610"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4359b79a8b150013028883cae41efc0da4c4ec61c3325690c1455bc3322d63a93b88f6ef9db62a0bd7d70744c66c8e17a7a5e790c110250bb4bfd3f696eae2d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-designer@7.19.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd-designer/actions"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd-designer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.23.0?type=pom",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-languages-deps",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c3fc207b5e685f11103a657d3107bb5"
        },
        {
          "alg" : "SHA-1",
          "content" : "c68c397dbf1898be0077cbb5e9600a55a6b8ecfb"
        },
        {
          "alg" : "SHA-256",
          "content" : "6db0ccdf7cf66c647fb1c54cfdcde6b27c1b66d66b5106d20a4d10da0d0b72d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "58d3b10190e6402948eed7c5eb8ac995b06515b5c41d040089cccde9ef490127d413f5742665f48dda9b9466563f03e619a737dbf4416ba3be6772945e617ccf"
        },
        {
          "alg" : "SHA-384",
          "content" : "1070a6b9beccd0f4ab19905a7d0a18ede834b2676a644ef8edeb6992fef0eb1836c54ec00223827b2cfe55a4acfca01f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "007fac6315afe7ba21f30201641ce31de9070c21b512558171d282951c9c7b684ff02eeb5cf3602603498b9223560d8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed2757bc36922aaf5a0c4eef195df84de2ecf1395d45844ebd923e49335c6798"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b34a9161bc479211d090587e2c72cec5d29506a8ec13b141b9f2e1bcaf2c2a36e21c32ab0c99cf51d388965e6dbea3f75112714324798f761a33817ddfa19ef3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.23.0?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-languages-deps/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-languages-deps"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-apex@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-apex",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3e574f27b477cfa862bdde7c521c9ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a193472e4469ce97857f6d48c913f385db0aa422"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b160f1ba36524d305deaf222769e053138c66a8bb1eb35f732c49b0606a0a94"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f6c50fb682b22bca31dcc1e092cc54f94b5df74bff7732cf6e3bd1332508b242adaba3d38f6c08a24fcceada826c1c6d434af4d4c481bfe8d618dd4e184343c"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cf815c8f5c5242f2f6230fd4614e3062748eec2b093b5da540df0ce0b00318abe3fc45114f66352a1eeb04578cc590b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae80caa7166c8c3818a21c742608e8cac4e5ac1b3af04b3978983238abd09dadae432c899a1768c93f6a44fd7f4cec7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7bcd6f4b9a4d205a046dbdab50e0d398725da25e4613593c27c385a0b02e94c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7a1861e679f7a82f3f54d355f5a168e495adc30685a62edd79af6746b7f4040cb619ffe38f05db590d89540b3df416640c8ec78b6a5b34a840a8030ea97ed2b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-apex@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-apex/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-apex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.5.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg" : "SHA-512",
          "content" : "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.3",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "3.1",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg" : "SHA-1",
          "content" : "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg" : "SHA-256",
          "content" : "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/j2objc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar",
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib",
      "version" : "2.2.10",
      "description" : "Kotlin Standard Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab998b5a8873e563556557820409af83"
        },
        {
          "alg" : "SHA-1",
          "content" : "30de6faa127a4a012db8e71bf1b9c0a99b1402b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c67cc79efd6b9215b49d2a4308f5f3433537376c7c88e89bdd6729bd096e61a"
        },
        {
          "alg" : "SHA-512",
          "content" : "4bfdea9c22f5d73691c74e602acc04d5c1552e38c09b7dbbd31909c0c557c7720106c6802678ba92563a72d3560fdea0f32fa5639d99bdf752ddd303c30c2fd5"
        },
        {
          "alg" : "SHA-384",
          "content" : "f86f025bdf8f8f5623b4ad03df22889352266c0d862e8c354fa1146681d3a6f72c91a901f5cc5786e77a0a64d41a36a5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3d5adc7841dcce566da129acdec4fe62d442fcda5854c7690003da969ec1874bcdb5b2dc55c7018db60378ae7074232"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9fb62740c9e9db72c6896831d980e570221d5e94db403d03bd8f19b059a0b270"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4d7d1fcdcbdc45f4c12d5f83e1b6aea743edec20c5e85f28b0418e02f418e73f25e7899154152c50ee2c02927ed694eaa8ef6273e696f0a2aa20643c0256fe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kotlinlang.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@2.2.10?type=jar",
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib-jdk8",
      "version" : "2.2.10",
      "description" : "Kotlin Standard Library JDK 8 extension",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df2bd0581ea2105909b3069b3750e721"
        },
        {
          "alg" : "SHA-1",
          "content" : "80cc9a776a058eeda7053731350bc41af8858a5a"
        },
        {
          "alg" : "SHA-256",
          "content" : "8974bfdd08b1d81843fe8d11f0729ab6e5b3c1f88d671ebe0c006358129ce149"
        },
        {
          "alg" : "SHA-512",
          "content" : "357c39ade01e3d6790df2c31445aaada4a7435e6f39de7bdcba84f85e9a45a7a9c0baa8cb09137cb275b5071e9a08ef7babdf6216e3fe3f12044297d01d8dd49"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c597aaacefd7163b177dd187ce5b5a92375cb2a53031f55aba9eddd38d35bcc4ba4fca055ef178228878e01c520b8ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d46c8d98202e95937c7bd85cb7d17ceb452e3822f8032c8e80177389039b0aac9d3d91451255a07774a9fc7a04b125b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a1119ac5e8ccc42fdaeba470df83994a37103f459300d8a49428ef224ba4982"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c40a9a740df93e600bcda9b99bb4a731489651f2eb54346218e57a995f434e0ac5e71a9f1c0fda5ea50835906b4257f934001ea84dd6893ad1ee4646b5b841ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@2.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kotlinlang.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@2.2.10?type=jar",
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib-jdk7",
      "version" : "2.2.10",
      "description" : "Kotlin Standard Library JDK 7 extension",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c0118bdb7d291f383af970887b32a44"
        },
        {
          "alg" : "SHA-1",
          "content" : "18cc96ae090a71726822631e1808c7d329faab5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf95eccc6cc784dff479dee0b8834f3584b93292cc5d91972e82f5d7b9e13e3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ad67dea67107f4c30ef37300ba77e26de26ce1d2b90cbd13341c0c63d5cc3d1c27609e87c05a04bedf29bc5835e577a5b4521036049c01d58a5af1b2965603a"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb7657dd4ec9505678dacfdbda7cd0412f0b7ceb8368c8ae2bb3dfefbca654cf1484c7770c116ca836307cfa9b3c2e94"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4c491f893d30f5d1129187d7c8d3d28790a1bd3f679a62765ae8a3b00b0797c8a60dc35fc783b52e80896c4dea17ceb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a668e16663313da4a52f2af59eb5013cd3f5d9270204c8a7f12fe2b193ab0838"
        },
        {
          "alg" : "SHA3-512",
          "content" : "495ec3fe5d1732fdecdc740dd6d371e4ee4140db2ba6a4e53e9d4e72cc7ab88424a72c1f56a64b4b24002274a3eed4036cce6ff67b3a2d5ebff720afff655eed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@2.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://kotlinlang.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
      "group" : "io.github.apex-dev-tools",
      "name" : "apex-parser",
      "version" : "4.4.1",
      "description" : "Salesforce Apex parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7fc1e8a8db9f6fe6b918633d00d07173"
        },
        {
          "alg" : "SHA-1",
          "content" : "c951d5efa4e364e389a5a510c630d3ba44555a9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e293a3cdef4a54e1848858546ea3b9ca29f30f8aaa518ca01c31b708bc09a44"
        },
        {
          "alg" : "SHA-512",
          "content" : "245beeacd23644ca34771dc54b8b028ab61fb5d16264051de55cc0a90e0c27e8698f07cf6e0a2cebc497e64c7312d1531b6efb97762dde5aeab7a41d1cc07b80"
        },
        {
          "alg" : "SHA-384",
          "content" : "a271826efa879c076d1d86a1b944303ace6ca64b8538c48801ab289f27f9f0ea0cc2618eb50446385632c3aff57a9559"
        },
        {
          "alg" : "SHA3-384",
          "content" : "61454f26f9645c44048e71bafef40a145361f6a7a8923c1eb87631ce2d1e9475db4c1c175449a256d029c3a09357ebb6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8435dd9885e7fc8c83bfb51ab43bf9ef077dd14a1b15697a90ac61591640ee8e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7325ee70b9d180ab99a3c7d59b1ae925e3b4929cd875fe2472b956b8954e482402b000d90a971ff3f1724e968e12d9e85e2fd718d32ca1bedbc960121045cd3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/apex-parser"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/apex-dev-tools/apex-parser.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.summit/summit-ast@2.4.0?type=jar",
      "group" : "com.google.summit",
      "name" : "summit-ast",
      "version" : "2.4.0",
      "description" : "Summit - Apex Language Abstract Syntax Tree",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1ee44510a30e0d078ab677997b727e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0073f802080330da8242e51b2bd7f69ac873eae4"
        },
        {
          "alg" : "SHA-256",
          "content" : "5f411bad2a596357157b5032c48ff98823fef8090be6816ed1d1928d011da6dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "fc78e7a7c8fe8a0c8ea4710b30759a5b37e2def04fabd14922cd95622faf6115dc68d4584b894bbd23fe5d1c7291d205d28543e7f838e3c031f9295677fae02d"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff4ccefa7fba64fb21cd1ca040dae76cb97ad24f32fc5b073c3f014fe7f65db2869e8cfaf397882a91258a50f83c99d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abe669f3830b01241d807a59767cc58fe74574ae3365a4c895156ede117367f394a06382a1ff2a944c75a0cb13b37026"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ba530ac7ba3f688e467a64b4da91fc4aaf2d0320f324ef4c2fd21e12ad581ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "291989ee9d978a0b7232c494a1a1d1198c5580655e9a9ea4087d1e1830296e418419496d935b96236fff8f4544e03102142f8adfd40c913254cb3442c772233d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.summit/summit-ast@2.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/summit-ast"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/summit-ast.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-compat-qual",
      "version" : "2.5.3",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dbc262b47142454ec0a88c7b44e3a2ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "045f92d2e0676d05ae9297269b8268f93a875d4a"
        },
        {
          "alg" : "SHA-256",
          "content" : "d76b9afea61c7c082908023f0cbc1427fab9abd2df915c8b8a3e7a509bccbc6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0312dc1bd2206bea07097551c53e31ef6536e10ac3cf047464672a30d903e62730a64994f67da1d869645701c3a17e16b715da8cff0d0c7263b0b9dc674f865"
        },
        {
          "alg" : "SHA-384",
          "content" : "166d9a945998fb9b2684e15e679571cb16f06bd1c03100b637e0b97ec3f142265de952babb6af3dfe478c7bfd59795bc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "209465acb99464f255d2f413ac3979c70de5c727ad39e725bb3fd51898a3f2c817b5ee7eee4eca4c04e14752f558cae1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "389fa3da2d5e5f8a66724fe3bf514a28ef418a4284df07decef3ea38db59a54b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2dca30375c47ffe2e6f23b1aed97f481cb8c8ee7ca4df43324d33e21cdc4bd179f3d8caa17e77f3e528efc72a07d1567425c7133b758ce2bd3899fb53cbb7d5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License, version 2 (GPL2), with the classpath exception",
            "url" : "http://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flogger/flogger@0.8?type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.flogger",
      "name" : "flogger",
      "version" : "0.8",
      "description" : "A Fluent Logging API for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf2cb73e865fb67ab62642a67a748ddc"
        },
        {
          "alg" : "SHA-1",
          "content" : "753f5ef5b084dbff3ab3030158ed128711745b06"
        },
        {
          "alg" : "SHA-256",
          "content" : "bebe7cd82be6c8d5208d6e960cd4344ea10672132ef06f5d4c71a48ab442b963"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fee612b58e0a335759571e012b4d7b0b617fe05141378df227c743fbe8dc7dfea13cdb6cde532ae1fcfad5f871245b9c974118dd51d07f5738e363473390529"
        },
        {
          "alg" : "SHA-384",
          "content" : "a79ee62a10a6da9c766f1ced685ec6289e791b4e9550f8fc78429c3c88b60d50e268d1e367483a9027891967b51d290a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d98587a3f43e75d4cd008170faa4411e097ef1ffb713e052832c0c9d5beb930ae53eabb4ee2429c59d0e1ff1225a6860"
        },
        {
          "alg" : "SHA3-256",
          "content" : "387943a34d1183964267f23f45a21d428a32eb59edd4950af8b9a2ef52ad4a59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd5524cb40b1fd76e21cd21f81a833012e0e06d95b888640e60de6db77c74aaa3cfd015e40b0b544dd271c1790a02960367d7582f7e3fd3ac98629929b6f68f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flogger/flogger@0.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/flogger"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/flogger/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flogger/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flogger/flogger-system-backend@0.8?type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.flogger",
      "name" : "flogger-system-backend",
      "version" : "0.8",
      "description" : "A Fluent Logging API for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d8d5f93768d9cc45793dee8fa95b5b40"
        },
        {
          "alg" : "SHA-1",
          "content" : "24b2a20600b1f313540ead4b393813efa13ce14a"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb4428e483c5332381778d78c6a19da63b4fef3fa7e40f62dadabea0d7600cb4"
        },
        {
          "alg" : "SHA-512",
          "content" : "b807f5daabb7a006c21d467200206c169830b64cc73a225f8c5798a74a16a2eea465a4cef180ee43b7270645038879b2282b98b8b688e3107d31750b0370a5a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "74f641c69b046de47b014b00f1b070dec35bac89aa5ae44c6534ad87fd70c527504b0e50c5461757b80f7a2d748c6763"
        },
        {
          "alg" : "SHA3-384",
          "content" : "638b3c7c6413269bb270ddc246de8f61a6114c629e90cf3465678f044e362c5fd30360d7ed314b114ffabfee592db5ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c2c5a5caeafa7727ffabb3e569e0ff40ac7a4cbc84da3b0b92d019ab68e09e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02ef5039f6bd6aba44a1927bae571afed86679ab19d2815e63d21b8bdb5566136b4706cecb867ca946decba0a5b37d8e7af259cfb48f8727c2b6c2245966cf13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flogger/flogger-system-backend@0.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/flogger"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/flogger/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flogger/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "group" : "javax.annotation",
      "name" : "jsr250-api",
      "version" : "1.0",
      "description" : "JSR-250 Reference Implementation by Glassfish",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cd56b2e4977e541186de69f5126b4a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "5025422767732a1ab45d93abfea846513d742dcf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871"
        },
        {
          "alg" : "SHA-384",
          "content" : "33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ab52f8a6f45849398f4a268cf498f7788adf8d0ad6ede2f9287814095051ce8529b05bea0a71c90718ce4c21d4594f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "623ae141aa22b45010282c862e41eec3ed0dafabd8f1ee5591ba623a242375ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7edd7a76d88d466b310d71fdc10d7b289838391408f8b704620b6683b65e436c0fa411d8dd356b0792e29e2fef8fbb8a6658bb97e7046e1277404a3395a9a53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        },
        {
          "type" : "distribution",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.danilopianini/gson-extras@1.3.0?type=jar",
      "group" : "org.danilopianini",
      "name" : "gson-extras",
      "version" : "1.3.0",
      "description" : "Extra goodies for Gson, available on Google's Github repository, made available on Central",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e91e00264a57cfd8ab49708e0d42744f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0a43d2ac49c42f958a240d5d5564f5cd6b38876"
        },
        {
          "alg" : "SHA-256",
          "content" : "a8bec65d0eb9d5fcda6410eea9993104f8c0852f8024972d8662b4dac8258c1d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a7ede4f7283cd7ce5e075b0a8c3d19e3859a65c81bd80a6acc932fb503e690fe1f7e1d5a7071de9e2bbd74f744b6dde7752d33872621961adeaaec9b37c5513"
        },
        {
          "alg" : "SHA-384",
          "content" : "19788c3a87d943c1153827c23400c4356e237750130f3671686099163da486bf3171b5ee3fc569e515812c642278f619"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eaeb5bf4c674c566cb1b1a21a20016a512247111b9573dc1bee5c2ea436472b2aee8b03376b83599614fa0ef3f58e3ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f961b875cf086f690706f4545cf62f7cbbb189f68cd5c6dc01a23661db5c9a6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1972db3c85aef32c3703d4ec437a0b48db01b32fc5c00115773849cd0550c1fb567bfc4324de64489711bc603c90929f2017078f5b9ff69eebd02bf8f720bcd6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.danilopianini/gson-extras@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/DanySK/gson-extras"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/DanySK/gson-extras"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/apex-ls_2.13@6.0.2?type=jar",
      "publisher" : "io.github.apex-dev-tools",
      "group" : "io.github.apex-dev-tools",
      "name" : "apex-ls_2.13",
      "version" : "6.0.2",
      "description" : "Salesforce Apex static analysis toolkit",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23f9f3b431ca41ea5d46fed9bdfa2590"
        },
        {
          "alg" : "SHA-1",
          "content" : "70b060509ac64e022e1bd290334e8135bfeadea8"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fe141416896e925d8dd09600ee5d3aaf2ae16b7614c5cce90357cff8eb61d1c"
        },
        {
          "alg" : "SHA-512",
          "content" : "74ec316707b4e0df3f240bfa284352a8ddd16d3e580502a158c5e9192f21003c83ef3b76b2afe01529e6a62d933120df3749ec33ded17f5d3e043664425315a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "304d3c050ef4725940beb137b60093ef1a6ec65dba03d90b6fe2f0f902de7be1e76dc528de7a48c2c91804c20ecd4079"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1497e12d199a5e84420a6bca11af2a07d2bc5c46ab7e52d675afad7c4443d3d0af9b469acbbebfe6c2fc121b26c92e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "febb820bdc8503561ba4ecaa1b2f9579e81aaf452c63b609d13cc25d90df6665"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b19e7a8f3571b67d054ccc770a5189ec27301ff9e144c6c9393000c33601dc160bca8fc384029f4c542f5fac48e295351b694346a09173f7d19155e444d5468b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/apex-ls_2.13@6.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/apex-ls"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apex-dev-tools/apex-ls"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/outline-parser_2.13@1.3.0?type=jar",
      "publisher" : "io.github.apex-dev-tools",
      "group" : "io.github.apex-dev-tools",
      "name" : "outline-parser_2.13",
      "version" : "1.3.0",
      "description" : "Salesforce Apex outline parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12517b04daabdb229f880802860f89cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "1da52b60e22dbd8cdb700c7a46e29b2a600526f6"
        },
        {
          "alg" : "SHA-256",
          "content" : "e86854d0aed6b509134fd356ad7d28d7c181f0216e053384b80b662741176313"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad9d26df92bea352a20956eed589469352ae21f72dd36723808b8fb1147268128293482a04f18d2994f1039bc5704caf03c047f941ab0824da99b51cbdceb252"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4dec661e8819869e9a21ed6c7fa0e28208d4c6b79626824be48952df9f3272d4ded8060a7ed5d69ffcd51f3766d25e7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7355ccb9c3a6a89f84869fc0a6984123bac038f366451cddedc08914c49ef7e2e53e18b99e876408f1b5bf6ff2a335b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f38f40387448d77801d71922b7170b0b7a8b318d803b8876ca686e97ac9b502"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8d4483c25aa24d2ad5462168ebfe8bed11f8e9f75ef989c71bc541cca05a00a311d6e1448aa9dbce16c035a98ba8ab8aee413acceef9064fe594cb695dd280c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/outline-parser_2.13@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/outline-parser"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apex-dev-tools/outline-parser"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/apex-types_2.13@1.3.0?type=jar",
      "publisher" : "io.github.apex-dev-tools",
      "group" : "io.github.apex-dev-tools",
      "name" : "apex-types_2.13",
      "version" : "1.3.0",
      "description" : "Apex type description traits",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e872eae5b5bc3532e2411ec1d5094ee8"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f4cd3f5d2f4c990d54281eb117391dee8c6b09f"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d5bbd48a29abfc704d026382f7c9bb08c8bf0b114efcd065a31fb222f84a90f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d3a4a68364552659eb298cde5094325729529cbf3d60be03938d9fd9efaae8708ddc625811e7172b6379d9f2343352d0e49dd36ddb3f1a47f0574b1ee0aa6915"
        },
        {
          "alg" : "SHA-384",
          "content" : "9032fb3f30c59ab6c0091b2c737c9a20b464af11f837ea8d797c60ff8f21cf802cf771dfe3fb28a5954596e1fba67ac0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "933f151f3084572187b0276b40fedb89770cf373b679677dfdac63a89793ecf83f0fb3b9026ee36536b0b6e5779b1689"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b5eb31614ebde1027eb5a7b7722ba290611b0f564d951c53b037933983cc3c5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f30b7b65af62f26073cc64de040ad003ab6ace2b76a1934984e55fb2923a957da92134160518aaa405f9183aacc6e8b83eb754eb80f0f5b37e47dd41accfdd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/apex-types_2.13@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/apex-types"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apex-dev-tools/apex-types"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.1.0?type=jar",
      "publisher" : "com.github.nawforce",
      "group" : "com.github.nawforce",
      "name" : "scala-json-rpc_2.13",
      "version" : "1.1.0",
      "description" : "scala-json-rpc",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c7ce562adf45e27411a67f75a1bda5fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "2d5653ebc78d1667d6ebcea862c8a7673ef5e640"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fcac451d102a687a1be2d8cb3ad4854a0beb9a26398f01db03d95f9851fa3e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "551eeb2792cb24387bf526177e4f937ae7d88b38f4887bc5007b76e70a9b29feda22550bea6839c77aedaede15afeee72244a3c01d29950544eab787a8ba991e"
        },
        {
          "alg" : "SHA-384",
          "content" : "07e024ee88a6c30e4cf0650dad49dab4fe4e3ed2e1faa39a8f7183ae19fd8f9d05f30e307dee559be5d22fef50d05e8e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "20786d00548502cd067277eed0f03e19daa508ef98caf44dc3c3477364b0caca11be906d5ba1651bbfe4b812d6051029"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2c8f4b8d00d730e5fbe2ba7adb471f5b86c5dcfb4c081dac78f08d914a913333"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40b98bcf018f8e964d8ca05229d1360899565b282bb0aaa928fe29c6caf3931cfb74add7af1dada184ac4cd554e7dbe2d21d6eda3a34ce27b6de639f55e28b48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nawforce/scala-json-rpc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.13.18?type=jar",
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.13.18",
      "description" : "Reflection Library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29960e8ffe90c70523e52e9781a2a363"
        },
        {
          "alg" : "SHA-1",
          "content" : "674f3bd39f5c528d575da69c42a5dff772b9b75c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6935ff1982b2ac93d695f15aa66921be2f602921277afe002f018fd8c7d6e29b"
        },
        {
          "alg" : "SHA-512",
          "content" : "bccfd697f1f7a53b13b17e07ddb1295dea04a4dadf8c706830ea7ee6c65c617fade4c256626e4c7ee1a4627c61a3b81ed7cb53fcd2fc1390c6b48e3b058b0cd6"
        },
        {
          "alg" : "SHA-384",
          "content" : "867107440eaa3561e98420a7ea5ccda2234cec2998e5c97e26ea145640dbbd3053f02e9b108bf107abb7e0d531155c9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdd8635e76e666013d778203ad119d301340cb10a4d3d4dbcbaa7c1bc3527feb7e47aad2f49fef020da1efe80acf0371"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a16f39d140dd25cebeede350266ccd2e98d2c3e0ee0fbaacff083350f9be88d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9af4dca7260486651d28f0d6ce18e504b0289873db9195dd5b2ec63f982dbec533e8378c694a55c18c591f5ce973eb2ceccee5cdfe9f4cb35cdabb7b954cfed7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.13.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.1.0?type=jar",
      "publisher" : "com.github.nawforce",
      "group" : "com.github.nawforce",
      "name" : "scala-json-rpc-upickle-json-serializer_2.13",
      "version" : "1.1.0",
      "description" : "scala-json-rpc-upickle-json-serializer",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf9f3f40588b2735517ec0cfd76c59b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a06227e66d5ecfe695e6ff38c1b4dbd6ed8fb85"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ce9d100d26080a7b8813b6c3c6bc568c7c33b500b2b42120862c3f9fda926ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e8e15b583a83ba7cfc842573490955cc06cb8a35ef0c476dc09c149197d5762616e0c10e81068a6e9e03842e67b72c585dae4e96b0ab1abbb7d60d93dcd80b7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1449983f8804cfe197a8796c2c3bbd096730a4cf0b587501486a76dbd1829afefa0416fe9019c1d1e3c2a7dce4523ad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15ebfe2fb5d840002bc5f3b04669986f64ba47c00f96b4fa114dd20c8b207066590c203ccffba93baff687d7be66dd54"
        },
        {
          "alg" : "SHA3-256",
          "content" : "84b69f7d94550e5b16f8e7232aad528f240880d603a0908b0a4c9e3f604a137a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "812ae0d14515a0ca10bea909b99ccdab0544e625d74604d7a83cbe1649997e4ad312c6a887a0c6af5daf03813536c471681b6969a98bda26a31a2275f509ce97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nawforce/scala-json-rpc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar",
      "group" : "com.lihaoyi",
      "name" : "upickle_2.13",
      "version" : "1.2.0",
      "description" : "upickle",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abcf824fcfa8631eef37567f8fc0af00"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a9fdc473b8f86be977d0b02d0a036d448315b36"
        },
        {
          "alg" : "SHA-256",
          "content" : "eba8ec18d8284cfcb10395842c254280b46f97ea2aca7f48b2b3db20205bae6f"
        },
        {
          "alg" : "SHA-512",
          "content" : "53c8cc9806a49eb747c0359c661cf5c739e33e873901665c88cda8bb494b6f0aca8e142ad8682bf9f11eaccd3da0763a4d9e06ec1417383a155ff2be60b6ed32"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c3b848cd29f6855bf62cefd1c7bf2e40345ddf2bb0a37c8bcda6c2cce09120064364162d2d313e17fbd4d6fe76c8862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "314f802e61c2a628d4ff7f716627307280e139e1c22f00043588c6316529d58b1e9bd0c062f5033fc1685be2172daa2d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b712ba360059804ea48270c4a1d1617c7bd6fe0bbfa25f9f72d4f70e6c73bd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d068f6800c36d8af69178c24d13874af61f647c27ac9b508ed81bebce4fef343583de632df6ca45d136ce975dfbec336e1e305f195efbd7ef61b4000f746b5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/upickle"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/upickle.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar",
      "group" : "com.lihaoyi",
      "name" : "ujson_2.13",
      "version" : "1.2.0",
      "description" : "ujson",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8e773dc5a5dd4fb08c1a0f3e2ea9e3c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c813e752db936cfecfd708e2051522645f287645"
        },
        {
          "alg" : "SHA-256",
          "content" : "68474183a6ff657f97a91488e294cbe977b2a439fec216d5167700c72471f358"
        },
        {
          "alg" : "SHA-512",
          "content" : "88b3d92831cba8c292be4c7e427f7fbaafe6b4f6e18fe98a0c2d41358ac5db122761dae721fd820e4e6cae64ff1f78f70af88a2f3d4cbafc61f3c0f65148c83a"
        },
        {
          "alg" : "SHA-384",
          "content" : "b950a993d22e95a1a86d7b2f4da65da4617c4ea65488113792cb54df944f05fe225a686cb19b9255a49ca048c7562bfd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2fd85348a62ef50c042c69be3d23fb2332637643abbb4be9cee0fb794cbdedc76080bcf08cf7f1f8f4f892bbbf133771"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cd7b701042c7758010974462707d6ecb92fef78603b3150c39216a3f7237cb7f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dae2ff7fcc4fa2046f5a8ca8468c4ec030dafe293340bd0cc84cd814824129446cc4e7a27361d4883982ee6f214a5b745e854af93d54b9d7de48f883608398db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/upickle"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/upickle.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar",
      "group" : "com.lihaoyi",
      "name" : "upickle-core_2.13",
      "version" : "1.2.0",
      "description" : "upickle-core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2f6077d352e3c1d608a85789dc98ee4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6da71e8114b7668bef7fa6b3387a31f64b13e853"
        },
        {
          "alg" : "SHA-256",
          "content" : "503d9d2687053a401f974e902ed095e7534f11f9b06448e03543f72c02f4e6bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe0420c0a789be7d86e5c29ce8f49054959b7b2997ab5bb0f5b342e148ab46ec11fdcc924e399122d01a998a709c280793fb5f0eeb6c6b03df41c0aae3999338"
        },
        {
          "alg" : "SHA-384",
          "content" : "23b4a46a4ea8e2d75de20f231164ffb4e7ed060d2aea1202a737ce38c9bdbca3a8780e9cf224f7ebe032d9101de6f06f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c9f0ea02b7736591218e90cdadf5faec2df2f5ada590fec3668c5f1d50cdb08583f0b3518c5bc7dc8a0e29e0ece07b78"
        },
        {
          "alg" : "SHA3-256",
          "content" : "215503d8a54b0b3f568544a49ee8bd733142eb9b9421ec19b64b16e8ec8a1802"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d6ee8b4b7422169fb002b652150de34cca7dc52dc2eb266f6eddcf3564a31958386f953b0d316b271dde4b6ad48b8127470d5e7d702147d400e269faf6ce1c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/upickle"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/upickle.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar",
      "group" : "com.lihaoyi",
      "name" : "geny_2.13",
      "version" : "0.6.2",
      "description" : "geny",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "468745e3f41ee0377d211099ddcdbd9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4dc065ddd1e7860dde10ca3cd23b0574a412b9e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "26017fa73ec7fa3cd2d44a4f5d3462c58cd6ddebf7d42d40123768edf7dee43c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0f3e20309f7513aefac47f468bdbeb5e98d6c8271686a9d50dd907a8827e7bac0ae79e81cee19ad96f70ffd74e7cec05decb6a98c48816d799bbc2cd0cf781b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3adc818ffdafb5e7f5353f29922c36f079e7c5c2cab5ba11e6ccdc9e74907b60d15f505e4cb42f473013d5c3a6a12d7f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e958cd12d1af2d81c6c5855dc54e31b39dfb7b4ad1f2bfafac5dace024d29264970c93f90e75d1eeefda9ad9409aeec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf874f005f3e5d67d5f4bd075a60f79a8dcd7c228a5af1c14c0ab28810367cf5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b9ac590fc11b33db775c0494182ea9f39457a619996b1169326283367f21228d72307799f8c5e75e4e034ed8f57e4331e9bd052e2f9b591803f3396776e09e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/geny"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/geny.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar",
      "group" : "com.lihaoyi",
      "name" : "upack_2.13",
      "version" : "1.2.0",
      "description" : "upack",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6922e8a65b313a9af56d31f31345fa45"
        },
        {
          "alg" : "SHA-1",
          "content" : "c1e224e9c9b3eed105ded5e102224acf548ddff6"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ed89d975c11ca0c87398f57e29ace72ff00835ba87b504a83c4190d17416c26"
        },
        {
          "alg" : "SHA-512",
          "content" : "be9acc43f29e2fed408b584dfd326c26f023428837c7e4478abd76da1fb57cfcb550ef9d41733df79454910591c15c3daaba3757a92419d0d474cadbc4a11fca"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2b4dbae6ea083747649e0d0984fe599f72ef8897453023a642b1073c96f57ba11103b7ef4faf20e272c49088415e653"
        },
        {
          "alg" : "SHA3-384",
          "content" : "31a26ed9cc75bb8ad0a592849185539da33d438b58ed016f8cdd737d1da954ac8c2ea938ff40ec5b4a62065483dc4997"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83381aef5564d0d74fdecaac1805446336d375144f8c7bc4e16e036fff48c142"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0ca62eaea87ff90128dd2987d78e899628be60f472851bed53c9e39e6aaabbe1cdc59452e008e70837b97bf8d9f2edda21313816529fd04eee2c4183d9689ce4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/upickle"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/upickle.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar",
      "group" : "com.lihaoyi",
      "name" : "upickle-implicits_2.13",
      "version" : "1.2.0",
      "description" : "upickle-implicits",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a780d8970446a81f2e8f8ec967a94908"
        },
        {
          "alg" : "SHA-1",
          "content" : "3113da7c0f648121ff2504532cec1fc9daf726f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "31d16e260f6eae6c4172f430f2c0711f669cd9dff576aadd1370b8bc5472f8d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "12d08ef3c3414013515028c1c766fe8d58991e50d8b4e65cc9616cd5f35a2a360767176f0520e0d216262627ab57612237c3de3b0bee916829ba0a8af722d5bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "d66118927474ec7a0f3618422d086db2756f20c0f69a5cfd2b81ed0618db5e1627969cd9bcad5e7274f1de225af33957"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9dce5d3a28bb7a91f3638fc9df522611470b7cf9388c7c9c8ab8f72cc27ba3adcfade83e82175836054d30de19be9af1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48fc68f98c307ce10ef49dd3d808d315e11e3ac4f0a799aec9759bef127323d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "390defa14f93cd6a461c1a5e8924e1839a524d9ed63daec73bb8c9f45555cb96061754345b3872bfe3882b041dbd15cd39cae1cbcc8fa2e924a02664afa46218"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lihaoyi/upickle"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lihaoyi/upickle.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/mainargs_2.13@0.5.4?type=jar",
      "group" : "com.lihaoyi",
      "name" : "mainargs_2.13",
      "version" : "0.5.4",
      "description" : "Main method argument parser for Scala",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ab0b270e33491fc840084264ef22e85"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ca5909fba7fb8a17018f254c0f71b6188da8c08"
        },
        {
          "alg" : "SHA-256",
          "content" : "f22a85b990fc68747b8caa51394a308c2778e9b230d69a3cdd79bb8bd7d1b562"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d0f9b9a774859c00dc697d82c5be50f5a9bf88e5f81796417b9f02dec9d26e09942dd64c8e4c887d7907fd6bc833b669c61940489763596f7236e704b74dddc"
        },
        {
          "alg" : "SHA-384",
          "content" : "bef5637b5fab36fb060bcc1b8e38855dad724b4a1808ec91bbc1554c0e0d53c1f83406854ddfaca7b693d1e6bac365b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "24547d3086dcce92e97c7a31a575f614d12124a165e4f37d749abe34dcd033165399466527646415511fbf2091ec98a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5557f7117529f3f371e5f7c63eb0e933de48dd680874bf6de574281108fb4aae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ce3031ade4fc2ec99721d25fd4a73c0ab68c33219e4626f8bcf287a886f0a9f92f55c16e4eeea54d877a319a51e817902b6b08f2fd5a6554e618f5083a9ce9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/mainargs_2.13@0.5.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/com-lihaoyi/mainargs"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/com-lihaoyi/mainargs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.8.1?type=jar",
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-collection-compat_2.13",
      "version" : "2.8.1",
      "description" : "scala-collection-compat",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "01bf9804f77f462717c242b01c2df2d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "821a9a36da1ef838fc970c177f372e6fa6bb2281"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b8cc6028dab5813fe751950382499d655fe8777e2c4b07368eaa9d1116e049c"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b09e9d1a867c576b6916af602c8357022f25d0a02d95a97f27da26c612de3fd5426b46cf13bedc5c308a3e3942dfcf0c9d9e470df4e536ec560fe1f0020bd6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ad2cdbd7a39edc8dbb441185da019265bad485c8b2c06f0f312c3469d6920d561288578de8fac0200551ae8c3cba936"
        },
        {
          "alg" : "SHA3-384",
          "content" : "607a67b208cce742e1f7d577fa772458dc08e7981efe7b256d0aba1aae83a2492344ac04c70ad3b792d9e9f60d42a747"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38f6954466b5b290d9bee2a717d1d30d5df358151afb67af59994bb3271f7cb2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5bf61208742c99a3464a6b2ce06054cfaa978982995c7071958c452e7e4028b2a2aefea461e04a90dd1af7e2201cbe1af2e90f384646c12881457f3050fbb27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-collection-compat/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-collection-compat"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar",
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-xml_2.13",
      "version" : "1.3.0",
      "description" : "scala-xml",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17d25d9f015a8616e96cef2cdcc8b50d"
        },
        {
          "alg" : "SHA-1",
          "content" : "1db2b0fb6f454a9d34971b47158ee9dbe85d4eca"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d96d45a7fc6fc7ab69bdbac841b48cf67ab109f048c8db375ae4effae524f39"
        },
        {
          "alg" : "SHA-512",
          "content" : "12366053a1a6c5aaf2942a3bf6bb98dfdf5511eff3d42145973fd6e526adde989205a2ff0d8064dd01cc354e9a633a450f41df81353388ebbb6be0ccc5f5ac6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c5911d7f9ebd3f33253b205268b7a55c5482f7fa4b38e034f3fbcdf401928b1278d2950487f9e47d872f8d82489a2de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e485ec6a3cec915a75a39ff347489236f768df5d7279096e9f9e2fd7f7ff9ddc01f80311b85540bd6c48ff80401e3a42"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb26769d70653ee8460c74737d5d6e497d57236177b4e8e9b61649f59861a102"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0dccaa025dfe107f10b227fd69eda3e9ad96298d4345cefd512f0b0ee191086d0556d97b67a8707eb7172f716a61940e0be935e0d0963645f9867744cc877a2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar",
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parallel-collections_2.13",
      "version" : "1.0.0",
      "description" : "scala-parallel-collections",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0376375d562ac40d0f998540f82ba1dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "8753206c4604c6c8d58e1229cfc01553ff681404"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc08be49e91db44d7fe5c1ff95a322ad4500805a525cc2c4b1b91693f041c8e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "afc50520869e2e51adacf211a759f7ecdfc62a2645e1689d264c7bc9d2a89a72944c84028e77abb50f344f0399937bebe507d5e476004610e7cfdd1191537ca8"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f196ddf2874837b052de0b4c554da94baa6cea12d2e7fa7bb8938905505e938616379023036df671df1fed36598d9e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f2fe28b9634292c8e22bfc54fb836cc2fb9af1818eb77e90be69c7e6be710e14bbc48929d00f905a0ce00f2934af1fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "532fd6bc8a3928926294ef6c71cd838349013a1b270e34c651376a117f5ca60e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3003d7dd84457f8d058cf57f48308bc373fe2c0bc34ec2f092ff4fe1a9c07dc100777671248b69c8123d77bcc766f1f68cde47de49720361f3917bfd06ea6f50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parallel-collections/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parallel-collections"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-js/scalajs-stubs_2.13@1.0.0?type=jar",
      "publisher" : "org.scala-js",
      "group" : "org.scala-js",
      "name" : "scalajs-stubs_2.13",
      "version" : "1.0.0",
      "description" : "scalajs-stubs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fff252e1608b19443a6df54e98a71a4d"
        },
        {
          "alg" : "SHA-1",
          "content" : "617745e4ec29fa8606178cd726dd569c13c7e641"
        },
        {
          "alg" : "SHA-256",
          "content" : "60a58e75030081111da2e96e70140e6e370f2d1db7a353fe065b62eb757f82e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "35afbe3c84c0533e33c24339b81aa683900caa13a82bbbd1d54b61a61d018c78decc18011a2daaf8873925f635f31c60bb1e8bbd5ed978682839fd55dec11b00"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f122be84cf930f8c48e2ed8c40f46faf48fea9494ed8a6f78d8e6f41019e34cd5fc1ea25d9889ef1fcbf3f42d131798"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3c391a83cb8f36d3dd954415e7214abd2a67e32cc32fb830529e8c8532a31565ac8e99a4b630ac1008bbd79d60aac0c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e342e1462d33bb663ccbd711788f0a1f9c47ba37cd5eab5a93d7f074fc8305b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b712c2c099c81e421662f469dd67e257e62f5b9e334586a51dd894e0482ef0a99b3590779ef9599bc788edaa383d6bd97f9d1e6b1aa6d81f4bbe822787ff35e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD New",
            "url" : "https://github.com/scala-js/scala-js-stubs/blob/master/LICENSE"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-js/scalajs-stubs_2.13@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-js.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala-js/scala-js-stubs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/vf-parser@1.1.0?type=jar",
      "group" : "io.github.apex-dev-tools",
      "name" : "vf-parser",
      "version" : "1.1.0",
      "description" : "Salesforce Visualforce parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e69d0db133abb22891ae3912538bda47"
        },
        {
          "alg" : "SHA-1",
          "content" : "16a0df062956df451d0781bd737bfea3866b8c1a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9515efe1c7f81c205d01f508c82f432a72735d132fc6bb5a1ebd954d9f881457"
        },
        {
          "alg" : "SHA-512",
          "content" : "404e98f6202a6b3d3e14e05c1a29a894235027649121d9f809d3a8ddc90c38d110289e95f0789ada38b6828258f719dd90f34a4d84eee3c5bb948e3db7ec5486"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0628cfe61a2b8231523b3cc8a5e5b336bc4592b0daf05decf971c824ec18eca7644a8cf51d4e6c4b0e74b8d97c709a6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cce6123469239257c6146865fe4ff7852d0abde93ff0487db2481167caf3f6c10dc0672345d0d301babf4f90857796e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb242a45a677f85755373b56efb20e52d638c4cf39c836c97494001780cddbcd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4158738193cbd5e9841fa9f756921e2c1720b8598101a18187d4dd00e8749f00519e16e1d176f358efd92cc6605c87800b760a3a77512bb1b8b11fe0e5405d7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/vf-parser@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/vf-parser"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/apex-dev-tools/vf-parser.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/sobject-types@65.0.0?type=jar",
      "group" : "io.github.apex-dev-tools",
      "name" : "sobject-types",
      "version" : "65.0.0",
      "description" : "Salesforce SObject type stubs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16dea7276e39e4b71e3fdd733143ef62"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b7a3acc62bdcbb2be0c2cb276dbc4a4af2cece9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd0dbe2c21c30d9a691c7a319a297572fe1bbc8b24d5f6a1fca4ae8b9a171131"
        },
        {
          "alg" : "SHA-512",
          "content" : "c53586de3cf273e3cf087b538c11c3ab9225b751167f55f6716f5ed99f803fc057c41afdc800f03d96a6f2ff94d0731ed2384a9234946c660cc53a8c47a60548"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ca67ac8c4ea638300e341fe2566af7d5d8c0fe0dd4e93f527d8f645cbdaa30f1f14fe7e03867d0e162fcfe1ca701f2b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9078f0b7e14fa2ee9fd2606e355bc47aa680e1e157a7efd8a596ef1cfe23db1599409a24f874c5540b4114353bf4ea3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97ea168576408ccf98d445425ba85f655b20add670978d921059c1bf2a756fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2834d8df82993a791c2be6e30cedb6771b857f513ad98a9c196cc5c33ff6f54a46b5790d1a7524fb7a17397a9081dd652b3ea29bd64d4f18facfab4fc083d6de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/sobject-types@65.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/sobject-types"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/apex-dev-tools/sobject-types.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.apex-dev-tools/standard-types@65.0.0?type=jar",
      "group" : "io.github.apex-dev-tools",
      "name" : "standard-types",
      "version" : "65.0.0",
      "description" : "Salesforce platform type stubs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb3ae7827c556fbebd3381d02bf58dee"
        },
        {
          "alg" : "SHA-1",
          "content" : "c26b3ad48a776ef7742201cb493f39baa3ea8aa9"
        },
        {
          "alg" : "SHA-256",
          "content" : "69598d1fc34eea6701ba0b4a89f6bd3d9b91d3786b790d63552bad49ad7d60d2"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a5623bcd2b21e69214d19f44f6c6b3925efcf97edba9e2bc603a2e1b6a938702bf73c6b1c30c3a64226c25e290350bb05b8ba534069fb3de6357f1e4cd70396"
        },
        {
          "alg" : "SHA-384",
          "content" : "e7bd1cd14574991f55edb5c1f9763529ed8e64b55e2c94126343fdf5cb6fc8caa5322234cdd5bde46b0cc4c9031ccd97"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41515ce23156a30614f8f331ebde3c9a399be9375380170625d1b4b5c0d767fccd7e54e9c0a04f02d75b60e9ffcaae8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ca51b253b2aee514af04d38634f2b5440631f7737096ef3a7e6e44b5fde52bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "daf88125d36421edbb95657b085dda970e0b3a1b9bcb3a82521ba9a7260fee776767fd018aeeff81fa251a9a0c3fbefb35d166238cc3ae79ed09c10fa81a9cdb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.apex-dev-tools/standard-types@65.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/apex-dev-tools/standard-types"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/apex-dev-tools/standard-types.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.methvin/directory-watcher-better-files_2.13@0.18.0?type=jar",
      "publisher" : "io.methvin",
      "group" : "io.methvin",
      "name" : "directory-watcher-better-files_2.13",
      "version" : "0.18.0",
      "description" : "directory-watcher-better-files",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11be6a1d9dcb680696021b19a5b86cab"
        },
        {
          "alg" : "SHA-1",
          "content" : "f61851c5ffe5dacb7db95dc8a9a060c8bf45a537"
        },
        {
          "alg" : "SHA-256",
          "content" : "839d3d970babacb606bb2f2e8461c2d7c40f6e36920753c41bf9561ba638d128"
        },
        {
          "alg" : "SHA-512",
          "content" : "436739d9a5997c4a3d4ad3397fdde3a67d790ed137aa14e4cccc71af522b1c8846ce85cbab2214aabd2a60472d30d48e1bd032a0e94b71d59c31a4de2e2d2fc3"
        },
        {
          "alg" : "SHA-384",
          "content" : "25e945c4596ae6cb04edc64dbc4acb98bdfb148f6425010ca41c4348a2202268183c6b7ee53d7d7825f97c50574ad9fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be709a1f64def1ca0a6cbc803059529ea129ae6849366f4ba48617d2129cfe5f42912a550a004c94b87b7f3dc10158ce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fbd5ec4882d2ac839eb1921565fa50ef0881739ee8cdc94f03c327816a82fbe1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "95a919b08e6174d152ef066afaaa56efd4752b343919656780806dda718600bd7492af2ccf9bc2407dd5ffe1076fd43cc6c25a6e9b7fffba5c22b702daf30527"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.methvin/directory-watcher-better-files_2.13@0.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/gmethvin/directory-watcher"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/gmethvin/directory-watcher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.methvin/directory-watcher@0.18.0?type=jar",
      "publisher" : "io.methvin",
      "group" : "io.methvin",
      "name" : "directory-watcher",
      "version" : "0.18.0",
      "description" : "directory-watcher",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a03edff769978791e5f51c81da37c0c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "516117adce1b3c41b2d7a086f38b2fb36cc9f2cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "18f67869b0d31d39512623226220abeedd6bde486d5599e6256eab7975110754"
        },
        {
          "alg" : "SHA-512",
          "content" : "5375083f5e5fa2b66898f7bfd365486dd93839c2a528045534aff22e225f99bb4a9c4d110c2d3eb6a18f96f30d25a51aa71654ecc4a94a50d9a7b63bee102beb"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6cdb3aca63ed6310bd53b637f9e90a455426c85136dda1a8589fc2bef6f2bd830ecfc7bfda72f63f4994a26299bc0c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10d9c4429d8a9779b5f5d6c9658d935f6996f46c72171a29f28504d87df4244bcf248a76d204a6f42e0575dbca20110c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "afa110aa05a604a7da95ba3953ca1a7ed711f712e7d9a4523974914e0fe78c0e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ed1f95bf835c31ac2898e8063d9436883a5384f27bbfaa0123932fdbfe5aef42395a6386fd3459f7d906a9954a66ab74658b1816dee7a372a531e83cf3281e2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.methvin/directory-watcher@0.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/gmethvin/directory-watcher"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/gmethvin/directory-watcher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.12.1",
      "description" : "Java Native Access",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bab13d7f5ca715013fcac64ceb4108d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1e93a735caea94f503e95e6fe79bf9cdc1e985d"
        },
        {
          "alg" : "SHA-256",
          "content" : "91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837"
        },
        {
          "alg" : "SHA-384",
          "content" : "5bd86a58007a752b1ef3f599a54546fda70267442f6c202548cf41fea7bc352bcd6747391be70f261f48a3d5334f99de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43c58428512271295ecdf158d6951d6d86b8758072e81dd9ccda26ad59b81e8194c9c9ca8a2a6d748f69139927a92124"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6125a65ff81d5af3118d3a1d95fc421aa0ac612f019099efcc1dec9ca614adfa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d073a2181db5026b0ceb22fbba41c9b84509aa0c5841a4d5f14ac1978bc5b4488c85246ec524d1372f42c7fe7ebf741c1256836cc247d3c4bb446c762549944f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-or-later",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/java-native-access/jna"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.pathikrit/better-files_2.13@3.9.2?type=jar",
      "publisher" : "com.github.pathikrit",
      "group" : "com.github.pathikrit",
      "name" : "better-files_2.13",
      "version" : "3.9.2",
      "description" : "Simple, safe and intuitive I/O in Scala",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f900bb8833dc166071a2f39007eb07a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "dcfa32873c38986c3aa86f66a833123d69c64558"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba44cdde78320ea3800a8e99b5b3d0f3fc3bab0a9e9962c653b016d06e396022"
        },
        {
          "alg" : "SHA-512",
          "content" : "584616af689bb54657fc9947e246f2580c72f14ef42cf6a3044186107344ed764b12d5a9fb086d33bd7153bc37d883a13fbaee02aefca329ef7589fcea5d4802"
        },
        {
          "alg" : "SHA-384",
          "content" : "b511db7721e0d47c6cc5c499c03c80c097b8f73ec8ac59c3a65a62d6c840b1befa4455db22d6be2613b19f3ad0ec4fa5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a68414c4764b2a425ed113aafe10c06a9fccceff632813804dd570802f1d4143fcbfebc4ccc8fe92fc502174e1ea7cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a8f0fd7b5a2345fb26687c02cf64679ea6644a68013f5e81b22ae922c94f2c7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "128a43544bfc4c2af6e4121c4a54ff10d52e251ed976d846127df580b2085802f7b850c429b63a1126d9b080c4838579f50cfdc24b3e859dc61596d7f1cfc0a2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.pathikrit/better-files_2.13@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/pathikrit/better-files"
        },
        {
          "type" : "vcs",
          "url" : "https://x-access-token@github.com/pathikrit/better-files"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-coco@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-coco",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ba8c1c010bc23e88594b013d5484ba4"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa6036035f2ad373c7e185da926980bfaaec630c"
        },
        {
          "alg" : "SHA-256",
          "content" : "111a727ff0dc156879f8b5be2abf9db6ee6051dd365b201851bfb032f4a72d0d"
        },
        {
          "alg" : "SHA-512",
          "content" : "935f0dc0f34b2dde1b1217a3f58249181408bbf13239afca482264765e987d0900c806b9017aca0d64308f0c80cc4996a462a128ed59d73ae8b750185f45fe36"
        },
        {
          "alg" : "SHA-384",
          "content" : "39cc139bbb54ca2d0d04a0f50dc460f22da1b5408ed1092bd6a1e34f360c7f179cf5957263c34b32bb1196d1a3012f4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7485937c654afd7291e30b0c9772616236daa3d8e5305f131f6251c84402a4022cb0894c74e0ad6f1bb6720a4d2c675e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f3a92353d9b508778c336a95d6ac5a6a29ce9588819825d5245e4c01647da0d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f51363c159cbe6d564f3c89d97d291d7f9dbf88b72c09c6e82d38c334bd7d0b84d84e03fd04da28911922295ebe47162714b16382adde66231e367cdcaaed097"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-coco@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-coco/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-coco"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-cpp@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-cpp",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f1e9a06d7057812f153aee1019f105f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1c3a9f5ea628a149256f7aca6b46b30d6020e6a"
        },
        {
          "alg" : "SHA-256",
          "content" : "adae6ccd680dc053e3db5b2383da2222caf0e01e46c7ee55e271134fe45c829a"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ee8afba444464e223160837ab91c15c02d78852e7e055e6c9ccd69afd4eb66996fd2f32959f9598f9ab9424c684b57b4ab0fa503f771fabe965b84a6e5be018"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb01eab402fd8e4c0b7a04dd4e089bf566390d599fb39b25d61e7dc20c914b06ddebf526e5203391de0379a3164c977e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "930c6a49e2213e3a688237fa0135b7fa82f02af24f303f7a10e89539d0333ad5ec35a328eb9a892efce91425b46b6b8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "16714fabd95ee752a2c138f8bdd349aef4838e5267fa9955f11230ba93a3810e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8834a1caa81bc84b39e98360dc9061b093f402de1757989d2dca7abb36a8df2623cd86b687a50fb07cf254dc87f05fa30fab9c70a6c217a123f6e670f3b139e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-cpp@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-cpp/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-cpp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-cs@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-cs",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d27169afc0289f4cedfbc2bdecd732a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "1df463dac8470e3f4be2e51ff6bcc721c9aa4be5"
        },
        {
          "alg" : "SHA-256",
          "content" : "766cd4531009c50d51202c7e1da92433b4cfa65d1a88b3f25121dd1d2527e981"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd7e7002660e45d5eef268f7e5602286632d2ff1f8d633f9d1e78c6c9a6dc44b2bb2ed48534fe0b4f7ac19e0b0cce697f100b755cac499c8516c7b0c83199582"
        },
        {
          "alg" : "SHA-384",
          "content" : "69880f360c16c70aa73956047e73aebdbf1899a7cb27c4a14b53c499eebcbd66c37bba38545d2276129dae2110756485"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c136f3d78d99e49f6d2d40cc7de25c9072d5a3f31991350ce6dcfc71e360e4661fd9c5076c295b6902787ab5d56e26c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa502c940bfbbd0a6e9c8ab43eb69cf027f5787da1bfd80784010461061c006c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34d648d817a9ed0c82e3db5dd17eab6d0977905d7d85c56c269ffa6bb09136f6b54895b07b115da0ac3ed39f75084bdbfa2b11490e6dcda475616bfc6536585c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-cs@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-cs/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-cs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-css@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-css",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "500c5f690bae2b88a30d0517e68ef89f"
        },
        {
          "alg" : "SHA-1",
          "content" : "7618becc4c76299b01d3518db4e46c8b141b6683"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae7a827e949a509686ec4c96d4d5db67a4b920f940581a09c0e96f7dabc7acda"
        },
        {
          "alg" : "SHA-512",
          "content" : "22d16f62d57f902d525b50c5f3643f1b87969c51c8143b8f5b22b6f90dd073430e2fdfdc401b10858e33971e8f5ae4bce8c7cf5b8ed185084c739580df116598"
        },
        {
          "alg" : "SHA-384",
          "content" : "74717183efd9126b0b8f65fe9060a5384bbf96ce2342d03acef6b91503d4c57cdd8ccc6b9d31a86506fa1e7de3620883"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c16824721683938a593735e7b8cf4923eba9c22488d618fd2a34db5d0bab80f78c3bd729fa6012a86b9cf985b020e962"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d06332a9b08f0afd68f924354fe7e275f7c5745836509e77bb066d8697b82fdb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9b2bdf8784073e729d03e47f50b7333d685e7f49c562c498bc52ca76d7f9a9d63396f6e9536b8f47de6792bc8a9305f8908814c4b61e21779fe53cd9e2191302"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-css@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-css/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-css"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-dart@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-dart",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f784d8ba5c8ae8169c20ca2cd4e2cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b239432d79d867d27b8345c7bd9cbb6ac424747"
        },
        {
          "alg" : "SHA-256",
          "content" : "1867799e352d84c4644e4c72c6899fee1684bb3400272264c7f695917f367d47"
        },
        {
          "alg" : "SHA-512",
          "content" : "406e697e6fb5d3130f91770157e3c40071810c2fd5203fb4ecd0f336082c0d732c322c763865485683adacc07e79fdb50dd3d795e6a44f074b2c6e2d056fe3b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7cc956bbaf885fc7cf7b4603000ef41b9677dbfe05c5e3548ab3cf5b5a783f2d36d9732a9971059968fe5fec537ffcc9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "18c4535bbbe7e307977092d7f414a809f66bf80c1e05944db89591f82100c9711b96edeab7425a8d016d34a42cc2f602"
        },
        {
          "alg" : "SHA3-256",
          "content" : "16e1210246c802335ae4b912fcf944dc0db094bb4d71762c124a9799f88458e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94ccbe505c1190e47eb6bec99c1891cd077b6c1109a6596e3d3886130f9fa6fe1771381ce98e25d5d1fad6ca88fabefce47809bbab28b45636d1db789873cca6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-dart@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-dart/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-dart"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-fortran@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-fortran",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67dfafb87a45a44a4ac75439464dcf98"
        },
        {
          "alg" : "SHA-1",
          "content" : "076dcf42af65d01d81f2e2bee158582835dc7a5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "20416f7aac116ee7ba964c0f6d01a1c0a5924291348f38161aa0e9fcb5caffcc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee492307cad005fb96724ec092eef4c3fe83842d05b3414bdf1577f4ebcf74263500a7c30c79fc436bb843c189e59e81d3fdce7b239e11a85ba9253ba21618af"
        },
        {
          "alg" : "SHA-384",
          "content" : "97b30b7f5ef588f059afa0637b0389fcef28a43d287ab88028ba38b397ac5db7af4fbf18d89cc430a493481d5b7e14b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3b46edc6c85300936f7c27cc27b282d365f39f987968e699bac146072168ccb01ca40a1c2147fb5d5ba016cc57fb036"
        },
        {
          "alg" : "SHA3-256",
          "content" : "116c072b60f9050d855808d5efbd935bf20753dbae36957fe7e62d92b934b3df"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6dd3df3ee4d69c3376a41f285780ad8f7e440bccd871dfee433d7b06c9c46388ad70fb21d0130edf20100af18e3c723782187cb96a8ff66f3c70b87032e0ae2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-fortran@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-fortran/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-fortran"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-gherkin",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a75ded95c934df84930927f8217e3ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "190c162c5031a7f0c625429acc15a7c7f06e7ee1"
        },
        {
          "alg" : "SHA-256",
          "content" : "6bc70934e1a4f95bb0b6fd7eb3a0e5d07a548d4b139cfb8258b718cc604ec5d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "615bcbea9c9b1cf0d5127f47f678f07496e6152cb1b3f2e9875ae022706bb7e807f3568143d591ae6f8b542cf683af21d9a45fff6f3b4590e2378b713065a03b"
        },
        {
          "alg" : "SHA-384",
          "content" : "806bc92d71fa0404b47e78bd7994d0ca532f9629f1d62463c0e71121f1f136747d117db7c105c36ea6540edafd540dee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "78b3d96b37a77aafff38885229e67e2407949271e7e65b193d0de5fb418c43345000f0ffba7fef1e271d6e8dbec80476"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83efea19b57f24a6d72c8d074882f1d5caffe87c43156b8db43fd8589fed43a6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6457af798041e433bcafe39dd5ce1544ad897b90c8931633fc257ffb15180bd392680199a35e7b81b153b8688f462d33c066494693d4a859fae1d2d3677ede3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-gherkin/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-gherkin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-go@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-go",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "45a9c263c6e3d0295733a4e0138ec569"
        },
        {
          "alg" : "SHA-1",
          "content" : "36141b87104b1f39ebf17b1fae78a5ab1cf3bd48"
        },
        {
          "alg" : "SHA-256",
          "content" : "348ba31640c0297a2fa90a70d70474f2b85724bd92ed6c95e5b0db2ac20cab24"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8af5b42e6a3fb219f67f63d13f619464e024201aff6e6026190e0e3cd308c27cd52a4104f684b21ef308de9ecbfd18e5bf7a166dbeb71fa64e1d6b76929054d"
        },
        {
          "alg" : "SHA-384",
          "content" : "029af784a50cf439793c9d27dd301c0301258b40777c0d9c17d104864f2bc4299c8b372723d55332825c0d41c9446d9e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "060e17896c70f149643ef20b61b302f52026b63cc5e675977c16ea4a3fbe5b3af167b6127fe5e4a7a0e44a5cd266765c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "82c9c0aaef3e81008a59b8e9dcdef4fea0abd6035a6357cb21990e0c016958de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3432b14a875aafca5c3d547e09106e482f5e5e2205877d692bced4a38f2a20799bc2ee50c790092bd37a8d65d9f4ebbcdc417253010d3bd36439fe63fa7aa169"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-go@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-go/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-go"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-groovy@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-groovy",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a54f0ec939db9825330a34fd8b1ae1ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c04b4d034d4c1d69eaf6f5e44b81fab588c58c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "27e1609e0d735b3864f5c5c61fdf540144d80ade06e5e357b86c73aa2bb11fe1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b52707996da172c28589b4f67a8306f0dce2c34618bc0a2178e05f9f5341719ad8c96dd93b309987fff88346d14931fc2180e0d432fcb7608160e94d54aa5da8"
        },
        {
          "alg" : "SHA-384",
          "content" : "016ffd738cc47324010926f2b363ac31293decfb667c55f3f55c116192d5f6390ec67b00bdfc1675f00ba01c564b956f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a959abbb98425c5d60542f5ada92f2d5182cec637295c8dbada89a24db4962f787d8bd93817a1efceec507950e7e937"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf66d026dcc1f9435cae3a9710a5b4548f4a1ce61a8d3ef6cc80f3b13ae18398"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08330b589e12da086637962b753db1c543a6385d8d7d10826c769fe5663ead1628e877b0068888166740132a4e2650bb3aafd39de3c0f153f97a53c2b3dc58f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-groovy@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-groovy/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-groovy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.groovy/groovy@5.0.4?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.groovy",
      "name" : "groovy",
      "version" : "5.0.4",
      "description" : "Groovy: A powerful multi-faceted language for the JVM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "85304f9c050c45c392870405d8a1db32"
        },
        {
          "alg" : "SHA-1",
          "content" : "624fd80e3b6234c89730901afffe9225c87f2535"
        },
        {
          "alg" : "SHA-256",
          "content" : "35d6e6a658ebf549c736c06fbaf370521a3a72e3a044f6a868b33a0844d40d6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b2c63dc945d39967230b0052b236c4ee77ebae52720b4c114b069d40db1d1bb348b4bb3e06c6821ee6f469c4f87ca211a8b74318f7c8b007b3f9b4095a8b2165"
        },
        {
          "alg" : "SHA-384",
          "content" : "581bcae097bdc5fc033d18694348382c867c674f2c1f2a650d41de3172232fad05e2ee2c856ca924fd4aee9eddbf0f86"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4362857ee469229b94b8a166c092909147ea4e7f48fcce2eb2dc78b91a3e176b9e1fa962ac1e8df29415ba97383cc3f0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a3035d0d3620231854d70c55ff7dd1f22359fbcb37000cd99455c764b2e0d73d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e80c46797e66e68978d35b9a1f7ba7b2c546a4322eab5550d4058e11b18b43950d9e6805c5c5fd5160c23947e4855b96bfa00cf89e91179b21783cb3e7502e82"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.groovy/groovy@5.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://groovy-lang.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GROOVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/groovy-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/groovy.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-html@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-html",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42aa0f78aa2ec25f0d4661ba87117f2b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ceb63ef1fefc8accf10fc9a582f85550415e5227"
        },
        {
          "alg" : "SHA-256",
          "content" : "e14f48082d46938747b9f133aebe020c7a032cf710fdf037bbb45710a3d8b0c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "54af1e678d45744d9b0b2f3207819d75e3f5ef90011ab5115542b06f556ddffc57721c840294d256b73c1196d2c6df8df50ca755f88106cb7238595bf57526ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9dfb747ac4a5f41a75f355b61d7d5ea861c6f803725d607f5c02bbc55f5815d280b9512a84930bf16d23f6f037ccca0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5940c0147b3eb252d334b9408598738e3aa613857dd21614723103e735375dad1a59d85f3fe0f6dce3211e545e211d2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d64cf67044ea6180cb77971a663bef30dbdb5acb6b1ba22e4e56321b8d46cefc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "750bbf6e7d19bbfa0a38ce7b060124250070190a0a5fe96623d0a56cf9025fc818de477a835278d7accecf5bd8ccd75942b518683dc070ad797dde586e58ec5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-html@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-html/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-html"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jsoup/jsoup@1.22.1?type=jar",
      "publisher" : "Jonathan Hedley",
      "group" : "org.jsoup",
      "name" : "jsoup",
      "version" : "1.22.1",
      "description" : "jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL fetching, data parsing, extraction, and manipulation using DOM API methods, CSS, and xpath selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "650c793f2362dd13d13355e558ea56f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "9085290f1032d8bdd4ab0a279d176a4bd9e282ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "cfd3298d8720cddfb0545109ccc6ea0ef39eff7e9c40a10ad95c93a65f01c916"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f229021019146af5fc1e40edd05c96b93cf4eb9e2de11a6b7055849b9480c6abb7b416c0a8974cac3500c9147f00735f4684ee7f891b756f2fed0c76aa219c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "802f0a54c3dfd28a650294d46b8a5465dc49f612120df577692165929c4c882c2a14d63d8719b8c548e94b9db8f53c43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d507f06b71326c8b3c816a16e455eaf58064e5cc8a7aa7f96e2afd3c7c16f2b8bd09a1e6cee01b35205e06f297f4d0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8f9d02210dadc51729e6e6a32df4df12555aafda0360e3e375b85b8ce82286b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4a60595c059d689932eb9762126c1feab11f2dcf226df6b3988732fc726cba2f46be809be30338c5b5508d67253eb237dec79c52c82c01a5a8f57199c90f175"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.jsoup/jsoup@1.22.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jsoup.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jhy/jsoup/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jhy/jsoup"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-java",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ef8f3005ec810af1284936cef8dfdef"
        },
        {
          "alg" : "SHA-1",
          "content" : "265b2b01a0579f7a35f56b2f325d1ed455ca9005"
        },
        {
          "alg" : "SHA-256",
          "content" : "30dac24b602a17f008f6846361583755b93652afa8aea5130be1da80a86b12d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "4462dd7d71b4b8bd2a2f7c1c040cea594b50d2ef67b9548dbc77208b429f206d100b8da3de3325eded62deadff8ff2ba269f0c71d509fbc91775826d23309316"
        },
        {
          "alg" : "SHA-384",
          "content" : "e75f63a8b15c853edd2cab026a7e15f782dc58eec0d5fc9744fca699926bc5c6c4926689cbbcf2c2d16e532615f1c0e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb99ae3d185947a49d8509810b88fbe3a8afb42eab5eab7f20b16dd10c58494d57b697042d46d99fea224b8f025839c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "683208dcaf88138c17116179e8ec2b2e01d5f03172b2f6c9f6fe58dce3e2e053"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c76aba0237fe4ecf0b9d02be9e2345c483a32f8b8940ea608321d1df0c56bdca90ec8b8c3cadedc1a5f4bfc1a792d5433146e9e342c236f68480b21eba3aa172"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-java/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-javascript",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "688a216d67797eb279fa178b0a9d7aba"
        },
        {
          "alg" : "SHA-1",
          "content" : "3bd874fb7100f6d61a2df34b13bb3339bbfe3217"
        },
        {
          "alg" : "SHA-256",
          "content" : "bee90d208906b8dfef026a3cdc5510256bd4a9e4d0e38261bd4ac0bd155da978"
        },
        {
          "alg" : "SHA-512",
          "content" : "e4b319db24360a54a5f55e36c851426f3bc2503d9fd728fa12024ded5b45419210e5a7e756109bb8a3ea2898bc954eefc064b833d4308b79b889f9f26c9b4d3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "b071538a43c6670fbe7708b5fd9c7434ae750db7e43c81bb2554c13daa4efe4991ebb64ac18eac1689cfab8aa78e772e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "54e55dd6357c3a0c966d74252cee1143ae31b96b30a9870f660560f17ae878d113f460386a26e39a7207902d50aa00c5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5021cc2bd778c03684c15da534652aedbe123004af72d27c7d1e4bea5f775bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9e9cb1e9ac54b75864745c6ca3f4d99e9cc67c6c741c077b04e11423069ae0d866e21a450a986e20157b2620312e9f0a23ab9bd3f6c3a20993a63d1f307e332"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-javascript/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-javascript"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mozilla/rhino@1.7.15.1?type=jar",
      "publisher" : "The Mozilla Foundation",
      "group" : "org.mozilla",
      "name" : "rhino",
      "version" : "1.7.15.1",
      "description" : "Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users. Full jar including tools, excluding the JSR-223 Script Engine wrapper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6822da3c8793ba0e31e3991a86c3b2e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "19e9dc99dc138dbde2f1ae8a142250d9be9ceb2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3520a0e2e22d550f1216a456be233eb5385bf08e3219407dece7a16369eb38f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d50d0059226277cfc283209cb7ba385c3bf48317b5f63fac0291ac1c248d6870b9eea1d83bc3d2a0e127db4973890f5dc4f51e364b58510c1b815a4f61e389d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b25bfba69e8232d028a6969264f87432072d7924aae976da38385ceb5dd93b6d99883490e7b54b6b16d9fc254fd9c2b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e175760509ec7ea23ad73d8d889cf4552051d2fe2d7fb434a0302a41121ed3ad633af21addf426499b93e66634c82b6f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a365c33c9e7df0cb092fe765f1892fce02be53f4d60d113f537b806a6ffc1c19"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8c38925b80017ff10e965886c3bb2988bf5e3cfa63227d9faf844ccb446bcbb7f53c29d983c5f4f3843291d58c7a4c0bd3d830d618da3601bc7726ea78feac2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mozilla/rhino@1.7.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://mozilla.github.io/rhino/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-jsp",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1979993d80ebdd5cdcb66237f508a469"
        },
        {
          "alg" : "SHA-1",
          "content" : "f2d9467fbfd328f0ae3b49c25b3ddc51f90c791f"
        },
        {
          "alg" : "SHA-256",
          "content" : "060e3ff0c3f1a4c0b9c279059cf185aca523eeb774b8c1d078dfbb62501630c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "97f96359e4a975c392de99c753212896fc01e38839abbaa56ca3e7ce3952de78c0a380cc8bf4ce82dcb4eb36cc1e9e580762c0092d54cde6b1b1728b4c6f2a08"
        },
        {
          "alg" : "SHA-384",
          "content" : "26ac063d85ab04fd54915ecf5136dbbbb5b3c533579440781f2ad868080c01f4eb71ddd6c4aad0dfd785ce97a37e267a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07db4c432183604bfde199b3f76a0f0428f3ed2fb463ef66f9b08fcff5967ec2fffe6118c7563681c44da3dbeb925f5a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39eb13b5a7e510abe524135db9559f0db2a221198cb2c6011c8a32b7f2992ce7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3e9f5840762ba94c7e31a857bc13108c615b26f1fe1afeac087e480fe3ec0a2da996754e4ba2433fa8a0ef94d0a3cb87d107468a1bd4e97b202a8c5785956f33"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-jsp/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-jsp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-julia@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-julia",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a51136e87422054cbfc9c7f669cfadf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cc5f846b260df1915d717429bb4dc5f626ce7ab5"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f9b8bda36da57eeed1232174283db3883f1cffeaded838aa0654b9318850273"
        },
        {
          "alg" : "SHA-512",
          "content" : "b97c2eb784c70a7835c1b303fecf9ed814eb08d35e4f5eea35bb3a21d82db466bdcb9621dfed4aee27654ddfc57f86fb8d70a2b26df2f033c26223e0ce514879"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc007a0be26e7a9e5b75ee232e0299ce01c5eeffb267245c7983f9321ab992954793ec87561834789b01360d240f0b74"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e476d43e042dbe7d9eea266404b816dd59157fa5b71944b9a489e03711f50c80218d8472076122f7a8a82ec282bf7195"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3cf3ffd4a5278b599c129ae4bdcd2aff8a06c5a1eeefbfa3672fa184fcad10ec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d435024e88a92670c6c870702178640d0b1c36639c27455833215f974c45ec3dd650fabe43c83a1aa113ec2cf64b96c7715b45748150237167e45874e930e3b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-julia@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-julia/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-julia"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-kotlin",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f66278600ceb25290fdd28fa3f138d74"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7cb4c2efd8d3a5c01f93505202b7bfb948fc17e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0dba57a60b0f0047c6e41aa3fc316a57d38ac4971185588046797987ce6d9c03"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b8bb68a7d83fd29c3d1fb8f533c92b4bf818c02f8ac69033df2c016f6872db773beee218f2305991377ce1df79cab23813fe2db47d76d8f20af97dde8948011"
        },
        {
          "alg" : "SHA-384",
          "content" : "69e03cd22deac3de9c6417f1c421c0753bce132a2f200f3c24af3d48a0f3c7cb1daaebd507e2705fb0e628a780e41210"
        },
        {
          "alg" : "SHA3-384",
          "content" : "398c31c0440f6ac16284d39b82182b44ad72daa0a845f3c77720eb5ff9003e012c792e6ec7a3c92b9b048cfeb5c2b003"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b54065087e5e83e088c900c33df7c609fc433b83695f7bf4532d7d190e520bd6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd9f801183d8e0d9090ecc3f0f04b2f8bb38c09836468ac664b409e2f4ab3923d15592196024060e0d721ab645d237cd0465ae9be79818b00cca9d849ee1f9e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-kotlin/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-kotlin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-lua@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-lua",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8928490a9af56e7a35b1539f251088c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "910c57344198753c386b90d1b46d162e08f49fab"
        },
        {
          "alg" : "SHA-256",
          "content" : "76d6d484ec385186b7e9b144236b3ba5ca38dedd586440c434dea4e9fb4c4320"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c5d749c337329dd3dcd7cfd0038bf21195086a8ad52154099301c4689dcb15b0e7f0a5b9b122cd4d1018f6db07fffa3a549418a04b499d12fcfe14a65646035"
        },
        {
          "alg" : "SHA-384",
          "content" : "7df8d334824541b2f63d7ce9eeb394807c1f35a2bf373d501507bddadcc881ac4b68784d08a6b8baec956572ec8d1ee6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f1d85247c9619f653417721387329ce58fec0dc302d734e2331885353586a681690212d3df30287b3666b2179c05bd0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dc8428df3aedb4c714a7e67eddc76b8999a7a7697549ddc83b2f790ac3376e40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9dc5e506b9f36cfe80b28b055ecb378a55c9e346f0b3e73cb741de6ee6ffabd24902adbf661a4c80a151dc8ef3a3e2d96fa5bf0111f33b664b387a8077800755"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-lua@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-lua/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-lua"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-matlab@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-matlab",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21416426e42ff61cf8f77a6a555fa453"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ef0c1a3c51c3243272001e7269e8cf7b14dcf09"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6f32d0c71590d5648a667ef64272c41551139164d323d116e5aca80fa6b9af3"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dbd0be94d0d695e87f652af20d0ea4d72676d6d49398bdbfb9350fb4c5d4ffc9dad2a840841c32a32898ec5486cd0bf0e428766d00941935942a7f27e257cdf"
        },
        {
          "alg" : "SHA-384",
          "content" : "8fca1d8b17841f58b8e4181d8f81a330155b8d7e84fb011b4f2976b9e97c4263028eda233b7922cc41c3e9708ff5d840"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9fdd4ec897f6132354b35f35a7e8f07e04b0f62c0cb6d8da88432d663fddfd37fe89554f18ddce977f7db2b8028951c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09c51f709c824946316d7de5ae9fe4df4773550be11fa4e160c4234dae924de9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "43fa65a0831cebb368c4002b5690740e9c259cd67a965f54ce7cabf8c78e8826460a53933fc42531affc1cc5d864f64aaac2359dbdfa15d549d220a8eb772901"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-matlab@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-matlab/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-matlab"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-modelica@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-modelica",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1df792d7d736664ec399395417310d86"
        },
        {
          "alg" : "SHA-1",
          "content" : "95b5fc40b870cb680cb3bc2fd7ef983ed522a58b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ebde8d83f22b37feb36fd3072f8b3188137b07588f68af2ccd60e07db3f2fe7"
        },
        {
          "alg" : "SHA-512",
          "content" : "1251fed985674574ae20c458eca4622d7fce9de26cf9bd958e1ecebd5fbf0b1a1a6cc08dadc310ea3d4217e24ea8b749256f7ac073dc95c2ddbb0479c0e8dd82"
        },
        {
          "alg" : "SHA-384",
          "content" : "de2a1a586b76e6655435e473d0636888536e03ce7e20c0041ece33456e34d35e9b4b1fe338e19b260c14ac750fcf307e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f17614ef692742f59b75634afb4ddd44b75ffdf77de9233039f98ba24d8da78e8905e63129baccdc095e270a4766d5dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "93f2246528793df84f490267d600c5291c70943cc52f58e2e3fc9d2729434d83"
        },
        {
          "alg" : "SHA3-512",
          "content" : "908c80531fb3b5ca39c008906a51513ca277a6e049434f6c51c3e9bc8a5bb16ed55a620b10778485a35f217ce6cc7972a72c0b968c4e27afc34418ddaacc7ae9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-modelica@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-modelica/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-modelica"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-objectivec",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c4962c50255d8aa2b1215d7513397b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "7854dc4606c412500d414594827feb8b64a67930"
        },
        {
          "alg" : "SHA-256",
          "content" : "a159acbff3efa312561b0f1d75bf86baae17a68d1b30c5e0e33b93f3ff83914d"
        },
        {
          "alg" : "SHA-512",
          "content" : "da399610428f1e59e35431374fee95ef2de52f0aed137f651974939528ed09a95932edb05b1498c994fcd1ab7a24e695d1f18ccb04374e0846022a37c6019f07"
        },
        {
          "alg" : "SHA-384",
          "content" : "58037f6bd71955e8a0f073f38e9d73d35c7081baa0ca02ea81e442017b05eb84c0bd01acfdde857b95a913f76d0bd8e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dab7327660dd168e197fdbc452f6f420313290f6d6dfc1c1ce266e76a7ab50ec02376c8e085ce0df03daaa0d2746b8a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc0e76fd64432fbd391c13a06458d14e8b36a73e2a3cf6bca18f4ae270eaed13"
        },
        {
          "alg" : "SHA3-512",
          "content" : "66b66c52b5731b056ec95bc829e682123b031fcd73e8248bcbe83877ecead2923b34572c2d26f46d79ad2d24ebe0747b350a48d7a3f9cf2cf6aeb043d96ee715"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-objectivec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-objectivec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-perl@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-perl",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab14a00a2199834ee4b357c09bd1e423"
        },
        {
          "alg" : "SHA-1",
          "content" : "67a797ab38569907aa3b7078dea05da84c1ce500"
        },
        {
          "alg" : "SHA-256",
          "content" : "7af5147a55dcb0d79ac2985381f6c495de7968b6d29414cdd63f6fb54db46fe5"
        },
        {
          "alg" : "SHA-512",
          "content" : "7af2e94b388809532be665167653c7e86cee0332ee0d44f80bc3d521b50aa0a1d0a2b8de36d1821ff965d181fc3299e85a6c423089bce24f5affb7aafd2f6dfa"
        },
        {
          "alg" : "SHA-384",
          "content" : "b76c424399dffbbbb2a628a7e12a9d1a3ce789443be644e41a1a247fb8f50ecfc79f5122091b26c6e435490e23fec7b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2e85e66f52fd2c83d93794b7915cba5f22831cc3956e84e6b009afe431bc4c7ff84e652bd55d4ff72a13bf7dd36a1104"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e03d0a9932089e1235714dd43cb2da19e0a008604751158bdc670556e40676f6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "44205284dbd6a08d398dbf27f3d7c1af01899faebe005bbebfee4eb51a051617287fe0a80da452ae83517f35bd29cdb02721cf43c73348ae168e8dcb242a738a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-perl@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-perl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-perl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-php@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-php",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc27be64d1fe4195b9afd0e7150880bd"
        },
        {
          "alg" : "SHA-1",
          "content" : "64fb0a52e4b7d26565e7199e22c9519e22fabefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "65093704167f485a0df849b184184d43b1060af7ae420d58fa1e06ff66142e95"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb7a8a5129346d3ad2e60401b3a9f54a5346b710b331adf79098dc17e22f4de7e9bbd4ad5f7b5271c87bed3e6d77f4395cf8141a5a186d181995ef228dd0e3da"
        },
        {
          "alg" : "SHA-384",
          "content" : "95319feb4519d72a4d234c3d5153e5dccc7fab3ade2e92c85d472bdd6fd1afd0cae5bc84e4ecca934a0be0f0d5f16f1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e1ae03bd1edaf6f55e494063733a19ae72b68c688e5ff4a1bacc5c855114c2eaa8bd772cab04cc67ef4ac4c540ea2ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ad1832b60975b63d71b6a80fdb4635a47a216946a3ee487224f36eda6911f03e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8e58a21f66251abd2377392f756ce5b0f8c677aa2e808d6c93a4e4e6660a9c24fb3af747a5317c894b1e0562da7f3fa51c0430f5335026a4b070ae12a00e5a04"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-php@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-php/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-php"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-plsql@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-plsql",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fe8d36a46c1c5df262b5c0854952b4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9154ad50652b44006f6ac735951103b88bcee7d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "423b1c90768288f033c8cb3d4d097060e21b09896178af6de7554e3027a7e98d"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f4b6d5c83d5b66525358c80b1c4b92fd0445277166b1729ab03ec6f3821f2596be064a9bca5f4de8a8b9cba0aa95c715676d664252630b6e58ca0c21c1d0599"
        },
        {
          "alg" : "SHA-384",
          "content" : "5501480c5e97b940fd87cc01b8119e052be84ff5f1f9c451d232f04ac39b2274f3965acc320a80db11983e2be1eeebed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c7729cf2bc7b28ab506a81d73349fed5a190caa6252b95c49c7adb571dc13932a17e43e3a361d392608dba377a892e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161ca889627521f887213c796704d5da484fd2199ee4f352ae1c858d775ee10a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34a56a92a92e9b57a65763bdd4ca70c6b2bf3a2b7e940947a5825d077e05a0c2a41cb5f6b558de7b8743d2760244e5e49f569a3bb460e608201e3df4240f17e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-plsql@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-plsql/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-plsql"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-python",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e4fa3a6ac134e6edda83ee7905c0dc3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fdf651ad89af20f1ca7bf6438b8bc16cc9b9420"
        },
        {
          "alg" : "SHA-256",
          "content" : "ef197e8f3a9f8d07d45afd86ed5b16b0858e05551b07bfd4b92f237f101ca276"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9e31abf6654a421193cc3ba84678b32669e275dd2637a9aaa1451809b95fcbf98b76907b4d3fee01af93ecdccefa85ff71307534ecd5996c63173beb403f026"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b5ce12c3826a6f8da3ae0b9958795b38af03bba316b69be35d460a187daccfe8f20cde6b9fe2c4893540d74d1640049"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d444eda316b64e4f44120ffb0da6904634cae0649f3ae0b80ea96455bb83a31e66d36bae8ed53fbb2bd63e3428c51916"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e156535a3597f497cec7f479e3bc1abb11df8740351264b237adfe8e60c85b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c3657ed2414816a856a1ff64bb92e4dcd01484ea49db45753d141a25adcc2c6c1ff06be377bd589e2b58668f6b633d0523fe2342100d2c0092890df6c7f8e45a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-python/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-python"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-ruby@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-ruby",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df506c259953f76663ace7f32a7a53bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "eea6be690c5ca54b5dae5b9fecc6c5d6119a52df"
        },
        {
          "alg" : "SHA-256",
          "content" : "2427a962e7cd7f355580924d391c4020cd069581cdb0fe59410740e1d9adea13"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a79908def367737dd286bbc77b4d056c71834fb350df70412c211d6b60d76b47bf9d09f40cc073e258d836beec55d75bc11ac45d3b537fdb36986c0cad28028"
        },
        {
          "alg" : "SHA-384",
          "content" : "d7b067816827d45ff38724d4968374d24b8f8357d9a21988c2e59df9d8844aaed81608f2b2953676313a50567cf0f2c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76c71837df69f74ca613f124b78018105c46f46258304eed1cf5d9d82a59707e40b1c10a13e6b1e29397d532681c7112"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d65e24fbfabb7e737d0ce84206150258289d2e9ca96811a723762233ea893951"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ed19b81dfe70079c0e44c8f088c6ea5d37963c68adb0f2bc75158e4cee3168dd3f60664997977ef90dd0cb78cb02dfebdb01308d9e5986b41324894f12c163e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-ruby@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-ruby/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-ruby"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-rust@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-rust",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4f178e7a9e98ad7f8b4eadc802bbfe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7578a4ff44daac9abac859a6073e48f05d9feb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbf843324bddc655c60147c23d6487b3e48ad73b12bb5dee82a009135123be1e"
        },
        {
          "alg" : "SHA-512",
          "content" : "01925dadbf68cc439d104a10cdcc6d8567d7a91962b896abc8646bf09f1b5a97da04fa266b3871fd984fd818f79897c9ff0fec5c26578cd62bcb6ce9a8d5afec"
        },
        {
          "alg" : "SHA-384",
          "content" : "850771bfdf37793c73f31e0e670642f02420df8c9cbbb42f992a649d793e80ec936b65c98abcc949f3d184a5ade4ee4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bb1dfc98d9148fa3a09091e6dd71476d8e4c1983add2720c043b5b6a9a96bb8e73c7c3e734807db7a4636c964aedf07"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2df844844c88dfe7fc03cbf69bf9f2b39fa766067b1f6d70e48be5a62a73e836"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e1f63a06b47fc342610c9f88b92821c44b72c3de43be5710c3f0e9d8f16fccd33e05c4e8c62657412e270afa51ba69a9f1056e860197769edfa4d04d5cdac98b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-rust@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-rust/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-rust"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-scala_2.13",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67ca4ca12c63570b58be6e9de4723e70"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae9df0b564246dda6bc24124ffb6609de3d06b0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "12dd491d033da6b4c6f10f329bed80e46d6babca9e4e389c41b46788d92c7785"
        },
        {
          "alg" : "SHA-512",
          "content" : "adfaf91a50ac1f0900bfd6ec79c1187ceada5a3c23b1fd25a52ef8ee1ce983699e7093f5c8d919c43123b1d648493bdaad93801f55cf2a8a9c36b0a2e65d90bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b219e5abc5afe819fa36431253f3d7c8d613b109add18f71a9fa2d9dd29065e1e839e58c3d09e2fc71fcb6e95ed935ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bc6f0ad5f9360f8c7a0566877518513367bfb3724ae080a3c03d56e2a4267cfd596b68ee8ecab0abc28cd14bf605ac2f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "580a1e5fd9decf244c98f1bebf348b7ff7f463b154e033035e27939bbd1e4cf1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d5ccea9bdd965e1fb7ee9b1183ad35252df8a721580251eb96baf0419c137da5d9d32db7e08471dcfc3062b50aa9d4eb9840c3c27f861d553f2db1f552584cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-scala-modules/pmd-scala-common/pmd-scala_2.13/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-scala-modules/pmd-scala-common/pmd-scala_2.13"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.13.18",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4825bad81cee169fed825dc2f98a7d41"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb2086988c25b08705472cc750654570900362e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e85d96ff7bc7dc627985523c3541b9917aaa08e956391380c42db21a2c4e5a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "63487dc36cd250021815332ccd96fac16bce1341b52d401949b5a2409c53473f52c436d53e53f8938c367037f7a9da9ac163743222be1b397913f23d5ccb0779"
        },
        {
          "alg" : "SHA-384",
          "content" : "2426ef49fec006f2b0fd08ceb080dcdd2d83012fce4324a5aafb0edf9d6b6dcaf5bd3a3856d26f05407a89d086a9890b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8279993075e5f2908b307d5570323522049235137b796a5b40592fb7a22b77bd610bb24aca0e3e38e8db474e02622324"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f0207e816193f7df251fedb3b5963ad3bfe282fcd653038c67d12eaf27cfa241"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3664d6baf27813396cf2b93d4e8a0964638ec3415bea7db80af5615e6a8dc8c18a738c35c44ccec5567fd4b60609ba40e78c1b09c3f9a9159583145248651721"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scalameta/parsers_2.13@4.15.2?type=jar",
      "publisher" : "org.scalameta",
      "group" : "org.scalameta",
      "name" : "parsers_2.13",
      "version" : "4.15.2",
      "description" : "Scalameta APIs for parsing and their baseline implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17446705960e24bce79b38a5ee4fa35c"
        },
        {
          "alg" : "SHA-1",
          "content" : "92dbd7d9242e9d3bc65a64bf0d748e2b85d8c3c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "787c0c29cc1aecadb4bd446db53a71d0cb4ea2a8efadd84d9753c7f7bbeaf44a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8d2d304c59389f6fc12112a9717d51edfec75ed521a7657135d656bfb001c2e2c119f084b22fdfa013bf5eba1515e7158c6f65d6390d17d155e7b431989e475"
        },
        {
          "alg" : "SHA-384",
          "content" : "f19315e96a7a3838a2979c2939fc251200d8dfcd89fd37df8adeb5ccc2fabeeb9c9353a7b0d6eac57139cddcfac83a2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfd8970a82caad08d7cf0960515106c170d381223244e1aa29020ebd72452f237ffa7f248f9530703c1f2faf63854e76"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5084dd3dc8afbac43cc342d3d55ab813aa4a94488343a680e94299afa428cfb4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "efa4dc4f0cea14a63ae64d05c1406da064042532289c56ca5e1ff72560560a11f769b3835ed4122a4841f16afe9c4441fb58c27c1052936bbbab69b3cb1251dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.scalameta/parsers_2.13@4.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/scalameta/scalameta"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scalameta/scalameta/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scalameta/scalameta"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scalameta/trees_2.13@4.15.2?type=jar",
      "publisher" : "org.scalameta",
      "group" : "org.scalameta",
      "name" : "trees_2.13",
      "version" : "4.15.2",
      "description" : "Scalameta abstract syntax trees",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "753f2a2a7c996103c8f135dba01c64e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "260a7b450705d555951799a6b95f1c06133fe7e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "a018de3bb3fda248e1e5b0677c43859771f9292bb79e6066e86239fa905ef7c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c11354040af15118e0492c612f651f4b914c75a7e34270630cd52aac127219784470d9add5c8d2c4b914fa12bbf0e18d96df32e9104177b422739117bb2ac827"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea9519328c111a1e6eb8fba60a4b32ac18044398f60cb604df6a76e2c6f3d86a21bbe7dd1e4d1b7be87622dcfb8d2ce7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ffd681130b339c737d827d79db840a685871a548169609ebbb493d8a6d76ff7efbceadb681fc1fbca1a58b10ca7ad80"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c7e25174561f4e0c1d659ac63b8f99138a6113e065616cf988c1eb1e74affcf9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "554d40b5c27d5361429724c3f9b076b8a23921056ac6a0248aef4bd0947ca699b7ff2a97dbd9b25ebdba78ac7e0d0f02c5234708d63d90bd0dd88ae9e410cf22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.scalameta/trees_2.13@4.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/scalameta/scalameta"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scalameta/scalameta/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scalameta/scalameta"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scalameta/common_2.13@4.15.2?type=jar",
      "publisher" : "org.scalameta",
      "group" : "org.scalameta",
      "name" : "common_2.13",
      "version" : "4.15.2",
      "description" : "Bag of private and public helpers used in scalameta APIs and implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "db47c031eff28bf2bc8579b80ed1f1fe"
        },
        {
          "alg" : "SHA-1",
          "content" : "acea91f0fd7931154e81186c49d71c80d8aed9dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "309d134ba017a7a69acc65ec0f157ba99ab753dee259d403088b2f6867c6f5f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "62d9f403cc6fcf30a8d2b264ea88a9215e4b3ca15c51be04a9bac167d7e2df3f99873fcd0cb4e7d071b82ec62598e58c2b1e84314008878d796fb529e918c08f"
        },
        {
          "alg" : "SHA-384",
          "content" : "870c0b4ed24b4009e8f33bbac96e8d8fa25c8d4170c57120e3d636f14593d437a977789ff5fb7810a7808976c33cfe9e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dbf98ad4a1ca182ad3d2a1b73ce16cdf938c6b4bfec60d40563d01e0ccaef22bfeaeea9f7dacec9207e915811cc917fc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7450630ce72fd9f1b98a58eef0ddd052479bb68428c08a6378e762e29b89dc6f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c1b72abe600ffcaaaf307e506f7be9d647dfd9d8c09e1b375c42fd1cb74670aa6fe780581ad13e5e89155d47a70c8486a4b6321a79c755cc69e9a6a2174c80c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.scalameta/common_2.13@4.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/scalameta/scalameta"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scalameta/scalameta/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scalameta/scalameta"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.lihaoyi/sourcecode_2.13@0.4.4?type=jar",
      "group" : "com.lihaoyi",
      "name" : "sourcecode_2.13",
      "version" : "0.4.4",
      "description" : "sourcecode",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2985cf5644215014cfcd9ad4df781c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "9014066d23e4fe50911a366f2b85174ffc4bb2a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd4e99aef8267a410b6ed716c487cf5256f801425f158a8c9cbd056eb032d80d"
        },
        {
          "alg" : "SHA-512",
          "content" : "8a2acc33e29003a5d48f5b768e51c5c581ecf73f9cd27d362dc466f812f3eaae524f2febc0ecab3a0283be2f9748b5d8fba0e41c207332282fdeb4f2d053b12f"
        },
        {
          "alg" : "SHA-384",
          "content" : "13083566cf1cadbd605614c9137c9dce8c759461d0d7a044cbd24fbca9143b8cb84e24ed78df4ac945ff393bbf0135a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aafaf3a8c48c2573b780f3f977af505421d44c6c3ee88c9fe0b4d4b358c2deb4ca769a63b1a812340a42c672cf70a572"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54f370f6504a055d60da50718e03795b2e38557524c353b2bd401a7236387c85"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2121acd93c1ddfb5cfb41928432d30ea4008f397a67386b4bca108c31e58997c0cd87795aaadb525ad9bf12f62ee5ef60b083416f0e4a6247004c629b85836a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.lihaoyi/sourcecode_2.13@0.4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/com-lihaoyi/sourcecode"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/com-lihaoyi/sourcecode"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scalameta/io_2.13@4.15.2?type=jar",
      "publisher" : "org.scalameta",
      "group" : "org.scalameta",
      "name" : "io_2.13",
      "version" : "4.15.2",
      "description" : "Scalameta IO abstractions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d4eda2dae5fba81a1db25e48db1fb6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "b101995ca70c8779b797fc91db4a8cb174b60613"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c2814d9d1f54b734775fe5cd11fddaeb6bc2ee77110915b3c3ceef4825e107b"
        },
        {
          "alg" : "SHA-512",
          "content" : "3146bf469c33cecbface223998b51f5be02bec39c78ce422b712441bea2e0f5f9b170c0145aaf7a7820915cae2debda554b6893c6ea8944bd2a27d4a1bc238d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d80b9b2ee70eef34f8e5f3e9564e3e626e52acf793f8ce86ad307559fb13389b19d71717745f4df0267392e9e58245cc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6c4247128819cf4a8e333476ce265b9cb5ed9447f7693f3e72e64689b32e4ead12fa6082726eb2bde43f008be3857472"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f0a60f8015a769f40c89805d834f88be60dab77c956a933792a8b4a2d9612ea7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d70ee410116eeaf1532b6942cf182e252e9e07e81f1f9a16e50a2b03f19a30a371882e94e48798caa86de530591f150b58bf96f4355d6404e3db5bb5ca8d259"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.scalameta/io_2.13@4.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/scalameta/scalameta"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scalameta/scalameta/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scalameta/scalameta"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-swift@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-swift",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3b02cf36aa8f61ce2333fb3d7d39b8e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8314c7da8db955ff97bdf7135ba5506ca134b71"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e151cfb52c09a241efc0a06d11497b310e64ac64430f629c174b2feb5a2199b"
        },
        {
          "alg" : "SHA-512",
          "content" : "13f44bc30ec154337c0082f97e10466a1c8289c197a2a37e21ed509c26d994932de6fc74753d37c32c9aa172bf882fad4d72c393ae2da385ffa140f773fb3698"
        },
        {
          "alg" : "SHA-384",
          "content" : "668e660f19487035fc67999eb3ea7adc3dd1f7b6ff8c170dc421f7e5cbbd9d1eb1795c6a478a09716a0c142bcbd1c1bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32592c4b425a1a034b454b1fd3e69d9fdf7225ca3f30bac44626344c5849245870889cfc82a51b94165f66cfb6cc3493"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e83dc3dd290728b2e658fdd800d2989e2392b86472dd2f592ec7e05b25f8718f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40b8d2e3bb6251d19dff8b71020ecf9d2d6422ceb94ba80a688c3eecfa9d800ab6da3c71b5319956c8ce3e6d835fd80cf3377d80572c75680ab2fc3482cf9b15"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-swift@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-swift/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-swift"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-tsql@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-tsql",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f55c39c2ce7882be65adc4fe3e92b6f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "d1e08dd61f206958729b1e2aae3a0df386dd6585"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5aab68c780ffe76dd2d9d7abccc1ff136a4d289d80f853672706c389fa2ea70"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b0cad5ced1174288061b0d7650bdf604a417e98c164c13c94133d955f6df8f30a8837d131574f55a31fec36601ef7cc56ea0aad1f63ed68e80334f6b6284a71"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c6a1b1773082d3a4423611e6e672894ab5018698095897fe789ce57da74194f4b10aa22645bd7d7b97de88a6424b884"
        },
        {
          "alg" : "SHA3-384",
          "content" : "86ace72a714edce757db3e333ee352eef3c14b93bd4d53a833cfe922c1e1629ea30853473e47f24450089b050eed4abc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79cf9ba8dbcc56d62de9728f9b1aa3443e289810690b5dc93eb36e6048716550"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3683a8e566b19fcb02eef31561b7569baf2917007487039e154710f3a57c0d38e0e343720be93fd26bb66cd119561e2324d06c702bc2257ffbf950995dfe1f64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-tsql@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-tsql/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-tsql"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-visualforce",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "161f1fb061433cb41293af19eaf42179"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a54bb44daefbc6bd819344426d8ecfc1cebb732"
        },
        {
          "alg" : "SHA-256",
          "content" : "e33fe230d25e9c8def8bf96ee66896e2393e5858ced2b9f4733d31f2c6ac15ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "4eef96f89dfb9b8a42b7fe5b30463f3e5fa8fa5099d4d2a41a86f3726077062e0f13a04f65fef63dae9928de59ea221cc1f1fdd21d5f602c3b70c60e08f414b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c7283d4309e178c56b322eeb905de335d73b17e48ea4600c4626ba375a2f9e25dac70af61bb12eaadcb525c8728cdb7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44f3bed109a772741b7684e21fb5d9d79a6b383bae5ed6bd45543a6366b5c797da232ca654aa099cf8e4dbba2d1fad1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "010ac0839e9f86813b060ad2808c6c3f27777d28093c9d3b4adeef8b1ebfc80e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4a2b8f14f88055aed8bc8397a5fa6ba69ab11ac543f6a4fce376aef854c9a8f418fe721539d0779a0a0bf3c27ecca593840b1cd7fc6093252411bec8f00e27ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-visualforce/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-visualforce"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-velocity@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-velocity",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "522c7ddfef2a8a7c9388a4b7f1c52058"
        },
        {
          "alg" : "SHA-1",
          "content" : "4361087e1cb8aaff66c2300af179153af20fd716"
        },
        {
          "alg" : "SHA-256",
          "content" : "c08deda0252382e05ccbf3586fefd93b4466c9b32d340151f6394c44a7cb573f"
        },
        {
          "alg" : "SHA-512",
          "content" : "0329dce92c08b884c13830f33872e73e87601774c2fbef18cf6d6b4bb888cfc7b2409a42fa56c87b5b5343afa2f452f62cf0177b9e9158a650029bae8dc5c74e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a95d56d640bcbe3fb61bf00a9282d51d88f8920e8ef599c19c8b2ed9e877eeafcf3564ef086acc10a446969e1bbbe767"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95b2b1111e098fe260d580b2d451cfd99d8962bd3974fbf3f74a426d30c90d3bd7c61969f8e74db25593c334ba846c8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdc59bb2c0ff88a6f527552b5ac0ea3215bf631c7ccd7e800e33739b4ddbd360"
        },
        {
          "alg" : "SHA3-512",
          "content" : "53765eecb5c75ea65383fc024c3063f3ad573b7ab4fd79a6d68e34b7019898a48f5ddfddb3705d9728af5fa4188efe089fe0cf74acbf25193d3f5c3df85a3dce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-velocity@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-velocity/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-velocity"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-xml@7.23.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-xml",
      "version" : "7.23.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2208b17f50a8521e97705102a0dbca3a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4974f59f50c9efcb41314de4fb6f69b026c0e366"
        },
        {
          "alg" : "SHA-256",
          "content" : "be8eb8d3f8b6af25c6fd75d75f9d6a7d66c7e32e538cb170010599d413675a69"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a9ed0739bb49249962ee2f98fa22eb47ffdfc8fcead12d63f5fa675b982c6f95b92584fe9de3c32fccd4fd1cd189744ba638560d3b6980a8f7ed425d4916477"
        },
        {
          "alg" : "SHA-384",
          "content" : "126a8d14b56f1e6abe50408a37867f476bdfd3a7d3e79b96782983b2f43bbc8eb8db73c44fdd7f5a801cb74f11a546d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e6e07f920002240f465bf19f10e8c09efe90db63df0c6f012980fb502e58c39ea2f482d79306edc80bcb79db4cb2251e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf19424f191487564c7ba6ac0d1ad8e6bf5a032891e284ab347d254344bcb2ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "73d7582ce39929caee53d9b4cdd17d025bdf083fad2b4949acb17dd9f994866d2aa1c62a8fe2cfa9a7af7c550fb9e18cb2b0c69fbd92966d763e0f0cf8717c17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-xml@7.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.36",
      "description" : "SLF4J Simple binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4a5fa54910b5ee561f639c903cf34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-simple"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.20.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg" : "SHA-1",
          "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg" : "SHA-256",
          "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg" : "SHA-384",
          "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-dist@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-cli@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-ant@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-designer@7.19.2?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.23.0?type=pom",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
        "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
        "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar",
        "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-cli@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-designer@7.19.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/info.picocli/picocli@4.7.7?type=jar",
        "pkg:maven/me.tongfei/progressbar@0.9.5?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-designer@7.19.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/info.picocli/picocli@4.7.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/me.tongfei/progressbar@0.9.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jline/jline@3.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jline/jline@3.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.23.0?type=pom",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-apex@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-coco@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-cpp@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-cs@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-css@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-dart@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-fortran@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-go@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-groovy@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-html@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-java@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-julia@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-lua@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-matlab@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-modelica@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-perl@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-php@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-plsql@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-python@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-ruby@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-rust@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-swift@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-tsql@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-velocity@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-xml@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-apex@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@2.2.10?type=jar",
        "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
        "pkg:maven/com.google.summit/summit-ast@2.4.0?type=jar",
        "pkg:maven/io.github.apex-dev-tools/apex-ls_2.13@6.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@2.2.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@2.2.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@2.2.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.2.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.summit/summit-ast@2.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar",
        "pkg:maven/com.google.flogger/flogger@0.8?type=jar",
        "pkg:maven/com.google.flogger/flogger-system-backend@0.8?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
        "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
        "pkg:maven/org.danilopianini/gson-extras@1.3.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.flogger/flogger@0.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.flogger/flogger-system-backend@0.8?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flogger/flogger@0.8?type=jar",
        "pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.danilopianini/gson-extras@1.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar",
        "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/apex-ls_2.13@6.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/io.github.apex-dev-tools/outline-parser_2.13@1.3.0?type=jar",
        "pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.1.0?type=jar",
        "pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.1.0?type=jar",
        "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar",
        "pkg:maven/com.lihaoyi/mainargs_2.13@0.5.4?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar",
        "pkg:maven/org.scala-js/scalajs-stubs_2.13@1.0.0?type=jar",
        "pkg:maven/io.github.apex-dev-tools/apex-parser@4.4.1?type=jar",
        "pkg:maven/io.github.apex-dev-tools/vf-parser@1.1.0?type=jar",
        "pkg:maven/io.github.apex-dev-tools/sobject-types@65.0.0?type=jar",
        "pkg:maven/io.github.apex-dev-tools/standard-types@65.0.0?type=jar",
        "pkg:maven/io.methvin/directory-watcher-better-files_2.13@0.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/outline-parser_2.13@1.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/io.github.apex-dev-tools/apex-types_2.13@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/apex-types_2.13@1.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.13.18?type=jar",
        "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.13.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar",
        "pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar",
        "pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.8.1?type=jar",
        "pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.1.0?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.13.18?type=jar",
        "pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/mainargs_2.13@0.5.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.8.1?type=jar",
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-js/scalajs-stubs_2.13@1.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/vf-parser@1.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/sobject-types@65.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/io.github.apex-dev-tools/standard-types@65.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.apex-dev-tools/standard-types@65.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.methvin/directory-watcher-better-files_2.13@0.18.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/io.methvin/directory-watcher@0.18.0?type=jar",
        "pkg:maven/com.github.pathikrit/better-files_2.13@3.9.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.methvin/directory-watcher@0.18.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.12.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.pathikrit/better-files_2.13@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-coco@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-cpp@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-cs@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-css@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-dart@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-fortran@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-go@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-groovy@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.apache.groovy/groovy@5.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.groovy/groovy@5.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-html@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.jsoup/jsoup@1.22.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jsoup/jsoup@1.22.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar",
        "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/org.mozilla/rhino@1.7.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mozilla/rhino@1.7.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-julia@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-lua@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-matlab@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-modelica@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-perl@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-php@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-plsql@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-ruby@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-rust@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/org.scalameta/parsers_2.13@4.15.2?type=jar",
        "pkg:maven/org.scalameta/trees_2.13@4.15.2?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scalameta/parsers_2.13@4.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/org.scalameta/trees_2.13@4.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scalameta/trees_2.13@4.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/org.scalameta/common_2.13@4.15.2?type=jar",
        "pkg:maven/org.scalameta/io_2.13@4.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scalameta/common_2.13@4.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar",
        "pkg:maven/com.lihaoyi/sourcecode_2.13@0.4.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.lihaoyi/sourcecode_2.13@0.4.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scalameta/io_2.13@4.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-swift@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-tsql@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-apex@7.23.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-velocity@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-xml@7.23.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.23.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
      ]
    }
  ]
}