---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-05-24T03:42:44Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://3b957612-651a-468c-9a8f-6de2316af329"
documentDescribes:
- "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-agent-0.9-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-parent-0.9-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-test-0.9-SNAPSHOT"
packages:
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-agent-0.9-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://projects.eclipse.org/projects/adoptium.emt4j"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "emt4j-agent"
  summary: "NONE"
  versionInfo: "0.9-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/adoptium/emt4j/emt4j-assembly"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "emt4j-assembly"
  summary: "NONE"
  versionInfo: "0.9-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-parent-0.9-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/adoptium/emt4j"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "emt4j-parent"
  summary: "NONE"
  versionInfo: "0.9-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-test-0.9-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/adoptium/emt4j/emt4j-test"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "emt4j-test"
  summary: "NONE"
  versionInfo: "0.9-SNAPSHOT"
- SPDXID: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/aopalliance/aopalliance@1.0"
  filesAnalyzed: false
  homepage: "http://aopalliance.sourceforge.net"
  licenseConcluded: "LicenseRef-Public-Domain"
  licenseDeclared: "LicenseRef-scancode-public-domain-disclaimer"
  name: "aopalliance"
  summary: "AOP Alliance"
  versionInfo: "1.0"
- SPDXID: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/aopalliance/aopalliance@1.0"
  filesAnalyzed: false
  homepage: "http://aopalliance.sourceforge.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aopalliance"
  summary: "AOP Alliance"
  versionInfo: "1.0"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/jasmin/3.0.3/jasmin-3.0.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/Sable/jasmin.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/jasmin/3.0.3/jasmin-3.0.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/java_cup/0.9.2/java_cup-0.9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/java_cup@0.9.2"
  filesAnalyzed: false
  homepage: "http://www2.cs.tum.edu/projects/cup/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "SMLNJ"
  name: "java_cup"
  summary: "java_cup"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/java_cup/0.9.2/java_cup-0.9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/java_cup@0.9.2"
  filesAnalyzed: false
  homepage: "http://www2.cs.tum.edu/projects/cup/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "java_cup"
  summary: "java_cup"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/polyglot/2006/polyglot-2006.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/polyglot@2006"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/polyglot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LGPL-2.1-only"
  name: "polyglot"
  summary: "polyglot"
  versionInfo: "2006"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/Sable/polyglot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/polyglot@2006"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/polyglot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "polyglot"
  summary: "polyglot"
  versionInfo: "2006"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/polyglot/2006/polyglot-2006-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/polyglot@2006"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/polyglot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "polyglot"
  summary: "polyglot"
  versionInfo: "2006"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.findbugs/jsr305@3.0.2"
  filesAnalyzed: false
  homepage: "http://findbugs.sourceforge.net/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "jsr305"
  summary: "JSR305 Annotations for Findbugs"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://code.google.com/p/jsr-305"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.findbugs/jsr305@3.0.2"
  filesAnalyzed: false
  homepage: "http://findbugs.sourceforge.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsr305"
  summary: "JSR305 Annotations for Findbugs"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.findbugs/jsr305@3.0.2"
  filesAnalyzed: false
  homepage: "http://findbugs.sourceforge.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsr305"
  summary: "JSR305 Annotations for Findbugs"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/2.9.0/gson-2.9.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/gson.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/2.9.0/gson-2.9.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.1.3/error_prone_annotations-2.1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/error-prone.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.1.3/error_prone_annotations-2.1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.2.0/error_prone_annotations-2.2.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/error-prone.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.2.0/error_prone_annotations-2.2.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/failureaccess@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/failureaccess"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "failureaccess"
  summary: "Contains\n    com.google.common.util.concurrent.internal.InternalFutureFailureAccess\
    \ and\n    InternalFutures. Most users will never need to use this artifact. Its\n\
    \    classes is conceptually a part of Guava, but they're in this separate\n \
    \   artifact so that Android libraries can use them without pulling in all of\n\
    \    Guava (just as they can use ListenableFuture by depending on the\n    listenablefuture\
    \ artifact)."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/guava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/failureaccess@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/failureaccess"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "failureaccess"
  summary: "Contains\n    com.google.common.util.concurrent.internal.InternalFutureFailureAccess\
    \ and\n    InternalFutures. Most users will never need to use this artifact. Its\n\
    \    classes is conceptually a part of Guava, but they're in this separate\n \
    \   artifact so that Android libraries can use them without pulling in all of\n\
    \    Guava (just as they can use ListenableFuture by depending on the\n    listenablefuture\
    \ artifact)."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/failureaccess@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/failureaccess"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "failureaccess"
  summary: "Contains\n    com.google.common.util.concurrent.internal.InternalFutureFailureAccess\
    \ and\n    InternalFutures. Most users will never need to use this artifact. Its\n\
    \    classes is conceptually a part of Guava, but they're in this separate\n \
    \   artifact so that Android libraries can use them without pulling in all of\n\
    \    Guava (just as they can use ListenableFuture by depending on the\n    listenablefuture\
    \ artifact)."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/25.1-android/guava-25.1-android.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/guava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/25.1-android/guava-25.1-android-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/27.1-android/guava-27.1-android.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@27.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "27.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/guava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@27.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "27.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/27.1-android/guava-27.1-android-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@27.1-android"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "27.1-android"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/listenablefuture"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "listenablefuture"
  summary: "An empty artifact that Guava depends on to signal that it is providing\n\
    \    ListenableFuture -- but is also available in a second \"version\" that\n\
    \    contains com.google.common.util.concurrent.ListenableFuture class, without\n\
    \    any other Guava classes. The idea is:\n\n    - If users want only ListenableFuture,\
    \ they depend on listenablefuture-1.0.\n\n    - If users want all of Guava, they\
    \ depend on guava, which, as of Guava\n    27.0, depends on\n    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.\
    \ The 9999.0-...\n    version number is enough for some build systems (notably,\
    \ Gradle) to select\n    that empty artifact over the \"real\" listenablefuture-1.0\
    \ -- avoiding a\n    conflict with the copy of ListenableFuture in guava itself.\
    \ If users are\n    using an older version of Guava or a build system other than\
    \ Gradle, they\n    may see class conflicts. If so, they can solve them by manually\
    \ excluding\n    the listenablefuture artifact or manually forcing their build\
    \ systems to\n    use 9999.0-...."
  versionInfo: "9999.0-empty-to-avoid-conflict-with-guava"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/guava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/listenablefuture"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "listenablefuture"
  summary: "An empty artifact that Guava depends on to signal that it is providing\n\
    \    ListenableFuture -- but is also available in a second \"version\" that\n\
    \    contains com.google.common.util.concurrent.ListenableFuture class, without\n\
    \    any other Guava classes. The idea is:\n\n    - If users want only ListenableFuture,\
    \ they depend on listenablefuture-1.0.\n\n    - If users want all of Guava, they\
    \ depend on guava, which, as of Guava\n    27.0, depends on\n    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.\
    \ The 9999.0-...\n    version number is enough for some build systems (notably,\
    \ Gradle) to select\n    that empty artifact over the \"real\" listenablefuture-1.0\
    \ -- avoiding a\n    conflict with the copy of ListenableFuture in guava itself.\
    \ If users are\n    using an older version of Guava or a build system other than\
    \ Gradle, they\n    may see class conflicts. If so, they can solve them by manually\
    \ excluding\n    the listenablefuture artifact or manually forcing their build\
    \ systems to\n    use 9999.0-...."
  versionInfo: "9999.0-empty-to-avoid-conflict-with-guava"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/inject/guice/4.2.2/guice-4.2.2-no_aop.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/google/guice/guice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 6 and above"
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/google/guice.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/google/guice/guice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 6 and above"
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/inject/guice/4.2.2/guice-4.2.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/google/guice/guice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 6 and above"
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.sonatype.org/spice"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/javaee/jaxb-istack-commons.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/javaee/metro-fi.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.7"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.7/commons-io-2.7.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.7"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/commons-io.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.7"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.7/commons-io-2.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.7"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/axml/2.1.2/axml-2.1.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.1.2"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/Sable/axml.gitconnection.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.1.2"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/axml/2.1.2/axml-2.1.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.1.2"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/heros/1.2.3/heros-1.2.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LGPL-2.1-only"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/Sable/heros.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/heros/1.2.3/heros-1.2.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/javaee/activation.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.2/javax.annotation-api-1.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+https://svn.java.net/svn/glassfish~svn"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.2/javax.annotation-api-1.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/javaee/javax.annotation.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/inject/javax.inject/1/javax.inject-1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.inject/javax.inject@1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/atinject/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "javax.inject"
  summary: "The javax.inject API"
  versionInfo: "1"
- SPDXID: "SPDXRef-Package-Maven-javax.inject-javax.inject-1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/inject/javax.inject/1/javax.inject-1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.inject/javax.inject@1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/atinject/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.inject"
  summary: "The javax.inject API"
  versionInfo: "1"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/javax/xml/bind/jaxb-api/2.4.0-b180725.0427/jaxb-api-2.4.0-b180725.0427.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0"
  licenseDeclared: "CDDL-1.1 AND GPL-2.0-only WITH Classpath-exception-2.0"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/javaee/jaxb-spec.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/javax/xml/bind/jaxb-api/2.4.0-b180725.0427/jaxb-api-2.4.0-b180725.0427-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13.1/junit-4.13.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/junit-team/junit4.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13.1/junit-4.13.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8/commons-lang3-3.8.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+http://git-wip-us.apache.org/repos/asf/commons-lang.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8/commons-lang3-3.8-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-artifact/3.0/maven-artifact-3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-artifact@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-artifact/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-artifact"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/maven/maven-3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-artifact@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-artifact/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-artifact"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-artifact/3.0/maven-artifact-3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-artifact@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-artifact/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-artifact"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-builder-support/3.8.5/maven-builder-support-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-builder-support/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-builder-support/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-builder-support/3.8.5/maven-builder-support-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-builder-support/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-core/3.8.5/maven-core-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-core@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-core"
  summary: "Maven Core classes."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-core@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-core"
  summary: "Maven Core classes."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-core/3.8.5/maven-core-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-core@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-core"
  summary: "Maven Core classes."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.0/maven-model-3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-model/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-model"
  summary: "Maven Model"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/maven/maven-3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-model/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Maven Model"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.0/maven-model-3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-model/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Maven Model"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model-builder/3.8.5/maven-model-builder-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-model-builder/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-model-builder/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model-builder/3.8.5/maven-model-builder-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-model-builder/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-plugin-api/3.0/maven-plugin-api-3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-plugin-api@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-plugin-api/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-plugin-api"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/maven/maven-3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-plugin-api@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-plugin-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-plugin-api"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-plugin-api/3.0/maven-plugin-api-3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-plugin-api@3.0"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/maven-plugin-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-plugin-api"
  summary: "Maven is a project development management and\n    comprehension tool.\
    \ Based on the concept of a project object model:\n    builds, dependency management,\
    \ documentation creation, site\n    publication, and distribution publication\
    \ are all controlled from\n    the declarative file. Maven can be extended by\
    \ plugins to utilise a\n    number of other development tools for reporting or\
    \ the build\n    process."
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-repository-metadata/3.8.5/maven-repository-metadata-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-repository-metadata/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-repository-metadata/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-repository-metadata/3.8.5/maven-repository-metadata-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-repository-metadata/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-resolver-provider/3.8.5/maven-resolver-provider-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-resolver-provider/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-resolver-provider"
  summary: "Extensions to Maven Resolver for utilizing Maven POM and repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-resolver-provider/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-provider"
  summary: "Extensions to Maven Resolver for utilizing Maven POM and repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-resolver-provider/3.8.5/maven-resolver-provider-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-resolver-provider/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-provider"
  summary: "Extensions to Maven Resolver for utilizing Maven POM and repository metadata."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-settings/3.8.5/maven-settings-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-settings"
  summary: "Maven Settings model."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-settings"
  summary: "Maven Settings model."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-settings/3.8.5/maven-settings-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-settings"
  summary: "Maven Settings model."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-settings-builder/3.8.5/maven-settings-builder-3.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings-builder/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-settings-builder"
  summary: "The effective settings builder, with inheritance and password decryption."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings-builder/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-settings-builder"
  summary: "The effective settings builder, with inheritance and password decryption."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-settings-builder/3.8.5/maven-settings-builder-3.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-settings-builder@3.8.5"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.8.5/maven-settings-builder/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-settings-builder"
  summary: "The effective settings builder, with inheritance and password decryption."
  versionInfo: "3.8.5"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/plugin-tools/maven-plugin-annotations/3.4/maven-plugin-annotations-3.4.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.4"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/plugin-tools/maven-plugin-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-plugin-annotations"
  summary: "Java 5 annotations to use in Mojos"
  versionInfo: "3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/maven/plugin-tools"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.4"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/plugin-tools/maven-plugin-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-plugin-annotations"
  summary: "Java 5 annotations to use in Mojos"
  versionInfo: "3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/plugin-tools/maven-plugin-annotations/3.4/maven-plugin-annotations-3.4-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.4"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/plugin-tools/maven-plugin-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-plugin-annotations"
  summary: "Java 5 annotations to use in Mojos"
  versionInfo: "3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-api/1.6.3/maven-resolver-api-1.6.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-resolver-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-resolver.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-api/1.6.3/maven-resolver-api-1.6.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-impl/1.6.3/maven-resolver-impl-1.6.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-resolver-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-resolver.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-impl/1.6.3/maven-resolver-impl-1.6.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-spi/1.6.3/maven-resolver-spi-1.6.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-resolver-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-resolver.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-spi/1.6.3/maven-resolver-spi-1.6.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-util/1.6.3/maven-resolver-util-1.6.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-resolver-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-resolver.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/resolver/maven-resolver-util/1.6.3/maven-resolver-util-1.6.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/resolver/maven-resolver-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-resolver-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.6.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-dependency-tree/3.2.1/maven-dependency-tree-3.2.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-dependency-tree/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-dependency-tree"
  summary: "A tree-based API for resolution of Maven project dependencies"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-dependency-tree.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-dependency-tree/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-dependency-tree"
  summary: "A tree-based API for resolution of Maven project dependencies"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-dependency-tree/3.2.1/maven-dependency-tree-3.2.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-dependency-tree/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-dependency-tree"
  summary: "A tree-based API for resolution of Maven project dependencies"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-utils/3.3.4/maven-shared-utils-3.3.4.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-shared-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-shared-utils"
  summary: "Shared utilities for use by Maven core and plugins"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven-shared-utils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-shared-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-shared-utils"
  summary: "Shared utilities for use by Maven core and plugins"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-utils/3.3.4/maven-shared-utils-3.3.4-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/shared/maven-shared-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-shared-utils"
  summary: "Shared utilities for use by Maven core and plugins"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/velocity/velocity-engine-core/2.3/velocity-engine-core-2.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.velocity/velocity-engine-core@2.3"
  filesAnalyzed: false
  homepage: "http://velocity.apache.org/engine/devel/velocity-engine-core/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "velocity-engine-core"
  summary: "Apache Velocity is a general purpose template engine."
  versionInfo: "2.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/velocity-engine.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.velocity/velocity-engine-core@2.3"
  filesAnalyzed: false
  homepage: "http://velocity.apache.org/engine/devel/velocity-engine-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "velocity-engine-core"
  summary: "Apache Velocity is a general purpose template engine."
  versionInfo: "2.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/velocity/velocity-engine-core/2.3/velocity-engine-core-2.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.velocity/velocity-engine-core@2.3"
  filesAnalyzed: false
  homepage: "http://velocity.apache.org/engine/devel/velocity-engine-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "velocity-engine-core"
  summary: "Apache Velocity is a general purpose template engine."
  versionInfo: "2.3"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.0.0/checker-compat-qual-2.0.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "CC-BY-2.5"
  licenseDeclared: "MIT AND GPL-2.0-only WITH Classpath-exception-2.0"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/typetools/checker-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.0.0/checker-compat-qual-2.0.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.5.2/checker-compat-qual-2.5.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.5.2"
  filesAnalyzed: false
  homepage: "https://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "GPL-2.0-only WITH Classpath-exception-2.0 OR MIT"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/typetools/checker-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.5.2"
  filesAnalyzed: false
  homepage: "https://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.5.2/checker-compat-qual-2.5.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.5.2"
  filesAnalyzed: false
  homepage: "https://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.14/animal-sniffer-annotations-1.14.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+https://svn.codehaus.org/mojo"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.14/animal-sniffer-annotations-1.14-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.17/animal-sniffer-annotations-1.17.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17"
  filesAnalyzed: false
  homepage: "http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent POM."
  versionInfo: "1.17"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mojohaus/animal-sniffer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17"
  filesAnalyzed: false
  homepage: "http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent POM."
  versionInfo: "1.17"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.17/animal-sniffer-annotations-1.17-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17"
  filesAnalyzed: false
  homepage: "http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent POM."
  versionInfo: "1.17"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-cipher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-cipher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/codehaus-plexus/plexus-cipher.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-cipher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-cipher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-cipher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-cipher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-classworlds/2.6.0/plexus-classworlds-2.6.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-classworlds/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-classworlds"
  summary: "A class loader framework"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/codehaus-plexus/plexus-classworlds.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-classworlds/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-classworlds"
  summary: "A class loader framework"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-classworlds/2.6.0/plexus-classworlds-2.6.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-classworlds/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-classworlds"
  summary: "A class loader framework"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/codehaus-plexus/plexus-containers.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-interpolation/1.26/plexus-interpolation-1.26.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-interpolation/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.26"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/codehaus-plexus/plexus-interpolation.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-interpolation/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.26"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-interpolation/1.26/plexus-interpolation-1.26-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-interpolation/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.26"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-sec-dispatcher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-sec-dispatcher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-sec-dispatcher"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "2.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.3.0/plexus-utils-3.3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/codehaus-plexus/plexus-utils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.3.0/plexus-utils-3.3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0"
  filesAnalyzed: false
  homepage: "http://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-api/1.0.0.v20140518/aether-api-1.0.0.v20140518.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://git.eclipse.org/gitroot/aether/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-api/1.0.0.v20140518/aether-api-1.0.0.v20140518-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-util/1.0.0.v20140518/aether-util-1.0.0.v20140518.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://git.eclipse.org/gitroot/aether/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-util/1.0.0.v20140518/aether-util-1.0.0.v20140518-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.0.0.v20140518"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/sisu/org.eclipse.sisu.inject/0.3.5/org.eclipse.sisu.inject-0.3.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.sisu.inject"
  summary: "JSR330-based container; supports classpath scanning, auto-binding, and\
    \ dynamic auto-wiring"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://git.eclipse.org/gitroot/sisu/org.eclipse.sisu.inject.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.sisu.inject"
  summary: "JSR330-based container; supports classpath scanning, auto-binding, and\
    \ dynamic auto-wiring"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/sisu/org.eclipse.sisu.inject/0.3.5/org.eclipse.sisu.inject-0.3.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.sisu.inject"
  summary: "JSR330-based container; supports classpath scanning, auto-binding, and\
    \ dynamic auto-wiring"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/sisu/org.eclipse.sisu.plexus/0.3.5/org.eclipse.sisu.plexus-0.3.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.sisu.plexus"
  summary: "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://git.eclipse.org/gitroot/sisu/org.eclipse.sisu.plexus.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.sisu.plexus"
  summary: "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/sisu/org.eclipse.sisu.plexus/0.3.5/org.eclipse.sisu.plexus-0.3.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.sisu.plexus"
  summary: "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container"
  versionInfo: "0.3.5"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/functionaljava/functionaljava/4.2/functionaljava-4.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/functionaljava/functionaljava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/functionaljava/functionaljava/4.2/functionaljava-4.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/jaxb-runtime/2.4.0-b180830.0438/jaxb-runtime-2.4.0-b180830.0438.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-or-later"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://java.net/jaxb~v2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/jaxb-runtime/2.4.0-b180830.0438/jaxb-runtime-2.4.0-b180830.0438-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/txw2/2.4.0-b180830.0438/txw2-2.4.0-b180830.0438.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-or-later"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://java.net/jaxb~v2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/txw2/2.4.0-b180830.0438/txw2-2.4.0-b180830.0438-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/hamcrest/JavaHamcrest.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.1 OR GPL-2.0-only"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/javaee/metro-stax-ex.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://maven.java.net/content/repositories/releases/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/mvel/mvel2/2.4.12.Final/mvel2-2.4.12.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mvel/mvel2@2.4.12.Final"
  filesAnalyzed: false
  homepage: "http://mvel.codehaus.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "mvel2"
  summary: "MVEL is a powerful expression language for Java-based applications.\n\
    \        It provides a plethora of features and is suited for everything\n   \
    \     from the smallest property binding and extraction, to full blown scripts."
  versionInfo: "2.4.12.Final"
- SPDXID: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/mvel/mvel.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mvel/mvel2@2.4.12.Final"
  filesAnalyzed: false
  homepage: "http://mvel.codehaus.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mvel2"
  summary: "MVEL is a powerful expression language for Java-based applications.\n\
    \        It provides a plethora of features and is suited for everything\n   \
    \     from the smallest property binding and extraction, to full blown scripts."
  versionInfo: "2.4.12.Final"
- SPDXID: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/mvel/mvel2/2.4.12.Final/mvel2-2.4.12.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mvel/mvel2@2.4.12.Final"
  filesAnalyzed: false
  homepage: "http://mvel.codehaus.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mvel2"
  summary: "MVEL is a powerful expression language for Java-based applications.\n\
    \        It provides a plethora of features and is suited for everything\n   \
    \     from the smallest property binding and extraction, to full blown scripts."
  versionInfo: "2.4.12.Final"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm/9.2/asm-9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm/9.2/asm-9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-analysis/9.2/asm-analysis-9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-analysis/9.2/asm-analysis-9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-commons/9.2/asm-commons-9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-commons/9.2/asm-commons-9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-tree/9.2/asm-tree-9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-tree/9.2/asm-tree-9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-util/9.2/asm-util-9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-util/9.2/asm-util-9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@9.2"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "9.2"
- SPDXID: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/projectlombok/lombok/1.18.24/lombok-1.18.24.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.projectlombok/lombok@1.18.24"
  filesAnalyzed: false
  homepage: "https://projectlombok.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lombok"
  summary: "Spice up your java: Automatic Resource Management, automatic generation\
    \ of getters, setters, equals, hashCode and toString, and more!"
  versionInfo: "1.18.24"
- SPDXID: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/projectlombok/lombok.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.projectlombok/lombok@1.18.24"
  filesAnalyzed: false
  homepage: "https://projectlombok.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lombok"
  summary: "Spice up your java: Automatic Resource Management, automatic generation\
    \ of getters, setters, equals, hashCode and toString, and more!"
  versionInfo: "1.18.24"
- SPDXID: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/projectlombok/lombok/1.18.24/lombok-1.18.24-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.projectlombok/lombok@1.18.24"
  filesAnalyzed: false
  homepage: "https://projectlombok.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lombok"
  summary: "Spice up your java: Automatic Resource Management, automatic generation\
    \ of getters, setters, equals, hashCode and toString, and more!"
  versionInfo: "1.18.24"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.32/slf4j-api-1.7.32.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.32"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.32"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.32"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.32"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.32/slf4j-api-1.7.32-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.32"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.32"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/smali/dexlib2/2.5.2/dexlib2-2.5.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.5.2"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/JesusFreke/smali.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.5.2"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/smali/dexlib2/2.5.2/dexlib2-2.5.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.5.2"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.5.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-guice/2.1.7/sisu-guice-2.1.7-noaop.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-guice@2.1.7"
  filesAnalyzed: false
  homepage: "http://forge.sonatype.com/sisu-guice/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "sisu-guice"
  summary: "Guice trunk with some patches applied for Sisu"
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/sonatype/sisu-guice.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-guice@2.1.7"
  filesAnalyzed: false
  homepage: "http://forge.sonatype.com/sisu-guice/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-guice"
  summary: "Guice trunk with some patches applied for Sisu"
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-guice/2.1.7/sisu-guice-2.1.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-guice@2.1.7"
  filesAnalyzed: false
  homepage: "http://forge.sonatype.com/sisu-guice/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-guice"
  summary: "Guice trunk with some patches applied for Sisu"
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-inject-bean/1.4.2/sisu-inject-bean-1.4.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-bean@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "sisu-inject-bean"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/sonatype/sisu.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-bean@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-inject-bean"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-inject-bean/1.4.2/sisu-inject-bean-1.4.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-bean@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-inject-bean"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-inject-plexus/1.4.2/sisu-inject-plexus-1.4.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-plexus@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "sisu-inject-plexus"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/sonatype/sisu.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-plexus@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-inject-plexus"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/sonatype/sisu/sisu-inject-plexus/1.4.2/sisu-inject-plexus-1.4.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.sonatype.sisu/sisu-inject-plexus@1.4.2"
  filesAnalyzed: false
  homepage: "http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sisu-inject-plexus"
  summary: "NONE"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/soot-oss/soot/4.3.0/soot-4.3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.3.0"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LGPL-2.1-only"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/soot-oss/soot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.3.0"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/soot-oss/soot/4.3.0/soot-4.3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.3.0"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-Maven-xmlpull-xmlpull-1.1.3.4d-b4-min"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/xmlpull/xmlpull/1.1.3.4d_b4_min/xmlpull-1.1.3.4d_b4_min.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min"
  filesAnalyzed: false
  homepage: "http://www.xmlpull.org"
  licenseConcluded: "LicenseRef-Public-Domain"
  licenseDeclared: "LicenseRef-scancode-public-domain-disclaimer"
  name: "xmlpull"
  summary: "NONE"
  versionInfo: "1.1.3.4d_b4_min"
relationships:
- spdxElementId: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-vcs"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-failureaccess-1.0.1"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.2.0"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.1-android"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.inject-javax.inject-1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-4.2.2"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-core-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-artifact-3.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-plugin-api-3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-resolver-provider-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-settings-builder-3.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.plugin-tools-maven-plugin-annotations-3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-api-1.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-impl-1.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-spi-1.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.resolver-maven-resolver-util-1.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-dependency-tree-3.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven.shared-maven-shared-utils-3.3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.velocity-velocity-engine-core-2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.17-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-classworlds-2.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.26-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-cipher-2.0"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-sec-dispatcher-2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.0.0.v20140518"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.0.0.v20140518-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.inject-0.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.2"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.sisu-org.eclipse.sisu.plexus-0.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-9.2"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-3.0.2"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-27.1-android"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-guice-2.1.7"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-bean-1.4.2"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.sonatype.sisu-sisu-inject-plexus-1.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.7"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.5.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-9.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-9.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-9.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-xmlpull-xmlpull-1.1.3.4d-b4-min"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.1.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.3"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.3"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.32"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.soot-oss-soot-4.3.0-source-artifact"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.9.0"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.7"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-agent-jdk11-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-agent-jdk8-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-analysis-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-common-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-maven-plugin-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-test-common-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-test-jdk11-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emt4j-emt4j-test-jdk8-0.9-SNAPSHOT"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mvel-mvel2-2.4.12.Final"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-9.2"
- spdxElementId: "SPDXRef-Project-Maven-org.eclipse.emt4j-emt4j-assembly-0.9-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.projectlombok-lombok-1.18.24"
