---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-04-27T08:05:13Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://781f011f-0032-4c79-ad97-8198b4b6cca1"
documentDescribes:
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator.feature-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator.tests-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core.feature-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.crysl.handler-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.cryslhandler.feature-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.integrator.primitive-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.integrator.task-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.parent-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.repository-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.staticanalyzer-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.staticanalyzer.feature-1.0.0-SNAPSHOT"
packages:
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2021 TU Darmstadt, Paderborn University"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.codegenerator"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator.feature-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.codegenerator.feature"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator.tests-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2019 TU Darmstadt, Paderborn University"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.codegenerator.tests"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2019 TU Darmstadt, Paderborn University\nCopyright\
    \ (c) 2015-2019 TU Darmstadt, Paderborn University http://www.eclipse.org/legal/epl-2.0."
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.core"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core.feature-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.core.feature"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.crysl.handler-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2019 TU Darmstadt, Paderborn University\nCopyright\
    \ (c) 2015-2019 TU Darmstadt, Paderborn University http://www.eclipse.org/legal/epl-2.0."
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.crysl.handler"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.cryslhandler.feature-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.cryslhandler.feature"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.integrator.primitive-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2019 TU Darmstadt, Paderborn University"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.integrator.primitive"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.integrator.task-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2012 Vincent Zurczak\nCopyright (c) 2015-2019 TU Darmstadt,\
    \ Paderborn University"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.integrator.task"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.parent-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2012 Vincent Zurczak\nCopyright (c) 2015-2018 TU Darmstadt\n\
    Copyright (c) 2015-2019 TU Darmstadt, Paderborn University\nCopyright (c) 2015-2019\
    \ TU Darmstadt, Paderborn University http://www.eclipse.org/legal/epl-2.0.\nCopyright\
    \ (c) 2015-2021 TU Darmstadt, Paderborn University"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.parent"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.repository-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.repository"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.staticanalyzer-1.0.0-SNAPSHOT"
  copyrightText: "Copyright (c) 2015-2018 TU Darmstadt\nCopyright (c) 2015-2019 TU\
    \ Darmstadt, Paderborn University\nCopyright (c) 2015-2019 TU Darmstadt, Paderborn\
    \ University http://www.eclipse.org/legal/epl-2.0."
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.staticanalyzer"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.staticanalyzer.feature-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.cognicrypt.staticanalyzer.feature"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/aopalliance/aopalliance@1.0"
  filesAnalyzed: false
  homepage: "http://aopalliance.sourceforge.net"
  licenseConcluded: "LicenseRef-Public-Domain"
  licenseDeclared: "LicenseRef-scancode-public-domain-disclaimer"
  name: "aopalliance"
  summary: "AOP Alliance"
  versionInfo: "1.0"
- SPDXID: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/aopalliance/aopalliance/1.0/aopalliance-1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/aopalliance/aopalliance@1.0"
  filesAnalyzed: false
  homepage: "http://aopalliance.sourceforge.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aopalliance"
  summary: "AOP Alliance"
  versionInfo: "1.0"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2"
  copyrightText: "Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 2000 Patrice Pominville\
    \ and Feng Qian"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/jasmin/3.0.2/jasmin-3.0.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2-vcs"
  copyrightText: "Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 2000 Patrice Pominville\
    \ and Feng Qian"
  downloadLocation: "git+ssh://github.com/Sable/jasmin.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 2000 Patrice Pominville\
    \ and Feng Qian"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/jasmin/3.0.2/jasmin-3.0.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/jasmin@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/jasmin/tree/master"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jasmin"
  summary: "Java Assembler Interface for the Soot framework"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/java_cup/0.9.2/java_cup-0.9.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/java_cup@0.9.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "java_cup"
  summary: "NONE"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/java_cup/0.9.2/java_cup-0.9.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/java_cup@0.9.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "java_cup"
  summary: "NONE"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/polyglot/2006/polyglot-2006.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/polyglot@2006"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "polyglot"
  summary: "NONE"
  versionInfo: "2006"
- SPDXID: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ca/mcgill/sable/polyglot/2006/polyglot-2006-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ca.mcgill.sable/polyglot@2006"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "polyglot"
  summary: "NONE"
  versionInfo: "2006"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-1.3.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/findbugs/jsr305/1.3.9/jsr305-1.3.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.findbugs/jsr305@1.3.9"
  filesAnalyzed: false
  homepage: "http://findbugs.sourceforge.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jsr305"
  summary: "JSR305 Annotations for Findbugs"
  versionInfo: "1.3.9"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-1.3.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://findbugs.googlecode.com/svn"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.findbugs/jsr305@1.3.9"
  filesAnalyzed: false
  homepage: "http://findbugs.sourceforge.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsr305"
  summary: "JSR305 Annotations for Findbugs"
  versionInfo: "1.3.9"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4"
  copyrightText: "Copyright (c) 2008-2009 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/1.4/gson-1.4.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@1.4"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-gson/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "gson"
  summary: "Google Gson library"
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4-vcs"
  copyrightText: "Copyright (c) 2008-2009 Google Inc."
  downloadLocation: "svn+http://google-gson.googlecode.com/svn#gson"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@1.4"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-gson/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Google Gson library"
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4-source-artifact"
  copyrightText: "Copyright (c) 2008-2009 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/1.4/gson-1.4-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@1.4"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-gson/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Google Gson library"
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  copyrightText: "Copyright 2011-2017 Google Inc.\nCopyright today.year Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.1.3/error_prone_annotations-2.1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-vcs"
  copyrightText: "Copyright 2011-2017 Google Inc.\nCopyright today.year Google Inc."
  downloadLocation: "git+https://github.com/google/error-prone.git@054303e0c052808ff54208bc4b815d0b80a655a1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-source-artifact"
  copyrightText: "Copyright 2011-2017 Google Inc.\nCopyright today.year Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/errorprone/error_prone_annotations/2.1.3/error_prone_annotations-2.1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error_prone_annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  copyrightText: "Copyright (c) 2005-2018 The Guava Authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/25.0-jre/guava-25.0-jre.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.0-jre"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.0-jre"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre-vcs"
  copyrightText: "Copyright (c) 2005-2018 The Guava Authors"
  downloadLocation: "git+https://github.com/google/guava.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.0-jre"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.0-jre"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre-source-artifact"
  copyrightText: "Copyright (c) 2005-2018 The Guava Authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/25.0-jre/guava-25.0-jre-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@25.0-jre"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more."
  versionInfo: "25.0-jre"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
  copyrightText: "(c) Copyright 2002 International Business Machines Corporation\n\
    Copyright (c) 1994-2002 World Wide Web Consortium, (Massachusetts Institute of\
    \ Technology, Institut National de Recherche en Informatique et en Automatique,\
    \ Keio University)\nCopyright (c) 1999 BEA Systems\nCopyright (c) 1999 DSTC\n\
    Copyright (c) 1999 Inprise\nCopyright (c) 1999 Iona Technologies Ltd.\nCopyright\
    \ (c) 1999 The Apache Software Foundation\nCopyright (c) 1999-2002 Object Management\
    \ Group. Unlimited\nCopyright (c) 2000 Object Oriented Concepts, Inc. Billerica,\
    \ MA\nCopyright (c) 2003-2014 The Apache Software Foundation\nCopyright (c) 2009-2017\
    \ Oracle and/or its affiliates\nCopyright 1994-1996 Groupe Bull\nCopyright 1994-1996\
    \ IBM\nCopyright 1994-1996 ICL\nCopyright 1994-1996 Iona Technologies, Ltd.\n\
    Copyright 1994-1996 Novell, Inc.\nCopyright 1994-1996 Tandem Computers, Inc.\n\
    Copyright 1994-1996 Tivoli Systems, Inc.\nCopyright 1994-1996 Transarc Corporation\n\
    Copyright 1994-1997 SunSoft, Inc.\nCopyright 1995 AT&T Global Information Solutions\
    \ Company\nCopyright 1995 Digital Equipment Corporation\nCopyright 1995 Expersoft\
    \ Corporation\nCopyright 1995 Hewlett-Packard Company\nCopyright 1995 IBM (in\
    \ collaboration with Taligent, Inc.)\nCopyright 1995 International Computers Limited\n\
    Copyright 1995 Siemens Nixdorf Informationssysteme AG\nCopyright 1995 Tandem Computer\
    \ Inc. (in collaboration with Odyssey Research Assoc., Inc.)\nCopyright 1995,\
    \ 1997 Netscape Communications Corporation\nCopyright 1995-1996, 2003-2009 Sun\
    \ Microsystems, Inc.\nCopyright 1997 BEA Systems\nCopyright 1997 Northern Telecom\
    \ LImited\nCopyright 1997 Visigenic Software, Inc.\nCopyright 2000, 2002-2003\
    \ Object Management Group, Inc.\nCopyright 2000-2001 Sun Microsystems, Inc.\n\
    Copyright 2000-2001 Sun Microsystems, Inc. 901 San Antonio Road, Palo Alto, CA\
    \ 94303, U.S.A.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright\
    \ 2002 Sun Microsystems, Inc., 901 San Antonio Road, Palo Alto, California 94303,\
    \ U.S.A.\nCopyright 2003-2009 Sun Microsystems, Inc.\nCopyright 2004 Jeremy Boynes"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/inject/guice/3.0/guice-3.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@3.0"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-guice/guice/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 5 and above"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-3.0-vcs"
  copyrightText: "(c) Copyright 2002 International Business Machines Corporation\n\
    Copyright (c) 1994-2002 World Wide Web Consortium, (Massachusetts Institute of\
    \ Technology, Institut National de Recherche en Informatique et en Automatique,\
    \ Keio University)\nCopyright (c) 1999 BEA Systems\nCopyright (c) 1999 DSTC\n\
    Copyright (c) 1999 Inprise\nCopyright (c) 1999 Iona Technologies Ltd.\nCopyright\
    \ (c) 1999 The Apache Software Foundation\nCopyright (c) 1999-2002 Object Management\
    \ Group. Unlimited\nCopyright (c) 2000 Object Oriented Concepts, Inc. Billerica,\
    \ MA\nCopyright (c) 2003-2014 The Apache Software Foundation\nCopyright (c) 2009-2017\
    \ Oracle and/or its affiliates\nCopyright 1994-1996 Groupe Bull\nCopyright 1994-1996\
    \ IBM\nCopyright 1994-1996 ICL\nCopyright 1994-1996 Iona Technologies, Ltd.\n\
    Copyright 1994-1996 Novell, Inc.\nCopyright 1994-1996 Tandem Computers, Inc.\n\
    Copyright 1994-1996 Tivoli Systems, Inc.\nCopyright 1994-1996 Transarc Corporation\n\
    Copyright 1994-1997 SunSoft, Inc.\nCopyright 1995 AT&T Global Information Solutions\
    \ Company\nCopyright 1995 Digital Equipment Corporation\nCopyright 1995 Expersoft\
    \ Corporation\nCopyright 1995 Hewlett-Packard Company\nCopyright 1995 IBM (in\
    \ collaboration with Taligent, Inc.)\nCopyright 1995 International Computers Limited\n\
    Copyright 1995 Siemens Nixdorf Informationssysteme AG\nCopyright 1995 Tandem Computer\
    \ Inc. (in collaboration with Odyssey Research Assoc., Inc.)\nCopyright 1995,\
    \ 1997 Netscape Communications Corporation\nCopyright 1995-1996, 2003-2009 Sun\
    \ Microsystems, Inc.\nCopyright 1997 BEA Systems\nCopyright 1997 Northern Telecom\
    \ LImited\nCopyright 1997 Visigenic Software, Inc.\nCopyright 2000, 2002-2003\
    \ Object Management Group, Inc.\nCopyright 2000-2001 Sun Microsystems, Inc.\n\
    Copyright 2000-2001 Sun Microsystems, Inc. 901 San Antonio Road, Palo Alto, CA\
    \ 94303, U.S.A.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright\
    \ 2002 Sun Microsystems, Inc., 901 San Antonio Road, Palo Alto, California 94303,\
    \ U.S.A.\nCopyright 2003-2009 Sun Microsystems, Inc.\nCopyright 2004 Jeremy Boynes"
  downloadLocation: "svn+http://google-guice.googlecode.com/svn@1902137"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@3.0"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-guice/guice/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 5 and above"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.inject-guice-3.0-source-artifact"
  copyrightText: "(c) Copyright 2002 International Business Machines Corporation\n\
    Copyright (c) 1994-2002 World Wide Web Consortium, (Massachusetts Institute of\
    \ Technology, Institut National de Recherche en Informatique et en Automatique,\
    \ Keio University)\nCopyright (c) 1999 BEA Systems\nCopyright (c) 1999 DSTC\n\
    Copyright (c) 1999 Inprise\nCopyright (c) 1999 Iona Technologies Ltd.\nCopyright\
    \ (c) 1999 The Apache Software Foundation\nCopyright (c) 1999-2002 Object Management\
    \ Group. Unlimited\nCopyright (c) 2000 Object Oriented Concepts, Inc. Billerica,\
    \ MA\nCopyright (c) 2003-2014 The Apache Software Foundation\nCopyright (c) 2009-2017\
    \ Oracle and/or its affiliates\nCopyright 1994-1996 Groupe Bull\nCopyright 1994-1996\
    \ IBM\nCopyright 1994-1996 ICL\nCopyright 1994-1996 Iona Technologies, Ltd.\n\
    Copyright 1994-1996 Novell, Inc.\nCopyright 1994-1996 Tandem Computers, Inc.\n\
    Copyright 1994-1996 Tivoli Systems, Inc.\nCopyright 1994-1996 Transarc Corporation\n\
    Copyright 1994-1997 SunSoft, Inc.\nCopyright 1995 AT&T Global Information Solutions\
    \ Company\nCopyright 1995 Digital Equipment Corporation\nCopyright 1995 Expersoft\
    \ Corporation\nCopyright 1995 Hewlett-Packard Company\nCopyright 1995 IBM (in\
    \ collaboration with Taligent, Inc.)\nCopyright 1995 International Computers Limited\n\
    Copyright 1995 Siemens Nixdorf Informationssysteme AG\nCopyright 1995 Tandem Computer\
    \ Inc. (in collaboration with Odyssey Research Assoc., Inc.)\nCopyright 1995,\
    \ 1997 Netscape Communications Corporation\nCopyright 1995-1996, 2003-2009 Sun\
    \ Microsystems, Inc.\nCopyright 1997 BEA Systems\nCopyright 1997 Northern Telecom\
    \ LImited\nCopyright 1997 Visigenic Software, Inc.\nCopyright 2000, 2002-2003\
    \ Object Management Group, Inc.\nCopyright 2000-2001 Sun Microsystems, Inc.\n\
    Copyright 2000-2001 Sun Microsystems, Inc. 901 San Antonio Road, Palo Alto, CA\
    \ 94303, U.S.A.\nCopyright 2001-2019 The Apache Software Foundation\nCopyright\
    \ 2002 Sun Microsystems, Inc., 901 San Antonio Road, Palo Alto, California 94303,\
    \ U.S.A.\nCopyright 2003-2009 Sun Microsystems, Inc.\nCopyright 2004 Jeremy Boynes"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/inject/guice/3.0/guice-3.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.inject/guice@3.0"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/google-guice/guice/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guice"
  summary: "Guice is a lightweight dependency injection framework for Java 5 and above"
  versionInfo: "3.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  copyrightText: "Copyright (c) 1994-2001 World Wide Web Consortium, http://www.w3.org/'>\
    \ World Wide Web Consortium\nCopyright (c) 1996 Aki Yoshida\nCopyright (c) 2002\
    \ Extreme! Lab, Indiana University\nCopyright (c) 2004-2008 QOS.ch\nCopyright\
    \ (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut\
    \ National de Recherche en Informatique et en Automatique, Keio University)\n\
    Copyright (c) World Wide Web Consortium, Massachusetts Institute of Technology,\
    \ Institut National de Recherche en Informatique\nCopyright 1998-2007 The OpenLDAP\
    \ Foundation\nCopyright 2001-2005 (c) MetaStuff, Ltd.\nCopyright 2003-2013 The\
    \ Apache Software Foundation\nPortions Copyright (c) 1997-2003 The Internet Society\
    \ ()"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-vcs"
  copyrightText: "Copyright (c) 1994-2001 World Wide Web Consortium, http://www.w3.org/'>\
    \ World Wide Web Consortium\nCopyright (c) 1996 Aki Yoshida\nCopyright (c) 2002\
    \ Extreme! Lab, Indiana University\nCopyright (c) 2004-2008 QOS.ch\nCopyright\
    \ (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut\
    \ National de Recherche en Informatique et en Automatique, Keio University)\n\
    Copyright (c) World Wide Web Consortium, Massachusetts Institute of Technology,\
    \ Institut National de Recherche en Informatique\nCopyright 1998-2007 The OpenLDAP\
    \ Foundation\nCopyright 2001-2005 (c) MetaStuff, Ltd.\nCopyright 2003-2013 The\
    \ Apache Software Foundation\nPortions Copyright (c) 1997-2003 The Internet Society\
    \ ()"
  downloadLocation: "svn+http://svn.sonatype.org/spice@1513760"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-source-artifact"
  copyrightText: "Copyright (c) 1994-2001 World Wide Web Consortium, http://www.w3.org/'>\
    \ World Wide Web Consortium\nCopyright (c) 1996 Aki Yoshida\nCopyright (c) 2002\
    \ Extreme! Lab, Indiana University\nCopyright (c) 2004-2008 QOS.ch\nCopyright\
    \ (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut\
    \ National de Recherche en Informatique et en Automatique, Keio University)\n\
    Copyright (c) World Wide Web Consortium, Massachusetts Institute of Technology,\
    \ Institut National de Recherche en Informatique\nCopyright 1998-2007 The OpenLDAP\
    \ Foundation\nCopyright 2001-2005 (c) MetaStuff, Ltd.\nCopyright 2003-2013 The\
    \ Apache Software Foundation\nPortions Copyright (c) 1997-2003 The Internet Society\
    \ ()"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.j2objc/j2objc-annotations@1.1"
  filesAnalyzed: false
  homepage: "https://github.com/google/j2objc/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "j2objc-annotations"
  summary: "A set of annotations that provide additional information to the J2ObjC\n\
    \    translator to modify the result of translation."
  versionInfo: "1.1"
- SPDXID: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/googlecode/json-simple/json-simple/1.1.1/json-simple-1.1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/json-simple/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "json-simple"
  summary: "A simple Java toolkit for JSON"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://json-simple.googlecode.com/svn@1859942"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/json-simple/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-simple"
  summary: "A simple Java toolkit for JSON"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/googlecode/json-simple/json-simple/1.1.1/json-simple-1.1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/json-simple/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-simple"
  summary: "A simple Java toolkit for JSON"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  copyrightText: "Copyright (c) 1997-2018 Oracle and/or its affiliates"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-vcs"
  copyrightText: "Copyright (c) 1997-2018 Oracle and/or its affiliates"
  downloadLocation: "git+ssh://github.com/javaee/jaxb-istack-commons.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-source-artifact"
  copyrightText: "Copyright (c) 1997-2018 Oracle and/or its affiliates"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7"
  filesAnalyzed: false
  homepage: "http://java.net/istack-commons/istack-commons-runtime/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "istack-commons-runtime"
  summary: "istack common utility code"
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2005 freebxml.org\nCopyright (c) 2004-2013 Oracle and/or its affiliates\n\
    Copyright (c) 2017 Oracle and/or its affiliates\ncopyright (c) 1999 International\
    \ Business Machines, Inc., http://www.apache.org"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-vcs"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2005 freebxml.org\nCopyright (c) 2004-2013 Oracle and/or its affiliates\n\
    Copyright (c) 2017 Oracle and/or its affiliates\ncopyright (c) 1999 International\
    \ Business Machines, Inc., http://www.apache.org"
  downloadLocation: "git+ssh://github.com/javaee/metro-fi.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-source-artifact"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2005 freebxml.org\nCopyright (c) 2004-2013 Oracle and/or its affiliates\n\
    Copyright (c) 2017 Oracle and/or its affiliates\ncopyright (c) 1999 International\
    \ Business Machines, Inc., http://www.apache.org"
  downloadLocation: "https://maven.java.net/content/repositories/releases/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15"
  filesAnalyzed: false
  homepage: "http://fi.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "FastInfoset"
  summary: "Open Source implementation of the Fast Infoset Standard for Binary XML\
    \ (http://www.itu.int/ITU-T/asn1/)."
  versionInfo: "1.2.15"
- SPDXID: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-cli/commons-cli/1.4/commons-cli-1.4.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-cli/commons-cli@1.4"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-cli/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-cli"
  summary: "Apache Commons CLI provides a simple API for presenting, processing and\
    \ validating a command line interface."
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/commons/proper/cli@1814266"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-cli/commons-cli@1.4"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-cli/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-cli"
  summary: "Apache Commons CLI provides a simple API for presenting, processing and\
    \ validating a command line interface."
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-cli/commons-cli/1.4/commons-cli-1.4-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-cli/commons-cli@1.4"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-cli/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-cli"
  summary: "Apache Commons CLI provides a simple API for presenting, processing and\
    \ validating a command line interface."
  versionInfo: "1.4"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11"
  copyrightText: "Copyright (c) 2000-2007 The Apache Software Foundation\nCopyright\
    \ 2006 Sun Microsystems, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.11/commons-codec-1.11.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.11"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.11"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11-vcs"
  copyrightText: "Copyright (c) 2000-2007 The Apache Software Foundation\nCopyright\
    \ 2006 Sun Microsystems, Inc."
  downloadLocation: "svn+http://svn.apache.org/repos/asf/commons/proper/codec@1873317"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.11"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.11"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11-source-artifact"
  copyrightText: "Copyright (c) 2000-2007 The Apache Software Foundation\nCopyright\
    \ 2006 Sun Microsystems, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.11/commons-codec-1.11-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.11"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.11"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.6"
  copyrightText: "(c) A Test Line\nCopyright 2002-2017 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.6/commons-io-2.6.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.6"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-io/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.6"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.6-vcs"
  copyrightText: "(c) A Test Line\nCopyright 2002-2017 The Apache Software Foundation"
  downloadLocation: "git+http://git-wip-us.apache.org/repos/asf/commons-io.git@2ae025fe5c4a7d2046c53072b0898e37a079fe62"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.6"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.6"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.6-source-artifact"
  copyrightText: "(c) A Test Line\nCopyright 2002-2017 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.6/commons-io-2.6-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.6"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.6"
- SPDXID: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2003 Apache Software\nCopyright 2001-2007 The Apache Software Foundation\n\
    Copyright 2002-2004 The Apache Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-logging/commons-logging/1.1.1/commons-logging-1.1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-logging/commons-logging@1.1.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/logging"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-logging"
  summary: "Commons Logging is a thin adapter allowing configurable bridging to other,\n\
    \    well known logging systems."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1-vcs"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2003 Apache Software\nCopyright 2001-2007 The Apache Software Foundation\n\
    Copyright 2002-2004 The Apache Software"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/commons/proper/logging@603598"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-logging/commons-logging@1.1.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/logging"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-logging"
  summary: "Commons Logging is a thin adapter allowing configurable bridging to other,\n\
    \    well known logging systems."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2003 Apache Software\nCopyright 2001-2007 The Apache Software Foundation\n\
    Copyright 2002-2004 The Apache Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-logging/commons-logging/1.1.1/commons-logging-1.1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-logging/commons-logging@1.1.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/logging"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-logging"
  summary: "Commons Logging is a thin adapter allowing configurable bridging to other,\n\
    \    well known logging systems."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/darmstadt/tu/crossing/CrySL/de.darmstadt.tu.crossing.CrySL/2.0.1/de.darmstadt.tu.crossing.CrySL-2.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.darmstadt.tu.crossing.CrySL/de.darmstadt.tu.crossing.CrySL@2.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.darmstadt.tu.crossing.CrySL"
  summary: "NONE"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL.ide-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/darmstadt/tu/crossing/CrySL/de.darmstadt.tu.crossing.CrySL.ide/2.0.1/de.darmstadt.tu.crossing.CrySL.ide-2.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.darmstadt.tu.crossing.CrySL/de.darmstadt.tu.crossing.CrySL.ide@2.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.darmstadt.tu.crossing.CrySL.ide"
  summary: "NONE"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL.ui-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/darmstadt/tu/crossing/CrySL/de.darmstadt.tu.crossing.CrySL.ui/2.0.1/de.darmstadt.tu.crossing.CrySL.ui-2.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.darmstadt.tu.crossing.CrySL/de.darmstadt.tu.crossing.CrySL.ui@2.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "de.darmstadt.tu.crossing.CrySL.ui"
  summary: "NONE"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  copyrightText: "NONE"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/CryptoAnalysis/2.7.2/CryptoAnalysis-2.7.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/CryptoAnalysis@2.7.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "CryptoAnalysis"
  summary: "NONE"
  versionInfo: "2.7.2"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-PathExpression-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/PathExpression/1.0.0/PathExpression-1.0.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/PathExpression@1.0.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "PathExpression"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-WPDS-2.5.1"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/WPDS/2.5.1/WPDS-2.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/WPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "WPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-WPDS-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/WPDS/2.5.1/WPDS-2.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/WPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "WPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/boomerangPDS/2.5.1/boomerangPDS-2.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/boomerangPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boomerangPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/boomerangPDS/2.5.1/boomerangPDS-2.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/boomerangPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boomerangPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/idealPDS/2.5.1/idealPDS-2.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/idealPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "idealPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/idealPDS/2.5.1/idealPDS-2.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/idealPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "idealPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-synchronizedPDS-2.5.1"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/synchronizedPDS/2.5.1/synchronizedPDS-2.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/synchronizedPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "synchronizedPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-synchronizedPDS-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/synchronizedPDS/2.5.1/synchronizedPDS-2.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/synchronizedPDS@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "synchronizedPDS"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-testCore-2.5.1"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/testCore/2.5.1/testCore-2.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/testCore@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "testCore"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.fraunhofer.iem-testCore-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2018 Fraunhofer IEM, Paderborn"
  downloadLocation: "https://soot-build.cs.uni-paderborn.de/nexus/repository/soot-release/de/fraunhofer/iem/testCore/2.5.1/testCore-2.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.fraunhofer.iem/testCore@2.5.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "testCore"
  summary: "NONE"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0"
  copyrightText: "Copyright (c) 2009-2013 Panxiaobo"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/axml/2.0.0/axml-2.0.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.0.0"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0-vcs"
  copyrightText: "Copyright (c) 2009-2013 Panxiaobo"
  downloadLocation: "git+ssh://github.com/Sable/axml.gitconnection.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.0.0"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2009-2013 Panxiaobo"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/axml/2.0.0/axml-2.0.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/axml@2.0.0"
  filesAnalyzed: false
  homepage: "https://bitbucket.org/pxb1988/axml/pull-requests/2/feature-load-android-resources-from/diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "axml"
  summary: "The axml components for reading binary Android XML files forked from a\
    \ not further maintained\n        repository created by Bob Pan"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2"
  copyrightText: "Copyright (c) 2012 Eric Bodden\nCopyright (c) 2012-2013, 2015 Eric\
    \ Bodden\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique de\
    \ Montreal\nCopyright (c) 2013Johannes Lerch\nCopyright (c) 2014 Johannes Lerch,\
    \ Johannes Spaeth\nCopyright (c) 2014-2015 Johannes Lerch"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/heros/1.2.2/heros-1.2.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LGPL-2.1-only"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2-vcs"
  copyrightText: "Copyright (c) 2012 Eric Bodden\nCopyright (c) 2012-2013, 2015 Eric\
    \ Bodden\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique de\
    \ Montreal\nCopyright (c) 2013Johannes Lerch\nCopyright (c) 2014 Johannes Lerch,\
    \ Johannes Spaeth\nCopyright (c) 2014-2015 Johannes Lerch"
  downloadLocation: "git+ssh://github.com/Sable/heros.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2-source-artifact"
  copyrightText: "Copyright (c) 2012 Eric Bodden\nCopyright (c) 2012-2013, 2015 Eric\
    \ Bodden\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique de\
    \ Montreal\nCopyright (c) 2013Johannes Lerch\nCopyright (c) 2014 Johannes Lerch,\
    \ Johannes Spaeth\nCopyright (c) 2014-2015 Johannes Lerch"
  downloadLocation: "https://repo.maven.apache.org/maven2/de/upb/cs/swt/heros/1.2.2/heros-1.2.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/de.upb.cs.swt/heros@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/Sable/heros"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "heros"
  summary: "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged\
    \ into existing, Java-based\n        program analysis frameworks. A reference\
    \ connector exists for the Soot framework."
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35"
  copyrightText: "Copyright (c) 2016 Johno Crawford\nCopyright (c) 2017 Harith Elrufaie\n\
    Copyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c)\
    \ 2019 Luke Hutchison\nCopyright (c) 2019 jacobg, Luke Hutchison"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/github/classgraph/classgraph/4.8.35/classgraph-4.8.35.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.github.classgraph/classgraph@4.8.35"
  filesAnalyzed: false
  homepage: "https://github.com/classgraph/classgraph"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "classgraph"
  summary: "The uber-fast, ultra-lightweight classpath and module scanner for JVM\
    \ languages."
  versionInfo: "4.8.35"
- SPDXID: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35-vcs"
  copyrightText: "Copyright (c) 2016 Johno Crawford\nCopyright (c) 2017 Harith Elrufaie\n\
    Copyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c)\
    \ 2019 Luke Hutchison\nCopyright (c) 2019 jacobg, Luke Hutchison"
  downloadLocation: "git+ssh://github.com/classgraph/classgraph.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.github.classgraph/classgraph@4.8.35"
  filesAnalyzed: false
  homepage: "https://github.com/classgraph/classgraph"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "classgraph"
  summary: "The uber-fast, ultra-lightweight classpath and module scanner for JVM\
    \ languages."
  versionInfo: "4.8.35"
- SPDXID: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35-source-artifact"
  copyrightText: "Copyright (c) 2016 Johno Crawford\nCopyright (c) 2017 Harith Elrufaie\n\
    Copyright (c) 2017 R. Kempees\nCopyright (c) 2017 Sergey Bespalov\nCopyright (c)\
    \ 2019 Luke Hutchison\nCopyright (c) 2019 jacobg, Luke Hutchison"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/github/classgraph/classgraph/4.8.35/classgraph-4.8.35-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.github.classgraph/classgraph@4.8.35"
  filesAnalyzed: false
  homepage: "https://github.com/classgraph/classgraph"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "classgraph"
  summary: "The uber-fast, ultra-lightweight classpath and module scanner for JVM\
    \ languages."
  versionInfo: "4.8.35"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/javaee/activation.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.activation/javax.activation-api@1.2.0"
  filesAnalyzed: false
  homepage: "http://java.net/all/javax.activation-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.activation-api"
  summary: "JavaBeans Activation Framework API jar"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "git+https://github.com/javaee/javax.annotation.git@5000694c178b93a952510dff6afcc2101e6e0490"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
  copyrightText: "Copyright (c) 2009 The JSR-330 Expert Group"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/inject/javax.inject/1/javax.inject-1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.inject/javax.inject@1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/atinject/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "javax.inject"
  summary: "The javax.inject API"
  versionInfo: "1"
- SPDXID: "SPDXRef-Package-Maven-javax.inject-javax.inject-1-source-artifact"
  copyrightText: "Copyright (c) 2009 The JSR-330 Expert Group"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/inject/javax.inject/1/javax.inject-1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.inject/javax.inject@1"
  filesAnalyzed: false
  homepage: "http://code.google.com/p/atinject/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.inject"
  summary: "The javax.inject API"
  versionInfo: "1"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 2004-2017 Oracle\n\
    Copyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle and/or\
    \ its affiliates\nCopyright 2002-2003, 2315 BEA Systems, Inc. North First Street,\
    \ San Jose CA, 95131\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://maven.java.net/content/repositories/releases/javax/xml/bind/jaxb-api/2.4.0-b180725.0427/jaxb-api-2.4.0-b180725.0427.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0"
  licenseDeclared: "CDDL-1.1 AND GPL-2.0-only WITH Classpath-exception-2.0"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 2004-2017 Oracle\n\
    Copyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle and/or\
    \ its affiliates\nCopyright 2002-2003, 2315 BEA Systems, Inc. North First Street,\
    \ San Jose CA, 95131\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/javaee/jaxb-spec.git@300be5a391f1c10ee61b171df513a4c8c9182c3c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2018 Oracle and/or its affiliates\nCopyright (c) 2004-2017 Oracle\n\
    Copyright (c) 2017 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle and/or\
    \ its affiliates\nCopyright 2002-2003, 2315 BEA Systems, Inc. North First Street,\
    \ San Jose CA, 95131\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://maven.java.net/content/repositories/releases/javax/xml/bind/jaxb-api/2.4.0-b180725.0427/jaxb-api-2.4.0-b180725.0427-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427"
  filesAnalyzed: false
  homepage: "https://github.com/javaee/jaxb-spec/jaxb-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-api"
  summary: "JAXB (JSR 222) API"
  versionInfo: "2.4.0-b180725.0427"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13/junit-4.13.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13-vcs"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "git+https://github.com/junit-team/junit4.git@038f7518fc1018b26df608e3e5dce6db4611be29"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13-source-artifact"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13/junit-4.13-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13"
- SPDXID: "SPDXRef-Package-Maven-log4j-log4j-1.2.17"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2003 Apache Software\n\
    Copyright 2001-2012 The Apache Software Foundation\nCopyright 2002 copy -$\nCopyright\
    \ 2002-2004 copy - Apache Software Foundation\nCopyright 2003 copy - Apache Software\
    \ Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/log4j/log4j/1.2.17/log4j-1.2.17.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/log4j/log4j@1.2.17"
  filesAnalyzed: false
  homepage: "http://logging.apache.org/log4j/1.2/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "log4j"
  summary: "Apache Log4j 1.2"
  versionInfo: "1.2.17"
- SPDXID: "SPDXRef-Package-Maven-log4j-log4j-1.2.17-vcs"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2003 Apache Software\n\
    Copyright 2001-2012 The Apache Software Foundation\nCopyright 2002 copy -$\nCopyright\
    \ 2002-2004 copy - Apache Software Foundation\nCopyright 2003 copy - Apache Software\
    \ Foundation"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/logging/log4j@1342873"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/log4j/log4j@1.2.17"
  filesAnalyzed: false
  homepage: "http://logging.apache.org/log4j/1.2/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j"
  summary: "Apache Log4j 1.2"
  versionInfo: "1.2.17"
- SPDXID: "SPDXRef-Package-Maven-log4j-log4j-1.2.17-source-artifact"
  copyrightText: "Copyright (c) 1999-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright (c) 2003 Apache Software\n\
    Copyright 2001-2012 The Apache Software Foundation\nCopyright 2002 copy -$\nCopyright\
    \ 2002-2004 copy - Apache Software Foundation\nCopyright 2003 copy - Apache Software\
    \ Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/log4j/log4j/1.2.17/log4j-1.2.17-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/log4j/log4j@1.2.17"
  filesAnalyzed: false
  homepage: "http://logging.apache.org/log4j/1.2/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j"
  summary: "Apache Log4j 1.2"
  versionInfo: "1.2.17"
- SPDXID: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1"
  copyrightText: "Copyright 2010 Srikanth Reddy Lingala"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/lingala/zip4j/zip4j/2.1.1/zip4j-2.1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.lingala.zip4j/zip4j@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/srikanth-lingala/zip4j"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "zip4j"
  summary: "Zip4j - A Java library for zip files and streams"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1-vcs"
  copyrightText: "Copyright 2010 Srikanth Reddy Lingala"
  downloadLocation: "git+ssh://github.com/srikanth-lingala/zip4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.lingala.zip4j/zip4j@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/srikanth-lingala/zip4j"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "zip4j"
  summary: "Zip4j - A Java library for zip files and streams"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1-source-artifact"
  copyrightText: "Copyright 2010 Srikanth Reddy Lingala"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/lingala/zip4j/zip4j/2.1.1/zip4j-2.1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.lingala.zip4j/zip4j@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/srikanth-lingala/zip4j"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "zip4j"
  summary: "Zip4j - A Java library for zip files and streams"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-org.antlr-antlr-runtime-3.2"
  copyrightText: "Copyright (c) 2005-2008 Terence Parr"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/antlr/antlr-runtime/3.2/antlr-runtime-3.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.antlr/antlr-runtime@3.2"
  filesAnalyzed: false
  homepage: "http://www.antlr.org"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "NOASSERTION"
  name: "antlr-runtime"
  summary: "A framework for constructing recognizers, compilers, and translators from\
    \ grammatical descriptions containing Java, C#, C++, or Python actions."
  versionInfo: "3.2"
- SPDXID: "SPDXRef-Package-Maven-org.antlr-antlr-runtime-3.2-source-artifact"
  copyrightText: "Copyright (c) 2005-2008 Terence Parr"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/antlr/antlr-runtime/3.2/antlr-runtime-3.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.antlr/antlr-runtime@3.2"
  filesAnalyzed: false
  homepage: "http://www.antlr.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "antlr-runtime"
  summary: "A framework for constructing recognizers, compilers, and translators from\
    \ grammatical descriptions containing Java, C#, C++, or Python actions."
  versionInfo: "3.2"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2020 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.11/commons-lang3-3.11.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.11"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11-vcs"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2020 The Apache Software Foundation"
  downloadLocation: "git+http://gitbox.apache.org/repos/asf/commons-lang.git@f62f0f59a33d2c42bd4236ea7122735de30d91fc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.11"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11-source-artifact"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2020 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.11/commons-lang3-3.11-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.11"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
  copyrightText: "Copyright 1999-2019 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/httpcomponents/httpclient/4.5.9/httpclient-4.5.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpclient@4.5.9"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "httpclient"
  summary: "Apache HttpComponents Client"
  versionInfo: "4.5.9"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9-vcs"
  copyrightText: "Copyright 1999-2019 The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/httpcomponents-client.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpclient@4.5.9"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "httpclient"
  summary: "Apache HttpComponents Client"
  versionInfo: "4.5.9"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9-source-artifact"
  copyrightText: "Copyright 1999-2019 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/httpcomponents/httpclient/4.5.9/httpclient-4.5.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpclient@4.5.9"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "httpclient"
  summary: "Apache HttpComponents Client"
  versionInfo: "4.5.9"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11"
  copyrightText: "Copyright 2005-2019 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/httpcomponents/httpcore/4.4.11/httpcore-4.4.11.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-core-ga"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "httpcore"
  summary: "Apache HttpComponents Core (blocking I/O)"
  versionInfo: "4.4.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11-vcs"
  copyrightText: "Copyright 2005-2019 The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/httpcomponents-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-core-ga"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "httpcore"
  summary: "Apache HttpComponents Core (blocking I/O)"
  versionInfo: "4.4.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11-source-artifact"
  copyrightText: "Copyright 2005-2019 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/httpcomponents/httpcore/4.4.11/httpcore-4.4.11-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11"
  filesAnalyzed: false
  homepage: "http://hc.apache.org/httpcomponents-core-ga"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "httpcore"
  summary: "Apache HttpComponents Core (blocking I/O)"
  versionInfo: "4.4.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-api/2.11.0/log4j-api-2.11.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0-vcs"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/logging-log4j2.git@c4e52eb9dca46411d18ea3ef5a58bf892eaa269a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0-source-artifact"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-api/2.11.0/log4j-api-2.11.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.11.0/log4j-core-2.11.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "log4j-core"
  summary: "The Apache Log4j Implementation"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0-vcs"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/logging-log4j2.git@c4e52eb9dca46411d18ea3ef5a58bf892eaa269a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-core"
  summary: "The Apache Log4j Implementation"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0-source-artifact"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.11.0/log4j-core-2.11.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-core/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-core"
  summary: "The Apache Log4j Implementation"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-aether-provider/3.3.3/maven-aether-provider-3.3.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-aether-provider@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-aether-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-aether-provider"
  summary: "Extensions to Aether for utilizing Maven POM and repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3-vcs"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/maven.git@7994120775791599e205a5524ec3e0dfe41d4a06"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-aether-provider@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-aether-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-aether-provider"
  summary: "Extensions to Aether for utilizing Maven POM and repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3-source-artifact"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-aether-provider/3.3.3/maven-aether-provider-3.3.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-aether-provider@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-aether-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-aether-provider"
  summary: "Extensions to Aether for utilizing Maven POM and repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-builder-support/3.3.3/maven-builder-support-3.3.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-builder-support"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3-vcs"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/maven.git@7994120775791599e205a5524ec3e0dfe41d4a06"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-builder-support"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3-source-artifact"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-builder-support/3.3.3/maven-builder-support-3.3.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-builder-support@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-builder-support"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-builder-support"
  summary: "Support for descriptor builders (model, setting, toolchains)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.3.3/maven-model-3.3.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3-vcs"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/maven.git@7994120775791599e205a5524ec3e0dfe41d4a06"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3-source-artifact"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.3.3/maven-model-3.3.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model-builder/3.3.3/maven-model-builder-3.3.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model-builder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3-vcs"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/maven.git@7994120775791599e205a5524ec3e0dfe41d4a06"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model-builder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3-source-artifact"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model-builder/3.3.3/maven-model-builder-3.3.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model-builder@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-model-builder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model-builder"
  summary: "The effective model builder, with inheritance, profile activation, interpolation,\
    \ ..."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-repository-metadata/3.3.3/maven-repository-metadata-3.3.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-repository-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3-vcs"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/maven.git@7994120775791599e205a5524ec3e0dfe41d4a06"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-repository-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3-source-artifact"
  copyrightText: "Copyright 2001-2006 The Codehaus Foundation\nCopyright 2001-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-repository-metadata/3.3.3/maven-repository-metadata-3.3.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.3"
  filesAnalyzed: false
  homepage: "http://maven.apache.org/ref/3.3.3/maven-repository-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-repository-metadata"
  summary: "Per-directory local and remote repository metadata."
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/bouncycastle/bcprov-jdk15on/1.62/bcprov-jdk15on-1.62.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bcprov-jdk15on"
  summary: "The Bouncy Castle Crypto package is a Java implementation of cryptographic\
    \ algorithms. This jar contains JCE provider and lightweight API for the Bouncy\
    \ Castle Cryptography APIs for JDK 1.5 to JDK 1.8."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/bcgit/bc-java.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcprov-jdk15on"
  summary: "The Bouncy Castle Crypto package is a Java implementation of cryptographic\
    \ algorithms. This jar contains JCE provider and lightweight API for the Bouncy\
    \ Castle Cryptography APIs for JDK 1.5 to JDK 1.8."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/bouncycastle/bcprov-jdk15on/1.62/bcprov-jdk15on-1.62-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcprov-jdk15on"
  summary: "The Bouncy Castle Crypto package is a Java implementation of cryptographic\
    \ algorithms. This jar contains JCE provider and lightweight API for the Bouncy\
    \ Castle Cryptography APIs for JDK 1.5 to JDK 1.8."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/bouncycastle/bctls-jdk15on/1.62/bctls-jdk15on-1.62.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bctls-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bctls-jdk15on"
  summary: "The Bouncy Castle Java APIs for TLS and DTLS, including a provider for\
    \ the JSSE."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/bcgit/bc-java.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bctls-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bctls-jdk15on"
  summary: "The Bouncy Castle Java APIs for TLS and DTLS, including a provider for\
    \ the JSSE."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/bouncycastle/bctls-jdk15on/1.62/bctls-jdk15on-1.62-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.bouncycastle/bctls-jdk15on@1.62"
  filesAnalyzed: false
  homepage: "http://www.bouncycastle.org/java.html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bctls-jdk15on"
  summary: "The Bouncy Castle Java APIs for TLS and DTLS, including a provider for\
    \ the JSSE."
  versionInfo: "1.62"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  copyrightText: "(c) 1996, 2004 Carsten Heinz\n(c) 1997 Detlev Droege\n(c) 1997 Dominique\
    \ de Waleffe\n(c) 1997 Dominique de Waleffe Extended\n(c) 1997 Kai Wollenweber\n\
    (c) 1998 Christian Haul\n(c) 1998 Detlef Reimers\n(c) 1998 Juergen Heim\n(c) 1998\
    \ Kai Below\n(c) 1998 Michael\n(c) 1998-1999 Peter Bartke\n(c) 1999 Aidan Philip\
    \ Heerdegen\n(c) 1999 Berthold\n(c) 1999 Jens T. Berger Thielemann\n(c) 1999 Jos\
    \ e Romildo Malaquias\n(c) 1999 Michael Wiese\n(c) 1999 Patrick Cousot\n(c) 1999\
    \ Torben Hoffmann\n(c) 2000 Achim D. Brucker\n(c) 2000 Rolf Niepraschk\n(c) 2000\
    \ Sonja Weidmann\n(c) 2000 by Andreas Matthias\n(c) 2001 Oliver Baum\n(c) 2001\
    \ Ralph Becket\n(c) 2001-2002 Ulrich G. Wortmann\n(c) 2002 Andrew Zabolotny\n\
    (c) 2002 Geraint Paul Bevan\n(c) 2002 Mark van Eijk\n(c) 2002 Martin Brodbeck\n\
    (c) 2002 Neil Conway\n(c) 2002 Robert Frank\n(c) 2002-2003 Jean-Philippe Grivet\n\
    (c) 2003 Adam Grabowski\n(c) 2003 Cameron H. G. Wright <c.h.g.wright@ieee.org>\n\
    (c) 2003 Daniel Gazard\n(c) 2003 Dirk Jesko\n(c) 2003 Jonathan Sauer\n(c) 2003\
    \ Riccardo Murri <riccardo.murri@gmx.it>\n(c) 2004 Brian Christensen\n(c) 2004\
    \ Martine Gautier\n(c) 2004 William Thimbleby\n(c) 2004, 2006 Brooks Moses\n(c)\
    \ 2005 Christophe Jorssen\n(c) 2006 Christoph Kiefer\n(c) 2006 Herbert Voss\n\
    (c) 2006 Michael Franke\n(c) 2006 Santiago Urue\n(c) 2013 Heiko Oberdiek\n(c)\
    \ 2013 Ignacio D\n(c) 2013 Jobst Hoffmann\n(c) 2013 Stefan Pinnow\n(c) 2013 Stephan\
    \ Hennig\n(c) Andres Becerra Sandoval\n(c) Christoph Giess\n(c) Copyright 1996-1997\
    \ Taligent, Inc.\n(c) Copyright 1996-1998 IBM Corp.\n(c) Gerd Neugebauer\n(c)\
    \ Robert Wenner\n(c) Steffen Klupsch\n(c) Torsten Neuer\nCopyright (c) 1989, 1991\
    \ Free Software Foundation, Inc.\nCopyright (c) 1994-2000, 2003-2006, 2008-2013,\
    \ 2015 Oracle and/or its affiliates\nCopyright (c) 1996-1997, 1999, 2004-2005,\
    \ 2013 Oracle and/or its affiliates\nCopyright (c) 2004 World Wide Web Consortium\n\
    Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright (c) 2006-2009 Google\
    \ Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\n\
    Copyright (c) 2007 Julio Vilmar Gesser\nCopyright (c) 2007 Julio Vilmar Gesser\
    \ jgesser@gmail.com http://code.google.com/p/javaparser\nCopyright (c) 2007-2008\
    \ Julio Vilmar Gesser\nCopyright (c) 2009 by Oracle Corporation\nCopyright (c)\
    \ 2012-2016 University of Washington\nCopyright 1994-2008 Sun Microsystems, Inc.\n\
    Copyright 2003 Wily Technology, Inc.\nCopyright 2012 Twitter, Inc\nCopyright 2012\
    \ Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\nCopyright Checker\
    \ Framework Development Team\ncopyright 1996, 2004 Carsten Heinz\ncopyright 2006-2007\
    \ Brooks Moses\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.0.0/checker-compat-qual-2.0.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "CC-BY-2.5"
  licenseDeclared: "MIT AND GPL-2.0-only WITH Classpath-exception-2.0"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-vcs"
  copyrightText: "(c) 1996, 2004 Carsten Heinz\n(c) 1997 Detlev Droege\n(c) 1997 Dominique\
    \ de Waleffe\n(c) 1997 Dominique de Waleffe Extended\n(c) 1997 Kai Wollenweber\n\
    (c) 1998 Christian Haul\n(c) 1998 Detlef Reimers\n(c) 1998 Juergen Heim\n(c) 1998\
    \ Kai Below\n(c) 1998 Michael\n(c) 1998-1999 Peter Bartke\n(c) 1999 Aidan Philip\
    \ Heerdegen\n(c) 1999 Berthold\n(c) 1999 Jens T. Berger Thielemann\n(c) 1999 Jos\
    \ e Romildo Malaquias\n(c) 1999 Michael Wiese\n(c) 1999 Patrick Cousot\n(c) 1999\
    \ Torben Hoffmann\n(c) 2000 Achim D. Brucker\n(c) 2000 Rolf Niepraschk\n(c) 2000\
    \ Sonja Weidmann\n(c) 2000 by Andreas Matthias\n(c) 2001 Oliver Baum\n(c) 2001\
    \ Ralph Becket\n(c) 2001-2002 Ulrich G. Wortmann\n(c) 2002 Andrew Zabolotny\n\
    (c) 2002 Geraint Paul Bevan\n(c) 2002 Mark van Eijk\n(c) 2002 Martin Brodbeck\n\
    (c) 2002 Neil Conway\n(c) 2002 Robert Frank\n(c) 2002-2003 Jean-Philippe Grivet\n\
    (c) 2003 Adam Grabowski\n(c) 2003 Cameron H. G. Wright <c.h.g.wright@ieee.org>\n\
    (c) 2003 Daniel Gazard\n(c) 2003 Dirk Jesko\n(c) 2003 Jonathan Sauer\n(c) 2003\
    \ Riccardo Murri <riccardo.murri@gmx.it>\n(c) 2004 Brian Christensen\n(c) 2004\
    \ Martine Gautier\n(c) 2004 William Thimbleby\n(c) 2004, 2006 Brooks Moses\n(c)\
    \ 2005 Christophe Jorssen\n(c) 2006 Christoph Kiefer\n(c) 2006 Herbert Voss\n\
    (c) 2006 Michael Franke\n(c) 2006 Santiago Urue\n(c) 2013 Heiko Oberdiek\n(c)\
    \ 2013 Ignacio D\n(c) 2013 Jobst Hoffmann\n(c) 2013 Stefan Pinnow\n(c) 2013 Stephan\
    \ Hennig\n(c) Andres Becerra Sandoval\n(c) Christoph Giess\n(c) Copyright 1996-1997\
    \ Taligent, Inc.\n(c) Copyright 1996-1998 IBM Corp.\n(c) Gerd Neugebauer\n(c)\
    \ Robert Wenner\n(c) Steffen Klupsch\n(c) Torsten Neuer\nCopyright (c) 1989, 1991\
    \ Free Software Foundation, Inc.\nCopyright (c) 1994-2000, 2003-2006, 2008-2013,\
    \ 2015 Oracle and/or its affiliates\nCopyright (c) 1996-1997, 1999, 2004-2005,\
    \ 2013 Oracle and/or its affiliates\nCopyright (c) 2004 World Wide Web Consortium\n\
    Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright (c) 2006-2009 Google\
    \ Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\n\
    Copyright (c) 2007 Julio Vilmar Gesser\nCopyright (c) 2007 Julio Vilmar Gesser\
    \ jgesser@gmail.com http://code.google.com/p/javaparser\nCopyright (c) 2007-2008\
    \ Julio Vilmar Gesser\nCopyright (c) 2009 by Oracle Corporation\nCopyright (c)\
    \ 2012-2016 University of Washington\nCopyright 1994-2008 Sun Microsystems, Inc.\n\
    Copyright 2003 Wily Technology, Inc.\nCopyright 2012 Twitter, Inc\nCopyright 2012\
    \ Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\nCopyright Checker\
    \ Framework Development Team\ncopyright 1996, 2004 Carsten Heinz\ncopyright 2006-2007\
    \ Brooks Moses\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/typetools/checker-framework.git@73838f96c661ba21d3f1d02e14597a5878661267"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-source-artifact"
  copyrightText: "(c) 1996, 2004 Carsten Heinz\n(c) 1997 Detlev Droege\n(c) 1997 Dominique\
    \ de Waleffe\n(c) 1997 Dominique de Waleffe Extended\n(c) 1997 Kai Wollenweber\n\
    (c) 1998 Christian Haul\n(c) 1998 Detlef Reimers\n(c) 1998 Juergen Heim\n(c) 1998\
    \ Kai Below\n(c) 1998 Michael\n(c) 1998-1999 Peter Bartke\n(c) 1999 Aidan Philip\
    \ Heerdegen\n(c) 1999 Berthold\n(c) 1999 Jens T. Berger Thielemann\n(c) 1999 Jos\
    \ e Romildo Malaquias\n(c) 1999 Michael Wiese\n(c) 1999 Patrick Cousot\n(c) 1999\
    \ Torben Hoffmann\n(c) 2000 Achim D. Brucker\n(c) 2000 Rolf Niepraschk\n(c) 2000\
    \ Sonja Weidmann\n(c) 2000 by Andreas Matthias\n(c) 2001 Oliver Baum\n(c) 2001\
    \ Ralph Becket\n(c) 2001-2002 Ulrich G. Wortmann\n(c) 2002 Andrew Zabolotny\n\
    (c) 2002 Geraint Paul Bevan\n(c) 2002 Mark van Eijk\n(c) 2002 Martin Brodbeck\n\
    (c) 2002 Neil Conway\n(c) 2002 Robert Frank\n(c) 2002-2003 Jean-Philippe Grivet\n\
    (c) 2003 Adam Grabowski\n(c) 2003 Cameron H. G. Wright <c.h.g.wright@ieee.org>\n\
    (c) 2003 Daniel Gazard\n(c) 2003 Dirk Jesko\n(c) 2003 Jonathan Sauer\n(c) 2003\
    \ Riccardo Murri <riccardo.murri@gmx.it>\n(c) 2004 Brian Christensen\n(c) 2004\
    \ Martine Gautier\n(c) 2004 William Thimbleby\n(c) 2004, 2006 Brooks Moses\n(c)\
    \ 2005 Christophe Jorssen\n(c) 2006 Christoph Kiefer\n(c) 2006 Herbert Voss\n\
    (c) 2006 Michael Franke\n(c) 2006 Santiago Urue\n(c) 2013 Heiko Oberdiek\n(c)\
    \ 2013 Ignacio D\n(c) 2013 Jobst Hoffmann\n(c) 2013 Stefan Pinnow\n(c) 2013 Stephan\
    \ Hennig\n(c) Andres Becerra Sandoval\n(c) Christoph Giess\n(c) Copyright 1996-1997\
    \ Taligent, Inc.\n(c) Copyright 1996-1998 IBM Corp.\n(c) Gerd Neugebauer\n(c)\
    \ Robert Wenner\n(c) Steffen Klupsch\n(c) Torsten Neuer\nCopyright (c) 1989, 1991\
    \ Free Software Foundation, Inc.\nCopyright (c) 1994-2000, 2003-2006, 2008-2013,\
    \ 2015 Oracle and/or its affiliates\nCopyright (c) 1996-1997, 1999, 2004-2005,\
    \ 2013 Oracle and/or its affiliates\nCopyright (c) 2004 World Wide Web Consortium\n\
    Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright (c) 2006-2009 Google\
    \ Inc.\nCopyright (c) 2007 Free Software Foundation, Inc. <http://fsf.org/>\n\
    Copyright (c) 2007 Julio Vilmar Gesser\nCopyright (c) 2007 Julio Vilmar Gesser\
    \ jgesser@gmail.com http://code.google.com/p/javaparser\nCopyright (c) 2007-2008\
    \ Julio Vilmar Gesser\nCopyright (c) 2009 by Oracle Corporation\nCopyright (c)\
    \ 2012-2016 University of Washington\nCopyright 1994-2008 Sun Microsystems, Inc.\n\
    Copyright 2003 Wily Technology, Inc.\nCopyright 2012 Twitter, Inc\nCopyright 2012\
    \ Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\nCopyright Checker\
    \ Framework Development Team\ncopyright 1996, 2004 Carsten Heinz\ncopyright 2006-2007\
    \ Brooks Moses\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/checkerframework/checker-compat-qual/2.0.0/checker-compat-qual-2.0.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0"
  filesAnalyzed: false
  homepage: "http://checkerframework.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "checker-compat-qual"
  summary: "Checker Qual is the set of annotations (qualifiers) and supporting classes\n\
    \        used by the Checker Framework to type check Java source code.  Please\n\
    \        see artifact:\n        org.checkerframework:checker"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.14/animal-sniffer-annotations-1.14.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-vcs"
  copyrightText: "NONE"
  downloadLocation: "svn+https://svn.codehaus.org/mojo"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.14/animal-sniffer-annotations-1.14-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14"
  filesAnalyzed: false
  homepage: "http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "animal-sniffer-annotations"
  summary: "Animal Sniffer Parent project."
  versionInfo: "1.14"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5"
  copyrightText: "Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright 2005-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/1.5.5/plexus-component-annotations-1.5.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "1.5.5"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5-vcs"
  copyrightText: "Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright 2005-2015\
    \ The Apache Software Foundation"
  downloadLocation: "svn+https://svn.codehaus.org/plexus/plexus-containers@1667712"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "1.5.5"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5-source-artifact"
  copyrightText: "Copyright (c) 2005 Brian Goetz and Tim Peierls\nCopyright 2005-2015\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/1.5.5/plexus-component-annotations-1.5.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-component-annotations"
  summary: "Plexus Component \"Java 5\" Annotations, to describe plexus components\
    \ properties in java sources with\n    standard annotations instead of javadoc\
    \ annotations."
  versionInfo: "1.5.5"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21"
  copyrightText: "Copyright (c) 2001-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2004 The Codehaus\nCopyright 2001-2004 The Apache Software Foundation\n\
    Copyright 2001-2009 Codehaus Foundation\nCopyright 2007 The Codehaus Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-interpolation/1.21/plexus-interpolation-1.21.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-components/plexus-interpolation"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.21"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21-vcs"
  copyrightText: "Copyright (c) 2001-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2004 The Codehaus\nCopyright 2001-2004 The Apache Software Foundation\n\
    Copyright 2001-2009 Codehaus Foundation\nCopyright 2007 The Codehaus Foundation"
  downloadLocation: "git+ssh://github.com/sonatype/plexus-interpolation.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-components/plexus-interpolation"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.21"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21-source-artifact"
  copyrightText: "Copyright (c) 2001-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2004 The Codehaus\nCopyright 2001-2004 The Apache Software Foundation\n\
    Copyright 2001-2009 Codehaus Foundation\nCopyright 2007 The Codehaus Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-interpolation/1.21/plexus-interpolation-1.21-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-components/plexus-interpolation"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-interpolation"
  summary: "The Plexus project provides a full software stack for creating and executing\
    \ software projects."
  versionInfo: "1.21"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20"
  copyrightText: "Copyright (c) 2000-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2003 ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL\
    \ 60661 USA\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c)\
    \ 2003 Extreme! Lab, Indiana University\nCopyright (c) 2003 The Trustees of Indiana\
    \ University\nCopyright (c) 2006 Javolution (http://javolution.org)\nCopyright\
    \ 2003-2004 The Apache Software Foundation\nCopyright 2004 Sun Microsystems, Inc.\n\
    Copyright 2007, 2011 The Codehaus Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.0.20/plexus-utils-3.0.20.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.20"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-utils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.0.20"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20-vcs"
  copyrightText: "Copyright (c) 2000-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2003 ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL\
    \ 60661 USA\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c)\
    \ 2003 Extreme! Lab, Indiana University\nCopyright (c) 2003 The Trustees of Indiana\
    \ University\nCopyright (c) 2006 Javolution (http://javolution.org)\nCopyright\
    \ 2003-2004 The Apache Software Foundation\nCopyright 2004 Sun Microsystems, Inc.\n\
    Copyright 2007, 2011 The Codehaus Foundation"
  downloadLocation: "git+ssh://github.com/sonatype/plexus-utils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.20"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-utils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.0.20"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20-source-artifact"
  copyrightText: "Copyright (c) 2000-2003 The Apache Software Foundation\nCopyright\
    \ (c) 2001-2003 ThoughtWorks, Inc. 651 W Washington Ave. Suite 500 Chicago, IL\
    \ 60661 USA\nCopyright (c) 2002 Extreme! Lab, Indiana University\nCopyright (c)\
    \ 2003 Extreme! Lab, Indiana University\nCopyright (c) 2003 The Trustees of Indiana\
    \ University\nCopyright (c) 2006 Javolution (http://javolution.org)\nCopyright\
    \ 2003-2004 The Apache Software Foundation\nCopyright 2004 Sun Microsystems, Inc.\n\
    Copyright 2007, 2011 The Codehaus Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.0.20/plexus-utils-3.0.20-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.20"
  filesAnalyzed: false
  homepage: "http://plexus.codehaus.org/plexus-utils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.0.20"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-api/1.1.0/aether-api-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-api/1.1.0/aether-api-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-api@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-api"
  summary: "The application programming interface for the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-connector-basic/1.1.0/aether-connector-basic-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-connector-basic@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-connector-basic/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-connector-basic"
  summary: "A repository connector implementation for repositories using URI-based\
    \ layouts."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-connector-basic@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-connector-basic/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-connector-basic"
  summary: "A repository connector implementation for repositories using URI-based\
    \ layouts."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-connector-basic/1.1.0/aether-connector-basic-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-connector-basic@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-connector-basic/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-connector-basic"
  summary: "A repository connector implementation for repositories using URI-based\
    \ layouts."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-impl/1.1.0/aether-impl-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-impl@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-impl@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-impl/1.1.0/aether-impl-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-impl@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-impl/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-impl"
  summary: "An implementation of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-spi/1.1.0/aether-spi-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-spi@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-spi@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-spi/1.1.0/aether-spi-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-spi@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-spi/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-spi"
  summary: "The service provider interface for repository system implementations and\
    \ repository connectors."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-transport-file/1.1.0/aether-transport-file-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-file@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-file/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-transport-file"
  summary: "A transport implementation for repositories using file:// URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-file@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-file/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-transport-file"
  summary: "A transport implementation for repositories using file:// URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-transport-file/1.1.0/aether-transport-file-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-file@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-file/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-transport-file"
  summary: "A transport implementation for repositories using file:// URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-transport-http/1.1.0/aether-transport-http-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-http@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-http/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-transport-http"
  summary: "A transport implementation for repositories using http:// and https://\
    \ URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-http@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-http/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-transport-http"
  summary: "A transport implementation for repositories using http:// and https://\
    \ URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-transport-http/1.1.0/aether-transport-http-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-transport-http@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-transport-http/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-transport-http"
  summary: "A transport implementation for repositories using http:// and https://\
    \ URLs."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-util/1.1.0/aether-util-1.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/jvanzyl/aether-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/aether/aether-util/1.1.0/aether-util-1.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.aether/aether-util@1.1.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/aether/aether-util/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aether-util"
  summary: "A collection of utility classes to ease usage of the repository system."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0"
  copyrightText: "Copyright (c) 2002-2013 IBM Corporation and others\nCopyright (c)\
    \ 2010-2011 Ed Merks and others\nCopyright (c) 2013 Eclipse"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.common/2.15.0/org.eclipse.emf.common-2.15.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.emf.common"
  summary: "EMF Common"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0-vcs"
  copyrightText: "Copyright (c) 2002-2013 IBM Corporation and others\nCopyright (c)\
    \ 2010-2011 Ed Merks and others\nCopyright (c) 2013 Eclipse"
  downloadLocation: "git+https://git.eclipse.org/gitroot/emf/org.eclipse.emf.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.common"
  summary: "EMF Common"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0-source-artifact"
  copyrightText: "Copyright (c) 2002-2013 IBM Corporation and others\nCopyright (c)\
    \ 2010-2011 Ed Merks and others\nCopyright (c) 2013 Eclipse"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.common/2.15.0/org.eclipse.emf.common-2.15.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.common"
  summary: "EMF Common"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2013 IBM Corporation and others\nCopyright (c) 2002-2014 IBM Corporation,\
    \ CEA, and others\nCopyright (c) 2002-2014 IBM Corporation, itemis AG, CEA, and\
    \ others\nCopyright (c) 2003-2007 IBM Corporation and others\nCopyright (c) 2008-2009\
    \ Zeligsoft Inc. and others\nCopyright (c) 2009 Ed Merks and others\nCopyright\
    \ (c) 2009 TIBCO Software Inc. and others\nCopyright (c) 2009-2010 Kenn Hussey\
    \ and others\nCopyright (c) 2010 Kenn Hussey and others\nCopyright (c) 2011 Hallvard\
    \ Traetteberg and others\nCopyright (c) 2017 Eclipse\nCopyright (c) 2017-2018\
    \ Eclipse\nCopyright 1999-2010 The Apache Software Foundation\ncopyright (c) 1999\
    \ IBM Corporation., http://www.ibm.com\ncopyright (c) 1999 Sun Microsystems.,\
    \ http://www.sun.com\ncopyright (c) 1999-2003 International Business Machines,\
    \ Inc., http://www.apache.org"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.emf.ecore"
  summary: "EMF Ecore"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0-vcs"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2013 IBM Corporation and others\nCopyright (c) 2002-2014 IBM Corporation,\
    \ CEA, and others\nCopyright (c) 2002-2014 IBM Corporation, itemis AG, CEA, and\
    \ others\nCopyright (c) 2003-2007 IBM Corporation and others\nCopyright (c) 2008-2009\
    \ Zeligsoft Inc. and others\nCopyright (c) 2009 Ed Merks and others\nCopyright\
    \ (c) 2009 TIBCO Software Inc. and others\nCopyright (c) 2009-2010 Kenn Hussey\
    \ and others\nCopyright (c) 2010 Kenn Hussey and others\nCopyright (c) 2011 Hallvard\
    \ Traetteberg and others\nCopyright (c) 2017 Eclipse\nCopyright (c) 2017-2018\
    \ Eclipse\nCopyright 1999-2010 The Apache Software Foundation\ncopyright (c) 1999\
    \ IBM Corporation., http://www.ibm.com\ncopyright (c) 1999 Sun Microsystems.,\
    \ http://www.sun.com\ncopyright (c) 1999-2003 International Business Machines,\
    \ Inc., http://www.apache.org"
  downloadLocation: "git+https://git.eclipse.org/gitroot/emf/org.eclipse.emf.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.ecore"
  summary: "EMF Ecore"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0-source-artifact"
  copyrightText: "Copyright (c) 1999-2004 The Apache Software Foundation\nCopyright\
    \ (c) 2002-2013 IBM Corporation and others\nCopyright (c) 2002-2014 IBM Corporation,\
    \ CEA, and others\nCopyright (c) 2002-2014 IBM Corporation, itemis AG, CEA, and\
    \ others\nCopyright (c) 2003-2007 IBM Corporation and others\nCopyright (c) 2008-2009\
    \ Zeligsoft Inc. and others\nCopyright (c) 2009 Ed Merks and others\nCopyright\
    \ (c) 2009 TIBCO Software Inc. and others\nCopyright (c) 2009-2010 Kenn Hussey\
    \ and others\nCopyright (c) 2010 Kenn Hussey and others\nCopyright (c) 2011 Hallvard\
    \ Traetteberg and others\nCopyright (c) 2017 Eclipse\nCopyright (c) 2017-2018\
    \ Eclipse\nCopyright 1999-2010 The Apache Software Foundation\ncopyright (c) 1999\
    \ IBM Corporation., http://www.ibm.com\ncopyright (c) 1999 Sun Microsystems.,\
    \ http://www.sun.com\ncopyright (c) 1999-2003 International Business Machines,\
    \ Inc., http://www.apache.org"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.ecore"
  summary: "EMF Ecore"
  versionInfo: "2.15.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0"
  copyrightText: "Copyright (c) 2002-2008 IBM Corporation, Embarcadero Technologies,\
    \ and others\nCopyright (c) 2002-2012 IBM Corporation, CEA, and others\nCopyright\
    \ (c) 2002-2014 IBM Corporation and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.ecore.xmi/2.12.0/org.eclipse.emf.ecore.xmi-2.12.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.12.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.emf.ecore.xmi"
  summary: "http://www.eclipse.org"
  versionInfo: "2.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0-vcs"
  copyrightText: "Copyright (c) 2002-2008 IBM Corporation, Embarcadero Technologies,\
    \ and others\nCopyright (c) 2002-2012 IBM Corporation, CEA, and others\nCopyright\
    \ (c) 2002-2014 IBM Corporation and others"
  downloadLocation: "git+https://git.eclipse.org/gitroot/emf/org.eclipse.emf.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.12.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.ecore.xmi"
  summary: "http://www.eclipse.org"
  versionInfo: "2.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0-source-artifact"
  copyrightText: "Copyright (c) 2002-2008 IBM Corporation, Embarcadero Technologies,\
    \ and others\nCopyright (c) 2002-2012 IBM Corporation, CEA, and others\nCopyright\
    \ (c) 2002-2014 IBM Corporation and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/emf/org.eclipse.emf.ecore.xmi/2.12.0/org.eclipse.emf.ecore.xmi-2.12.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.12.0"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/emf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.emf.ecore.xmi"
  summary: "http://www.eclipse.org"
  versionInfo: "2.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5"
  copyrightText: "Copyright (c) 2011-2012 GitHub Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/mylyn/github/org.eclipse.egit.github.core/2.1.5/org.eclipse.egit.github.core-2.1.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.mylyn.github/org.eclipse.egit.github.core@2.1.5"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/org.eclipse.egit.github.core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.egit.github.core"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5-vcs"
  copyrightText: "Copyright (c) 2011-2012 GitHub Inc."
  downloadLocation: "git+https://egit.eclipse.org/egit-github.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.mylyn.github/org.eclipse.egit.github.core@2.1.5"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/org.eclipse.egit.github.core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.egit.github.core"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5-source-artifact"
  copyrightText: "Copyright (c) 2011-2012 GitHub Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/mylyn/github/org.eclipse.egit.github.core/2.1.5/org.eclipse.egit.github.core-2.1.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.mylyn.github/org.eclipse.egit.github.core@2.1.5"
  filesAnalyzed: false
  homepage: "http://nexus.sonatype.org/oss-repository-hosting.html/org.eclipse.egit.github.core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.egit.github.core"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "2.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200"
  copyrightText: "Copyright (c) 2000, 2003-2013, 2015-2016, 2018 IBM Corporation and\
    \ others\nCopyright (c) 2015 Google Inc and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/platform/org.eclipse.equinox.common/3.10.200/org.eclipse.equinox.common-3.10.200.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.equinox.common@3.10.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "org.eclipse.equinox.common"
  summary: "Common Eclipse Runtime"
  versionInfo: "3.10.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200-vcs"
  copyrightText: "Copyright (c) 2000, 2003-2013, 2015-2016, 2018 IBM Corporation and\
    \ others\nCopyright (c) 2015 Google Inc and others"
  downloadLocation: "git+https://git.eclipse.org/gitroot/equinox/rt.equinox.bundles.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.equinox.common@3.10.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.equinox.common"
  summary: "Common Eclipse Runtime"
  versionInfo: "3.10.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200-source-artifact"
  copyrightText: "Copyright (c) 2000, 2003-2013, 2015-2016, 2018 IBM Corporation and\
    \ others\nCopyright (c) 2015 Google Inc and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/platform/org.eclipse.equinox.common/3.10.200/org.eclipse.equinox.common-3.10.200-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.equinox.common@3.10.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.equinox.common"
  summary: "Common Eclipse Runtime"
  versionInfo: "3.10.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200"
  copyrightText: "Copyright (c) 2000, 2003-2018 IBM Corporation and others\nCopyright\
    \ (c) 2000-2002, 2004-2018 OSGi Alliance ()\nCopyright (c) 2006, 2012, 2016, 2018\
    \ Cognos Incorporated, IBM Corporation and others\nCopyright (c) 2006, 2018 IBM\
    \ Corp. and others\nCopyright (c) 2007, 2016 IBM Corporation\nCopyright (c) 2016\
    \ Alex Blewitt and others\nCopyright (c) 2018 Connexta, LLC and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/platform/org.eclipse.osgi/3.13.200/org.eclipse.osgi-3.13.200.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.13.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "org.eclipse.osgi"
  summary: "OSGi System Bundle\n\n%systemBundle"
  versionInfo: "3.13.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200-vcs"
  copyrightText: "Copyright (c) 2000, 2003-2018 IBM Corporation and others\nCopyright\
    \ (c) 2000-2002, 2004-2018 OSGi Alliance ()\nCopyright (c) 2006, 2012, 2016, 2018\
    \ Cognos Incorporated, IBM Corporation and others\nCopyright (c) 2006, 2018 IBM\
    \ Corp. and others\nCopyright (c) 2007, 2016 IBM Corporation\nCopyright (c) 2016\
    \ Alex Blewitt and others\nCopyright (c) 2018 Connexta, LLC and others"
  downloadLocation: "git+https://git.eclipse.org/gitroot/equinox/rt.equinox.framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.13.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.osgi"
  summary: "OSGi System Bundle\n\n%systemBundle"
  versionInfo: "3.13.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200-source-artifact"
  copyrightText: "Copyright (c) 2000, 2003-2018 IBM Corporation and others\nCopyright\
    \ (c) 2000-2002, 2004-2018 OSGi Alliance ()\nCopyright (c) 2006, 2012, 2016, 2018\
    \ Cognos Incorporated, IBM Corporation and others\nCopyright (c) 2006, 2018 IBM\
    \ Corp. and others\nCopyright (c) 2007, 2016 IBM Corporation\nCopyright (c) 2016\
    \ Alex Blewitt and others\nCopyright (c) 2018 Connexta, LLC and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/platform/org.eclipse.osgi/3.13.200/org.eclipse.osgi-3.13.200-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.platform/org.eclipse.osgi@3.13.200"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/platform"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.osgi"
  summary: "OSGi System Bundle\n\n%systemBundle"
  versionInfo: "3.13.200"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtend/org.eclipse.xtend.lib/2.18.0/org.eclipse.xtend.lib-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtend.lib"
  summary: "The runtime library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-lib.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtend.lib"
  summary: "The runtime library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtend/org.eclipse.xtend.lib/2.18.0/org.eclipse.xtend.lib-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtend.lib"
  summary: "The runtime library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtend/org.eclipse.xtend.lib.macro/2.18.0/org.eclipse.xtend.lib.macro-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib.macro@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtend.lib.macro"
  summary: "The active annotations library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-lib.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib.macro@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtend.lib.macro"
  summary: "The active annotations library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtend/org.eclipse.xtend.lib.macro/2.18.0/org.eclipse.xtend.lib.macro-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtend/org.eclipse.xtend.lib.macro@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtend.lib.macro"
  summary: "The active annotations library for the Xtend programming language."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  copyrightText: "Copyright (c) 2008 itemis AG (http://www.itemis.com) and others\n\
    Copyright (c) 2008, 2017 itemis AG and others\nCopyright (c) 2008-2019 itemis\
    \ AG (http://www.itemis.eu) and others\nCopyright (c) 2010 Christoph Kulla\nCopyright\
    \ (c) 2010 Michael Clay and others\nCopyright (c) 2011 Sigasi N.V. (http://www.sigasi.com)\
    \ and others\nCopyright (c) 2016-2018 TypeFox GmbH (http://www.typefox.io) and\
    \ others\nCopyright (c) 2017 TypeFox (http://www.typefox.io) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext/2.18.0/org.eclipse.xtext-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtext"
  summary: "Core component of Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0-vcs"
  copyrightText: "Copyright (c) 2008 itemis AG (http://www.itemis.com) and others\n\
    Copyright (c) 2008, 2017 itemis AG and others\nCopyright (c) 2008-2019 itemis\
    \ AG (http://www.itemis.eu) and others\nCopyright (c) 2010 Christoph Kulla\nCopyright\
    \ (c) 2010 Michael Clay and others\nCopyright (c) 2011 Sigasi N.V. (http://www.sigasi.com)\
    \ and others\nCopyright (c) 2016-2018 TypeFox GmbH (http://www.typefox.io) and\
    \ others\nCopyright (c) 2017 TypeFox (http://www.typefox.io) and others"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext"
  summary: "Core component of Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0-source-artifact"
  copyrightText: "Copyright (c) 2008 itemis AG (http://www.itemis.com) and others\n\
    Copyright (c) 2008, 2017 itemis AG and others\nCopyright (c) 2008-2019 itemis\
    \ AG (http://www.itemis.eu) and others\nCopyright (c) 2010 Christoph Kulla\nCopyright\
    \ (c) 2010 Michael Clay and others\nCopyright (c) 2011 Sigasi N.V. (http://www.sigasi.com)\
    \ and others\nCopyright (c) 2016-2018 TypeFox GmbH (http://www.typefox.io) and\
    \ others\nCopyright (c) 2017 TypeFox (http://www.typefox.io) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext/2.18.0/org.eclipse.xtext-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext"
  summary: "Core component of Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
  copyrightText: "Copyright (c) 2009-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.common.types/2.18.0/org.eclipse.xtext.common.types-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.common.types@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtext.common.types"
  summary: "JVM type model used by Xbase and other languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0-vcs"
  copyrightText: "Copyright (c) 2009-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-extras.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.common.types@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.common.types"
  summary: "JVM type model used by Xbase and other languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0-source-artifact"
  copyrightText: "Copyright (c) 2009-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.common.types/2.18.0/org.eclipse.xtext.common.types-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.common.types@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.common.types"
  summary: "JVM type model used by Xbase and other languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0"
  copyrightText: "Copyright (c) 2002, 2017 IBM Corporation and others\nCopyright (c)\
    \ 2008-2019 itemis AG (http://www.itemis.eu) and others\nCopyright (c) 2016-2017\
    \ TypeFox GmbH (http://www.typefox.io) and others\nCopyright (c) 2018 Sigasi N.V.\
    \ (http://www.sigasi.com) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.util/2.18.0/org.eclipse.xtext.util-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.util@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtext.util"
  summary: "Utility classes used throughout Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0-vcs"
  copyrightText: "Copyright (c) 2002, 2017 IBM Corporation and others\nCopyright (c)\
    \ 2008-2019 itemis AG (http://www.itemis.eu) and others\nCopyright (c) 2016-2017\
    \ TypeFox GmbH (http://www.typefox.io) and others\nCopyright (c) 2018 Sigasi N.V.\
    \ (http://www.sigasi.com) and others"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.util@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.util"
  summary: "Utility classes used throughout Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0-source-artifact"
  copyrightText: "Copyright (c) 2002, 2017 IBM Corporation and others\nCopyright (c)\
    \ 2008-2019 itemis AG (http://www.itemis.eu) and others\nCopyright (c) 2016-2017\
    \ TypeFox GmbH (http://www.typefox.io) and others\nCopyright (c) 2018 Sigasi N.V.\
    \ (http://www.sigasi.com) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.util/2.18.0/org.eclipse.xtext.util-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.util@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.util"
  summary: "Utility classes used throughout Xtext."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0"
  copyrightText: "Copyright (c) 2010-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.xbase/2.18.0/org.eclipse.xtext.xbase-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtext.xbase"
  summary: "Reusable expression language that interoperates with Java."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0-vcs"
  copyrightText: "Copyright (c) 2010-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-extras.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.xbase"
  summary: "Reusable expression language that interoperates with Java."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0-source-artifact"
  copyrightText: "Copyright (c) 2010-2019 itemis AG (http://www.itemis.eu) and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.xbase/2.18.0/org.eclipse.xtext.xbase-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.xbase"
  summary: "Reusable expression language that interoperates with Java."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.xbase.lib/2.18.0/org.eclipse.xtext.xbase.lib-2.18.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "org.eclipse.xtext.xbase.lib"
  summary: "The runtime library for Xbase languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/eclipse/xtext-lib.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.xbase.lib"
  summary: "The runtime library for Xbase languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/xtext/org.eclipse.xtext.xbase.lib/2.18.0/org.eclipse.xtext.xbase.lib-2.18.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.xtext/org.eclipse.xtext.xbase.lib@2.18.0"
  filesAnalyzed: false
  homepage: "https://www.eclipse.org/Xtext/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.xtext.xbase.lib"
  summary: "The runtime library for Xbase languages."
  versionInfo: "2.18.0"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  copyrightText: "Copyright (c) 2008-2011 Tony Morris, Runar Bjarnason, Tom Adams,\
    \ Brad Clow, Ricky Clarkson, Jason Zaugg"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/functionaljava/functionaljava/4.2/functionaljava-4.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-vcs"
  copyrightText: "Copyright (c) 2008-2011 Tony Morris, Runar Bjarnason, Tom Adams,\
    \ Brad Clow, Ricky Clarkson, Jason Zaugg"
  downloadLocation: "git+https://github.com/functionaljava/functionaljava.git@ec6283069ecfcaa6cde648e4e4f38e6a716420dd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-source-artifact"
  copyrightText: "Copyright (c) 2008-2011 Tony Morris, Runar Bjarnason, Tom Adams,\
    \ Brad Clow, Ricky Clarkson, Jason Zaugg"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/functionaljava/functionaljava/4.2/functionaljava-4.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.functionaljava/functionaljava@4.2"
  filesAnalyzed: false
  homepage: "http://functionaljava.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "functionaljava"
  summary: "Functional Java is an open source library that supports closures for the\
    \ Java programming language"
  versionInfo: "4.2"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/jaxb-runtime/2.4.0-b180830.0438/jaxb-runtime-2.4.0-b180830.0438.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-or-later"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://java.net/jaxb~v2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/jaxb-runtime/2.4.0-b180830.0438/jaxb-runtime-2.4.0-b180830.0438-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-runtime-parent/jaxb-runtime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jaxb-runtime"
  summary: "JAXB (JSR 222) Reference Implementation"
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  copyrightText: "Copyright (c) 2005-2018 Oracle and/or its affiliates"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/txw2/2.4.0-b180830.0438/txw2-2.4.0-b180830.0438.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-or-later"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-vcs"
  copyrightText: "Copyright (c) 2005-2018 Oracle and/or its affiliates"
  downloadLocation: "git+https://java.net/jaxb~v2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-source-artifact"
  copyrightText: "Copyright (c) 2005-2018 Oracle and/or its affiliates"
  downloadLocation: "http://maven.java.net/content/repositories/releases/org/glassfish/jaxb/txw2/2.4.0-b180830.0438/txw2-2.4.0-b180830.0438-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438"
  filesAnalyzed: false
  homepage: "http://jaxb.java.net/jaxb-txw-parent/txw2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "txw2"
  summary: "TXW is a library that allows you to write XML documents."
  versionInfo: "2.4.0-b180830.0438"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/hamcrest/JavaHamcrest.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1"
  copyrightText: "Copyright 2005, 2009 Ivan SZKIBA"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ini4j/ini4j/0.5.1/ini4j-0.5.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ini4j/ini4j@0.5.1"
  filesAnalyzed: false
  homepage: "http://www.ini4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "ini4j"
  summary: "Java API for handling configuration files in Windows .ini format. The\
    \ library includes its own Map based API, Java Preferences API and Java Beans\
    \ API for handling .ini files. Additionally, the library includes a feature rich\
    \ (variable/macro substitution, multiply property values, etc) java.util.Properties\
    \ replacement."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1-vcs"
  copyrightText: "Copyright 2005, 2009 Ivan SZKIBA"
  downloadLocation: "svn+https://ini4j.svn.sourceforge.net/svnroot/ini4j"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ini4j/ini4j@0.5.1"
  filesAnalyzed: false
  homepage: "http://www.ini4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ini4j"
  summary: "Java API for handling configuration files in Windows .ini format. The\
    \ library includes its own Map based API, Java Preferences API and Java Beans\
    \ API for handling .ini files. Additionally, the library includes a feature rich\
    \ (variable/macro substitution, multiply property values, etc) java.util.Properties\
    \ replacement."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1-source-artifact"
  copyrightText: "Copyright 2005, 2009 Ivan SZKIBA"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ini4j/ini4j/0.5.1/ini4j-0.5.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ini4j/ini4j@0.5.1"
  filesAnalyzed: false
  homepage: "http://www.ini4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ini4j"
  summary: "Java API for handling configuration files in Windows .ini format. The\
    \ library includes its own Map based API, Java Preferences API and Java Beans\
    \ API for handling .ini files. Additionally, the library includes a feature rich\
    \ (variable/macro substitution, multiply property values, etc) java.util.Properties\
    \ replacement."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  copyrightText: "Copyright (c) 1997-2015, 2017 Oracle and/or its affiliates"
  downloadLocation: "https://maven.java.net/content/repositories/releases/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.1 OR GPL-2.0-only"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-vcs"
  copyrightText: "Copyright (c) 1997-2015, 2017 Oracle and/or its affiliates"
  downloadLocation: "git+ssh://github.com/javaee/metro-stax-ex.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-source-artifact"
  copyrightText: "Copyright (c) 1997-2015, 2017 Oracle and/or its affiliates"
  downloadLocation: "https://maven.java.net/content/repositories/releases/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jvnet.staxex/stax-ex@1.8"
  filesAnalyzed: false
  homepage: "http://stax-ex.java.net/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax-ex"
  summary: "Extensions to JSR-173 StAX API."
  versionInfo: "1.8"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm/8.0.1/asm-8.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1-vcs"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm@5a24db4bec54851f0d5c38d1d970755e55395fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1-source-artifact"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm/8.0.1/asm-8.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm"
  summary: "ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-analysis/8.0.1/asm-analysis-8.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1-vcs"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm@5a24db4bec54851f0d5c38d1d970755e55395fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1-source-artifact"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-analysis/8.0.1/asm-analysis-8.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-analysis@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-analysis"
  summary: "Static code analysis API of ASM, a very small and fast Java bytecode manipulation\
    \ framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-commons/8.0.1/asm-commons-8.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1-vcs"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm@5a24db4bec54851f0d5c38d1d970755e55395fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1-source-artifact"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-commons/8.0.1/asm-commons-8.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-commons@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-commons"
  summary: "Usefull class adapters based on ASM, a very small and fast Java bytecode\
    \ manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-tree/8.0.1/asm-tree-8.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1-vcs"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm@5a24db4bec54851f0d5c38d1d970755e55395fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1-source-artifact"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-tree/8.0.1/asm-tree-8.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-tree@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-tree"
  summary: "Tree API of ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-util/8.0.1/asm-util-8.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1-vcs"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "git+https://gitlab.ow2.org/asm/asm@5a24db4bec54851f0d5c38d1d970755e55395fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1-source-artifact"
  copyrightText: "Copyright (c) 2000-2011 INRIA, France Telecom\nCopyright 2000-2011\
    \ (classType) INRIA, France Telecom"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/ow2/asm/asm-util/8.0.1/asm-util-8.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.ow2.asm/asm-util@8.0.1"
  filesAnalyzed: false
  homepage: "http://asm.ow2.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asm-util"
  summary: "Utilities for ASM, a very small and fast Java bytecode manipulation framework"
  versionInfo: "8.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2"
  copyrightText: "Copyright (c) 1999-2003 Apache Software Foundation\nCopyright (c)\
    \ 1999-2003 The Apache Software Foundation\nCopyright (c) 1999-2007 Apache Software\
    \ Foundation\nCopyright (c) 2000-2010 The Apache Software Foundation\nCopyright\
    \ (c) 2003 Apache Software Foundation\nCopyright (c) javadoc.year Apache Software\
    \ Foundation\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2000-2007\
    \ Sun Microsystems, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/jcl-over-slf4j/1.6.2/jcl-over-slf4j-1.6.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jcl-over-slf4j@1.6.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jcl-over-slf4j"
  summary: "JCL 1.1.1 implementation over SLF4J"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2-vcs"
  copyrightText: "Copyright (c) 1999-2003 Apache Software Foundation\nCopyright (c)\
    \ 1999-2003 The Apache Software Foundation\nCopyright (c) 1999-2007 Apache Software\
    \ Foundation\nCopyright (c) 2000-2010 The Apache Software Foundation\nCopyright\
    \ (c) 2003 Apache Software Foundation\nCopyright (c) javadoc.year Apache Software\
    \ Foundation\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2000-2007\
    \ Sun Microsystems, Inc."
  downloadLocation: "svn+http://svn.slf4j.org/repos/slf4j@1050295"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jcl-over-slf4j@1.6.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jcl-over-slf4j"
  summary: "JCL 1.1.1 implementation over SLF4J"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2-source-artifact"
  copyrightText: "Copyright (c) 1999-2003 Apache Software Foundation\nCopyright (c)\
    \ 1999-2003 The Apache Software Foundation\nCopyright (c) 1999-2007 Apache Software\
    \ Foundation\nCopyright (c) 2000-2010 The Apache Software Foundation\nCopyright\
    \ (c) 2003 Apache Software Foundation\nCopyright (c) javadoc.year Apache Software\
    \ Foundation\nCopyright 1999-2005 The Apache Software Foundation\nCopyright 2000-2007\
    \ Sun Microsystems, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/jcl-over-slf4j/1.6.2/jcl-over-slf4j-1.6.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jcl-over-slf4j@1.6.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jcl-over-slf4j"
  summary: "JCL 1.1.1 implementation over SLF4J"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-vcs"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-source-artifact"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.30"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.30"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21"
  copyrightText: "Copyright (c) 2004-2012 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-simple/1.7.21/slf4j-simple-1.7.21.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-simple@1.7.21"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "slf4j-simple"
  summary: "SLF4J Simple binding"
  versionInfo: "1.7.21"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21-vcs"
  copyrightText: "Copyright (c) 2004-2012 QOS.ch"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-simple@1.7.21"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-simple"
  summary: "SLF4J Simple binding"
  versionInfo: "1.7.21"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21-source-artifact"
  copyrightText: "Copyright (c) 2004-2012 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-simple/1.7.21/slf4j-simple-1.7.21-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-simple@1.7.21"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-simple"
  summary: "SLF4J Simple binding"
  versionInfo: "1.7.21"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0"
  copyrightText: "Copyright (c) 2007 The Android Open Source Project\nCopyright (c)\
    \ 2010 Ben Gruver\nCopyright (c) 2010, 2019 Ben Gruver (JesusFreke)\nCopyright\
    \ 20116, Google Inc.\nCopyright 2012-2016, 2018-2020 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/smali/dexlib2/2.4.0/dexlib2-2.4.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.4.0"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0-vcs"
  copyrightText: "Copyright (c) 2007 The Android Open Source Project\nCopyright (c)\
    \ 2010 Ben Gruver\nCopyright (c) 2010, 2019 Ben Gruver (JesusFreke)\nCopyright\
    \ 20116, Google Inc.\nCopyright 2012-2016, 2018-2020 Google Inc."
  downloadLocation: "git+https://github.com/JesusFreke/smali.git@5339a81f0f39b108589d22a2a7c94229d6ffd147#dexlib2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.4.0"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0-source-artifact"
  copyrightText: "Copyright (c) 2007 The Android Open Source Project\nCopyright (c)\
    \ 2010 Ben Gruver\nCopyright (c) 2010, 2019 Ben Gruver (JesusFreke)\nCopyright\
    \ 20116, Google Inc.\nCopyright 2012-2016, 2018-2020 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/smali/dexlib2/2.4.0/dexlib2-2.4.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.smali/dexlib2@2.4.0"
  filesAnalyzed: false
  homepage: "http://smali.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dexlib2"
  summary: "dexlib2 is a library for reading/modifying/writing Android dex files"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  copyrightText: "(c) 2012 University of Luxembourg - Interdisciplinary Centre for\
    \ Security Reliability and Trust\nCopyright (c) 1997 Clark Verbrugge\nCopyright\
    \ (c) 1997-1999 Raja Vallee-Rai and Patrick Lam\nCopyright (c) 1997-1999 Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1997-2000 Etienne Gagnon\nCopyright (c)\
    \ 1997-2000, 2007 Patrick Lam\nCopyright (c) 1997-2002 Raja Vallee-Rai\nCopyright\
    \ (c) 1997-2008, 2010-2012, 2014 Eric Bodden\nCopyright (c) 1997-2013 Christian\
    \ Fritz and others\nCopyright (c) 1997-2013, 2015 Eric Bodden and others\nCopyright\
    \ (c) 1997-2018 Feng Qian\nCopyright (c) 1997-2018 Raja Vallee-Rai and others\n\
    Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 1999 Patrice Pominville, Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1999 Patrick Lam, Patrick Pominville\
    \ and Raja Vallee-Rai\nCopyright (c) 1999 Patrick Lam, Raja Vallee-Rai\nCopyright\
    \ (c) 1999 Phong Co\nCopyright (c) 1999-2000 Patrice Pominville\nCopyright (c)\
    \ 1999-2000 Patrice Pominville, Raja Vallee-Rai\nCopyright (c) 1999-2010 Hossein\
    \ Sadat-Mohtasham\nCopyright (c) 2000 Etienne M. Gagnon <egagnon@j-meg.com>\n\
    Copyright (c) 2000 Janus\nCopyright (c) 2000 Patrice Pominville and Feng Qian\n\
    Copyright (c) 2000 Patrick Lam, Janus\nCopyright (c) 2001 Felix Kwok\nCopyright\
    \ (c) 2001 Michael Pan (pan@math.tau.ac.il)\nCopyright (c) 2002 David Eng\nCopyright\
    \ (c) 2002 Florian Loitsch\nCopyright (c) 2002 Sable Research Group\nCopyright\
    \ (c) 2002-2007 Ondrej Lhotak\nCopyright (c) 2003 Jerome Miecznikowski\nCopyright\
    \ (c) 2003 John Jorgensen\nCopyright (c) 2003-2004 Alexander Demenchuk <alder@softanvil.com>\n\
    Copyright (c) 2003-2004 Archie L. Cobbs\nCopyright (c) 2003-2004 John Jorgensen\n\
    Copyright (c) 2003-2005 Jennifer Lhotak\nCopyright (c) 2003-2005 Navindra Umanee\
    \ <navindra@cs.mcgill.ca>\nCopyright (c) 2004 Ganesh Sittampalam\nCopyright (c)\
    \ 2004 Jennifer Lhotak, Ondrej Lhotak\nCopyright (c) 2004 Ondrej Lhotak, Ganesh\
    \ Sittampalam\nCopyright (c) 2004-2006 Nomair A. Naeem\nCopyright (c) 2005 Antoine\
    \ Mine\nCopyright (c) 2005 Navindra Umanee\nCopyright (c) 2005 Nomair Naeem\n\
    Copyright (c) 2005-2006 Nomair A. Naeem (nomair.naeem@mail.mcgill.ca)\nCopyright\
    \ (c) 2005-2008 Torbjorn Ekman\nCopyright (c) 2006-2007 Richard L. Halpert\nCopyright\
    \ (c) 2007 Julian Tibble\nCopyright (c) 2007 Manu Sridharan\nCopyright (c) 2008\
    \ Ben Bellamy\nCopyright (c) 2008 Torbjorn Ekman\nCopyright (c) 2008 Will Benton\n\
    Copyright (c) 2010 Hela Oueslati, Eric Bodden\nCopyright (c) 2011-2012 Michael\
    \ Markert\nCopyright (c) 2011-2014 Richard Xiao\nCopyright (c) 2012 Michael Markert,\
    \ Frank Hartmann\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique\
    \ de Montreal\nCopyright (c) 2013, 2018 Bernhard J. Berger\nCopyright (c) 2015\
    \ Steven Arzt\nCopyright (c) 2017 Brian Alliet Initial\nCopyright (c) 2018 Manuel\
    \ Benz Bug\nCopyright (c) 2019 William Bonnaventure\nCopyright (c) 2020 Manuel\
    \ Benz\ncopyright (c) 1997-2010 by their"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/soot-oss/soot/4.2.1/soot-4.2.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.2.1"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LGPL-2.1-only"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1-vcs"
  copyrightText: "(c) 2012 University of Luxembourg - Interdisciplinary Centre for\
    \ Security Reliability and Trust\nCopyright (c) 1997 Clark Verbrugge\nCopyright\
    \ (c) 1997-1999 Raja Vallee-Rai and Patrick Lam\nCopyright (c) 1997-1999 Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1997-2000 Etienne Gagnon\nCopyright (c)\
    \ 1997-2000, 2007 Patrick Lam\nCopyright (c) 1997-2002 Raja Vallee-Rai\nCopyright\
    \ (c) 1997-2008, 2010-2012, 2014 Eric Bodden\nCopyright (c) 1997-2013 Christian\
    \ Fritz and others\nCopyright (c) 1997-2013, 2015 Eric Bodden and others\nCopyright\
    \ (c) 1997-2018 Feng Qian\nCopyright (c) 1997-2018 Raja Vallee-Rai and others\n\
    Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 1999 Patrice Pominville, Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1999 Patrick Lam, Patrick Pominville\
    \ and Raja Vallee-Rai\nCopyright (c) 1999 Patrick Lam, Raja Vallee-Rai\nCopyright\
    \ (c) 1999 Phong Co\nCopyright (c) 1999-2000 Patrice Pominville\nCopyright (c)\
    \ 1999-2000 Patrice Pominville, Raja Vallee-Rai\nCopyright (c) 1999-2010 Hossein\
    \ Sadat-Mohtasham\nCopyright (c) 2000 Etienne M. Gagnon <egagnon@j-meg.com>\n\
    Copyright (c) 2000 Janus\nCopyright (c) 2000 Patrice Pominville and Feng Qian\n\
    Copyright (c) 2000 Patrick Lam, Janus\nCopyright (c) 2001 Felix Kwok\nCopyright\
    \ (c) 2001 Michael Pan (pan@math.tau.ac.il)\nCopyright (c) 2002 David Eng\nCopyright\
    \ (c) 2002 Florian Loitsch\nCopyright (c) 2002 Sable Research Group\nCopyright\
    \ (c) 2002-2007 Ondrej Lhotak\nCopyright (c) 2003 Jerome Miecznikowski\nCopyright\
    \ (c) 2003 John Jorgensen\nCopyright (c) 2003-2004 Alexander Demenchuk <alder@softanvil.com>\n\
    Copyright (c) 2003-2004 Archie L. Cobbs\nCopyright (c) 2003-2004 John Jorgensen\n\
    Copyright (c) 2003-2005 Jennifer Lhotak\nCopyright (c) 2003-2005 Navindra Umanee\
    \ <navindra@cs.mcgill.ca>\nCopyright (c) 2004 Ganesh Sittampalam\nCopyright (c)\
    \ 2004 Jennifer Lhotak, Ondrej Lhotak\nCopyright (c) 2004 Ondrej Lhotak, Ganesh\
    \ Sittampalam\nCopyright (c) 2004-2006 Nomair A. Naeem\nCopyright (c) 2005 Antoine\
    \ Mine\nCopyright (c) 2005 Navindra Umanee\nCopyright (c) 2005 Nomair Naeem\n\
    Copyright (c) 2005-2006 Nomair A. Naeem (nomair.naeem@mail.mcgill.ca)\nCopyright\
    \ (c) 2005-2008 Torbjorn Ekman\nCopyright (c) 2006-2007 Richard L. Halpert\nCopyright\
    \ (c) 2007 Julian Tibble\nCopyright (c) 2007 Manu Sridharan\nCopyright (c) 2008\
    \ Ben Bellamy\nCopyright (c) 2008 Torbjorn Ekman\nCopyright (c) 2008 Will Benton\n\
    Copyright (c) 2010 Hela Oueslati, Eric Bodden\nCopyright (c) 2011-2012 Michael\
    \ Markert\nCopyright (c) 2011-2014 Richard Xiao\nCopyright (c) 2012 Michael Markert,\
    \ Frank Hartmann\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique\
    \ de Montreal\nCopyright (c) 2013, 2018 Bernhard J. Berger\nCopyright (c) 2015\
    \ Steven Arzt\nCopyright (c) 2017 Brian Alliet Initial\nCopyright (c) 2018 Manuel\
    \ Benz Bug\nCopyright (c) 2019 William Bonnaventure\nCopyright (c) 2020 Manuel\
    \ Benz\ncopyright (c) 1997-2010 by their"
  downloadLocation: "git+ssh://github.com/soot-oss/soot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.2.1"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1-source-artifact"
  copyrightText: "(c) 2012 University of Luxembourg - Interdisciplinary Centre for\
    \ Security Reliability and Trust\nCopyright (c) 1997 Clark Verbrugge\nCopyright\
    \ (c) 1997-1999 Raja Vallee-Rai and Patrick Lam\nCopyright (c) 1997-1999 Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1997-2000 Etienne Gagnon\nCopyright (c)\
    \ 1997-2000, 2007 Patrick Lam\nCopyright (c) 1997-2002 Raja Vallee-Rai\nCopyright\
    \ (c) 1997-2008, 2010-2012, 2014 Eric Bodden\nCopyright (c) 1997-2013 Christian\
    \ Fritz and others\nCopyright (c) 1997-2013, 2015 Eric Bodden and others\nCopyright\
    \ (c) 1997-2018 Feng Qian\nCopyright (c) 1997-2018 Raja Vallee-Rai and others\n\
    Copyright (c) 1998 by Kevin Kelley\nCopyright (c) 1999 Patrice Pominville, Raja\
    \ Vallee-Rai, Patrick Lam\nCopyright (c) 1999 Patrick Lam, Patrick Pominville\
    \ and Raja Vallee-Rai\nCopyright (c) 1999 Patrick Lam, Raja Vallee-Rai\nCopyright\
    \ (c) 1999 Phong Co\nCopyright (c) 1999-2000 Patrice Pominville\nCopyright (c)\
    \ 1999-2000 Patrice Pominville, Raja Vallee-Rai\nCopyright (c) 1999-2010 Hossein\
    \ Sadat-Mohtasham\nCopyright (c) 2000 Etienne M. Gagnon <egagnon@j-meg.com>\n\
    Copyright (c) 2000 Janus\nCopyright (c) 2000 Patrice Pominville and Feng Qian\n\
    Copyright (c) 2000 Patrick Lam, Janus\nCopyright (c) 2001 Felix Kwok\nCopyright\
    \ (c) 2001 Michael Pan (pan@math.tau.ac.il)\nCopyright (c) 2002 David Eng\nCopyright\
    \ (c) 2002 Florian Loitsch\nCopyright (c) 2002 Sable Research Group\nCopyright\
    \ (c) 2002-2007 Ondrej Lhotak\nCopyright (c) 2003 Jerome Miecznikowski\nCopyright\
    \ (c) 2003 John Jorgensen\nCopyright (c) 2003-2004 Alexander Demenchuk <alder@softanvil.com>\n\
    Copyright (c) 2003-2004 Archie L. Cobbs\nCopyright (c) 2003-2004 John Jorgensen\n\
    Copyright (c) 2003-2005 Jennifer Lhotak\nCopyright (c) 2003-2005 Navindra Umanee\
    \ <navindra@cs.mcgill.ca>\nCopyright (c) 2004 Ganesh Sittampalam\nCopyright (c)\
    \ 2004 Jennifer Lhotak, Ondrej Lhotak\nCopyright (c) 2004 Ondrej Lhotak, Ganesh\
    \ Sittampalam\nCopyright (c) 2004-2006 Nomair A. Naeem\nCopyright (c) 2005 Antoine\
    \ Mine\nCopyright (c) 2005 Navindra Umanee\nCopyright (c) 2005 Nomair Naeem\n\
    Copyright (c) 2005-2006 Nomair A. Naeem (nomair.naeem@mail.mcgill.ca)\nCopyright\
    \ (c) 2005-2008 Torbjorn Ekman\nCopyright (c) 2006-2007 Richard L. Halpert\nCopyright\
    \ (c) 2007 Julian Tibble\nCopyright (c) 2007 Manu Sridharan\nCopyright (c) 2008\
    \ Ben Bellamy\nCopyright (c) 2008 Torbjorn Ekman\nCopyright (c) 2008 Will Benton\n\
    Copyright (c) 2010 Hela Oueslati, Eric Bodden\nCopyright (c) 2011-2012 Michael\
    \ Markert\nCopyright (c) 2011-2014 Richard Xiao\nCopyright (c) 2012 Michael Markert,\
    \ Frank Hartmann\nCopyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique\
    \ de Montreal\nCopyright (c) 2013, 2018 Bernhard J. Berger\nCopyright (c) 2015\
    \ Steven Arzt\nCopyright (c) 2017 Brian Alliet Initial\nCopyright (c) 2018 Manuel\
    \ Benz Bug\nCopyright (c) 2019 William Bonnaventure\nCopyright (c) 2020 Manuel\
    \ Benz\ncopyright (c) 1997-2010 by their"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/soot-oss/soot/4.2.1/soot-4.2.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.soot-oss/soot@4.2.1"
  filesAnalyzed: false
  homepage: "https://soot-oss.github.io/soot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "soot"
  summary: "A Java Optimization Framework"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-xmlpull-xmlpull-1.1.3.4d-b4-min"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/xmlpull/xmlpull/1.1.3.4d_b4_min/xmlpull-1.1.3.4d_b4_min.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min"
  filesAnalyzed: false
  homepage: "http://www.xmlpull.org"
  licenseConcluded: "LicenseRef-Public-Domain"
  licenseDeclared: "LicenseRef-scancode-public-domain-disclaimer"
  name: "xmlpull"
  summary: "NONE"
  versionInfo: "1.1.3.4d_b4_min"
relationships:
- spdxElementId: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-java-cup-0.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-1.3.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-1.3.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.findbugs-jsr305-1.3.9"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.errorprone-error-prone-annotations-2.1.3"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-aopalliance-aopalliance-1.0"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-3.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.j2objc-j2objc-annotations-1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.6-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.6-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL-2.0.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-25.0-jre"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-cli-commons-cli-1.4"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-1.4"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-PathExpression-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-WPDS-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-WPDS-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.googlecode.json-simple-json-simple-1.1.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-testCore-2.5.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-boomerangPDS-2.5.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-WPDS-2.5.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-PathExpression-1.0.0"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-synchronizedPDS-2.5.1"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-idealPDS-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-synchronizedPDS-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-synchronizedPDS-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.fraunhofer.iem-testCore-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-testCore-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.inject-javax.inject-1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.inject-javax.inject-1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.activation-javax.activation-api-1.2.0"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-log4j-log4j-1.2.17"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-log4j-log4j-1.2.17-vcs"
- spdxElementId: "SPDXRef-Package-Maven-log4j-log4j-1.2.17"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-log4j-log4j-1.2.17-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.antlr-antlr-runtime-3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.antlr-antlr-runtime-3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.11-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.11"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpcore-4.4.11-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.11.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-core-2.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-builder-support-3.3.3"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-builder-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-repository-metadata-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bcprov-jdk15on-1.62"
- spdxElementId: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.bouncycastle-bctls-jdk15on-1.62-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.checkerframework-checker-compat-qual-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.mojo-animal-sniffer-annotations-1.14-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-component-annotations-1.5.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-interpolation-1.21-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.0.20-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-util-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.common-2.15.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore-2.15.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib.macro-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtend-org.eclipse.xtend.lib-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-log4j-log4j-1.2.17"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.equinox.common-3.10.200"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.platform-org.eclipse.osgi-3.13.200"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.emf-org.eclipse.emf.ecore.xmi-2.12.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.inject-guice-3.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.antlr-antlr-runtime-3.2"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.github.classgraph-classgraph-4.8.35"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.util-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.common.types-2.18.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.xtext-org.eclipse.xtext.xbase.lib-2.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.functionaljava-functionaljava-4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.istack-istack-commons-runtime-3.0.7"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun.xml.fastinfoset-FastInfoset-1.2.15"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-txw2-2.4.0-b180830.0438-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jvnet.staxex-stax-ex-1.8-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-analysis-8.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jcl-over-slf4j-1.6.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-simple-1.7.21-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.6"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.smali-dexlib2-2.4.0"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-8.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-tree-8.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-util-8.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ow2.asm-asm-commons-8.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-xmlpull-xmlpull-1.1.3.4d-b4-min"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-axml-2.0.0"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-polyglot-2006"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.upb.cs.swt-heros-1.2.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ca.mcgill.sable-jasmin-3.0.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.xml.bind-jaxb-api-2.4.0-b180725.0427"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish.jaxb-jaxb-runtime-2.4.0-b180830.0438"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.soot-oss-soot-4.2.1-source-artifact"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.codegenerator.tests-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.30"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-logging-commons-logging-1.1.1"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.fraunhofer.iem-CryptoAnalysis-2.7.2"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.lingala.zip4j-zip4j-2.1.1"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.httpcomponents-httpclient-4.5.9"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-aether-provider-3.3.3"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-api-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-connector-basic-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-impl-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-spi-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-file-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.aether-aether-transport-http-1.1.0"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.mylyn.github-org.eclipse.egit.github.core-2.1.5"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.core-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.ini4j-ini4j-0.5.1"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.crysl.handler-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL.ide-2.0.1"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.crysl.handler-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL.ui-2.0.1"
- spdxElementId: "SPDXRef-Project-Maven-de.cognicrypt-de.cognicrypt.crysl.handler-1.0.0-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-de.darmstadt.tu.crossing.CrySL-de.darmstadt.tu.crossing.CrySL-2.0.1"
