---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-05-24T22:14:56Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://19a8ceda-8662-4acf-bcf9-f7ecab9d7e8a"
documentDescribes:
- "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
packages:
- SPDXID: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://projects.eclipse.org/projects/technology.jbom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jbom"
  summary: "NONE"
  versionInfo: "1.2.2-SNAPSHOT"
- SPDXID: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/ethlo/time/itu/1.7.0/itu-1.7.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.ethlo.time/itu@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/ethlo/itu"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "itu"
  summary: "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile)\
    \ and W3C format"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/ethlo/itu.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.ethlo.time/itu@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/ethlo/itu"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "itu"
  summary: "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile)\
    \ and W3C format"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/ethlo/time/itu/1.7.0/itu-1.7.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.ethlo.time/itu@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/ethlo/itu"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "itu"
  summary: "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile)\
    \ and W3C format"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.2/jackson-annotations-2.14.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.14.2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-annotations.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.14.2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.2/jackson-annotations-2.14.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.14.2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14.1/jackson-core-2.14.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14.1/jackson-core-2.14.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14.1/jackson-databind-2.14.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-databind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14.1/jackson-databind-2.14.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.14.1/jackson-dataformat-xml-2.14.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-dataformat-xml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-dataformat-xml"
  summary: "Data format extension for Jackson to offer\nalternative support for serializing\
    \ POJOs as XML and deserializing XML as pojos."
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-dataformat-xml.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-dataformat-xml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-dataformat-xml"
  summary: "Data format extension for Jackson to offer\nalternative support for serializing\
    \ POJOs as XML and deserializing XML as pojos."
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.14.1/jackson-dataformat-xml-2.14.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-dataformat-xml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-dataformat-xml"
  summary: "Data format extension for Jackson to offer\nalternative support for serializing\
    \ POJOs as XML and deserializing XML as pojos."
  versionInfo: "2.14.1"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/6.4.0/woodstox-core-6.4.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/woodstox"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "woodstox-core"
  summary: "Woodstox is a high-performance XML processor that implements Stax (JSR-173),\n\
    SAX2 and Stax2 APIs"
  versionInfo: "6.4.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/woodstox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/woodstox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "woodstox-core"
  summary: "Woodstox is a high-performance XML processor that implements Stax (JSR-173),\n\
    SAX2 and Stax2 APIs"
  versionInfo: "6.4.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/woodstox/woodstox-core/6.4.0/woodstox-core-6.4.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/woodstox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "woodstox-core"
  summary: "Woodstox is a high-performance XML processor that implements Stax (JSR-173),\n\
    SAX2 and Stax2 APIs"
  versionInfo: "6.4.0"
- SPDXID: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/github/package-url/packageurl-java/1.4.1/packageurl-java-1.4.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.github.package-url/packageurl-java@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/package-url/packageurl-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "packageurl-java"
  summary: "The official Java implementation of the PackageURL specification. PackageURL\
    \ (purl) is a minimal\n        specification for describing a package via a \"\
    mostly universal\" URL."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/package-url/packageurl-java.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.github.package-url/packageurl-java@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/package-url/packageurl-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "packageurl-java"
  summary: "The official Java implementation of the PackageURL specification. PackageURL\
    \ (purl) is a minimal\n        specification for describing a package via a \"\
    mostly universal\" URL."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/github/package-url/packageurl-java/1.4.1/packageurl-java-1.4.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.github.package-url/packageurl-java@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/package-url/packageurl-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "packageurl-java"
  summary: "The official Java implementation of the PackageURL specification. PackageURL\
    \ (purl) is a minimal\n        specification for describing a package via a \"\
    mostly universal\" URL."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/jcraft/jsch/0.1.55/jsch-0.1.55.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.jcraft/jsch@0.1.55"
  filesAnalyzed: false
  homepage: "http://www.jcraft.com/jsch/"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "jsch"
  summary: "JSch is a pure Java implementation of SSH2"
  versionInfo: "0.1.55"
- SPDXID: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+http://git.jcraft.com/jsch.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.jcraft/jsch@0.1.55"
  filesAnalyzed: false
  homepage: "http://www.jcraft.com/jsch/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsch"
  summary: "JSch is a pure Java implementation of SSH2"
  versionInfo: "0.1.55"
- SPDXID: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/jcraft/jsch/0.1.55/jsch-0.1.55-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.jcraft/jsch@0.1.55"
  filesAnalyzed: false
  homepage: "http://www.jcraft.com/jsch/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsch"
  summary: "JSch is a pure Java implementation of SSH2"
  versionInfo: "0.1.55"
- SPDXID: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/networknt/json-schema-validator/1.0.76/json-schema-validator-1.0.76.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.networknt/json-schema-validator@1.0.76"
  filesAnalyzed: false
  homepage: "https://github.com/networknt/json-schema-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "json-schema-validator"
  summary: "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12"
  versionInfo: "1.0.76"
- SPDXID: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/networknt/json-schema-validator.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.networknt/json-schema-validator@1.0.76"
  filesAnalyzed: false
  homepage: "https://github.com/networknt/json-schema-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-validator"
  summary: "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12"
  versionInfo: "1.0.76"
- SPDXID: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/networknt/json-schema-validator/1.0.76/json-schema-validator-1.0.76-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.networknt/json-schema-validator@1.0.76"
  filesAnalyzed: false
  homepage: "https://github.com/networknt/json-schema-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-validator"
  summary: "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12"
  versionInfo: "1.0.76"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.15"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.15"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf?p=commons-codec.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.15"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.15"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.15/commons-codec-1.15-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.15"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.15"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.11.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/commons-io.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.11.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-io/commons-io/2.11.0/commons-io-2.11.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-io/commons-io@2.11.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-io"
  summary: "The Apache Commons IO library contains utility classes, stream implementations,\
    \ file filters,\nfile comparators, endian transformation classes, and much more."
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/info/picocli/picocli/4.7.1/picocli-4.7.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/info.picocli/picocli@4.7.1"
  filesAnalyzed: false
  homepage: "https://picocli.info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "picocli"
  summary: "Java command line parser with both an annotations API and a programmatic\
    \ API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands.\
    \ Easily included as source to avoid adding a dependency."
  versionInfo: "4.7.1"
- SPDXID: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/remkop/picocli.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/info.picocli/picocli@4.7.1"
  filesAnalyzed: false
  homepage: "https://picocli.info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picocli"
  summary: "Java command line parser with both an annotations API and a programmatic\
    \ API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands.\
    \ Easily included as source to avoid adding a dependency."
  versionInfo: "4.7.1"
- SPDXID: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/info/picocli/picocli/4.7.1/picocli-4.7.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/info.picocli/picocli@4.7.1"
  filesAnalyzed: false
  homepage: "https://picocli.info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picocli"
  summary: "Java command line parser with both an annotations API and a programmatic\
    \ API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands.\
    \ Easily included as source to avoid adding a dependency."
  versionInfo: "4.7.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13.2/junit-4.13.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.2"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "EPL-2.0"
  licenseDeclared: "EPL-1.0"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.2"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/junit-team/junit4.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.2"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.2"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.13.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.13.2/junit-4.13.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.13.2"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.13.2"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/bytebuddy/byte-buddy-agent/1.14.0/byte-buddy-agent-1.14.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.0"
  filesAnalyzed: false
  homepage: "https://bytebuddy.net/byte-buddy-agent"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "byte-buddy-agent"
  summary: "The Byte Buddy agent offers convenience for attaching an agent to the\
    \ local or a remote VM."
  versionInfo: "1.14.0"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/raphw/byte-buddy.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.0"
  filesAnalyzed: false
  homepage: "https://bytebuddy.net/byte-buddy-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "byte-buddy-agent"
  summary: "The Byte Buddy agent offers convenience for attaching an agent to the\
    \ local or a remote VM."
  versionInfo: "1.14.0"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/bytebuddy/byte-buddy-agent/1.14.0/byte-buddy-agent-1.14.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.0"
  filesAnalyzed: false
  homepage: "https://bytebuddy.net/byte-buddy-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "byte-buddy-agent"
  summary: "The Byte Buddy agent offers convenience for attaching an agent to the\
    \ local or a remote VM."
  versionInfo: "1.14.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.12.0/commons-lang3-3.12.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.12.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+http://gitbox.apache.org/repos/asf/commons-lang.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.12.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.12.0/commons-lang3-3.12.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.12.0"
  filesAnalyzed: false
  homepage: "https://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.12.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.9.0/maven-model-3.9.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.9.0"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.9.0/maven-model/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.9.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://gitbox.apache.org/repos/asf/maven.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.9.0"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.9.0/maven-model/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.9.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/maven/maven-model/3.9.0/maven-model-3.9.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.maven/maven-model@3.9.0"
  filesAnalyzed: false
  homepage: "https://maven.apache.org/ref/3.9.0/maven-model/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maven-model"
  summary: "Model for Maven POM (Project Object Model)"
  versionInfo: "3.9.0"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.4.2/plexus-utils-3.4.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.2"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/codehaus-plexus/plexus-utils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.2"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-utils/3.4.2/plexus-utils-3.4.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.2"
  filesAnalyzed: false
  homepage: "https://codehaus-plexus.github.io/plexus-utils/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plexus-utils"
  summary: "A collection of various utility classes to ease working with strings,\
    \ files, command lines, XML and\n    more."
  versionInfo: "3.4.2"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/woodstox/stax2-api/4.2.1/stax2-api-4.2.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/stax2-api"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "NOASSERTION"
  name: "stax2-api"
  summary: "tax2 API is an extension to basic Stax 1.0 API that adds significant new\
    \ functionality, such as full-featured bi-direction validation interface and high-performance\
    \ Typed Access API."
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/stax2-api.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/stax2-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax2-api"
  summary: "tax2 API is an extension to basic Stax 1.0 API that adds significant new\
    \ functionality, such as full-featured bi-direction validation interface and high-performance\
    \ Typed Access API."
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/codehaus/woodstox/stax2-api/4.2.1/stax2-api-4.2.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/stax2-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stax2-api"
  summary: "tax2 API is an extension to basic Stax 1.0 API that adds significant new\
    \ functionality, such as full-featured bi-direction validation interface and high-performance\
    \ Typed Access API."
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo1.maven.org/maven2/org/cyclonedx/cyclonedx-core-java/7.3.1/cyclonedx-core-java-7.3.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/CycloneDX/cyclonedx-core-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "cyclonedx-core-java"
  summary: "The CycloneDX core module provides a model representation of the BOM along\
    \ with utilities to assist in creating, parsing, and validating BOMs."
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/CycloneDX/cyclonedx-core-java.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/CycloneDX/cyclonedx-core-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cyclonedx-core-java"
  summary: "The CycloneDX core module provides a model representation of the BOM along\
    \ with utilities to assist in creating, parsing, and validating BOMs."
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo1.maven.org/maven2/org/cyclonedx/cyclonedx-core-java/7.3.1/cyclonedx-core-java-7.3.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/CycloneDX/cyclonedx-core-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cyclonedx-core-java"
  summary: "The CycloneDX core module provides a model representation of the BOM along\
    \ with utilities to assist in creating, parsing, and validating BOMs."
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/hamcrest/JavaHamcrest.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.2/slf4j-api-1.7.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.2"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/ceki/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.2"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.2/slf4j-api-1.7.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.2"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.2"
- SPDXID: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/zeroturnaround/zt-exec/1.12/zt-exec-1.12.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.zeroturnaround/zt-exec@1.12"
  filesAnalyzed: false
  homepage: "https://github.com/zeroturnaround/zt-exec"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "zt-exec"
  summary: "A lightweight library to execute external processes from Java."
  versionInfo: "1.12"
- SPDXID: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/zeroturnaround/zt-exec.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.zeroturnaround/zt-exec@1.12"
  filesAnalyzed: false
  homepage: "https://github.com/zeroturnaround/zt-exec"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "zt-exec"
  summary: "A lightweight library to execute external processes from Java."
  versionInfo: "1.12"
- SPDXID: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/zeroturnaround/zt-exec/1.12/zt-exec-1.12-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.zeroturnaround/zt-exec@1.12"
  filesAnalyzed: false
  homepage: "https://github.com/zeroturnaround/zt-exec"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "zt-exec"
  summary: "A lightweight library to execute external processes from Java."
  versionInfo: "1.12"
relationships:
- spdxElementId: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.14.1"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.14.1"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.woodstox-woodstox-core-6.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.ethlo.time-itu-1.7.0"
- spdxElementId: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.13.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.plexus-plexus-utils-3.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.codehaus.woodstox-stax2-api-4.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.12.0"
- spdxElementId: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.dataformat-jackson-dataformat-xml-2.14.1"
- spdxElementId: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.networknt-json-schema-validator-1.0.76"
- spdxElementId: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.2"
- spdxElementId: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12-source-artifact"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.14.2"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.github.package-url-packageurl-java-1.4.1"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.jcraft-jsch-0.1.55"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-io-commons-io-2.11.0"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-info.picocli-picocli-4.7.1"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-agent-1.14.0"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.maven-maven-model-3.9.0"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.cyclonedx-cyclonedx-core-java-7.3.1"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.zeroturnaround-zt-exec-1.12"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.sun-tools-any"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.15"
- spdxElementId: "SPDXRef-Project-Maven-com.contrastsecurity-jbom-1.2.2-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.13.2"
