pmd-bin 1.38.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (171) hide show
  1. package/README.md +1 -1
  2. package/dist/pmd-bin/bin/{run.sh → pmd} +39 -58
  3. package/dist/pmd-bin/bin/pmd.bat +74 -6
  4. package/dist/pmd-bin/conf/simplelogger.properties +22 -0
  5. package/dist/pmd-bin/lib/Saxon-HE-12.4.jar +0 -0
  6. package/dist/pmd-bin/lib/antlr4-runtime-4.9.3.jar +0 -0
  7. package/dist/pmd-bin/lib/apex-parser-3.6.0.jar +0 -0
  8. package/dist/pmd-bin/lib/apexlink-2.3.7.jar +0 -0
  9. package/dist/pmd-bin/lib/asm-9.6.jar +0 -0
  10. package/dist/pmd-bin/lib/checker-compat-qual-2.5.3.jar +0 -0
  11. package/dist/pmd-bin/lib/checker-qual-2.11.1.jar +0 -0
  12. package/dist/pmd-bin/lib/common_2.13-4.9.1.jar +0 -0
  13. package/dist/pmd-bin/lib/commons-codec-1.15.jar +0 -0
  14. package/dist/pmd-bin/lib/commons-lang3-3.14.0.jar +0 -0
  15. package/dist/pmd-bin/lib/error_prone_annotations-2.23.0.jar +0 -0
  16. package/dist/pmd-bin/lib/failureaccess-1.0.2.jar +0 -0
  17. package/dist/pmd-bin/lib/flogger-0.7.4.jar +0 -0
  18. package/dist/pmd-bin/lib/flogger-system-backend-0.7.4.jar +0 -0
  19. package/dist/pmd-bin/lib/geny_2.13-0.6.2.jar +0 -0
  20. package/dist/pmd-bin/lib/groovy-4.0.19.jar +0 -0
  21. package/dist/pmd-bin/lib/gson-2.10.1.jar +0 -0
  22. package/dist/pmd-bin/lib/gson-extras-1.0.0.jar +0 -0
  23. package/dist/pmd-bin/lib/guava-33.0.0-jre.jar +0 -0
  24. package/dist/pmd-bin/lib/httpclient5-5.1.3.jar +0 -0
  25. package/dist/pmd-bin/lib/httpcore5-5.1.3.jar +0 -0
  26. package/dist/pmd-bin/lib/httpcore5-h2-5.1.3.jar +0 -0
  27. package/dist/pmd-bin/lib/j2objc-annotations-2.8.jar +0 -0
  28. package/dist/pmd-bin/lib/jline-3.21.0.jar +0 -0
  29. package/dist/pmd-bin/lib/jsoup-1.17.2.jar +0 -0
  30. package/dist/pmd-bin/lib/jsr250-api-1.0.jar +0 -0
  31. package/dist/pmd-bin/lib/jul-to-slf4j-1.7.36.jar +0 -0
  32. package/dist/pmd-bin/lib/kotlin-stdlib-1.7.20.jar +0 -0
  33. package/dist/pmd-bin/lib/kotlin-stdlib-common-1.7.20.jar +0 -0
  34. package/dist/pmd-bin/lib/kotlin-stdlib-jdk7-1.7.20.jar +0 -0
  35. package/dist/pmd-bin/lib/kotlin-stdlib-jdk8-1.7.20.jar +0 -0
  36. package/dist/pmd-bin/lib/lenses_2.13-0.11.15.jar +0 -0
  37. package/dist/pmd-bin/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar +0 -0
  38. package/dist/pmd-bin/lib/nice-xml-messages-3.1.jar +0 -0
  39. package/dist/pmd-bin/lib/parsers_2.13-4.9.1.jar +0 -0
  40. package/dist/pmd-bin/lib/pcollections-3.2.0.jar +0 -0
  41. package/dist/pmd-bin/lib/picocli-4.7.5.jar +0 -0
  42. package/dist/pmd-bin/lib/pkgforce_2.13-2.3.7.jar +0 -0
  43. package/dist/pmd-bin/lib/pmd-ant-7.1.0.jar +0 -0
  44. package/dist/pmd-bin/lib/pmd-apex-7.1.0.jar +0 -0
  45. package/dist/pmd-bin/lib/pmd-cli-7.1.0.jar +0 -0
  46. package/dist/pmd-bin/lib/pmd-coco-7.1.0.jar +0 -0
  47. package/dist/pmd-bin/lib/pmd-core-7.1.0.jar +0 -0
  48. package/dist/pmd-bin/lib/pmd-cpp-7.1.0.jar +0 -0
  49. package/dist/pmd-bin/lib/pmd-cs-7.1.0.jar +0 -0
  50. package/dist/pmd-bin/lib/pmd-dart-7.1.0.jar +0 -0
  51. package/dist/pmd-bin/lib/pmd-designer-7.0.0.jar +0 -0
  52. package/dist/pmd-bin/lib/pmd-fortran-7.1.0.jar +0 -0
  53. package/dist/pmd-bin/lib/pmd-gherkin-7.1.0.jar +0 -0
  54. package/dist/pmd-bin/lib/pmd-go-7.1.0.jar +0 -0
  55. package/dist/pmd-bin/lib/pmd-groovy-7.1.0.jar +0 -0
  56. package/dist/pmd-bin/lib/pmd-html-7.1.0.jar +0 -0
  57. package/dist/pmd-bin/lib/pmd-java-7.1.0.jar +0 -0
  58. package/dist/pmd-bin/lib/pmd-javascript-7.1.0.jar +0 -0
  59. package/dist/pmd-bin/lib/pmd-jsp-7.1.0.jar +0 -0
  60. package/dist/pmd-bin/lib/pmd-julia-7.1.0.jar +0 -0
  61. package/dist/pmd-bin/lib/pmd-kotlin-7.1.0.jar +0 -0
  62. package/dist/pmd-bin/lib/pmd-lua-7.1.0.jar +0 -0
  63. package/dist/pmd-bin/lib/pmd-matlab-7.1.0.jar +0 -0
  64. package/dist/pmd-bin/lib/pmd-modelica-7.1.0.jar +0 -0
  65. package/dist/pmd-bin/lib/pmd-objectivec-7.1.0.jar +0 -0
  66. package/dist/pmd-bin/lib/pmd-perl-7.1.0.jar +0 -0
  67. package/dist/pmd-bin/lib/pmd-php-7.1.0.jar +0 -0
  68. package/dist/pmd-bin/lib/pmd-plsql-7.1.0.jar +0 -0
  69. package/dist/pmd-bin/lib/pmd-python-7.1.0.jar +0 -0
  70. package/dist/pmd-bin/lib/pmd-ruby-7.1.0.jar +0 -0
  71. package/dist/pmd-bin/lib/pmd-scala_2.13-7.1.0.jar +0 -0
  72. package/dist/pmd-bin/lib/pmd-swift-7.1.0.jar +0 -0
  73. package/dist/pmd-bin/lib/pmd-tsql-7.1.0.jar +0 -0
  74. package/dist/pmd-bin/lib/pmd-velocity-7.1.0.jar +0 -0
  75. package/dist/pmd-bin/lib/pmd-visualforce-7.1.0.jar +0 -0
  76. package/dist/pmd-bin/lib/pmd-xml-7.1.0.jar +0 -0
  77. package/dist/pmd-bin/lib/progressbar-0.9.5.jar +0 -0
  78. package/dist/pmd-bin/lib/protobuf-java-3.25.3.jar +0 -0
  79. package/dist/pmd-bin/lib/runforce-55.5.0.jar +0 -0
  80. package/dist/pmd-bin/lib/{scala-collection-compat_2.13-2.7.0.jar → scala-collection-compat_2.13-2.11.0.jar} +0 -0
  81. package/dist/pmd-bin/lib/scala-json-rpc-upickle-json-serializer_2.13-1.0.1.jar +0 -0
  82. package/dist/pmd-bin/lib/scala-json-rpc_2.13-1.0.1.jar +0 -0
  83. package/dist/pmd-bin/lib/{scala-library-2.13.9.jar → scala-library-2.13.13.jar} +0 -0
  84. package/dist/pmd-bin/lib/scala-parallel-collections_2.13-1.0.0.jar +0 -0
  85. package/dist/pmd-bin/lib/scala-reflect-2.13.13.jar +0 -0
  86. package/dist/pmd-bin/lib/scala-xml_2.13-1.3.0.jar +0 -0
  87. package/dist/pmd-bin/lib/scalapb-runtime_2.13-0.11.15.jar +0 -0
  88. package/dist/pmd-bin/lib/slf4j-api-1.7.36.jar +0 -0
  89. package/dist/pmd-bin/lib/slf4j-simple-1.7.36.jar +0 -0
  90. package/dist/pmd-bin/lib/{sourcecode_2.13-0.3.0.jar → sourcecode_2.13-0.3.1.jar} +0 -0
  91. package/dist/pmd-bin/lib/summit-ast-2.2.0.jar +0 -0
  92. package/dist/pmd-bin/lib/trees_2.13-4.9.1.jar +0 -0
  93. package/dist/pmd-bin/lib/ujson_2.13-1.2.0.jar +0 -0
  94. package/dist/pmd-bin/lib/upack_2.13-1.2.0.jar +0 -0
  95. package/dist/pmd-bin/lib/upickle-core_2.13-1.2.0.jar +0 -0
  96. package/dist/pmd-bin/lib/upickle-implicits_2.13-1.2.0.jar +0 -0
  97. package/dist/pmd-bin/lib/upickle_2.13-1.2.0.jar +0 -0
  98. package/dist/pmd-bin/lib/xmlresolver-5.2.2-data.jar +0 -0
  99. package/dist/pmd-bin/lib/xmlresolver-5.2.2.jar +0 -0
  100. package/dist/pmd-bin/sbom/pmd-7.1.0-cyclonedx.json +7703 -0
  101. package/dist/pmd-bin/sbom/pmd-7.1.0-cyclonedx.xml +3325 -0
  102. package/package.json +2 -2
  103. package/pmd +1 -1
  104. package/dist/pmd-bin/bin/ast-dump.bat +0 -6
  105. package/dist/pmd-bin/bin/bgastviewer.bat +0 -6
  106. package/dist/pmd-bin/bin/cpd.bat +0 -6
  107. package/dist/pmd-bin/bin/cpdgui.bat +0 -6
  108. package/dist/pmd-bin/bin/designer.bat +0 -57
  109. package/dist/pmd-bin/bin/designerold.bat +0 -6
  110. package/dist/pmd-bin/lib/animal-sniffer-annotations-1.14.jar +0 -0
  111. package/dist/pmd-bin/lib/antlr-2.7.7.jar +0 -0
  112. package/dist/pmd-bin/lib/antlr-runtime-3.5.2.jar +0 -0
  113. package/dist/pmd-bin/lib/antlr4-runtime-4.7.2.jar +0 -0
  114. package/dist/pmd-bin/lib/aopalliance-1.0.jar +0 -0
  115. package/dist/pmd-bin/lib/asm-9.4.jar +0 -0
  116. package/dist/pmd-bin/lib/cglib-3.3.0.jar +0 -0
  117. package/dist/pmd-bin/lib/common_2.13-4.6.0.jar +0 -0
  118. package/dist/pmd-bin/lib/commons-lang3-3.8.1.jar +0 -0
  119. package/dist/pmd-bin/lib/error_prone_annotations-2.1.3.jar +0 -0
  120. package/dist/pmd-bin/lib/fastparse-v2_2.13-2.3.1.jar +0 -0
  121. package/dist/pmd-bin/lib/geny_2.13-0.6.5.jar +0 -0
  122. package/dist/pmd-bin/lib/groovy-2.4.21.jar +0 -0
  123. package/dist/pmd-bin/lib/gson-2.8.9.jar +0 -0
  124. package/dist/pmd-bin/lib/j2objc-annotations-1.1.jar +0 -0
  125. package/dist/pmd-bin/lib/javax.inject-1.jar +0 -0
  126. package/dist/pmd-bin/lib/jcommander-1.48.jar +0 -0
  127. package/dist/pmd-bin/lib/jol-core-0.4.jar +0 -0
  128. package/dist/pmd-bin/lib/jsoup-1.15.3.jar +0 -0
  129. package/dist/pmd-bin/lib/lenses_2.13-0.11.11.jar +0 -0
  130. package/dist/pmd-bin/lib/logback-classic-1.2.9.jar +0 -0
  131. package/dist/pmd-bin/lib/logback-core-1.2.9.jar +0 -0
  132. package/dist/pmd-bin/lib/parsers_2.13-4.6.0.jar +0 -0
  133. package/dist/pmd-bin/lib/pmd-apex-6.55.0.jar +0 -0
  134. package/dist/pmd-bin/lib/pmd-apex-jorje-6.55.0-lib.jar +0 -0
  135. package/dist/pmd-bin/lib/pmd-apex-jorje-6.55.0.pom +0 -144
  136. package/dist/pmd-bin/lib/pmd-core-6.55.0.jar +0 -0
  137. package/dist/pmd-bin/lib/pmd-cpp-6.55.0.jar +0 -0
  138. package/dist/pmd-bin/lib/pmd-cs-6.55.0.jar +0 -0
  139. package/dist/pmd-bin/lib/pmd-dart-6.55.0.jar +0 -0
  140. package/dist/pmd-bin/lib/pmd-fortran-6.55.0.jar +0 -0
  141. package/dist/pmd-bin/lib/pmd-gherkin-6.55.0.jar +0 -0
  142. package/dist/pmd-bin/lib/pmd-go-6.55.0.jar +0 -0
  143. package/dist/pmd-bin/lib/pmd-groovy-6.55.0.jar +0 -0
  144. package/dist/pmd-bin/lib/pmd-html-6.55.0.jar +0 -0
  145. package/dist/pmd-bin/lib/pmd-java-6.55.0.jar +0 -0
  146. package/dist/pmd-bin/lib/pmd-javascript-6.55.0.jar +0 -0
  147. package/dist/pmd-bin/lib/pmd-jsp-6.55.0.jar +0 -0
  148. package/dist/pmd-bin/lib/pmd-kotlin-6.55.0.jar +0 -0
  149. package/dist/pmd-bin/lib/pmd-lua-6.55.0.jar +0 -0
  150. package/dist/pmd-bin/lib/pmd-matlab-6.55.0.jar +0 -0
  151. package/dist/pmd-bin/lib/pmd-modelica-6.55.0.jar +0 -0
  152. package/dist/pmd-bin/lib/pmd-objectivec-6.55.0.jar +0 -0
  153. package/dist/pmd-bin/lib/pmd-perl-6.55.0.jar +0 -0
  154. package/dist/pmd-bin/lib/pmd-php-6.55.0.jar +0 -0
  155. package/dist/pmd-bin/lib/pmd-plsql-6.55.0.jar +0 -0
  156. package/dist/pmd-bin/lib/pmd-python-6.55.0.jar +0 -0
  157. package/dist/pmd-bin/lib/pmd-ruby-6.55.0.jar +0 -0
  158. package/dist/pmd-bin/lib/pmd-scala_2.13-6.55.0.jar +0 -0
  159. package/dist/pmd-bin/lib/pmd-swift-6.55.0.jar +0 -0
  160. package/dist/pmd-bin/lib/pmd-tsql-6.55.0.jar +0 -0
  161. package/dist/pmd-bin/lib/pmd-ui-6.49.0.jar +0 -0
  162. package/dist/pmd-bin/lib/pmd-visualforce-6.55.0.jar +0 -0
  163. package/dist/pmd-bin/lib/pmd-vm-6.55.0.jar +0 -0
  164. package/dist/pmd-bin/lib/pmd-xml-6.55.0.jar +0 -0
  165. package/dist/pmd-bin/lib/protobuf-java-3.16.3.jar +0 -0
  166. package/dist/pmd-bin/lib/saxon-9.1.0.8-dom.jar +0 -0
  167. package/dist/pmd-bin/lib/saxon-9.1.0.8.jar +0 -0
  168. package/dist/pmd-bin/lib/scalapb-runtime_2.13-0.11.11.jar +0 -0
  169. package/dist/pmd-bin/lib/slf4j-api-1.7.32.jar +0 -0
  170. package/dist/pmd-bin/lib/stringtemplate-3.2.1.jar +0 -0
  171. package/dist/pmd-bin/lib/trees_2.13-4.6.0.jar +0 -0
package/dist/pmd-bin/sbom/pmd-7.1.0-cyclonedx.xml ADDED
@@ -0,0 +1,3325 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <bom serialNumber="urn:uuid:b81e22fa-fe78-3ddc-8034-71abe0d1379f" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
3
+ <metadata>
4
+ <tools>
5
+ <tool>
6
+ <vendor>OWASP Foundation</vendor>
7
+ <name>CycloneDX Maven plugin</name>
8
+ <version>2.7.11</version>
9
+ <hashes>
10
+ <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash>
11
+ <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>
12
+ <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>
13
+ <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>
14
+ <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>
15
+ <hash alg="SHA3-384">ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a</hash>
16
+ <hash alg="SHA3-256">b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5</hash>
17
+ <hash alg="SHA3-512">935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e</hash>
18
+ </hashes>
19
+ </tool>
20
+ </tools>
21
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-dist@7.1.0?type=jar">
22
+ <publisher>PMD</publisher>
23
+ <group>net.sourceforge.pmd</group>
24
+ <name>pmd-dist</name>
25
+ <version>7.1.0</version>
26
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
27
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
28
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
29
+ Rules can be written in Java or using a XPath query.
30
+
31
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
32
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
33
+ Scala is supported, but there are currently no Scala rules available.
34
+
35
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
36
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
37
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
38
+ <licenses>
39
+ <license>
40
+ <name>BSD-style</name>
41
+ <url>http://pmd.sourceforge.net/license.html</url>
42
+ </license>
43
+ </licenses>
44
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-dist@7.1.0?type=jar</purl>
45
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-dist/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-dist</url></reference></externalReferences>
46
+ </component>
47
+ <properties>
48
+ <property name="maven.goal">makeBom</property>
49
+ <property name="maven.scopes">compile,provided,runtime,system</property>
50
+ <property name="cdx:reproducible">enabled</property>
51
+ </properties>
52
+ </metadata>
53
+ <components>
54
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar">
55
+ <publisher>PMD</publisher>
56
+ <group>net.sourceforge.pmd</group>
57
+ <name>pmd-core</name>
58
+ <version>7.1.0</version>
59
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
60
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
61
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
62
+ Rules can be written in Java or using a XPath query.
63
+
64
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
65
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
66
+ Scala is supported, but there are currently no Scala rules available.
67
+
68
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
69
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
70
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
71
+ <scope>required</scope>
72
+ <hashes>
73
+ <hash alg="MD5">c79e1d4f934c43cfa5fabbc7d6466118</hash>
74
+ <hash alg="SHA-1">62713b761890d6adae06121bc9f719c0360762e6</hash>
75
+ <hash alg="SHA-256">c221241c77bdba7908a83b6524e08472fcad326f12706507e59717ad5093a158</hash>
76
+ <hash alg="SHA-512">820135a3d01571e3540467301d24bcc478d650933bcf5cf861f28361d8969aec1697bb69809e840c43d24f4f295719466abd468d8e67bb90432d6a0a8706e9ea</hash>
77
+ <hash alg="SHA-384">de328441d85bf120978165be7c88eb1fac1778f7f19fda00fd35c536ea9ee1ff8892bd212ea4cb092bd69ff1013f254c</hash>
78
+ <hash alg="SHA3-384">474fa1953a4baf5bea5781f112c156822c6e5427d2b11ca537dfccfa0d4280503049dcfdead8003cad3629cf8cbfeb65</hash>
79
+ <hash alg="SHA3-256">52c80275d22faa6db3ba02c62f548c83e8e0f4b6b1b70b63700a98efc2e304b4</hash>
80
+ <hash alg="SHA3-512">11f7bba4563887d0a110b57acb0bdfbfff667b72726dc2f8f6ff6cf30c76b9544f34454b7a0dd4ae0f5a51adbe74862d314a89eb0cc5b0f6e3c48be09857b4c5</hash>
81
+ </hashes>
82
+ <licenses>
83
+ <license>
84
+ <name>BSD-style</name>
85
+ <url>http://pmd.sourceforge.net/license.html</url>
86
+ </license>
87
+ </licenses>
88
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar</purl>
89
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-core/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-core</url></reference></externalReferences>
90
+ </component>
91
+ <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
92
+ <publisher>QOS.ch</publisher>
93
+ <group>org.slf4j</group>
94
+ <name>slf4j-api</name>
95
+ <version>1.7.36</version>
96
+ <description>The slf4j API</description>
97
+ <scope>required</scope>
98
+ <hashes>
99
+ <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
100
+ <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
101
+ <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
102
+ <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
103
+ <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
104
+ <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
105
+ <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
106
+ <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
107
+ </hashes>
108
+ <licenses>
109
+ <license>
110
+ <id>MIT</id>
111
+ <url>https://opensource.org/licenses/MIT</url>
112
+ </license>
113
+ </licenses>
114
+ <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
115
+ <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
116
+ </component>
117
+ <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
118
+ <publisher>QOS.ch</publisher>
119
+ <group>org.slf4j</group>
120
+ <name>jul-to-slf4j</name>
121
+ <version>1.7.36</version>
122
+ <description>JUL to SLF4J bridge</description>
123
+ <scope>required</scope>
124
+ <hashes>
125
+ <hash alg="MD5">2a3fe73e6cafe8f102facaf2dd65353f</hash>
126
+ <hash alg="SHA-1">ed46d81cef9c412a88caef405b58f93a678ff2ca</hash>
127
+ <hash alg="SHA-256">9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de</hash>
128
+ <hash alg="SHA-512">0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea</hash>
129
+ <hash alg="SHA-384">50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f</hash>
130
+ <hash alg="SHA3-384">4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf</hash>
131
+ <hash alg="SHA3-256">8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6</hash>
132
+ <hash alg="SHA3-512">e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01</hash>
133
+ </hashes>
134
+ <licenses>
135
+ <license>
136
+ <id>MIT</id>
137
+ <url>https://opensource.org/licenses/MIT</url>
138
+ </license>
139
+ </licenses>
140
+ <purl>pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar</purl>
141
+ <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/jul-to-slf4j</url></reference></externalReferences>
142
+ </component>
143
+ <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar">
144
+ <publisher>ANTLR</publisher>
145
+ <group>org.antlr</group>
146
+ <name>antlr4-runtime</name>
147
+ <version>4.9.3</version>
148
+ <description>The ANTLR 4 Runtime</description>
149
+ <scope>required</scope>
150
+ <hashes>
151
+ <hash alg="MD5">718f199bafa6574ffa1111fa3e10276a</hash>
152
+ <hash alg="SHA-1">81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8</hash>
153
+ <hash alg="SHA-256">131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5</hash>
154
+ <hash alg="SHA-512">2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8</hash>
155
+ <hash alg="SHA-384">62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841</hash>
156
+ <hash alg="SHA3-384">e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b</hash>
157
+ <hash alg="SHA3-256">70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e</hash>
158
+ <hash alg="SHA3-512">1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c</hash>
159
+ </hashes>
160
+ <licenses>
161
+ <license>
162
+ <id>BSD-4-Clause</id>
163
+ </license>
164
+ </licenses>
165
+ <purl>pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar</purl>
166
+ <externalReferences><reference type="website"><url>http://www.antlr.org/antlr4-runtime</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url></reference></externalReferences>
167
+ </component>
168
+ <component type="library" bom-ref="pkg:maven/net.sf.saxon/Saxon-HE@12.4?type=jar">
169
+ <publisher>Saxonica</publisher>
170
+ <group>net.sf.saxon</group>
171
+ <name>Saxon-HE</name>
172
+ <version>12.4</version>
173
+ <description>The XSLT and XQuery Processor</description>
174
+ <scope>required</scope>
175
+ <hashes>
176
+ <hash alg="MD5">b6319126413fa812ab937cdfac1e162c</hash>
177
+ <hash alg="SHA-1">b532e44a8bf4007bbce69467801778a955599c52</hash>
178
+ <hash alg="SHA-256">575f8b696e3b6f9aa7a3bf01611b8bf1b84576b55ce29bc16656a53a147ef441</hash>
179
+ <hash alg="SHA-512">e8197cefefbe4abf54954fbbb931b90455f77e04048030d3101a9ef62e375fce1cd137e792a9f82df532ff8647d0301bc8bdc26a247552dd9546728f07cea55c</hash>
180
+ <hash alg="SHA-384">c7f640c2149fcedaa3eeb58cbb739c823a202c883ba1d44a02b3487ea0b28d9efa4c89af38fe8055fd06f9551b634cc7</hash>
181
+ <hash alg="SHA3-384">41939b8c61e2b21e5eb4c32abbf1d3fa92af77e9d36ddcdd9494bc7f1f5f152a4cd3aabbe924bb963931f6d34c397066</hash>
182
+ <hash alg="SHA3-256">5c0aa91a28cf69c92543b501cd2be81ba1063f367a58a9d4b307fd73aae5d4e2</hash>
183
+ <hash alg="SHA3-512">9a4c797666ea19d76fe482d6f2f014ff63cf91963f63b9f9386960f65e57e66b9bc8586d7ce0b335bd6c884f46050b708614a25f69862fb21ee6637ddde6560c</hash>
184
+ </hashes>
185
+ <licenses>
186
+ <license>
187
+ <id>MPL-2.0-no-copyleft-exception</id>
188
+ <url>https://www.mozilla.org/MPL/2.0/</url>
189
+ </license>
190
+ </licenses>
191
+ <purl>pkg:maven/net.sf.saxon/Saxon-HE@12.4?type=jar</purl>
192
+ <externalReferences><reference type="website"><url>http://www.saxonica.com/</url></reference><reference type="vcs"><url>https://saxonica.plan.io/projects/saxonmirrorhe/repository</url></reference></externalReferences>
193
+ </component>
194
+ <component type="library" bom-ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar">
195
+ <group>org.xmlresolver</group>
196
+ <name>xmlresolver</name>
197
+ <version>5.2.2</version>
198
+ <description>An XML entity/uri resolver</description>
199
+ <scope>required</scope>
200
+ <hashes>
201
+ <hash alg="MD5">0de20e8f7acfa5942d78c239d3034deb</hash>
202
+ <hash alg="SHA-1">152378e04ba01898847bf38fad5023c7d52f0c9d</hash>
203
+ <hash alg="SHA-256">efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222</hash>
204
+ <hash alg="SHA-512">4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0</hash>
205
+ <hash alg="SHA-384">f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169</hash>
206
+ <hash alg="SHA3-384">a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b</hash>
207
+ <hash alg="SHA3-256">d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397</hash>
208
+ <hash alg="SHA3-512">e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899</hash>
209
+ </hashes>
210
+ <licenses>
211
+ <license>
212
+ <id>Apache-2.0</id>
213
+ </license>
214
+ </licenses>
215
+ <purl>pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar</purl>
216
+ <externalReferences><reference type="website"><url>https://github.com/xmlresolver/xmlresolver</url></reference><reference type="vcs"><url>scm:git@github.com:xmlresolver/xmlresolver.git</url></reference></externalReferences>
217
+ </component>
218
+ <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar">
219
+ <publisher>The Apache Software Foundation</publisher>
220
+ <group>org.apache.httpcomponents.client5</group>
221
+ <name>httpclient5</name>
222
+ <version>5.1.3</version>
223
+ <description>Apache HttpComponents Client</description>
224
+ <scope>required</scope>
225
+ <hashes>
226
+ <hash alg="MD5">757bfb86277b9b11798db8fdb351bf74</hash>
227
+ <hash alg="SHA-1">13c984b7b881afcff3a7f0bb95878724a48a4b66</hash>
228
+ <hash alg="SHA-256">28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe</hash>
229
+ <hash alg="SHA-512">4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093</hash>
230
+ <hash alg="SHA-384">8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147</hash>
231
+ <hash alg="SHA3-384">ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb</hash>
232
+ <hash alg="SHA3-256">29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121</hash>
233
+ <hash alg="SHA3-512">46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564</hash>
234
+ </hashes>
235
+ <licenses>
236
+ <license>
237
+ <id>Apache-2.0</id>
238
+ </license>
239
+ </licenses>
240
+ <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar</purl>
241
+ <externalReferences><reference type="website"><url>https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5</url></reference></externalReferences>
242
+ </component>
243
+ <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar">
244
+ <publisher>The Apache Software Foundation</publisher>
245
+ <group>org.apache.httpcomponents.core5</group>
246
+ <name>httpcore5-h2</name>
247
+ <version>5.1.3</version>
248
+ <description>Apache HttpComponents HTTP/2 Core Components</description>
249
+ <scope>required</scope>
250
+ <hashes>
251
+ <hash alg="MD5">e12cc9746f6635675a408e641c95b177</hash>
252
+ <hash alg="SHA-1">4664b59b09f5ee008e37a963bbb92f4068e91696</hash>
253
+ <hash alg="SHA-256">d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807</hash>
254
+ <hash alg="SHA-512">76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36</hash>
255
+ <hash alg="SHA-384">cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35</hash>
256
+ <hash alg="SHA3-384">d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439</hash>
257
+ <hash alg="SHA3-256">7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5</hash>
258
+ <hash alg="SHA3-512">3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255</hash>
259
+ </hashes>
260
+ <licenses>
261
+ <license>
262
+ <id>Apache-2.0</id>
263
+ </license>
264
+ </licenses>
265
+ <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar</purl>
266
+ <externalReferences><reference type="website"><url>https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2</url></reference></externalReferences>
267
+ </component>
268
+ <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
269
+ <publisher>The Apache Software Foundation</publisher>
270
+ <group>commons-codec</group>
271
+ <name>commons-codec</name>
272
+ <version>1.15</version>
273
+ <description>The Apache Commons Codec package contains simple encoder and decoders for
274
+ various formats such as Base64 and Hexadecimal. In addition to these
275
+ widely used encoders and decoders, the codec package also maintains a
276
+ collection of phonetic encoding utilities.</description>
277
+ <scope>required</scope>
278
+ <hashes>
279
+ <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
280
+ <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
281
+ <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
282
+ <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
283
+ <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
284
+ <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
285
+ <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
286
+ <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
287
+ </hashes>
288
+ <licenses>
289
+ <license>
290
+ <id>Apache-2.0</id>
291
+ </license>
292
+ </licenses>
293
+ <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
294
+ <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
295
+ </component>
296
+ <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar">
297
+ <publisher>The Apache Software Foundation</publisher>
298
+ <group>org.apache.httpcomponents.core5</group>
299
+ <name>httpcore5</name>
300
+ <version>5.1.3</version>
301
+ <description>Apache HttpComponents HTTP/1.1 core components</description>
302
+ <scope>required</scope>
303
+ <hashes>
304
+ <hash alg="MD5">e3311847fc70a84038fb2c079dd08c4a</hash>
305
+ <hash alg="SHA-1">d1638d1e5f2793f187d4144c702a93524ba6fd3b</hash>
306
+ <hash alg="SHA-256">f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe</hash>
307
+ <hash alg="SHA-512">c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3</hash>
308
+ <hash alg="SHA-384">63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c</hash>
309
+ <hash alg="SHA3-384">5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224</hash>
310
+ <hash alg="SHA3-256">0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947</hash>
311
+ <hash alg="SHA3-512">eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9</hash>
312
+ </hashes>
313
+ <licenses>
314
+ <license>
315
+ <id>Apache-2.0</id>
316
+ </license>
317
+ </licenses>
318
+ <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar</purl>
319
+ <externalReferences><reference type="website"><url>https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5</url></reference></externalReferences>
320
+ </component>
321
+ <component type="library" bom-ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar">
322
+ <group>org.xmlresolver</group>
323
+ <name>xmlresolver</name>
324
+ <version>5.2.2</version>
325
+ <description>An XML entity/uri resolver</description>
326
+ <scope>required</scope>
327
+ <hashes>
328
+ <hash alg="MD5">0e77f628aa613bbe3145c6a24f8973f3</hash>
329
+ <hash alg="SHA-1">5624ede8b8e374979194acaae9f34cff23b62b3e</hash>
330
+ <hash alg="SHA-256">173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4</hash>
331
+ <hash alg="SHA-512">18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357</hash>
332
+ <hash alg="SHA-384">3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207</hash>
333
+ <hash alg="SHA3-384">1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18</hash>
334
+ <hash alg="SHA3-256">e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789</hash>
335
+ <hash alg="SHA3-512">f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5</hash>
336
+ </hashes>
337
+ <licenses>
338
+ <license>
339
+ <id>Apache-2.0</id>
340
+ </license>
341
+ </licenses>
342
+ <purl>pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar</purl>
343
+ <externalReferences><reference type="website"><url>https://github.com/xmlresolver/xmlresolver</url></reference><reference type="vcs"><url>scm:git@github.com:xmlresolver/xmlresolver.git</url></reference></externalReferences>
344
+ </component>
345
+ <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar">
346
+ <publisher>OW2</publisher>
347
+ <group>org.ow2.asm</group>
348
+ <name>asm</name>
349
+ <version>9.6</version>
350
+ <description>ASM, a very small and fast Java bytecode manipulation framework</description>
351
+ <scope>required</scope>
352
+ <hashes>
353
+ <hash alg="MD5">6f8bccf756f170d4185bb24c8c2d2020</hash>
354
+ <hash alg="SHA-1">aa205cf0a06dbd8e04ece91c0b37c3f5d567546a</hash>
355
+ <hash alg="SHA-256">3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1</hash>
356
+ <hash alg="SHA-512">01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52</hash>
357
+ <hash alg="SHA-384">80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a</hash>
358
+ <hash alg="SHA3-384">98a43a49425054d14574e75aa034e3758b8f0ac382c705773cd80be4065df6b198ba106f443d1d389a8d2a027586f122</hash>
359
+ <hash alg="SHA3-256">df966c1a8edf2f5dc378e60468399b60d9d27481241462b75a61033b06f95578</hash>
360
+ <hash alg="SHA3-512">5f2cfa6ca6e369f5e94861652da88c12c0554ea4aa0c8472393011aacadeda2309d00d9817417debac5d1c4e01bb9584cb9c438eff63bd10ed89666bb9cffed7</hash>
361
+ </hashes>
362
+ <licenses>
363
+ <license>
364
+ <id>BSD-3-Clause</id>
365
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
366
+ </license>
367
+ </licenses>
368
+ <purl>pkg:maven/org.ow2.asm/asm@9.6?type=jar</purl>
369
+ <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
370
+ </component>
371
+ <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar">
372
+ <group>com.google.code.gson</group>
373
+ <name>gson</name>
374
+ <version>2.10.1</version>
375
+ <description>Gson JSON library</description>
376
+ <scope>required</scope>
377
+ <hashes>
378
+ <hash alg="MD5">df6097815738cb31fc56391553210843</hash>
379
+ <hash alg="SHA-1">b3add478d4382b78ea20b1671390a858002feb6c</hash>
380
+ <hash alg="SHA-256">4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593</hash>
381
+ <hash alg="SHA-512">7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727</hash>
382
+ <hash alg="SHA-384">48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226</hash>
383
+ <hash alg="SHA3-384">3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea</hash>
384
+ <hash alg="SHA3-256">d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb</hash>
385
+ <hash alg="SHA3-512">2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce</hash>
386
+ </hashes>
387
+ <licenses>
388
+ <license>
389
+ <id>Apache-2.0</id>
390
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
391
+ </license>
392
+ </licenses>
393
+ <purl>pkg:maven/com.google.code.gson/gson@2.10.1?type=jar</purl>
394
+ <externalReferences><reference type="website"><url>https://github.com/google/gson/gson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/gson/</url></reference></externalReferences>
395
+ </component>
396
+ <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar">
397
+ <group>org.checkerframework</group>
398
+ <name>checker-qual</name>
399
+ <version>2.11.1</version>
400
+ <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
401
+ used by the Checker Framework to type check Java source code. Please
402
+ see artifact:
403
+ org.checkerframework:checker</description>
404
+ <scope>required</scope>
405
+ <hashes>
406
+ <hash alg="MD5">936884d7b04ee8f064df137bcdfe470d</hash>
407
+ <hash alg="SHA-1">8c43bf8f99b841d23aadda6044329dad9b63c185</hash>
408
+ <hash alg="SHA-256">015224a4b1dc6de6da053273d4da7d39cfea20e63038169fc45ac0d1dc9c5938</hash>
409
+ <hash alg="SHA-512">aa541c66272d8f5320849cafadaadfa36a9fcf169e103e01fe1e77292e91670e254e405d3ca9aa7ad47ff04894e9474fe388c68e5da24c0638e8b77c0ef880c0</hash>
410
+ <hash alg="SHA-384">74e08672ea70930e8bcbc3883a8d0732d20324bb6e0c7a58c1be0e305be6133b67f1c5d6fd8ce199948553d05ceafb33</hash>
411
+ <hash alg="SHA3-384">ff58a3de013daf346fe0453100a720ba43130a7504a08fd50d471302a7578016b1c8a9eb31abf3dbcdfb4ac90ef0be1a</hash>
412
+ <hash alg="SHA3-256">c63adbd5dfc7945fd5ad58d280faf5fc7450eae0297a3f55f5c7b119217c7a9b</hash>
413
+ <hash alg="SHA3-512">eef7b66164764ec0cf01ad68023f30db98ea4a51cf31df2bf214fbb336032e0b7c19b74d84f0081f4d657c221c67c704db9f373b6f709c9a1d717d3b944619c8</hash>
414
+ </hashes>
415
+ <licenses>
416
+ <license>
417
+ <id>MIT</id>
418
+ </license>
419
+ </licenses>
420
+ <purl>pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar</purl>
421
+ <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
422
+ </component>
423
+ <component type="library" bom-ref="pkg:maven/org.pcollections/pcollections@3.2.0?type=jar">
424
+ <group>org.pcollections</group>
425
+ <name>pcollections</name>
426
+ <version>3.2.0</version>
427
+ <description>A Persistent Java Collections Library</description>
428
+ <scope>required</scope>
429
+ <hashes>
430
+ <hash alg="MD5">a00862c61fa635831a526e16dad46fe7</hash>
431
+ <hash alg="SHA-1">b64e12b258ebfbf6e3f43157ef70c3ec420fec33</hash>
432
+ <hash alg="SHA-256">6c1447309cd47560924dbf4939b37756c53b15febc0191ec52d6e0b53b6cc62a</hash>
433
+ <hash alg="SHA-512">4135a36c3c298c88df6195e7282670eada3132c4e86b927f3ec7faafe2f2ef0cd6a5866e9dcf0e5538c1b9f46aeb62d9a0e756bfaa386c986642d4a40c393ee2</hash>
434
+ <hash alg="SHA-384">06dd5c4298c66330b45a1600514f01c6147c3808a8b7d7240790d600e558988f869078765cd0c7e010599d7159a53064</hash>
435
+ <hash alg="SHA3-384">a337211f9b9b36b5a869656a69baf570a5488f9148efc75005bdb68b9f95e657fe35f838dd6d3d93e170851e8f51dc19</hash>
436
+ <hash alg="SHA3-256">146a9d35a644d5d9853feb2b84ed58269c21f5546a01a58b5aa6775cdb46e46e</hash>
437
+ <hash alg="SHA3-512">3139a3075c6513038973ac7e88f25f9739e7adfdfce1b5244d1454f5f672db7285fe55a713e15aa7e1f6b88e1066c459819dbcca78c0d85a7ba9ad495e298e9e</hash>
438
+ </hashes>
439
+ <licenses>
440
+ <license>
441
+ <id>MIT</id>
442
+ </license>
443
+ </licenses>
444
+ <purl>pkg:maven/org.pcollections/pcollections@3.2.0?type=jar</purl>
445
+ <externalReferences><reference type="website"><url>https://github.com/hrldcpr/pcollections</url></reference><reference type="vcs"><url>https://github.com/hrldcpr/pcollections</url></reference></externalReferences>
446
+ </component>
447
+ <component type="library" bom-ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar">
448
+ <group>com.github.oowekyala.ooxml</group>
449
+ <name>nice-xml-messages</name>
450
+ <version>3.1</version>
451
+ <description>Associates XML DOM nodes to their position in source, to enrich error messages.
452
+ This builds on top of the standard org.w3c.dom API. Should probably not be used
453
+ in performance critical code, but can hopefully cleanup reporting logic in places
454
+ where user-friendly messages are important.</description>
455
+ <scope>required</scope>
456
+ <hashes>
457
+ <hash alg="MD5">39c913451ff2d2ec740c58a77a26fa16</hash>
458
+ <hash alg="SHA-1">4c3863b0f015af5cfd9abe02fab364fb99867167</hash>
459
+ <hash alg="SHA-256">0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799</hash>
460
+ <hash alg="SHA-512">6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc</hash>
461
+ <hash alg="SHA-384">c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1</hash>
462
+ <hash alg="SHA3-384">218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f</hash>
463
+ <hash alg="SHA3-256">02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346</hash>
464
+ <hash alg="SHA3-512">f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0</hash>
465
+ </hashes>
466
+ <licenses>
467
+ <license>
468
+ <id>MIT</id>
469
+ <url>https://opensource.org/licenses/MIT</url>
470
+ </license>
471
+ </licenses>
472
+ <purl>pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar</purl>
473
+ <externalReferences><reference type="website"><url>https://github.com/oowekyala/nice-xml-messages</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/oowekyala/nice-xml-messages</url></reference></externalReferences>
474
+ </component>
475
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-cli@7.1.0?type=jar">
476
+ <publisher>PMD</publisher>
477
+ <group>net.sourceforge.pmd</group>
478
+ <name>pmd-cli</name>
479
+ <version>7.1.0</version>
480
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
481
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
482
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
483
+ Rules can be written in Java or using a XPath query.
484
+
485
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
486
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
487
+ Scala is supported, but there are currently no Scala rules available.
488
+
489
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
490
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
491
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
492
+ <scope>required</scope>
493
+ <hashes>
494
+ <hash alg="MD5">3187db345eae35ac38f91eee560ce67a</hash>
495
+ <hash alg="SHA-1">130e811e4683bc0be8e598b230ad8656a3eb3143</hash>
496
+ <hash alg="SHA-256">dd1c7d3f62ca8cd56fb8102dc31c0f96dadf901d62844f1deba72de5d712e826</hash>
497
+ <hash alg="SHA-512">c9f4cd64cb1993e153d8f762e0b19551498b6876c1ff2eae66cb6c39f3ed3d56f34e711ff0d7381407d5b8cbeb6211b946462234c45e247eb13c75576b3d2f22</hash>
498
+ <hash alg="SHA-384">b7987b085adb7806fa2653506a470a9b933ce7562e595178725b3d450e8151c9e618d823714383483a3ddfa931956b0e</hash>
499
+ <hash alg="SHA3-384">5625ef9798a289b7e5812c5ae79dbc59dfbaa9c7220494ec26140604788638b21122ddb415b032f44d7f4577bd8a2659</hash>
500
+ <hash alg="SHA3-256">ccb6f44e074f534828a7b53059adada409f657fda4efaffd4cf14dc68f202ce4</hash>
501
+ <hash alg="SHA3-512">4c298b2d0b5b1b09d10baf8f5a0c839ba1a6a4e9c7c845edc55a2b96d582171a727774d2fbc41c84a9b44e1238f8613599d4001e41d7f4c5c3e6fa8a435181ab</hash>
502
+ </hashes>
503
+ <licenses>
504
+ <license>
505
+ <name>BSD-style</name>
506
+ <url>http://pmd.sourceforge.net/license.html</url>
507
+ </license>
508
+ </licenses>
509
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-cli@7.1.0?type=jar</purl>
510
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-cli/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-cli</url></reference></externalReferences>
511
+ </component>
512
+ <component type="library" bom-ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar">
513
+ <group>info.picocli</group>
514
+ <name>picocli</name>
515
+ <version>4.7.5</version>
516
+ <description>Java command line parser with both an annotations API and a programmatic API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands. Easily included as source to avoid adding a dependency.</description>
517
+ <scope>required</scope>
518
+ <hashes>
519
+ <hash alg="MD5">130eeeb3c9c1a58d7174d10a9d771644</hash>
520
+ <hash alg="SHA-1">a6f99ec0a97aeb3be63a9f55703b28f2cf08788f</hash>
521
+ <hash alg="SHA-256">e83a906fb99b57091d1d68ac11f7c3d2518bd7a81a9c71b259e2c00d1564c8e8</hash>
522
+ <hash alg="SHA-512">9fe48bf352b07e708f251f0fcda05a994317083dced7e0ffd67a140219eda0fa4b1f73eefa11920e86e388b9ae49d2d148bf984c24da4e2293509dfc265a951e</hash>
523
+ <hash alg="SHA-384">b74b7e895eb2ca849ac87567d50bfa9bcf957051e8fc797fda79881fedca917fa17e54845cffc6f36708f5f98d6eafdf</hash>
524
+ <hash alg="SHA3-384">9a145f639e8ea7856c84441985467bd89c7dddb9e3adfed6db2d33556de92ba44c959be03a4d1f06667ce53b09899576</hash>
525
+ <hash alg="SHA3-256">566eb56566442d65cc6180d620e800534f676dc07a1bcd500947d3c305f42ff6</hash>
526
+ <hash alg="SHA3-512">86c64d4838e860252cdc605eaf26ce937836a49d6f75c7b4f1d6646985662877d79895c2ed5bc1e3a84ca9b9ec65b7c22768622b02588cf9bba90a86e4884104</hash>
527
+ </hashes>
528
+ <licenses>
529
+ <license>
530
+ <id>Apache-2.0</id>
531
+ </license>
532
+ </licenses>
533
+ <purl>pkg:maven/info.picocli/picocli@4.7.5?type=jar</purl>
534
+ <externalReferences><reference type="website"><url>https://picocli.info</url></reference><reference type="vcs"><url>https://github.com/remkop/picocli/tree/master</url></reference></externalReferences>
535
+ </component>
536
+ <component type="library" bom-ref="pkg:maven/me.tongfei/progressbar@0.9.5?type=jar">
537
+ <group>me.tongfei</group>
538
+ <name>progressbar</name>
539
+ <version>0.9.5</version>
540
+ <description>A terminal-based progress bar for JVM</description>
541
+ <scope>required</scope>
542
+ <hashes>
543
+ <hash alg="MD5">7bda2e0d24c326b6af99f8ff28239c28</hash>
544
+ <hash alg="SHA-1">aaf7a04a9e9e6bd0aa03268cfcd6168e903bcf2d</hash>
545
+ <hash alg="SHA-256">a1a086fa66f85c49bb3ca701a78cebb33647f367d4a5be8588c784d56272cc6e</hash>
546
+ <hash alg="SHA-512">e9f29b15cea7746c02288645c92633ec2a30b19fc1273a71608df5d42140ecaf69339c576bf263093148f4548a85924a62eb4e24013128cf61053b4c97df82c8</hash>
547
+ <hash alg="SHA-384">126db35d39f280298d6395de0f90df954a8e64b41db424b00f565dda1bde0f66f017237a42094adee4d72a453e6b1b7e</hash>
548
+ <hash alg="SHA3-384">7452d8b7785cab60dfb10e5c36f8547c8bc0e6df985b2c9fde5134481bce5426e83ba59efbdcdb38538f0168a5aecb7e</hash>
549
+ <hash alg="SHA3-256">e02f1576f6ec76e457b728b6049cb4b859fa342dcfcd467e9347fb82f307355d</hash>
550
+ <hash alg="SHA3-512">b8cbcbc1d4e126305d354382d44fb4b6999fd03d67c0770677f5067e8926be3903be3a34982cc0795eec2b39a48395574ca11b0da34229c923b255cc44630782</hash>
551
+ </hashes>
552
+ <licenses>
553
+ <license>
554
+ <id>MIT</id>
555
+ <url>https://opensource.org/licenses/MIT</url>
556
+ </license>
557
+ </licenses>
558
+ <purl>pkg:maven/me.tongfei/progressbar@0.9.5?type=jar</purl>
559
+ <externalReferences><reference type="website"><url>http://github.com/ctongfei/progressbar</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
560
+ </component>
561
+ <component type="library" bom-ref="pkg:maven/org.jline/jline@3.21.0?type=jar">
562
+ <group>org.jline</group>
563
+ <name>jline</name>
564
+ <version>3.21.0</version>
565
+ <description>JLine</description>
566
+ <scope>required</scope>
567
+ <hashes>
568
+ <hash alg="MD5">859778f9cdd3bd42bbaaf0f6f7fe5e6a</hash>
569
+ <hash alg="SHA-1">2bf6f2311356f309fda0412e9389d2499346b5a1</hash>
570
+ <hash alg="SHA-256">1e7d63a2bd1c26354ca1987e55469ea4327c4a3845c10d7a7790ca9729c49c02</hash>
571
+ <hash alg="SHA-512">1a2321279254bd9782b76bf6afe4dbb137ad2efb73e441f7a0d8fd568eee9f600ce812223b0aa579d598071f43a1663e345f44d07b24a9469698f7224c56771b</hash>
572
+ <hash alg="SHA-384">8bbcb0d0e3018e29cf03853efdae4e275541f9c4e4424228a5fbc83d0f8ae7eb3bef6d8ae4c85c4c69e11e2a67eb4eb7</hash>
573
+ <hash alg="SHA3-384">2f45c0ef812ad0726f79a5399dbf034984f7e5eae482948d90220f98dec4a354e75116369734a0a44c6a614fd025ddb6</hash>
574
+ <hash alg="SHA3-256">a3650ce5b31b44e5d07c3405f7a279483fa2e7768a57f7f284e99c75733d52db</hash>
575
+ <hash alg="SHA3-512">2906a3597c98169b426946afb079c2429a3b6041985651b50526d0fc98c21e514d44c6d3f1b4e7a5b508469c4783535c3eea5d2161d33270c6d052b67c48fe8c</hash>
576
+ </hashes>
577
+ <licenses>
578
+ <license>
579
+ <id>BSD-4-Clause</id>
580
+ </license>
581
+ </licenses>
582
+ <purl>pkg:maven/org.jline/jline@3.21.0?type=jar</purl>
583
+ <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/jline-parent/jline</url></reference><reference type="build-system"><url>https://travis-ci.org/jline/jline3</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jline/jline3/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/group/jline-users</url></reference><reference type="vcs"><url>http://github.com/jline/jline3/jline</url></reference></externalReferences>
584
+ </component>
585
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-ant@7.1.0?type=jar">
586
+ <publisher>PMD</publisher>
587
+ <group>net.sourceforge.pmd</group>
588
+ <name>pmd-ant</name>
589
+ <version>7.1.0</version>
590
+ <description>Apache Ant integration for PMD.</description>
591
+ <scope>required</scope>
592
+ <hashes>
593
+ <hash alg="MD5">faae8fa4618d0d3c8d155542822d9f30</hash>
594
+ <hash alg="SHA-1">6c8b4decab74c0cbd42ad01df2df164909ed5ab8</hash>
595
+ <hash alg="SHA-256">5b4f5a78dc2833eb4d501630844939bd0fa7c8c24d82234e985f518697d59c8f</hash>
596
+ <hash alg="SHA-512">3c370682cf9c5780eade13ec15ae1dac02008db8eb198c0337556c2c43e09a8aba2e082c51dd4ddbdfbf14838d49e4c17977e8fda1b10be5a0ca660e1c756aaf</hash>
597
+ <hash alg="SHA-384">286e126607cc6c3a9f4e57f34ac259fb8237d5e4be511fdc35043f5d7be224768801c65bf3ccef4543a328fd43faa2bf</hash>
598
+ <hash alg="SHA3-384">d0e9328522b38024140dcd53a11945522488661c14933aec33013aa2fd819b76e2782b82bbb33046dfb9b0c68535b671</hash>
599
+ <hash alg="SHA3-256">2340023c590e9b276b89050d81e143b390b9e3bc4194f25d12445ae89ec55588</hash>
600
+ <hash alg="SHA3-512">1fcb83fbf4adedae58e16dfe4979c2afda7bcb067ac7f57b48bd18cb78a67e48179c260d0d49aea663b5f50df56f3af9cb1b158c7340e260519a07448d935c9f</hash>
601
+ </hashes>
602
+ <licenses>
603
+ <license>
604
+ <name>BSD-style</name>
605
+ <url>http://pmd.sourceforge.net/license.html</url>
606
+ </license>
607
+ </licenses>
608
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-ant@7.1.0?type=jar</purl>
609
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-ant/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-ant</url></reference></externalReferences>
610
+ </component>
611
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-designer@7.0.0?type=jar">
612
+ <group>net.sourceforge.pmd</group>
613
+ <name>pmd-designer</name>
614
+ <version>7.0.0</version>
615
+ <description>The Rule Designer is a graphical tool that helps PMD users develop their custom rules.</description>
616
+ <scope>required</scope>
617
+ <hashes>
618
+ <hash alg="MD5">b4dd3a15b1d92ba3d4e89ac789141987</hash>
619
+ <hash alg="SHA-1">df6db4dee00f855170cf5dfda940f3ea8365bcd6</hash>
620
+ <hash alg="SHA-256">bc637fa0a2545f73b79746500a863255937dd408f949990c32b1d747a53101ae</hash>
621
+ <hash alg="SHA-512">dd14642a62684415f8c2c7110709adf6704e398c794ac535f513547d0d5037cd0814e3a795f3846a0339f7c71c5d6e04c546be5a575ec8ded29a54b9f7a51778</hash>
622
+ <hash alg="SHA-384">444caca32731d806d47b34b8edda0b6c6a6c1dc95ff086250bd1b8e9095ec6edcc48b2c9935ffe49285e440a1863a9ba</hash>
623
+ <hash alg="SHA3-384">0434befede39c129e6325ae1f6bdce5073a12d78f2851d53fd0bce145ff932cc2fbe0f3779d8decb01ec2cd7d66c3102</hash>
624
+ <hash alg="SHA3-256">6c589ff5c9926675ad52caa2d8d4f2e894b2199cbdf857b0c809a7cfd17cccaa</hash>
625
+ <hash alg="SHA3-512">bebc15b2c2775526147096b4e78c4328a9e0b73d37ad613df1455800df5173a7ace8b2bbda8a2f4e2d9209b4d9fab4b8404921fec6fc9e09256a684265440d30</hash>
626
+ </hashes>
627
+ <licenses>
628
+ <license>
629
+ <id>BSD-2-Clause</id>
630
+ <url>https://opensource.org/licenses/BSD-2-Clause</url>
631
+ </license>
632
+ </licenses>
633
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-designer@7.0.0?type=jar</purl>
634
+ <externalReferences><reference type="website"><url>https://pmd.github.io</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd-designer/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd-designer</url></reference></externalReferences>
635
+ </component>
636
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.1.0?type=pom">
637
+ <publisher>PMD</publisher>
638
+ <group>net.sourceforge.pmd</group>
639
+ <name>pmd-languages-deps</name>
640
+ <version>7.1.0</version>
641
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
642
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
643
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
644
+ Rules can be written in Java or using a XPath query.
645
+
646
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
647
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
648
+ Scala is supported, but there are currently no Scala rules available.
649
+
650
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
651
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
652
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
653
+ <scope>required</scope>
654
+ <hashes>
655
+ <hash alg="MD5">322ea2365ad57ece6c7b26c02740c493</hash>
656
+ <hash alg="SHA-1">406f88ada5593fd30e94c8d1c736b14399bf245e</hash>
657
+ <hash alg="SHA-256">882cd4adf0880777d7b827556db6871f40b0f790e7a76829a0f7edc259b4cbcb</hash>
658
+ <hash alg="SHA-512">a587786892ac587c8c59a8c633c90a2ba2cae83336030490aba477f3acf4bbb93818072b9b9ab6ba3cf7db0c9dc55326c9675df4f840145dc1cc73861a344b17</hash>
659
+ <hash alg="SHA-384">1d2b80135ae92826874572c75e5b109b42cee52dbac9288cb0242dbb94d4f47096b85e06b0b60cfe546779cdaccfcf0b</hash>
660
+ <hash alg="SHA3-384">a77bf1b14b504078daa34cb717dd77cb3d2a27436b310a3e79ebcfb2cb0783582b9ed0682fd4f6dcb0c70d6b32b6e4b5</hash>
661
+ <hash alg="SHA3-256">b31ccf4e5b3885b38ba65032f0a1088c632af4bbde6cc13931bf710cedfb1095</hash>
662
+ <hash alg="SHA3-512">e08d833fe41ebed1185d4eba2340a769880c93e7f54a7da1372f4f7bbb2521753bc549c36acbc43d10a6950171166133b0008e7a7107383c2bdb57aab2db6406</hash>
663
+ </hashes>
664
+ <licenses>
665
+ <license>
666
+ <name>BSD-style</name>
667
+ <url>http://pmd.sourceforge.net/license.html</url>
668
+ </license>
669
+ </licenses>
670
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.1.0?type=pom</purl>
671
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-languages-deps/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-languages-deps</url></reference></externalReferences>
672
+ </component>
673
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-apex@7.1.0?type=jar">
674
+ <publisher>PMD</publisher>
675
+ <group>net.sourceforge.pmd</group>
676
+ <name>pmd-apex</name>
677
+ <version>7.1.0</version>
678
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
679
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
680
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
681
+ Rules can be written in Java or using a XPath query.
682
+
683
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
684
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
685
+ Scala is supported, but there are currently no Scala rules available.
686
+
687
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
688
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
689
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
690
+ <scope>required</scope>
691
+ <hashes>
692
+ <hash alg="MD5">c818ab186b7ea39e75ddddb229057dfb</hash>
693
+ <hash alg="SHA-1">aa4ef4ce44aef872dddef5f114bc1989550f4157</hash>
694
+ <hash alg="SHA-256">3da4e03b5ad02f8fc1782974a7107ec49f34be323b53ab27e8095e46943350ca</hash>
695
+ <hash alg="SHA-512">05fb0656400abc7350b21c1e87661891aa53cc582e663c4e1c5181bbf67be789b0baa3203c3965a4686f2dd53175415307f71ade64dbb1ffa8660f5f2f0583bf</hash>
696
+ <hash alg="SHA-384">2a7e91f4b72b9f2e2d0b6e11531fd543ee4bfbd01eff3101985fba667e1a5d27b84c06eb2c5beb8d859342dd39f220be</hash>
697
+ <hash alg="SHA3-384">95cc2dcd723d9f824467cecf40913ddd95f3a9a78191a714d6593b19e7f104826884462e051ada0478b75c1c288df69e</hash>
698
+ <hash alg="SHA3-256">9b5a044dd2dbe16ea236fe0160dee786d12fada91f2747ac9ed62f89efc494d3</hash>
699
+ <hash alg="SHA3-512">105f23e7598a5b57e155b7dbf54c5b429f78abd97a37431b87f7012bae8ceba4800e4b38c2d685015c4c4474ae33c963f3d1cec78e480c8587c4e15865eea0fd</hash>
700
+ </hashes>
701
+ <licenses>
702
+ <license>
703
+ <name>BSD-style</name>
704
+ <url>http://pmd.sourceforge.net/license.html</url>
705
+ </license>
706
+ </licenses>
707
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-apex@7.1.0?type=jar</purl>
708
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-apex/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-apex</url></reference></externalReferences>
709
+ </component>
710
+ <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar">
711
+ <group>com.google.guava</group>
712
+ <name>guava</name>
713
+ <version>33.0.0-jre</version>
714
+ <description>Guava is a suite of core and expanded libraries that include
715
+ utility classes, Google's collections, I/O classes, and
716
+ much more.</description>
717
+ <scope>required</scope>
718
+ <hashes>
719
+ <hash alg="MD5">5d8aefac09131c3a74d6dab4b01bcff6</hash>
720
+ <hash alg="SHA-1">161ba27964a62f241533807a46b8711b13c1d94b</hash>
721
+ <hash alg="SHA-256">f4d85c3e4d411694337cb873abea09b242b664bb013320be6105327c45991537</hash>
722
+ <hash alg="SHA-512">bb122b4c6df2ae3282eefdf313f8d4a3d75e363cfb30ae65a5e51f744105e6fb7b5b77c8cc07a1d37fea0947aa22ac3070063174826408b57a44b2f26856ff3b</hash>
723
+ <hash alg="SHA-384">dd0d01893159e2d734b885386635024c94606d5fe6259951e1f2ce37f026f60a419fefa536aaaa6274fdd2d5505e640a</hash>
724
+ <hash alg="SHA3-384">a1b5933d73ea9881293e19fab4bbef2b301a88e480f4fcb2d1187e383dba0d5c02c8884997fd3f0d20456ab8c27e3898</hash>
725
+ <hash alg="SHA3-256">ed01cc65afe540179c8e54dbc09331b679521cc5a6617389814fe2038603c7ba</hash>
726
+ <hash alg="SHA3-512">6a422f8b319cbc21a87c7e03ff94ac4da0eedd8b9960212fb14446bd21da281afd8140ec7f3d3043e80e8c5b16ce50b5c27a235908f23ae4127e8d925a16886a</hash>
727
+ </hashes>
728
+ <licenses>
729
+ <license>
730
+ <id>Apache-2.0</id>
731
+ </license>
732
+ </licenses>
733
+ <purl>pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar</purl>
734
+ <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
735
+ </component>
736
+ <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar">
737
+ <group>com.google.guava</group>
738
+ <name>failureaccess</name>
739
+ <version>1.0.2</version>
740
+ <description>Contains
741
+ com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
742
+ InternalFutures. Most users will never need to use this artifact. Its
743
+ classes are conceptually a part of Guava, but they're in this separate
744
+ artifact so that Android libraries can use them without pulling in all of
745
+ Guava (just as they can use ListenableFuture by depending on the
746
+ listenablefuture artifact).</description>
747
+ <scope>required</scope>
748
+ <hashes>
749
+ <hash alg="MD5">3f75955b49b6758fd6d1e1bd9bf777b3</hash>
750
+ <hash alg="SHA-1">c4a06a64e650562f30b7bf9aaec1bfed43aca12b</hash>
751
+ <hash alg="SHA-256">8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064</hash>
752
+ <hash alg="SHA-512">ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51</hash>
753
+ <hash alg="SHA-384">85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0</hash>
754
+ <hash alg="SHA3-384">652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a</hash>
755
+ <hash alg="SHA3-256">a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3</hash>
756
+ <hash alg="SHA3-512">2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193</hash>
757
+ </hashes>
758
+ <licenses>
759
+ <license>
760
+ <id>Apache-2.0</id>
761
+ </license>
762
+ </licenses>
763
+ <purl>pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar</purl>
764
+ <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
765
+ </component>
766
+ <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
767
+ <group>com.google.guava</group>
768
+ <name>listenablefuture</name>
769
+ <version>9999.0-empty-to-avoid-conflict-with-guava</version>
770
+ <description>An empty artifact that Guava depends on to signal that it is providing
771
+ ListenableFuture -- but is also available in a second "version" that
772
+ contains com.google.common.util.concurrent.ListenableFuture class, without
773
+ any other Guava classes. The idea is:
774
+
775
+ - If users want only ListenableFuture, they depend on listenablefuture-1.0.
776
+
777
+ - If users want all of Guava, they depend on guava, which, as of Guava
778
+ 27.0, depends on
779
+ listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
780
+ version number is enough for some build systems (notably, Gradle) to select
781
+ that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
782
+ conflict with the copy of ListenableFuture in guava itself. If users are
783
+ using an older version of Guava or a build system other than Gradle, they
784
+ may see class conflicts. If so, they can solve them by manually excluding
785
+ the listenablefuture artifact or manually forcing their build systems to
786
+ use 9999.0-....</description>
787
+ <scope>required</scope>
788
+ <hashes>
789
+ <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
790
+ <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
791
+ <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
792
+ <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
793
+ <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
794
+ <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
795
+ <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
796
+ <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
797
+ </hashes>
798
+ <licenses>
799
+ <license>
800
+ <id>Apache-2.0</id>
801
+ </license>
802
+ </licenses>
803
+ <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
804
+ <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
805
+ </component>
806
+ <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
807
+ <group>com.google.code.findbugs</group>
808
+ <name>jsr305</name>
809
+ <version>3.0.2</version>
810
+ <description>JSR305 Annotations for Findbugs</description>
811
+ <scope>required</scope>
812
+ <hashes>
813
+ <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
814
+ <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
815
+ <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
816
+ <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
817
+ <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
818
+ <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
819
+ <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
820
+ <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
821
+ </hashes>
822
+ <licenses>
823
+ <license>
824
+ <id>Apache-2.0</id>
825
+ </license>
826
+ </licenses>
827
+ <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
828
+ <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
829
+ </component>
830
+ <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0?type=jar">
831
+ <publisher>Google LLC</publisher>
832
+ <group>com.google.errorprone</group>
833
+ <name>error_prone_annotations</name>
834
+ <version>2.23.0</version>
835
+ <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
836
+ <scope>required</scope>
837
+ <hashes>
838
+ <hash alg="MD5">b3ea764beb68c9b44cf57c1b5a5608b2</hash>
839
+ <hash alg="SHA-1">43a27853b6c7d54893e0b1997c2c778c347179eb</hash>
840
+ <hash alg="SHA-256">ec6f39f068b6ff9ac323c68e28b9299f8c0a80ca512dccb1d4a70f40ac3ec054</hash>
841
+ <hash alg="SHA-512">a71637e21cdd4f236494af2fabe6ddcf3173c53627b9157913195e9f5b4a6b1d000122d7eb10229059f50deb8115d91fd25d2f12a3887936a19238477c623bc7</hash>
842
+ <hash alg="SHA-384">1301f6229ac0c890bcf1356ef255d97dcebcf6a35f45f3321d7b13b164a4d89a96459fea25c5b0d280d86388eb05cbfb</hash>
843
+ <hash alg="SHA3-384">31b07b9d8541da42debf6dd119254d1e480c05549ee7ecf4295adc2553130ec5220ae9e5e0da74a55f75044bd2a794b6</hash>
844
+ <hash alg="SHA3-256">0c3566a22f558ba7bbbcab6b00bef402032f55cb299b949aa947b08db528bd58</hash>
845
+ <hash alg="SHA3-512">50d8990e8ffcd78e62899cde5790fbde4bdd3e362494d5261aff80bcefc3224c2c1df58bd9d4cda32a893dd8d94c8b0f65e24fda0e6a42d7176c2aed56e50358</hash>
846
+ </hashes>
847
+ <licenses>
848
+ <license>
849
+ <id>Apache-2.0</id>
850
+ </license>
851
+ </licenses>
852
+ <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0?type=jar</purl>
853
+ <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
854
+ </component>
855
+ <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
856
+ <group>com.google.j2objc</group>
857
+ <name>j2objc-annotations</name>
858
+ <version>2.8</version>
859
+ <description>A set of annotations that provide additional information to the J2ObjC
860
+ translator to modify the result of translation.</description>
861
+ <scope>required</scope>
862
+ <hashes>
863
+ <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
864
+ <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
865
+ <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
866
+ <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
867
+ <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
868
+ <hash alg="SHA3-384">10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d</hash>
869
+ <hash alg="SHA3-256">b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072</hash>
870
+ <hash alg="SHA3-512">d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627</hash>
871
+ </hashes>
872
+ <licenses>
873
+ <license>
874
+ <id>Apache-2.0</id>
875
+ </license>
876
+ </licenses>
877
+ <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
878
+ <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url></reference></externalReferences>
879
+ </component>
880
+ <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar">
881
+ <group>org.jetbrains.kotlin</group>
882
+ <name>kotlin-stdlib</name>
883
+ <version>1.7.20</version>
884
+ <description>Kotlin Standard Library for JVM</description>
885
+ <scope>required</scope>
886
+ <hashes>
887
+ <hash alg="MD5">7cfb8be308c9a4f783126cd2d5ff004e</hash>
888
+ <hash alg="SHA-1">726594ea9ba2beb2ee113647fefa9a10f9fabe52</hash>
889
+ <hash alg="SHA-256">7779ec96b9acbf92ca023858ac04543f9d2c3bdf1722425fff42f25ff3acfc9b</hash>
890
+ <hash alg="SHA-512">cef14c955671acec83771eeab3a5d2d25d73a81b7eadd7288d702f317f3a3afc1cae74161a7efab8a8b9ecdb3a5ba4cfd6bd7ca88fde126003d4b8a3f09281fd</hash>
891
+ <hash alg="SHA-384">38eb501f0ea13ab021396f6118fca707ea2375cc6985ece19ac19aa31de3bb96e264a28cff11b8aedfc45f7496715571</hash>
892
+ <hash alg="SHA3-384">8e1742b1c45bb5b269ab10432541c1ebd45566226007854029eb76108e50fa46169cf3e5cef99979e599e5d642c14a9f</hash>
893
+ <hash alg="SHA3-256">33cebd9cbeb200967919a0c8f9e78d211a86aa0f71383010237a3c1efb6a5c55</hash>
894
+ <hash alg="SHA3-512">5ca8dbc314b0461df40488d0c41846c390efa66131660b689300e89ad52eb7f66321f2adcab8fadc756e5295cb7bd88d9dbdc56f9d0af0ff499f92410439e084</hash>
895
+ </hashes>
896
+ <licenses>
897
+ <license>
898
+ <id>Apache-2.0</id>
899
+ </license>
900
+ </licenses>
901
+ <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar</purl>
902
+ <externalReferences><reference type="website"><url>https://kotlinlang.org/</url></reference><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
903
+ </component>
904
+ <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.7.20?type=jar">
905
+ <group>org.jetbrains.kotlin</group>
906
+ <name>kotlin-stdlib-common</name>
907
+ <version>1.7.20</version>
908
+ <description>Kotlin Common Standard Library</description>
909
+ <scope>required</scope>
910
+ <hashes>
911
+ <hash alg="MD5">9e99345113604b0b2282773bc52f574a</hash>
912
+ <hash alg="SHA-1">e15351bdaf9fa06f009be5da7a202e4184f00ae3</hash>
913
+ <hash alg="SHA-256">e0e91962bc0007338bf5b1739f62927ac32d14ba3d827fa608ab4e5351729d5d</hash>
914
+ <hash alg="SHA-512">5a6185f78fc5b2edde9c2cb0f460e7609552f6577bc6fb0db19429aa27d7b8f4d55b43a16f99a880b8993d9633c3b253dcbbd861ed28afca3fccc927e5e3bc46</hash>
915
+ <hash alg="SHA-384">95cd54810349ffa607100957e0c3a007557d398f097100520345a508b1d3e71333030cb9eb8e6a5a035d48f2cedb45ef</hash>
916
+ <hash alg="SHA3-384">69f9f0e184cf8943ea34614877fd946173041604d76d41de49e9413e10c68d7360e02a52a685051a6d472b62c66623d3</hash>
917
+ <hash alg="SHA3-256">7d03488c027cd20dbece15d4f549702ac562eb19c38ca73330a591dbf58734c7</hash>
918
+ <hash alg="SHA3-512">dbeca133a5a6bad992a387fff3d7b885c194f59e937c4cb4ce61458747ea75462e132cb435420995b550916845b5aa9aea4032f032405847ab00e2822f704000</hash>
919
+ </hashes>
920
+ <licenses>
921
+ <license>
922
+ <id>Apache-2.0</id>
923
+ </license>
924
+ </licenses>
925
+ <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.7.20?type=jar</purl>
926
+ <externalReferences><reference type="website"><url>https://kotlinlang.org/</url></reference><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
927
+ </component>
928
+ <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.7.20?type=jar">
929
+ <group>org.jetbrains.kotlin</group>
930
+ <name>kotlin-stdlib-jdk8</name>
931
+ <version>1.7.20</version>
932
+ <description>Kotlin Standard Library JDK 8 extension</description>
933
+ <scope>required</scope>
934
+ <hashes>
935
+ <hash alg="MD5">6c5634c67084564766fe5e8cfd2f3aee</hash>
936
+ <hash alg="SHA-1">0eac6656981d9d7156e838467d2d8d79093b1570</hash>
937
+ <hash alg="SHA-256">1da0d306c995945e1f807240ef64b5cd2dd5ac58612afb1a8596143d10b7ded5</hash>
938
+ <hash alg="SHA-512">409356e2988dfd98bfe81301ce5f00ae53a948fe70d4ffa4fd8c58f7cc1409901807a58ce25c7a90767b802e5f9284501ffde947d5d4bd9bb95d00c1797de6ad</hash>
939
+ <hash alg="SHA-384">6fb71cf0813067b6d05bfcacafcf3cde01effa460d48c908669701d057c56c2abb3aa2bd130359c822de145ae72c458f</hash>
940
+ <hash alg="SHA3-384">ac03168cef23164151110f8b705f773f5b027fbdc6a0367a0d256303b1f01808b9576ac4cc52391980c8b5a84ff1a425</hash>
941
+ <hash alg="SHA3-256">62983d8fa23067549a0be8ef3de9efb0d8bac52a89a08a181e7e3c034f1a8f08</hash>
942
+ <hash alg="SHA3-512">b3dd090483d27190d964b52759ae78f6040cd216ace34e5bb26472a36248e5c3a3dfdd252b7590601826a3eccf44cbe28ef82ec199784265bde9da21dc9b8ade</hash>
943
+ </hashes>
944
+ <licenses>
945
+ <license>
946
+ <id>Apache-2.0</id>
947
+ </license>
948
+ </licenses>
949
+ <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.7.20?type=jar</purl>
950
+ <externalReferences><reference type="website"><url>https://kotlinlang.org/</url></reference><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
951
+ </component>
952
+ <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.7.20?type=jar">
953
+ <group>org.jetbrains.kotlin</group>
954
+ <name>kotlin-stdlib-jdk7</name>
955
+ <version>1.7.20</version>
956
+ <description>Kotlin Standard Library JDK 7 extension</description>
957
+ <scope>required</scope>
958
+ <hashes>
959
+ <hash alg="MD5">a7c18462c8849ced434abc6254898a07</hash>
960
+ <hash alg="SHA-1">2a729aa8763306368e665e2b747abd1dfd29b9d5</hash>
961
+ <hash alg="SHA-256">524da3c1a2ad56fd52c4ae2272ef3de421de8d2047ab1c51fc306d351243f2f5</hash>
962
+ <hash alg="SHA-512">46c84ecd119f5d2b6d1e34fcd7e69ca92410e807e1e73ae9aab2c555c97c6710c8a65dc2666cbe832520eff90441c1e164b98213941e71bc12d1326d98499886</hash>
963
+ <hash alg="SHA-384">4b4eb0d4d7d41f45db2cdc102f00e652c36415a8e0aa32dcdfced9f2a368c2121b7374086973ee02a5fce809524659f8</hash>
964
+ <hash alg="SHA3-384">357817a68255ad5e4e01b032bd9592eb5b9a6ac36eeef82eafed47d0505667ad4bef4816da092671e8b6d64f0a66f275</hash>
965
+ <hash alg="SHA3-256">9103b07d7de8f2e54de5ee9b20c1abb25004940b372b6a6e8ad535ad3b22760f</hash>
966
+ <hash alg="SHA3-512">dd72bddf9eda7d98b43dadfcb12c00baeda1d6de402925ff20d3def29483aec16376565460882b8a636909eb3736647ff4591ae92f46bfaa7f4286b85a00cbf1</hash>
967
+ </hashes>
968
+ <licenses>
969
+ <license>
970
+ <id>Apache-2.0</id>
971
+ </license>
972
+ </licenses>
973
+ <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.7.20?type=jar</purl>
974
+ <externalReferences><reference type="website"><url>https://kotlinlang.org/</url></reference><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
975
+ </component>
976
+ <component type="library" bom-ref="pkg:maven/com.google.summit/summit-ast@2.2.0?type=jar">
977
+ <group>com.google.summit</group>
978
+ <name>summit-ast</name>
979
+ <version>2.2.0</version>
980
+ <description>Summit - Apex Language Abstract Syntax Tree</description>
981
+ <scope>required</scope>
982
+ <hashes>
983
+ <hash alg="MD5">2c7c3f9b32889b20896ddde7ebcccbeb</hash>
984
+ <hash alg="SHA-1">fcaef2333b5f4364ed7a39f95d8fb2958c3eb626</hash>
985
+ <hash alg="SHA-256">d85ab76e6de43b4259b79361470752856af13b9ed9b1b8d596a8f15b2460f7e1</hash>
986
+ <hash alg="SHA-512">1724c8dc1db8ef4484edb3c614bedb7dbf8d76ea551f4c6ceffe082b69fef31dc8b429fc158424c40e53df34922dba6583952069955e76124b33a63babc9f4c5</hash>
987
+ <hash alg="SHA-384">c36092781846689ef27e02ccdb514aa1bb848f9b03623b84063d332438c038548453d8c78423064edaf48dd1a8528720</hash>
988
+ <hash alg="SHA3-384">a3dbf8ef8149dc3f30b18dd3c729a4e60128fb529874e586fbbd0125fba54f924672a3ceb7b69d01e13c640ade6fa1aa</hash>
989
+ <hash alg="SHA3-256">e6e5ecd12c9dab8a02ee44a005964e84b2df1d373996d5996ecb5199189802ef</hash>
990
+ <hash alg="SHA3-512">bddb31355616e31d60a41545301a037e0db1787baddcd1cec9ddae8d3323369b2d02e022d81535462a170d96e33587e1de2cc0d7a543a4fb0777dbe8bb1931f3</hash>
991
+ </hashes>
992
+ <licenses>
993
+ <license>
994
+ <id>Apache-2.0</id>
995
+ </license>
996
+ </licenses>
997
+ <purl>pkg:maven/com.google.summit/summit-ast@2.2.0?type=jar</purl>
998
+ <externalReferences><reference type="website"><url>https://github.com/google/summit-ast</url></reference><reference type="vcs"><url>https://github.com/google/summit-ast.git</url></reference></externalReferences>
999
+ </component>
1000
+ <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar">
1001
+ <group>org.checkerframework</group>
1002
+ <name>checker-compat-qual</name>
1003
+ <version>2.5.3</version>
1004
+ <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
1005
+ used by the Checker Framework to type check Java source code. Please
1006
+ see artifact:
1007
+ org.checkerframework:checker</description>
1008
+ <scope>required</scope>
1009
+ <hashes>
1010
+ <hash alg="MD5">dbc262b47142454ec0a88c7b44e3a2ad</hash>
1011
+ <hash alg="SHA-1">045f92d2e0676d05ae9297269b8268f93a875d4a</hash>
1012
+ <hash alg="SHA-256">d76b9afea61c7c082908023f0cbc1427fab9abd2df915c8b8a3e7a509bccbc6d</hash>
1013
+ <hash alg="SHA-512">a0312dc1bd2206bea07097551c53e31ef6536e10ac3cf047464672a30d903e62730a64994f67da1d869645701c3a17e16b715da8cff0d0c7263b0b9dc674f865</hash>
1014
+ <hash alg="SHA-384">166d9a945998fb9b2684e15e679571cb16f06bd1c03100b637e0b97ec3f142265de952babb6af3dfe478c7bfd59795bc</hash>
1015
+ <hash alg="SHA3-384">209465acb99464f255d2f413ac3979c70de5c727ad39e725bb3fd51898a3f2c817b5ee7eee4eca4c04e14752f558cae1</hash>
1016
+ <hash alg="SHA3-256">389fa3da2d5e5f8a66724fe3bf514a28ef418a4284df07decef3ea38db59a54b</hash>
1017
+ <hash alg="SHA3-512">2dca30375c47ffe2e6f23b1aed97f481cb8c8ee7ca4df43324d33e21cdc4bd179f3d8caa17e77f3e528efc72a07d1567425c7133b758ce2bd3899fb53cbb7d5a</hash>
1018
+ </hashes>
1019
+ <licenses>
1020
+ <license>
1021
+ <name>GNU General Public License, version 2 (GPL2), with the classpath exception</name>
1022
+ <url>http://www.gnu.org/software/classpath/license.html</url>
1023
+ </license>
1024
+ <license>
1025
+ <id>MIT</id>
1026
+ </license>
1027
+ </licenses>
1028
+ <purl>pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar</purl>
1029
+ <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
1030
+ </component>
1031
+ <component type="library" bom-ref="pkg:maven/com.google.flogger/flogger@0.7.4?type=jar">
1032
+ <publisher>Google, Inc.</publisher>
1033
+ <group>com.google.flogger</group>
1034
+ <name>flogger</name>
1035
+ <version>0.7.4</version>
1036
+ <description>A Fluent Logging API for Java</description>
1037
+ <scope>required</scope>
1038
+ <hashes>
1039
+ <hash alg="MD5">f07c1e139283c017b4e8609efc04128b</hash>
1040
+ <hash alg="SHA-1">cec29ed8b58413c2e935d86b12d6b696dc285419</hash>
1041
+ <hash alg="SHA-256">77aac11b3c26e1e184dcfe79c55ac6e27967a6dfe1c04146125176940bc64a55</hash>
1042
+ <hash alg="SHA-512">6abbda137d8649656dd7ab6cb5c5084ff2ee3d363c3a966dd318f443d3e48f771ffb9668289c8c5d4eff1c9c9835b2d8788eb69f19d67ad4a3d5f59bb46026de</hash>
1043
+ <hash alg="SHA-384">fac3bbb0ee3e477833519583a94f98b400bff2ec01419095040d6b4b947adb6528548fb996818419058f14906e412b81</hash>
1044
+ <hash alg="SHA3-384">df71e8144fa34eb39295c5c1e9cfe06fd83cf2ee1b581d3b1c9cb2cf13267ed5e8f619ca2ac063e1e1b9671be19a64ca</hash>
1045
+ <hash alg="SHA3-256">dc4eea0277971962e4debe6c03e7b96c7e06331414c471872c9bac333134934f</hash>
1046
+ <hash alg="SHA3-512">0c1386901357e3dec1f1cb3d0be6f156bfed8cd4e45389fe9b5129d32e0d224128fb53f1d8739a3498b01d62a5e8e2a05f3a7308b12579bba34f8ffe329d5295</hash>
1047
+ </hashes>
1048
+ <licenses>
1049
+ <license>
1050
+ <id>Apache-2.0</id>
1051
+ </license>
1052
+ </licenses>
1053
+ <purl>pkg:maven/com.google.flogger/flogger@0.7.4?type=jar</purl>
1054
+ <externalReferences><reference type="website"><url>https://github.com/google/flogger</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/flogger/issues</url></reference><reference type="vcs"><url>https://github.com/google/flogger/</url></reference></externalReferences>
1055
+ </component>
1056
+ <component type="library" bom-ref="pkg:maven/com.google.flogger/flogger-system-backend@0.7.4?type=jar">
1057
+ <publisher>Google, Inc.</publisher>
1058
+ <group>com.google.flogger</group>
1059
+ <name>flogger-system-backend</name>
1060
+ <version>0.7.4</version>
1061
+ <description>A Fluent Logging API for Java</description>
1062
+ <scope>required</scope>
1063
+ <hashes>
1064
+ <hash alg="MD5">912cfded976d71d6372a3bc85832a392</hash>
1065
+ <hash alg="SHA-1">4bee7ebbd97c63ca7fb17529aeb49a57b670d061</hash>
1066
+ <hash alg="SHA-256">fd66f2615a9d8fe1b2274f1b5005a5555a0cd63cdfdab2ca9500e6eb81dc5f63</hash>
1067
+ <hash alg="SHA-512">fcdef83abc9b3a255b8ba054b6280ebe70d06bad7a3f44054ce4d3ce0c9514f1e38d9bb2dba683ccfb1a274a5dd46e43276cfb38449b6e68bfb7129e40fc66e1</hash>
1068
+ <hash alg="SHA-384">89eaceb4cfe29cfc306efd0c95b55c8b4089543e9dcc5820eb8fe5b57911b8fc4eea96193c21a08410e5a0d7bf7d5fdb</hash>
1069
+ <hash alg="SHA3-384">2affc717117dbd8f3ec2b6416d2f4d5fa4268fa0b9c741ee9bb882d36b590154db1e6385da088ec7c1797dc0adfd41e6</hash>
1070
+ <hash alg="SHA3-256">0a9969b0bd9398fe8a089c2d42de1f236c24c28f8bfae08279856d1c6de8261d</hash>
1071
+ <hash alg="SHA3-512">64a25e8c877217c106dc13f0f4326afb88ac1f0f8343bd9475995b37e96a0278d3e3c24c1dbc230f33fbb37416ee57f21f4cd97c61f5fdc4216ba031078b34d1</hash>
1072
+ </hashes>
1073
+ <licenses>
1074
+ <license>
1075
+ <id>Apache-2.0</id>
1076
+ </license>
1077
+ </licenses>
1078
+ <purl>pkg:maven/com.google.flogger/flogger-system-backend@0.7.4?type=jar</purl>
1079
+ <externalReferences><reference type="website"><url>https://github.com/google/flogger</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/flogger/issues</url></reference><reference type="vcs"><url>https://github.com/google/flogger/</url></reference></externalReferences>
1080
+ </component>
1081
+ <component type="library" bom-ref="pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar">
1082
+ <group>io.github.apex-dev-tools</group>
1083
+ <name>apex-parser</name>
1084
+ <version>3.6.0</version>
1085
+ <description>Salesforce Apex parser</description>
1086
+ <scope>required</scope>
1087
+ <hashes>
1088
+ <hash alg="MD5">2bdd112264333c2547b72f24b2c562d0</hash>
1089
+ <hash alg="SHA-1">8cca4f410ba851d368a192e5f080c8fedb064eab</hash>
1090
+ <hash alg="SHA-256">690bbc9c37f848cf527d7a2fd3a5e50913529196684ded0115ecf98693d5e64e</hash>
1091
+ <hash alg="SHA-512">161f9ef4858cf73a72273e85f0419f3d3509c0a47480e6b7068c346a96f9e9cd87a9d3dab9db850bb21720a3e53f5e70de00fb8ba060381a9667c9fcdeb29bcc</hash>
1092
+ <hash alg="SHA-384">2ead1900c9aaf5f80dfdf8ed5e8c70662fbe477d4a26e9573f3321d3d0734c80e2260566d70848f0ae2fe4907dfaac39</hash>
1093
+ <hash alg="SHA3-384">f8a9c8db1152f7fd79bdce63138cbf6ae8dbef9c14ec0e587b7c343f6bce8fdeb6dc01d34f215d69639e58c667e18e68</hash>
1094
+ <hash alg="SHA3-256">60b6095b5da8c6a4dae94983a6ad648a902f70ec55dee195392aa3d2175a1dfe</hash>
1095
+ <hash alg="SHA3-512">df301c0ddb135dee8e80688c872f4423a08e31be28148d4357426a114ba728684ea45384fc794eb8b3cdb6b661ce2c89207885d94a470ca9e3ab9c858e847b97</hash>
1096
+ </hashes>
1097
+ <licenses>
1098
+ <license>
1099
+ <id>BSD-3-Clause</id>
1100
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
1101
+ </license>
1102
+ </licenses>
1103
+ <purl>pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar</purl>
1104
+ <externalReferences><reference type="website"><url>https://github.com/apex-dev-tools/apex-parser</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/apex-dev-tools/apex-parser.git</url></reference></externalReferences>
1105
+ </component>
1106
+ <component type="library" bom-ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar">
1107
+ <group>javax.annotation</group>
1108
+ <name>jsr250-api</name>
1109
+ <version>1.0</version>
1110
+ <description>JSR-250 Reference Implementation by Glassfish</description>
1111
+ <scope>required</scope>
1112
+ <hashes>
1113
+ <hash alg="MD5">4cd56b2e4977e541186de69f5126b4a6</hash>
1114
+ <hash alg="SHA-1">5025422767732a1ab45d93abfea846513d742dcf</hash>
1115
+ <hash alg="SHA-256">a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f</hash>
1116
+ <hash alg="SHA-512">8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871</hash>
1117
+ <hash alg="SHA-384">33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d</hash>
1118
+ <hash alg="SHA3-384">5ab52f8a6f45849398f4a268cf498f7788adf8d0ad6ede2f9287814095051ce8529b05bea0a71c90718ce4c21d4594f5</hash>
1119
+ <hash alg="SHA3-256">623ae141aa22b45010282c862e41eec3ed0dafabd8f1ee5591ba623a242375ab</hash>
1120
+ <hash alg="SHA3-512">d7edd7a76d88d466b310d71fdc10d7b289838391408f8b704620b6683b65e436c0fa411d8dd356b0792e29e2fef8fbb8a6658bb97e7046e1277404a3395a9a53</hash>
1121
+ </hashes>
1122
+ <licenses>
1123
+ <license>
1124
+ <id>CDDL-1.0</id>
1125
+ </license>
1126
+ </licenses>
1127
+ <purl>pkg:maven/javax.annotation/jsr250-api@1.0?type=jar</purl>
1128
+ <externalReferences><reference type="website"><url>http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html</url></reference><reference type="distribution"><url>http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html</url></reference></externalReferences>
1129
+ </component>
1130
+ <component type="library" bom-ref="pkg:maven/org.danilopianini/gson-extras@1.0.0?type=jar">
1131
+ <group>org.danilopianini</group>
1132
+ <name>gson-extras</name>
1133
+ <version>1.0.0</version>
1134
+ <description>Extra goodies for Gson, available on Google's Github repository, made available on Central</description>
1135
+ <scope>required</scope>
1136
+ <hashes>
1137
+ <hash alg="MD5">d372ea2c52b8cc336e8e7b9c2db01fd2</hash>
1138
+ <hash alg="SHA-1">aaa51a51ff2b3a2b9cf48d3571f1eeb7d54cfe1c</hash>
1139
+ <hash alg="SHA-256">4a7bccb5a15f4d2e9af96d15fd4cfab03dd24709754f999e3a0bc734d38d698e</hash>
1140
+ <hash alg="SHA-512">940410135b203b27253642ecbe74fed851178c12ec98733d3c85d87c69648b67b86f50c42e7cea372f92325f23ba35e45e62a857af582dcc9de21e99c9fe7638</hash>
1141
+ <hash alg="SHA-384">4fded6dabbc75957e3d474428c15e8b98d996c15b477779b4d12b72f7fb449c50ef1f2c1d86375a88f8c36b09806382c</hash>
1142
+ <hash alg="SHA3-384">befb724cc4091820621b019697f55d204bd29cdbdeaaec4a66093a082076ad491f6109d4be7c7731fc345580cadb3f44</hash>
1143
+ <hash alg="SHA3-256">ff834b56f8e6744233e789ac98c925b2da2cadadb18b10b36bb9c986a79b1620</hash>
1144
+ <hash alg="SHA3-512">85c240b7477878b14850008c5c08a9c64fe917f032e8878e2a221f6f976020f5003041cfde9d5b4116c23325c34d75a71f776b6684375f39428018316152b4a4</hash>
1145
+ </hashes>
1146
+ <licenses>
1147
+ <license>
1148
+ <id>Apache-2.0</id>
1149
+ </license>
1150
+ </licenses>
1151
+ <purl>pkg:maven/org.danilopianini/gson-extras@1.0.0?type=jar</purl>
1152
+ <externalReferences><reference type="website"><url>https://github.com/DanySK/gson-extras</url></reference><reference type="vcs"><url>https://github.com/DanySK/gson-extras</url></reference></externalReferences>
1153
+ </component>
1154
+ <component type="library" bom-ref="pkg:maven/com.github.nawforce/apexlink@2.3.7?type=jar">
1155
+ <group>com.github.nawforce</group>
1156
+ <name>apexlink</name>
1157
+ <version>2.3.7</version>
1158
+ <description>Salesforce Apex static analysis toolkit</description>
1159
+ <scope>required</scope>
1160
+ <hashes>
1161
+ <hash alg="MD5">78e5c803cfd4bd03f5a813e0b1ca97af</hash>
1162
+ <hash alg="SHA-1">23fc30b1a56dc5ba41c78a4430e6c7c8d6640e92</hash>
1163
+ <hash alg="SHA-256">cab7d7972adc257023450efc14c85be19e1034817d9b10537446fccb83493b87</hash>
1164
+ <hash alg="SHA-512">4469dc6c514dc7e14e16cb627dd30758c99aca082c83633ceea186000ad691ab3ce95bd3ce17b09632e5801badc76b120882e73d35a0a1cc4e20ca2adea6641f</hash>
1165
+ <hash alg="SHA-384">dd5bf2c7ff05971cda7ab515db4d55c3fe79f8909e819e5be34cc8644d207b2eb8d2e135034ccadacf49a2b213906a7e</hash>
1166
+ <hash alg="SHA3-384">1f22dd88e87cefa01023dd9ce6ada89f581344f90887d170622daa5a42ba346f406b81cc7a6cf20796cdef78956f1fd7</hash>
1167
+ <hash alg="SHA3-256">46a24d492224e9711c8112efb6cf5f08e35b4379544e05222b22a0f286cd940b</hash>
1168
+ <hash alg="SHA3-512">8db0dec272a209feb4691d0886ee1479fd19f6884c690afe278c713dfdf9c1a4fba7dcd04d0748001960397036da3ee16b343ee80488f4919430cf9cdfb2c6ec</hash>
1169
+ </hashes>
1170
+ <licenses>
1171
+ <license>
1172
+ <id>BSD-3-Clause</id>
1173
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
1174
+ </license>
1175
+ </licenses>
1176
+ <purl>pkg:maven/com.github.nawforce/apexlink@2.3.7?type=jar</purl>
1177
+ <externalReferences><reference type="website"><url>https://github.com/nawforce/ApexLink</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/nawforce/ApexLink.git</url></reference></externalReferences>
1178
+ </component>
1179
+ <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar">
1180
+ <publisher>org.scala-lang.modules</publisher>
1181
+ <group>org.scala-lang.modules</group>
1182
+ <name>scala-parallel-collections_2.13</name>
1183
+ <version>1.0.0</version>
1184
+ <description>scala-parallel-collections</description>
1185
+ <scope>required</scope>
1186
+ <hashes>
1187
+ <hash alg="MD5">0376375d562ac40d0f998540f82ba1dd</hash>
1188
+ <hash alg="SHA-1">8753206c4604c6c8d58e1229cfc01553ff681404</hash>
1189
+ <hash alg="SHA-256">fc08be49e91db44d7fe5c1ff95a322ad4500805a525cc2c4b1b91693f041c8e4</hash>
1190
+ <hash alg="SHA-512">afc50520869e2e51adacf211a759f7ecdfc62a2645e1689d264c7bc9d2a89a72944c84028e77abb50f344f0399937bebe507d5e476004610e7cfdd1191537ca8</hash>
1191
+ <hash alg="SHA-384">3f196ddf2874837b052de0b4c554da94baa6cea12d2e7fa7bb8938905505e938616379023036df671df1fed36598d9e3</hash>
1192
+ <hash alg="SHA3-384">6f2fe28b9634292c8e22bfc54fb836cc2fb9af1818eb77e90be69c7e6be710e14bbc48929d00f905a0ce00f2934af1fa</hash>
1193
+ <hash alg="SHA3-256">532fd6bc8a3928926294ef6c71cd838349013a1b270e34c651376a117f5ca60e</hash>
1194
+ <hash alg="SHA3-512">3003d7dd84457f8d058cf57f48308bc373fe2c0bc34ec2f092ff4fe1a9c07dc100777671248b69c8123d77bcc766f1f68cde47de49720361f3917bfd06ea6f50</hash>
1195
+ </hashes>
1196
+ <licenses>
1197
+ <license>
1198
+ <id>Apache-2.0</id>
1199
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
1200
+ </license>
1201
+ </licenses>
1202
+ <purl>pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar</purl>
1203
+ <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-parallel-collections/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-parallel-collections</url></reference></externalReferences>
1204
+ </component>
1205
+ <component type="library" bom-ref="pkg:maven/com.github.nawforce/pkgforce_2.13@2.3.7?type=jar">
1206
+ <group>com.github.nawforce</group>
1207
+ <name>pkgforce_2.13</name>
1208
+ <version>2.3.7</version>
1209
+ <description>Salesforce Metadata Analysis Library</description>
1210
+ <scope>required</scope>
1211
+ <hashes>
1212
+ <hash alg="MD5">d5c40a4fd5d4a7c061fe515eb63bf37a</hash>
1213
+ <hash alg="SHA-1">046ed7912b1000635bc4dec6850506a9066f766c</hash>
1214
+ <hash alg="SHA-256">b1ccf29b9db46df9316899ea83a2d2d712d378f519f5edbb9417517501a5177e</hash>
1215
+ <hash alg="SHA-512">4b0a5ae0779f21792543a940dd0d961ad72715a09f1fe0e0460289ca270c15cd8ed87f2f7ca7ebf1b03c1408cc7eb6c0c643c9d7a8ff6584cd58357c7049fd11</hash>
1216
+ <hash alg="SHA-384">5092c59b2e121db1932567fdf2548ec756cca3e79b91c36dda8225cc54b66df9901785cac55e3bbfa1246f5d7143d9b4</hash>
1217
+ <hash alg="SHA3-384">32d257d8eb47ed8c144c8d2e80d400276a52bbc3acd76cfdb80b54de486e7378b97737d6b3bbb63f6fd0a48ffb45a121</hash>
1218
+ <hash alg="SHA3-256">6aa15409e29b94311c1e1f2956b7696e65823a95500ce03259b14baa6636cd24</hash>
1219
+ <hash alg="SHA3-512">cc738e91ed0ea3d0630cb0c891af665ffcfa5d2c09b4719d424f5a7901542d146ab896eb1d63892923642e688ee70ac6f2e2f7bded18bb5a9019029e6378b7b1</hash>
1220
+ </hashes>
1221
+ <licenses>
1222
+ <license>
1223
+ <id>BSD-3-Clause</id>
1224
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
1225
+ </license>
1226
+ </licenses>
1227
+ <purl>pkg:maven/com.github.nawforce/pkgforce_2.13@2.3.7?type=jar</purl>
1228
+ <externalReferences><reference type="website"><url>https://github.com/nawforce/apex-link</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/nawforce/apex-link.git</url></reference></externalReferences>
1229
+ </component>
1230
+ <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar">
1231
+ <publisher>org.scala-lang.modules</publisher>
1232
+ <group>org.scala-lang.modules</group>
1233
+ <name>scala-xml_2.13</name>
1234
+ <version>1.3.0</version>
1235
+ <description>scala-xml</description>
1236
+ <scope>required</scope>
1237
+ <hashes>
1238
+ <hash alg="MD5">17d25d9f015a8616e96cef2cdcc8b50d</hash>
1239
+ <hash alg="SHA-1">1db2b0fb6f454a9d34971b47158ee9dbe85d4eca</hash>
1240
+ <hash alg="SHA-256">6d96d45a7fc6fc7ab69bdbac841b48cf67ab109f048c8db375ae4effae524f39</hash>
1241
+ <hash alg="SHA-512">12366053a1a6c5aaf2942a3bf6bb98dfdf5511eff3d42145973fd6e526adde989205a2ff0d8064dd01cc354e9a633a450f41df81353388ebbb6be0ccc5f5ac6a</hash>
1242
+ <hash alg="SHA-384">6c5911d7f9ebd3f33253b205268b7a55c5482f7fa4b38e034f3fbcdf401928b1278d2950487f9e47d872f8d82489a2de</hash>
1243
+ <hash alg="SHA3-384">e485ec6a3cec915a75a39ff347489236f768df5d7279096e9f9e2fd7f7ff9ddc01f80311b85540bd6c48ff80401e3a42</hash>
1244
+ <hash alg="SHA3-256">fb26769d70653ee8460c74737d5d6e497d57236177b4e8e9b61649f59861a102</hash>
1245
+ <hash alg="SHA3-512">0dccaa025dfe107f10b227fd69eda3e9ad96298d4345cefd512f0b0ee191086d0556d97b67a8707eb7172f716a61940e0be935e0d0963645f9867744cc877a2c</hash>
1246
+ </hashes>
1247
+ <licenses>
1248
+ <license>
1249
+ <id>Apache-2.0</id>
1250
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
1251
+ </license>
1252
+ </licenses>
1253
+ <purl>pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar</purl>
1254
+ <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-xml/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-xml</url></reference></externalReferences>
1255
+ </component>
1256
+ <component type="library" bom-ref="pkg:maven/com.github.nawforce/runforce@55.5.0?type=jar">
1257
+ <group>com.github.nawforce</group>
1258
+ <name>runforce</name>
1259
+ <version>55.5.0</version>
1260
+ <description>Salesforce platform type stubs</description>
1261
+ <scope>required</scope>
1262
+ <hashes>
1263
+ <hash alg="MD5">ffc80d3e8e833d174493dac3159989b7</hash>
1264
+ <hash alg="SHA-1">dd5de789b88c06d0d93e9b6ad82ec280fa0bdce2</hash>
1265
+ <hash alg="SHA-256">bb30f8f8be119963dcf631e8a547442014d1f559a6ea1d07f413a56a438ae2be</hash>
1266
+ <hash alg="SHA-512">5646031b8a35a4b5db25bafa6762291458fb917923ed54a7226d7471eec7267bc941cfc868ed42f7c2355a94a58c88b833528014f3e6665570294148d819c7c8</hash>
1267
+ <hash alg="SHA-384">4d31938ec6867ea8114d2b0b180d669ed826b48676bf45beabb8d755cf20a3936b9737df1e6341438a7127c8a40667de</hash>
1268
+ <hash alg="SHA3-384">d39fbc4c3052abbe7a462a88dc7a7696fbcc7d18e39da5ec65e5246783b6f413a981ed6e76e300dcf32f92a9c596088f</hash>
1269
+ <hash alg="SHA3-256">b37ece0c68880bb0957e529b8695355f605d0289b51575268124ae1d3b579e91</hash>
1270
+ <hash alg="SHA3-512">f7deba7c15a4e16c0336a16fc5ed5cf26089a81587c90ccd65b3e4e4068d784b50ba6f9210b86d2e1abe36520964bc0821b8aab347022509522fc9191be6ef99</hash>
1271
+ </hashes>
1272
+ <licenses>
1273
+ <license>
1274
+ <id>BSD-3-Clause</id>
1275
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
1276
+ </license>
1277
+ </licenses>
1278
+ <purl>pkg:maven/com.github.nawforce/runforce@55.5.0?type=jar</purl>
1279
+ <externalReferences><reference type="website"><url>https://github.com/nawforce/runforce</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/nawforce/runforce.git</url></reference></externalReferences>
1280
+ </component>
1281
+ <component type="library" bom-ref="pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar">
1282
+ <publisher>com.github.nawforce</publisher>
1283
+ <group>com.github.nawforce</group>
1284
+ <name>scala-json-rpc_2.13</name>
1285
+ <version>1.0.1</version>
1286
+ <description>scala-json-rpc</description>
1287
+ <scope>required</scope>
1288
+ <hashes>
1289
+ <hash alg="MD5">491f1937041664ea31a9bcdc1802d713</hash>
1290
+ <hash alg="SHA-1">947aa4dd5ec766861455076ded38ab56ab56ffd6</hash>
1291
+ <hash alg="SHA-256">8cf74f4ed56ca38056bc42c31670538e8f9c67b682097febb1094f8e2db13cc8</hash>
1292
+ <hash alg="SHA-512">6361267b10d3761620534b08cf39e5073f9b8c9389d86e4b03f582fcdba0870fb1f1110feb539075c3882af6c7de2f62b9fa6c6ca7123ab6f339ce8b650f1b5d</hash>
1293
+ <hash alg="SHA-384">fd8420523ab71da4b2ee77400e8f791f5e6d96418fa73bac705172c92198f15d08cdebe7d7a2bdc07729426788b29ecf</hash>
1294
+ <hash alg="SHA3-384">eba7c43385642b1336dde725f7ff846cf4d32bf2c3f596ffc1ec705578da21d4d24306cec4981e3f42f4700360f7ba4f</hash>
1295
+ <hash alg="SHA3-256">23e1a79bd3d7e19ef95de087ff9f57eff8b3722facea7d4d2e581de779bd6926</hash>
1296
+ <hash alg="SHA3-512">d10af7f4fd0f14e263d91e88ae811ff0c6ab075d408630f1bac415f803db2f31e36dcc12b01b3f3bb0f09effad19da7cfd8f389d508ac543cfa98433f1db5af3</hash>
1297
+ </hashes>
1298
+ <licenses>
1299
+ <license>
1300
+ <id>MIT</id>
1301
+ <url>https://opensource.org/licenses/MIT</url>
1302
+ </license>
1303
+ </licenses>
1304
+ <purl>pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar</purl>
1305
+ <externalReferences><reference type="website"><url>https://github.com/nawforce/scala-json-rpc</url></reference></externalReferences>
1306
+ </component>
1307
+ <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-reflect@2.13.13?type=jar">
1308
+ <publisher>LAMP/EPFL</publisher>
1309
+ <group>org.scala-lang</group>
1310
+ <name>scala-reflect</name>
1311
+ <version>2.13.13</version>
1312
+ <description>Reflection Library for the Scala Programming Language</description>
1313
+ <scope>required</scope>
1314
+ <hashes>
1315
+ <hash alg="MD5">e0aee1a67c85a37be6185db1ca6aa764</hash>
1316
+ <hash alg="SHA-1">46866f0e2cf6168322dc11f0f721c2db78d52ac7</hash>
1317
+ <hash alg="SHA-256">8e7fa6fd2f9682035bfeae45160afa38ca67aec7dfc614146a758efdeb2ffafc</hash>
1318
+ <hash alg="SHA-512">4aec8f26c2ce05edbb1fad4e4a545ba8ee5a072a3e02df3f6609277c255cd54e65c364f371a7fb6fb9b20aeedd37101b3110298376623c3d61388cc3128118a7</hash>
1319
+ <hash alg="SHA-384">178d95271baea42a4dd1f553438fd8caab39ecaba6b085e1fe2c15b942e972a7d750032eebffe1820340d52cdb585678</hash>
1320
+ <hash alg="SHA3-384">4e5516075015ee05ca97c939685dce9d33f7bcd166e297c2cbd0bfd31abcc39c49cbcfe92827c97a91ee34879e56ea1a</hash>
1321
+ <hash alg="SHA3-256">239ddd943b81521ce8f9a849f326b6353364d953ac8eeee20f7b0c7d14a83f12</hash>
1322
+ <hash alg="SHA3-512">788341764844e925c83b8f5d6c4583f382d50e62dbd4e120bb526945ed32d9c79c24910d85c9ee10a903e442e8d44df299af504d7eb9729cee6681f53a271db5</hash>
1323
+ </hashes>
1324
+ <licenses>
1325
+ <license>
1326
+ <id>Apache-2.0</id>
1327
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
1328
+ </license>
1329
+ </licenses>
1330
+ <purl>pkg:maven/org.scala-lang/scala-reflect@2.13.13?type=jar</purl>
1331
+ <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
1332
+ </component>
1333
+ <component type="library" bom-ref="pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.0.1?type=jar">
1334
+ <publisher>com.github.nawforce</publisher>
1335
+ <group>com.github.nawforce</group>
1336
+ <name>scala-json-rpc-upickle-json-serializer_2.13</name>
1337
+ <version>1.0.1</version>
1338
+ <description>scala-json-rpc-upickle-json-serializer</description>
1339
+ <scope>required</scope>
1340
+ <hashes>
1341
+ <hash alg="MD5">1573bacc4869fca2e9b4190c5286eeb4</hash>
1342
+ <hash alg="SHA-1">5cd19669deda2b6284ef1f94e9cc8c8e59bdb979</hash>
1343
+ <hash alg="SHA-256">1c9c0663336825eeadb9cec2857c41ccf800047d80c2544f134eeac2fa7bc749</hash>
1344
+ <hash alg="SHA-512">79389844bc2f3f5d0a2f673db59024479e2b57c940809e04658fbb165c985de9677becbb8f55779d6c9fa719718a7f1ac68d4128f87cfd0b8cc590ce9cf3cba5</hash>
1345
+ <hash alg="SHA-384">af46d4b68c4abc23c4b55e0fdb70462be61ea27097d639dad800c372ecdf43c897192c22eabc8bb1d72cbbb30a20a16a</hash>
1346
+ <hash alg="SHA3-384">3d58a2e44f12db44f49b15306201d6c2322ee99d8e3f57a3d841822826d22f15d53c812332a657c8b5070d79cd16f7c6</hash>
1347
+ <hash alg="SHA3-256">562048b1701ae16eb70fc5e467edbd5d2244b8621b9e049a347c0029dc7a8f64</hash>
1348
+ <hash alg="SHA3-512">9a30c8f2f4c2b3a7b14b92777209c07e58a0c18f2c021e5ad9247f852bf9297506a8f34856bfd5290e0c5dfa8b484030dc0d2b9642041b79415aa50b079b9820</hash>
1349
+ </hashes>
1350
+ <licenses>
1351
+ <license>
1352
+ <id>MIT</id>
1353
+ <url>https://opensource.org/licenses/MIT</url>
1354
+ </license>
1355
+ </licenses>
1356
+ <purl>pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.0.1?type=jar</purl>
1357
+ <externalReferences><reference type="website"><url>https://github.com/nawforce/scala-json-rpc</url></reference></externalReferences>
1358
+ </component>
1359
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar">
1360
+ <group>com.lihaoyi</group>
1361
+ <name>upickle_2.13</name>
1362
+ <version>1.2.0</version>
1363
+ <description>upickle</description>
1364
+ <scope>required</scope>
1365
+ <hashes>
1366
+ <hash alg="MD5">abcf824fcfa8631eef37567f8fc0af00</hash>
1367
+ <hash alg="SHA-1">6a9fdc473b8f86be977d0b02d0a036d448315b36</hash>
1368
+ <hash alg="SHA-256">eba8ec18d8284cfcb10395842c254280b46f97ea2aca7f48b2b3db20205bae6f</hash>
1369
+ <hash alg="SHA-512">53c8cc9806a49eb747c0359c661cf5c739e33e873901665c88cda8bb494b6f0aca8e142ad8682bf9f11eaccd3da0763a4d9e06ec1417383a155ff2be60b6ed32</hash>
1370
+ <hash alg="SHA-384">4c3b848cd29f6855bf62cefd1c7bf2e40345ddf2bb0a37c8bcda6c2cce09120064364162d2d313e17fbd4d6fe76c8862</hash>
1371
+ <hash alg="SHA3-384">314f802e61c2a628d4ff7f716627307280e139e1c22f00043588c6316529d58b1e9bd0c062f5033fc1685be2172daa2d</hash>
1372
+ <hash alg="SHA3-256">3b712ba360059804ea48270c4a1d1617c7bd6fe0bbfa25f9f72d4f70e6c73bd0</hash>
1373
+ <hash alg="SHA3-512">7d068f6800c36d8af69178c24d13874af61f647c27ac9b508ed81bebce4fef343583de632df6ca45d136ce975dfbec336e1e305f195efbd7ef61b4000f746b5a</hash>
1374
+ </hashes>
1375
+ <licenses>
1376
+ <license>
1377
+ <id>MIT</id>
1378
+ <url>https://opensource.org/licenses/MIT</url>
1379
+ </license>
1380
+ </licenses>
1381
+ <purl>pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar</purl>
1382
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/upickle</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/upickle.git</url></reference></externalReferences>
1383
+ </component>
1384
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar">
1385
+ <group>com.lihaoyi</group>
1386
+ <name>ujson_2.13</name>
1387
+ <version>1.2.0</version>
1388
+ <description>ujson</description>
1389
+ <scope>required</scope>
1390
+ <hashes>
1391
+ <hash alg="MD5">f8e773dc5a5dd4fb08c1a0f3e2ea9e3c</hash>
1392
+ <hash alg="SHA-1">c813e752db936cfecfd708e2051522645f287645</hash>
1393
+ <hash alg="SHA-256">68474183a6ff657f97a91488e294cbe977b2a439fec216d5167700c72471f358</hash>
1394
+ <hash alg="SHA-512">88b3d92831cba8c292be4c7e427f7fbaafe6b4f6e18fe98a0c2d41358ac5db122761dae721fd820e4e6cae64ff1f78f70af88a2f3d4cbafc61f3c0f65148c83a</hash>
1395
+ <hash alg="SHA-384">b950a993d22e95a1a86d7b2f4da65da4617c4ea65488113792cb54df944f05fe225a686cb19b9255a49ca048c7562bfd</hash>
1396
+ <hash alg="SHA3-384">2fd85348a62ef50c042c69be3d23fb2332637643abbb4be9cee0fb794cbdedc76080bcf08cf7f1f8f4f892bbbf133771</hash>
1397
+ <hash alg="SHA3-256">cd7b701042c7758010974462707d6ecb92fef78603b3150c39216a3f7237cb7f</hash>
1398
+ <hash alg="SHA3-512">dae2ff7fcc4fa2046f5a8ca8468c4ec030dafe293340bd0cc84cd814824129446cc4e7a27361d4883982ee6f214a5b745e854af93d54b9d7de48f883608398db</hash>
1399
+ </hashes>
1400
+ <licenses>
1401
+ <license>
1402
+ <id>MIT</id>
1403
+ <url>https://opensource.org/licenses/MIT</url>
1404
+ </license>
1405
+ </licenses>
1406
+ <purl>pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar</purl>
1407
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/upickle</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/upickle.git</url></reference></externalReferences>
1408
+ </component>
1409
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar">
1410
+ <group>com.lihaoyi</group>
1411
+ <name>upickle-core_2.13</name>
1412
+ <version>1.2.0</version>
1413
+ <description>upickle-core</description>
1414
+ <scope>required</scope>
1415
+ <hashes>
1416
+ <hash alg="MD5">e2f6077d352e3c1d608a85789dc98ee4</hash>
1417
+ <hash alg="SHA-1">6da71e8114b7668bef7fa6b3387a31f64b13e853</hash>
1418
+ <hash alg="SHA-256">503d9d2687053a401f974e902ed095e7534f11f9b06448e03543f72c02f4e6bd</hash>
1419
+ <hash alg="SHA-512">fe0420c0a789be7d86e5c29ce8f49054959b7b2997ab5bb0f5b342e148ab46ec11fdcc924e399122d01a998a709c280793fb5f0eeb6c6b03df41c0aae3999338</hash>
1420
+ <hash alg="SHA-384">23b4a46a4ea8e2d75de20f231164ffb4e7ed060d2aea1202a737ce38c9bdbca3a8780e9cf224f7ebe032d9101de6f06f</hash>
1421
+ <hash alg="SHA3-384">c9f0ea02b7736591218e90cdadf5faec2df2f5ada590fec3668c5f1d50cdb08583f0b3518c5bc7dc8a0e29e0ece07b78</hash>
1422
+ <hash alg="SHA3-256">215503d8a54b0b3f568544a49ee8bd733142eb9b9421ec19b64b16e8ec8a1802</hash>
1423
+ <hash alg="SHA3-512">3d6ee8b4b7422169fb002b652150de34cca7dc52dc2eb266f6eddcf3564a31958386f953b0d316b271dde4b6ad48b8127470d5e7d702147d400e269faf6ce1c9</hash>
1424
+ </hashes>
1425
+ <licenses>
1426
+ <license>
1427
+ <id>MIT</id>
1428
+ <url>https://opensource.org/licenses/MIT</url>
1429
+ </license>
1430
+ </licenses>
1431
+ <purl>pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar</purl>
1432
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/upickle</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/upickle.git</url></reference></externalReferences>
1433
+ </component>
1434
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar">
1435
+ <group>com.lihaoyi</group>
1436
+ <name>geny_2.13</name>
1437
+ <version>0.6.2</version>
1438
+ <description>geny</description>
1439
+ <scope>required</scope>
1440
+ <hashes>
1441
+ <hash alg="MD5">468745e3f41ee0377d211099ddcdbd9d</hash>
1442
+ <hash alg="SHA-1">4dc065ddd1e7860dde10ca3cd23b0574a412b9e6</hash>
1443
+ <hash alg="SHA-256">26017fa73ec7fa3cd2d44a4f5d3462c58cd6ddebf7d42d40123768edf7dee43c</hash>
1444
+ <hash alg="SHA-512">0f3e20309f7513aefac47f468bdbeb5e98d6c8271686a9d50dd907a8827e7bac0ae79e81cee19ad96f70ffd74e7cec05decb6a98c48816d799bbc2cd0cf781b2</hash>
1445
+ <hash alg="SHA-384">3adc818ffdafb5e7f5353f29922c36f079e7c5c2cab5ba11e6ccdc9e74907b60d15f505e4cb42f473013d5c3a6a12d7f</hash>
1446
+ <hash alg="SHA3-384">1e958cd12d1af2d81c6c5855dc54e31b39dfb7b4ad1f2bfafac5dace024d29264970c93f90e75d1eeefda9ad9409aeec</hash>
1447
+ <hash alg="SHA3-256">cf874f005f3e5d67d5f4bd075a60f79a8dcd7c228a5af1c14c0ab28810367cf5</hash>
1448
+ <hash alg="SHA3-512">6b9ac590fc11b33db775c0494182ea9f39457a619996b1169326283367f21228d72307799f8c5e75e4e034ed8f57e4331e9bd052e2f9b591803f3396776e09e1</hash>
1449
+ </hashes>
1450
+ <licenses>
1451
+ <license>
1452
+ <id>MIT</id>
1453
+ <url>https://opensource.org/licenses/MIT</url>
1454
+ </license>
1455
+ </licenses>
1456
+ <purl>pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar</purl>
1457
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/geny</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/geny.git</url></reference></externalReferences>
1458
+ </component>
1459
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar">
1460
+ <group>com.lihaoyi</group>
1461
+ <name>upack_2.13</name>
1462
+ <version>1.2.0</version>
1463
+ <description>upack</description>
1464
+ <scope>required</scope>
1465
+ <hashes>
1466
+ <hash alg="MD5">6922e8a65b313a9af56d31f31345fa45</hash>
1467
+ <hash alg="SHA-1">c1e224e9c9b3eed105ded5e102224acf548ddff6</hash>
1468
+ <hash alg="SHA-256">1ed89d975c11ca0c87398f57e29ace72ff00835ba87b504a83c4190d17416c26</hash>
1469
+ <hash alg="SHA-512">be9acc43f29e2fed408b584dfd326c26f023428837c7e4478abd76da1fb57cfcb550ef9d41733df79454910591c15c3daaba3757a92419d0d474cadbc4a11fca</hash>
1470
+ <hash alg="SHA-384">c2b4dbae6ea083747649e0d0984fe599f72ef8897453023a642b1073c96f57ba11103b7ef4faf20e272c49088415e653</hash>
1471
+ <hash alg="SHA3-384">31a26ed9cc75bb8ad0a592849185539da33d438b58ed016f8cdd737d1da954ac8c2ea938ff40ec5b4a62065483dc4997</hash>
1472
+ <hash alg="SHA3-256">83381aef5564d0d74fdecaac1805446336d375144f8c7bc4e16e036fff48c142</hash>
1473
+ <hash alg="SHA3-512">0ca62eaea87ff90128dd2987d78e899628be60f472851bed53c9e39e6aaabbe1cdc59452e008e70837b97bf8d9f2edda21313816529fd04eee2c4183d9689ce4</hash>
1474
+ </hashes>
1475
+ <licenses>
1476
+ <license>
1477
+ <id>MIT</id>
1478
+ <url>https://opensource.org/licenses/MIT</url>
1479
+ </license>
1480
+ </licenses>
1481
+ <purl>pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar</purl>
1482
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/upickle</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/upickle.git</url></reference></externalReferences>
1483
+ </component>
1484
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar">
1485
+ <group>com.lihaoyi</group>
1486
+ <name>upickle-implicits_2.13</name>
1487
+ <version>1.2.0</version>
1488
+ <description>upickle-implicits</description>
1489
+ <scope>required</scope>
1490
+ <hashes>
1491
+ <hash alg="MD5">a780d8970446a81f2e8f8ec967a94908</hash>
1492
+ <hash alg="SHA-1">3113da7c0f648121ff2504532cec1fc9daf726f8</hash>
1493
+ <hash alg="SHA-256">31d16e260f6eae6c4172f430f2c0711f669cd9dff576aadd1370b8bc5472f8d4</hash>
1494
+ <hash alg="SHA-512">12d08ef3c3414013515028c1c766fe8d58991e50d8b4e65cc9616cd5f35a2a360767176f0520e0d216262627ab57612237c3de3b0bee916829ba0a8af722d5bf</hash>
1495
+ <hash alg="SHA-384">d66118927474ec7a0f3618422d086db2756f20c0f69a5cfd2b81ed0618db5e1627969cd9bcad5e7274f1de225af33957</hash>
1496
+ <hash alg="SHA3-384">9dce5d3a28bb7a91f3638fc9df522611470b7cf9388c7c9c8ab8f72cc27ba3adcfade83e82175836054d30de19be9af1</hash>
1497
+ <hash alg="SHA3-256">48fc68f98c307ce10ef49dd3d808d315e11e3ac4f0a799aec9759bef127323d6</hash>
1498
+ <hash alg="SHA3-512">390defa14f93cd6a461c1a5e8924e1839a524d9ed63daec73bb8c9f45555cb96061754345b3872bfe3882b041dbd15cd39cae1cbcc8fa2e924a02664afa46218</hash>
1499
+ </hashes>
1500
+ <licenses>
1501
+ <license>
1502
+ <id>MIT</id>
1503
+ <url>https://opensource.org/licenses/MIT</url>
1504
+ </license>
1505
+ </licenses>
1506
+ <purl>pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar</purl>
1507
+ <externalReferences><reference type="website"><url>https://github.com/lihaoyi/upickle</url></reference><reference type="vcs"><url>git://github.com/lihaoyi/upickle.git</url></reference></externalReferences>
1508
+ </component>
1509
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-coco@7.1.0?type=jar">
1510
+ <publisher>PMD</publisher>
1511
+ <group>net.sourceforge.pmd</group>
1512
+ <name>pmd-coco</name>
1513
+ <version>7.1.0</version>
1514
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1515
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1516
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1517
+ Rules can be written in Java or using a XPath query.
1518
+
1519
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1520
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1521
+ Scala is supported, but there are currently no Scala rules available.
1522
+
1523
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1524
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1525
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1526
+ <scope>required</scope>
1527
+ <hashes>
1528
+ <hash alg="MD5">1d0d9be8ef660b78858393f973d8b29e</hash>
1529
+ <hash alg="SHA-1">3341c53d1a32bb4f91ccd67d60478ff9319fc7b5</hash>
1530
+ <hash alg="SHA-256">19c8aa0bf3e121d4f425cd250807fc2dba6ca641906b88543dadc6b1f5b6ab07</hash>
1531
+ <hash alg="SHA-512">e3f17f3bca3e12be386390e22df4f0a3212da87f4123b4d4e9370dfd65e180d60398aaa651e1cb7a4d5a8fbcb04371b10b99a928de22036fe8203b4d7007d70e</hash>
1532
+ <hash alg="SHA-384">910c95dd179dcf472e7ec66581730738685f2851fd2d818bd8972d8899ad932bf42b1a9712f7c4bdc67232439e41b9e3</hash>
1533
+ <hash alg="SHA3-384">8600ce1def9fda1c7fb09251cdd8d938ec501639bab1f64bbb44970777aa012061059c776201c2ef6d14d1ea830b2a0c</hash>
1534
+ <hash alg="SHA3-256">6286b0e8b9078b4780261c07dde5e4e528b4d278a1f50fbd1cf05dbb932b8ce7</hash>
1535
+ <hash alg="SHA3-512">f559126f1e3cf5cb0af5d6c5ad448cbd916a2a789da8da8e5467f05d46ef3c1c3f26e1533077827e904c0310a24916c8a764a790c787bdb0321aaccb3837ce42</hash>
1536
+ </hashes>
1537
+ <licenses>
1538
+ <license>
1539
+ <name>BSD-style</name>
1540
+ <url>http://pmd.sourceforge.net/license.html</url>
1541
+ </license>
1542
+ </licenses>
1543
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-coco@7.1.0?type=jar</purl>
1544
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-coco/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-coco</url></reference></externalReferences>
1545
+ </component>
1546
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-cpp@7.1.0?type=jar">
1547
+ <publisher>PMD</publisher>
1548
+ <group>net.sourceforge.pmd</group>
1549
+ <name>pmd-cpp</name>
1550
+ <version>7.1.0</version>
1551
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1552
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1553
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1554
+ Rules can be written in Java or using a XPath query.
1555
+
1556
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1557
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1558
+ Scala is supported, but there are currently no Scala rules available.
1559
+
1560
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1561
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1562
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1563
+ <scope>required</scope>
1564
+ <hashes>
1565
+ <hash alg="MD5">a69cb3be7eff5d794d995160fd6c0f13</hash>
1566
+ <hash alg="SHA-1">00bd533347c98006da2ac61a454e7d42a641e69a</hash>
1567
+ <hash alg="SHA-256">0fe2fe8c001d8fd557ce7d96fefb0d8396ce223a0051f890b3d3df70af175471</hash>
1568
+ <hash alg="SHA-512">57f04dbb27d5c582fc46a49a6edab505bdfb52af116c91d5f7f8de6125f875d54909fdf8d9efefe19211a3bc5a411bd095683f1b10b4a470539286140d02f908</hash>
1569
+ <hash alg="SHA-384">108563a7397655523f4c18b604cd8e82cafab64c57c479e66dc11cc38c650de409603b88c153cae476f464c902dcc4c7</hash>
1570
+ <hash alg="SHA3-384">5c9f46f2ec1f9023f10e80a9f2caa4cf02f5763cff463a730d903e01275d2d601f7c88a95d11f0344c2382b314e7acbd</hash>
1571
+ <hash alg="SHA3-256">a58352d2749dccf139c84394564f593378bb5cbdade3b035108e303ca570f576</hash>
1572
+ <hash alg="SHA3-512">d13969f846c404bfb507255cf05c079338d0716617805bfb7723b7630a9a219d9cb576d35c795a2a1a926998c1a2d4de6347afce764ecb9ef94b815b8b9795b2</hash>
1573
+ </hashes>
1574
+ <licenses>
1575
+ <license>
1576
+ <name>BSD-style</name>
1577
+ <url>http://pmd.sourceforge.net/license.html</url>
1578
+ </license>
1579
+ </licenses>
1580
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-cpp@7.1.0?type=jar</purl>
1581
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-cpp/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-cpp</url></reference></externalReferences>
1582
+ </component>
1583
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-cs@7.1.0?type=jar">
1584
+ <publisher>PMD</publisher>
1585
+ <group>net.sourceforge.pmd</group>
1586
+ <name>pmd-cs</name>
1587
+ <version>7.1.0</version>
1588
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1589
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1590
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1591
+ Rules can be written in Java or using a XPath query.
1592
+
1593
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1594
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1595
+ Scala is supported, but there are currently no Scala rules available.
1596
+
1597
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1598
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1599
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1600
+ <scope>required</scope>
1601
+ <hashes>
1602
+ <hash alg="MD5">092c33a2b2811030f723c0323b2088cf</hash>
1603
+ <hash alg="SHA-1">9aa615ecce492d120143d975ab245a94b56ce5cf</hash>
1604
+ <hash alg="SHA-256">4c1ebcf9033eae4f9ba2120f94b0f0cf8455bd0ba3387cd8dbfb08ccaca2a0bf</hash>
1605
+ <hash alg="SHA-512">5190a4216f9ac99664d2a1e4485e088100b9b4a3e88872038544553d6424cae9a489402e0ab0e28226e227eb00001641589328d6d55f3211e88ed14f8e866267</hash>
1606
+ <hash alg="SHA-384">07d644569657dfa300b1707f2cb517ac2e7de82010c0f9360db325b48fa67956f782fac929cf9ebeec2acbfe10c39abe</hash>
1607
+ <hash alg="SHA3-384">6e2618b13c3a3ff2a9467469b3674ce8efa8bbefea9dd1fe23f0cf247344f137714a2caa7eb05164b6dd8ac5804bb812</hash>
1608
+ <hash alg="SHA3-256">42ac0d60a7310af2f2bef707bc1a83082075f36fab43a8be13b0ba24e324387c</hash>
1609
+ <hash alg="SHA3-512">337b3f988af5f86c8db09333806c088ca36f6a9435caa4bacb4d613a6959a2222952e86e97b796b366fdc9f6974efe65493bb512c9cac302adcf5639fb0b0edd</hash>
1610
+ </hashes>
1611
+ <licenses>
1612
+ <license>
1613
+ <name>BSD-style</name>
1614
+ <url>http://pmd.sourceforge.net/license.html</url>
1615
+ </license>
1616
+ </licenses>
1617
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-cs@7.1.0?type=jar</purl>
1618
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-cs/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-cs</url></reference></externalReferences>
1619
+ </component>
1620
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-dart@7.1.0?type=jar">
1621
+ <publisher>PMD</publisher>
1622
+ <group>net.sourceforge.pmd</group>
1623
+ <name>pmd-dart</name>
1624
+ <version>7.1.0</version>
1625
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1626
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1627
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1628
+ Rules can be written in Java or using a XPath query.
1629
+
1630
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1631
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1632
+ Scala is supported, but there are currently no Scala rules available.
1633
+
1634
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1635
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1636
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1637
+ <scope>required</scope>
1638
+ <hashes>
1639
+ <hash alg="MD5">d3c8c0ee230909290f29081635fcc281</hash>
1640
+ <hash alg="SHA-1">b5b8455c76caeee7f03c21f02092c3c03a637f4a</hash>
1641
+ <hash alg="SHA-256">c9307e3e6a7889187d1a213b68e0651ea15405e70fe5f98ab9e76169021999bd</hash>
1642
+ <hash alg="SHA-512">122c1d0e8fec847e814220ff37048df506ae2c7dcc09568eebe235a3cc54d0a0f75689f8d770697a44db172d7f700e1d4d0ddefd8d41ea6ff743e556780ec8be</hash>
1643
+ <hash alg="SHA-384">d1c6756708ad3038f3c52896e53e27f1d95c7673622779e63224fa3a708c658560e30ccfee63a391cd5cf243e8ae93e5</hash>
1644
+ <hash alg="SHA3-384">ced5f4faeb67219939a857cec52d9be76b5dcecf6adf310eed117353672a3ddad6df82e44498c873864dc8455c2f6a9e</hash>
1645
+ <hash alg="SHA3-256">33d0eb699ef6d93e6160c12b93f0f489d4671b09a18a3afad5527b9adfc62613</hash>
1646
+ <hash alg="SHA3-512">eb5f566e61456ff1919f46145098ff797ce30c66c6c5974e42ce1105e47df7dadcb54d39711ef5a82d4807bcfa4d5d5e8b89ed8a945caf2548e828f188c65f23</hash>
1647
+ </hashes>
1648
+ <licenses>
1649
+ <license>
1650
+ <name>BSD-style</name>
1651
+ <url>http://pmd.sourceforge.net/license.html</url>
1652
+ </license>
1653
+ </licenses>
1654
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-dart@7.1.0?type=jar</purl>
1655
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-dart/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-dart</url></reference></externalReferences>
1656
+ </component>
1657
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-fortran@7.1.0?type=jar">
1658
+ <publisher>PMD</publisher>
1659
+ <group>net.sourceforge.pmd</group>
1660
+ <name>pmd-fortran</name>
1661
+ <version>7.1.0</version>
1662
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1663
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1664
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1665
+ Rules can be written in Java or using a XPath query.
1666
+
1667
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1668
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1669
+ Scala is supported, but there are currently no Scala rules available.
1670
+
1671
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1672
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1673
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1674
+ <scope>required</scope>
1675
+ <hashes>
1676
+ <hash alg="MD5">916de37a5d1f3d6ddc86794a6f0f9708</hash>
1677
+ <hash alg="SHA-1">07beeaeb1af6df78ec31f10b2353185da43f976a</hash>
1678
+ <hash alg="SHA-256">7cb8114b1085ae7d59edbbb987103f6b1693a087fed09b2cd4b7f289af717b3f</hash>
1679
+ <hash alg="SHA-512">0771f5aa727f6e877059a77aaa1c259701efc73fb162d74aedea9a1b70dc99d946ed9e35a03d60cfa35fe9fc5fe54f31854f91d1cd1bfd67a26973b4afa28fad</hash>
1680
+ <hash alg="SHA-384">7301273a4f157fe22f7ead3c6fb9c10f59d68c2331fed78b66f5f1627bdc3c7c77018c77e58204c92179cbcfec4dfb2d</hash>
1681
+ <hash alg="SHA3-384">e34ac226b9eb3c85a34be01e9c82c147ba46746222bb14787ab6651f8fb55a5e9e813c6e6bd2e178a22e9b137c602fc3</hash>
1682
+ <hash alg="SHA3-256">76134385219e850813ac9ed17a3fd88e1f807b6e1f942717d96c0382d27f2287</hash>
1683
+ <hash alg="SHA3-512">7e0f2bd1a2743510b93d63b67f00cb1cb01be7b9c5e463141ccbbb9255ac4fb6768b495c2f2e08746a57d5b5104c8f03eeb78e03298f7f1eac6db40ccd3336f3</hash>
1684
+ </hashes>
1685
+ <licenses>
1686
+ <license>
1687
+ <name>BSD-style</name>
1688
+ <url>http://pmd.sourceforge.net/license.html</url>
1689
+ </license>
1690
+ </licenses>
1691
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-fortran@7.1.0?type=jar</purl>
1692
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-fortran/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-fortran</url></reference></externalReferences>
1693
+ </component>
1694
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.1.0?type=jar">
1695
+ <publisher>PMD</publisher>
1696
+ <group>net.sourceforge.pmd</group>
1697
+ <name>pmd-gherkin</name>
1698
+ <version>7.1.0</version>
1699
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1700
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1701
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1702
+ Rules can be written in Java or using a XPath query.
1703
+
1704
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1705
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1706
+ Scala is supported, but there are currently no Scala rules available.
1707
+
1708
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1709
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1710
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1711
+ <scope>required</scope>
1712
+ <hashes>
1713
+ <hash alg="MD5">f09c128123b8f904da978a56cd0ed5ae</hash>
1714
+ <hash alg="SHA-1">447e771717541117c5b4eb7a630700958cf5d9e6</hash>
1715
+ <hash alg="SHA-256">d39a4943e289644d295e91a18c0f86227dfa3eb04c4ee5f1107317f53e6cb25d</hash>
1716
+ <hash alg="SHA-512">ea427b182cce2253dba39d1bb5b316628bd32b1a53338937b5f428bf7e0731e7fae7983fcd2f563c4469b915435fbc544ae934f7ec133dec6e71665143915619</hash>
1717
+ <hash alg="SHA-384">c806f877631a72b2f1b141bcc39303e6492aa9cb1b65f75b481678f86ac0820ec9bc4d0049fbf14d315c504660bd9ff5</hash>
1718
+ <hash alg="SHA3-384">d99553c36670216ca39cb0f508837f51bc9f80de195e540ac6a6c662cd108eb1312d890e387a5ed01809212b8d4dc00b</hash>
1719
+ <hash alg="SHA3-256">e711c0796f390c9b38b97cdbe52c2d05b1bdd8b22635534e923a815f9cffb504</hash>
1720
+ <hash alg="SHA3-512">5b91f855433416206d478c2245005afbf308aaa77db0132423a285e47dfdcda4248b73e09fa14fafe5fdb1a6075a5048c1482e1e501d43f05b386d8ef3d0ddb3</hash>
1721
+ </hashes>
1722
+ <licenses>
1723
+ <license>
1724
+ <name>BSD-style</name>
1725
+ <url>http://pmd.sourceforge.net/license.html</url>
1726
+ </license>
1727
+ </licenses>
1728
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.1.0?type=jar</purl>
1729
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-gherkin/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-gherkin</url></reference></externalReferences>
1730
+ </component>
1731
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-go@7.1.0?type=jar">
1732
+ <publisher>PMD</publisher>
1733
+ <group>net.sourceforge.pmd</group>
1734
+ <name>pmd-go</name>
1735
+ <version>7.1.0</version>
1736
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1737
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1738
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1739
+ Rules can be written in Java or using a XPath query.
1740
+
1741
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1742
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1743
+ Scala is supported, but there are currently no Scala rules available.
1744
+
1745
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1746
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1747
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1748
+ <scope>required</scope>
1749
+ <hashes>
1750
+ <hash alg="MD5">0ce174a1d00708ace257188284b22556</hash>
1751
+ <hash alg="SHA-1">7bddeca9f5f135ebf6bff413e31321c6f092036a</hash>
1752
+ <hash alg="SHA-256">a19a3adfc8af4f5514fa9c166440c4ffeea751b2e59b9a7be91b1da0df9f7d0d</hash>
1753
+ <hash alg="SHA-512">7a56be73bfab914f0fb207df59a0f4c5b0a9dc73fdadf1aef6080ec0a84b7b22dd9554452d3a7f8871b9ba85d8d44827a412cbebf5931a915ba75060b128d7d4</hash>
1754
+ <hash alg="SHA-384">6817be99988407a102651ed042ffd861a1f566f2c6f77c165ec1633bb972e8a5ad3d9ae2398c688d352f82a31e10a57e</hash>
1755
+ <hash alg="SHA3-384">a4a4b5240507a847179e3dcd9e77552efa9196cbd7b940ed9b816c357bcf366733a05a0e2a5d79ecd1aa90db52f45f48</hash>
1756
+ <hash alg="SHA3-256">4fa859abbd143f236a6092bce73eb9a9090caa97763b2bf2092a4004fb936e4a</hash>
1757
+ <hash alg="SHA3-512">efa3179f0ae3ca024de237b1e520f7fcf17744400e9021890605452c62dabebc3b72778aa7d67f772eada51f5a513d6e8bfb29f8b281e95d34e71ba499ccec38</hash>
1758
+ </hashes>
1759
+ <licenses>
1760
+ <license>
1761
+ <name>BSD-style</name>
1762
+ <url>http://pmd.sourceforge.net/license.html</url>
1763
+ </license>
1764
+ </licenses>
1765
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-go@7.1.0?type=jar</purl>
1766
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-go/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-go</url></reference></externalReferences>
1767
+ </component>
1768
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-groovy@7.1.0?type=jar">
1769
+ <publisher>PMD</publisher>
1770
+ <group>net.sourceforge.pmd</group>
1771
+ <name>pmd-groovy</name>
1772
+ <version>7.1.0</version>
1773
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1774
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1775
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1776
+ Rules can be written in Java or using a XPath query.
1777
+
1778
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1779
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1780
+ Scala is supported, but there are currently no Scala rules available.
1781
+
1782
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1783
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1784
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1785
+ <scope>required</scope>
1786
+ <hashes>
1787
+ <hash alg="MD5">b769ed832856c7bf39fee56fe17dea4e</hash>
1788
+ <hash alg="SHA-1">28acf6d7b03ac0368be219e46a429f3b69304c4f</hash>
1789
+ <hash alg="SHA-256">9885ad06a8d1ab7c27bcff791d4dfe4aac4c522cb9de1a9fe45c5f3597f5cf99</hash>
1790
+ <hash alg="SHA-512">6f0819dd78d4883fe5c55bdab44565667bc83282653e622b1041ea7e536dba3ec2f96595f1f9e7cfcfa499fac5749f7649d2f87efce525d2672e06a0f36264ad</hash>
1791
+ <hash alg="SHA-384">51b75db82266beef010f2b16f242f8d1e740902159357d4b3de6811e6fe782543d9bbf78bf9f38ec8d8eec2174905c00</hash>
1792
+ <hash alg="SHA3-384">e549d8ad5e8534b4fde9124dba6da8ae49fa91802a00825d85b67088ab75bc1473ad92e8c771e2f79a3b030f47f757cf</hash>
1793
+ <hash alg="SHA3-256">c08da18a079a75390259686dc7582c75a89a94d81b8f80cd4cbbefe20c053402</hash>
1794
+ <hash alg="SHA3-512">073286a9882d31eb15580dc15fbfb1f476991f65f33fd6135027741c6b92020030a4ec83e940944e859a60901c874c938287e5d59d4d892cadb1c12237fea50c</hash>
1795
+ </hashes>
1796
+ <licenses>
1797
+ <license>
1798
+ <name>BSD-style</name>
1799
+ <url>http://pmd.sourceforge.net/license.html</url>
1800
+ </license>
1801
+ </licenses>
1802
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-groovy@7.1.0?type=jar</purl>
1803
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-groovy/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-groovy</url></reference></externalReferences>
1804
+ </component>
1805
+ <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy@4.0.19?type=jar">
1806
+ <publisher>Apache Software Foundation</publisher>
1807
+ <group>org.apache.groovy</group>
1808
+ <name>groovy</name>
1809
+ <version>4.0.19</version>
1810
+ <description>Groovy: A powerful multi-faceted language for the JVM</description>
1811
+ <scope>required</scope>
1812
+ <hashes>
1813
+ <hash alg="MD5">940d085fe501344be5d29f84c1da9110</hash>
1814
+ <hash alg="SHA-1">936e0efd6860e846fd2cc4b5ed9e1c153210c957</hash>
1815
+ <hash alg="SHA-256">96c650051f44cb6cdaff9d389d06eb881966d1c13d0067f69b39022cda926112</hash>
1816
+ <hash alg="SHA-512">ceda7f9403a89aa9db909c726097d9ad3194220657d0e8e689deb312b23413718a42aeadba43e469922b5e1854d9239d6f5c10f1808c55ce846566dced3eb65a</hash>
1817
+ <hash alg="SHA-384">ae05b70c66aec0579c2923e4a00c36a7982122f56de841c92a6c69953ed677143ff489f688585c70569243dfd9e5283b</hash>
1818
+ <hash alg="SHA3-384">d02864852ad75d1cbf113a200917d53972aeb10f904f50c168ee501c8408e981b3279418924a8ce1f48b749d647886bc</hash>
1819
+ <hash alg="SHA3-256">59a5ca0aa430677430beac938d4d66d7ffd9668036d6fd243064f8688b24520c</hash>
1820
+ <hash alg="SHA3-512">5b97a362809b849d518ca0cff68ea75bdb267306920aa0893420c20dc06624bc1f0f29ffb2efbe453573bb0f8d42b9044a28bd706096c0101a2d7a68186b6835</hash>
1821
+ </hashes>
1822
+ <licenses>
1823
+ <license>
1824
+ <id>Apache-2.0</id>
1825
+ </license>
1826
+ </licenses>
1827
+ <purl>pkg:maven/org.apache.groovy/groovy@4.0.19?type=jar</purl>
1828
+ <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
1829
+ </component>
1830
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-html@7.1.0?type=jar">
1831
+ <publisher>PMD</publisher>
1832
+ <group>net.sourceforge.pmd</group>
1833
+ <name>pmd-html</name>
1834
+ <version>7.1.0</version>
1835
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1836
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1837
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1838
+ Rules can be written in Java or using a XPath query.
1839
+
1840
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1841
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1842
+ Scala is supported, but there are currently no Scala rules available.
1843
+
1844
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1845
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1846
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1847
+ <scope>required</scope>
1848
+ <hashes>
1849
+ <hash alg="MD5">2994a75f13fd7586e9c227d45d36c6e1</hash>
1850
+ <hash alg="SHA-1">2a9ec5cac50b0a329bdc29141857b76988fe13fc</hash>
1851
+ <hash alg="SHA-256">f48e2fefda7f6c65fb30aa117b689ddef17a17cf221bee336d1392f09e177682</hash>
1852
+ <hash alg="SHA-512">9c76760ce2674d5a17c4595a2b6690dbd73292c782e5766787b854ecd9a4b2bc980384d0d29034d3017090518b17f9197bc5a08ab181699d4a967ab6ece08692</hash>
1853
+ <hash alg="SHA-384">5d76f3f099ef6be28d109fab2a18149027fe9d0eff566fc76dca3ffd4f807cb9f6fcc4c6a5cb4d0b3caa55cf79712821</hash>
1854
+ <hash alg="SHA3-384">4df0c653147177c6fa1bc1dc8294d8be5c12ffd21ae92d2554290b2312b0b9f0671fb8738ff8284146336709750b81da</hash>
1855
+ <hash alg="SHA3-256">98993be72a15b9388579a088ddf7c92a4d0588b169a35cf6482bb92b6c236db9</hash>
1856
+ <hash alg="SHA3-512">da411b5c9f324daf94398dd3c31d32c1062c3508d2f28b062362429bbba90e85944c13220b340ac93f6f427e8c2cbe1019f1a91fba176c2c8bf61fe3a177fc7c</hash>
1857
+ </hashes>
1858
+ <licenses>
1859
+ <license>
1860
+ <name>BSD-style</name>
1861
+ <url>http://pmd.sourceforge.net/license.html</url>
1862
+ </license>
1863
+ </licenses>
1864
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-html@7.1.0?type=jar</purl>
1865
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-html/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-html</url></reference></externalReferences>
1866
+ </component>
1867
+ <component type="library" bom-ref="pkg:maven/org.jsoup/jsoup@1.17.2?type=jar">
1868
+ <publisher>Jonathan Hedley</publisher>
1869
+ <group>org.jsoup</group>
1870
+ <name>jsoup</name>
1871
+ <version>1.17.2</version>
1872
+ <description>jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL fetching, data parsing, extraction, and manipulation using DOM API methods, CSS, and xpath selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers.</description>
1873
+ <scope>required</scope>
1874
+ <hashes>
1875
+ <hash alg="MD5">d9dd58c3f8a09f45e57d85e78993be6e</hash>
1876
+ <hash alg="SHA-1">1e75b08d7019546a954f1e359477f916f537a34d</hash>
1877
+ <hash alg="SHA-256">f60b33b38e9d7ac93eaaa68a6c70f706bb99036494b2e2add2bfee11d09ac6f5</hash>
1878
+ <hash alg="SHA-512">a36e1b9f52ef61963a7d80f3bc13d62d9a513576d031fa4bb244b6155565d53d54527ae8b3d281815c65712c5a6ad97cf8fa6b4a13e5ca43c5233f6c1858e710</hash>
1879
+ <hash alg="SHA-384">6a6c77987f726f7b2e152f85f8e1a0eb839bbf9dade8e86a245c92ee94a208f413d8eeba2cd1efe46c09daf4b1bff3be</hash>
1880
+ <hash alg="SHA3-384">040b6dd19d53fe1a06060f8257111696b074fae1c2b7353cd4c48d71abe3ea4a61777937a04ea1bc93509b3c00d729e6</hash>
1881
+ <hash alg="SHA3-256">f6ceb561f903f5d48b576ff82e52bb2b85017b57b7f5a0c6ccf25d31b5cfa33b</hash>
1882
+ <hash alg="SHA3-512">fe66606e7f77dcf5dc82f82943c0f168456e53fed79a296c4f961ec80b0b3f4e3c684713e5a62d83e8526e69f80058cc0fcf1929537befcd4fd59cb2ac2961c8</hash>
1883
+ </hashes>
1884
+ <licenses>
1885
+ <license>
1886
+ <id>MIT</id>
1887
+ </license>
1888
+ </licenses>
1889
+ <purl>pkg:maven/org.jsoup/jsoup@1.17.2?type=jar</purl>
1890
+ <externalReferences><reference type="website"><url>https://jsoup.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jhy/jsoup/issues</url></reference><reference type="vcs"><url>https://github.com/jhy/jsoup</url></reference></externalReferences>
1891
+ </component>
1892
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-java@7.1.0?type=jar">
1893
+ <publisher>PMD</publisher>
1894
+ <group>net.sourceforge.pmd</group>
1895
+ <name>pmd-java</name>
1896
+ <version>7.1.0</version>
1897
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1898
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1899
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1900
+ Rules can be written in Java or using a XPath query.
1901
+
1902
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1903
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1904
+ Scala is supported, but there are currently no Scala rules available.
1905
+
1906
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1907
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1908
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1909
+ <scope>required</scope>
1910
+ <hashes>
1911
+ <hash alg="MD5">19169eb49929260edc8ab3b163b6c907</hash>
1912
+ <hash alg="SHA-1">4b83fe36884b00ddfca22c9c7871f3145dc87785</hash>
1913
+ <hash alg="SHA-256">d0159698d6a4f3cb2a70107e7679e4992fb7776c410d70eaaae6ef4ebc06a025</hash>
1914
+ <hash alg="SHA-512">6efc046bfb4c10f5b73c14dd354480a7c6764847c753602ecce3cdb6bbf34bf323cf3fa33e230d9296126e4df2ddb81c0debf973a5b8537f08ad5ba2a7dd3c14</hash>
1915
+ <hash alg="SHA-384">4ed6900bb4d5c4eacc3fb10d335c8315053b3248afeb28ed1e9f22c55edf8600df6a905a8fc3fbe56ae3232fd237ae27</hash>
1916
+ <hash alg="SHA3-384">7a19b75c9026709a28fc687179daac820d15f085135af7afe6b08795a2662fa98554c720fd1734b6bab3d7e70a7cd556</hash>
1917
+ <hash alg="SHA3-256">9ba970452260828d6a8288121942698e3549c073979fcc7d73a6551e879ae425</hash>
1918
+ <hash alg="SHA3-512">c114e437134d1d4285d64f3d681b4223a3e9f962e7172f5a36f8596fc9455084640de54a180d9fd26c4ced7f8f45305d39caa50d5468f78dc2442ad8273f8003</hash>
1919
+ </hashes>
1920
+ <licenses>
1921
+ <license>
1922
+ <name>BSD-style</name>
1923
+ <url>http://pmd.sourceforge.net/license.html</url>
1924
+ </license>
1925
+ </licenses>
1926
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-java@7.1.0?type=jar</purl>
1927
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-java/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-java</url></reference></externalReferences>
1928
+ </component>
1929
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-javascript@7.1.0?type=jar">
1930
+ <publisher>PMD</publisher>
1931
+ <group>net.sourceforge.pmd</group>
1932
+ <name>pmd-javascript</name>
1933
+ <version>7.1.0</version>
1934
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
1935
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
1936
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
1937
+ Rules can be written in Java or using a XPath query.
1938
+
1939
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
1940
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
1941
+ Scala is supported, but there are currently no Scala rules available.
1942
+
1943
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
1944
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
1945
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
1946
+ <scope>required</scope>
1947
+ <hashes>
1948
+ <hash alg="MD5">30fcb18f711dede0f4cc256c0611b420</hash>
1949
+ <hash alg="SHA-1">a06221897e1f740f9979329db8d19542a8d7b212</hash>
1950
+ <hash alg="SHA-256">c9b3a72b22b9ab6138f307a15ee75516ff406a797aeb2c4402671023e1217440</hash>
1951
+ <hash alg="SHA-512">0a36b14c06b1ce46fc1fa14fc92b00fe53f8c52fc0753940a30106750a3ca77be89582495ff9f8d0b8bbefd8faac1b37d15c7b9a3a49f4c75e5b73975d703ab1</hash>
1952
+ <hash alg="SHA-384">66674fe51caeff5d446e68c5892bb7d207b71bcd6acab1078fb65025ed1d725deac8af1df8c8d211ca30bbf54b0a56ab</hash>
1953
+ <hash alg="SHA3-384">e931909712ede28284d4f906b0d84fd9543628116a3bd5bd80814769cd90156ae8a45ee4732b13367837599876396f99</hash>
1954
+ <hash alg="SHA3-256">d469b20c503c226adf2d762057dd9485226cb2fad8c5d05a30b53025409f8816</hash>
1955
+ <hash alg="SHA3-512">bed6df91f137d3b96870c836f0c7e39eb53a1ef9534db93d1bc2674b2043401ddb5cb4c4bf1d56d2358e12b88bd3b804946011da3af9375fd806fe7bc50e6fee</hash>
1956
+ </hashes>
1957
+ <licenses>
1958
+ <license>
1959
+ <name>BSD-style</name>
1960
+ <url>http://pmd.sourceforge.net/license.html</url>
1961
+ </license>
1962
+ </licenses>
1963
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-javascript@7.1.0?type=jar</purl>
1964
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-javascript/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-javascript</url></reference></externalReferences>
1965
+ </component>
1966
+ <component type="library" bom-ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar">
1967
+ <publisher>The Mozilla Foundation</publisher>
1968
+ <group>org.mozilla</group>
1969
+ <name>rhino</name>
1970
+ <version>1.7.14</version>
1971
+ <description>Rhino is an open-source implementation of JavaScript written entirely in Java.
1972
+ It is typically embedded into Java applications to provide scripting to end users.
1973
+ Full jar including tools, excluding the JSR-223 Script Engine wrapper.</description>
1974
+ <scope>required</scope>
1975
+ <hashes>
1976
+ <hash alg="MD5">447e2bfd28fc15ecc185944db37dc9d8</hash>
1977
+ <hash alg="SHA-1">24d091b80d513846293c00350f46d85f71797aff</hash>
1978
+ <hash alg="SHA-256">c9290b0d801bf0dbbbc44338e0f769b7650a0c5d04e6bb1aeb85775c0211b003</hash>
1979
+ <hash alg="SHA-512">eed999e2b4e8dead5715818a11c8e9e978e1b073412688c8a7b0715b66e4a2c1ddd892d31ee253ca22b0b372e56dc9035c4a41ac7aa2ee4771cc10dfcf9bc356</hash>
1980
+ <hash alg="SHA-384">b136589e2815971618e8ecb605ec2b23c585f8762e732db0ff186074ebf86312ddd0416ae9c431f83992fd394cb2e17e</hash>
1981
+ <hash alg="SHA3-384">e08a6e4d760b19349df95f028d3a017f95ff65540386aa2eac7678f744e6dcb634e493f42071fd9239f56a2eb5c75ceb</hash>
1982
+ <hash alg="SHA3-256">8ce0b7ee8b928af9631d241ba1e8236fdf8953bb51aeb3e0d7579e15b3a72263</hash>
1983
+ <hash alg="SHA3-512">096eaca5baa53533e1df0d22e4fed4de928189199a9ae05d49fab2e2c6af59c2f4b6e57e34281383e0ca5869cd4f8c555b8e7f297f7735c9ce9a55f5d79e6950</hash>
1984
+ </hashes>
1985
+ <licenses>
1986
+ <license>
1987
+ <name>Mozilla Public License, Version 2.0</name>
1988
+ <url>http://www.mozilla.org/MPL/2.0/index.txt</url>
1989
+ </license>
1990
+ </licenses>
1991
+ <purl>pkg:maven/org.mozilla/rhino@1.7.14?type=jar</purl>
1992
+ <externalReferences><reference type="website"><url>https://mozilla.github.io/rhino/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
1993
+ </component>
1994
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-jsp@7.1.0?type=jar">
1995
+ <publisher>PMD</publisher>
1996
+ <group>net.sourceforge.pmd</group>
1997
+ <name>pmd-jsp</name>
1998
+ <version>7.1.0</version>
1999
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2000
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2001
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2002
+ Rules can be written in Java or using a XPath query.
2003
+
2004
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2005
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2006
+ Scala is supported, but there are currently no Scala rules available.
2007
+
2008
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2009
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2010
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2011
+ <scope>required</scope>
2012
+ <hashes>
2013
+ <hash alg="MD5">847d6f037a84681fd3ec4bd4872125be</hash>
2014
+ <hash alg="SHA-1">f360608a1086ccf9fb793ba6423e89d271bdc777</hash>
2015
+ <hash alg="SHA-256">5a009a66c4695d9f7edd9a653ee7899a1a57c762c0e2347cae303936f28a8cd6</hash>
2016
+ <hash alg="SHA-512">c479f01f748f7e54fa7cc2c8f4cbd0b71ff2e425120c6154a3ee3c3b4891e82ce70022e514be395be56eb0c6a4e73f812dec6192564814235ef3b125018002ba</hash>
2017
+ <hash alg="SHA-384">8c5e0e5872021961d9692606130955e3f7293ea4dc116ecb31c58e620895a0791a5cdf0ee42b674aebb0fd68f363067a</hash>
2018
+ <hash alg="SHA3-384">947782ff3c762407cd6b762f7479fb1b8122c67f725fe13ba960280a308f3429f423970c8e903d0d6ae7fd08f186d5a2</hash>
2019
+ <hash alg="SHA3-256">91919f95c7ddce5f6d3c1a4e67b3ec6ffc059ded1e30ae35105ab93a81af1a4a</hash>
2020
+ <hash alg="SHA3-512">00e61cb86352fbc3850b69e0c277288926e71efb545fdbe82b418c68192c0ae4ff476b87218777d9062802a6858db1c0a406236945bf0a20c4c38dc1ee92170d</hash>
2021
+ </hashes>
2022
+ <licenses>
2023
+ <license>
2024
+ <name>BSD-style</name>
2025
+ <url>http://pmd.sourceforge.net/license.html</url>
2026
+ </license>
2027
+ </licenses>
2028
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-jsp@7.1.0?type=jar</purl>
2029
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-jsp/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-jsp</url></reference></externalReferences>
2030
+ </component>
2031
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-julia@7.1.0?type=jar">
2032
+ <publisher>PMD</publisher>
2033
+ <group>net.sourceforge.pmd</group>
2034
+ <name>pmd-julia</name>
2035
+ <version>7.1.0</version>
2036
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2037
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2038
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2039
+ Rules can be written in Java or using a XPath query.
2040
+
2041
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2042
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2043
+ Scala is supported, but there are currently no Scala rules available.
2044
+
2045
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2046
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2047
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2048
+ <scope>required</scope>
2049
+ <hashes>
2050
+ <hash alg="MD5">f541af10e5aac44f098fa205e4519c02</hash>
2051
+ <hash alg="SHA-1">749f7d843c54402dbba41596853200391778495a</hash>
2052
+ <hash alg="SHA-256">a499cb7dbc9022c3b56ee8bfef2c83bcf4bf569ba9594dfe6592846eb9af097f</hash>
2053
+ <hash alg="SHA-512">afe0dc860c8599f4a7b69975c233d12cac20e95e5fe9d73c1f8435bffff37ea5588591add4c21534ef815e41cbaf2a83a29a7ee49674696167b78e815f28ea1a</hash>
2054
+ <hash alg="SHA-384">fb068a864b7930707570401420b39a0a5c4a3112a9a92487bd30024239a9b3888c13241741519497262289cecdd311f4</hash>
2055
+ <hash alg="SHA3-384">1e8232976c53e1dbcf0aa960793353828e3e4c1ad0bb65d66fb88d8f16b9d2cac3c34b86e2de97177f19e4d743747c6d</hash>
2056
+ <hash alg="SHA3-256">8928812fb2cb90162fe100b57c471cd5280aea789b420e086150f531d54cf210</hash>
2057
+ <hash alg="SHA3-512">eef67a7059681b326e55e6f2a0065716484454345a4a409772d68c979921fd8a66ec65bba7ed520dfa40a9d1513b4db6703f6f288b2fca7b3093e67b7677a945</hash>
2058
+ </hashes>
2059
+ <licenses>
2060
+ <license>
2061
+ <name>BSD-style</name>
2062
+ <url>http://pmd.sourceforge.net/license.html</url>
2063
+ </license>
2064
+ </licenses>
2065
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-julia@7.1.0?type=jar</purl>
2066
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-julia/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-julia</url></reference></externalReferences>
2067
+ </component>
2068
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.1.0?type=jar">
2069
+ <publisher>PMD</publisher>
2070
+ <group>net.sourceforge.pmd</group>
2071
+ <name>pmd-kotlin</name>
2072
+ <version>7.1.0</version>
2073
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2074
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2075
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2076
+ Rules can be written in Java or using a XPath query.
2077
+
2078
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2079
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2080
+ Scala is supported, but there are currently no Scala rules available.
2081
+
2082
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2083
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2084
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2085
+ <scope>required</scope>
2086
+ <hashes>
2087
+ <hash alg="MD5">35633149e7bfcf67dbfd86b6115c8474</hash>
2088
+ <hash alg="SHA-1">e76d0248747f501c7cac88ba5fb9c0293d3a72d8</hash>
2089
+ <hash alg="SHA-256">d483c281aecfe731b59e1ddd8b745709e31eb51a468ae7d37a1e6370cd97169c</hash>
2090
+ <hash alg="SHA-512">3c4000393cb5f992a5b61dd5f26633b57cde56b06b577f2a10687d3c1ada8a6cc41ea9cb06c751822a1ebd7923cdb361fc9bb7fa8e0642f05ac0aefee0f5be61</hash>
2091
+ <hash alg="SHA-384">83928dbbe37a7c4a16161f6a349b6fe12d93e2792f0085d3a2668c1228f9a3a8ef9829a01db180451d159c60cfd33b1f</hash>
2092
+ <hash alg="SHA3-384">76f7bfcd2912102182c5d3f996c12db9df037db8b717c3e5690912daec8f160545ba06515cdd7df0e89732565f6dced5</hash>
2093
+ <hash alg="SHA3-256">4ee4ba63563acb8b6f72e4265da5451ec62d0dc6dbc0befb381f74de470d237a</hash>
2094
+ <hash alg="SHA3-512">77b960a0ab2f83762120037c8823b426ffebe001f2f641468c7e49e2f2abe413cf205183f4dee59ebf4ad225652eadfaf92a00c75e6b29fa0115018f2756bd37</hash>
2095
+ </hashes>
2096
+ <licenses>
2097
+ <license>
2098
+ <name>BSD-style</name>
2099
+ <url>http://pmd.sourceforge.net/license.html</url>
2100
+ </license>
2101
+ </licenses>
2102
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.1.0?type=jar</purl>
2103
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-kotlin/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-kotlin</url></reference></externalReferences>
2104
+ </component>
2105
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-lua@7.1.0?type=jar">
2106
+ <publisher>PMD</publisher>
2107
+ <group>net.sourceforge.pmd</group>
2108
+ <name>pmd-lua</name>
2109
+ <version>7.1.0</version>
2110
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2111
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2112
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2113
+ Rules can be written in Java or using a XPath query.
2114
+
2115
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2116
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2117
+ Scala is supported, but there are currently no Scala rules available.
2118
+
2119
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2120
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2121
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2122
+ <scope>required</scope>
2123
+ <hashes>
2124
+ <hash alg="MD5">779be477ab2036be706fe1e1732df835</hash>
2125
+ <hash alg="SHA-1">fe764b3883a36793a8323dba703608293d26d4e1</hash>
2126
+ <hash alg="SHA-256">b2ec9f115f5c8f1f782f5fb481aea1aec3765583c24b3ac8a999e1efe655b2de</hash>
2127
+ <hash alg="SHA-512">99b4fb44676a590aa1ffc55fa9a4e51deee7716a8ee7a42edb85a77cad6fda92feccaf8c9cb4f6232111afa7d6f623d55df1c423770e47e30daff6f15a22f45f</hash>
2128
+ <hash alg="SHA-384">42b1832f4d2d59aaf525dab610ef88394f9688f432e0cb78408f84775bc7f89b2d539325b723d22efef947818d4efe92</hash>
2129
+ <hash alg="SHA3-384">c6fa84033bd4576efde0ccc8cfc42b62d922050c6a37dd67299e9ce9a2fb93ef9374265de15dcfb3d5389859aff297d6</hash>
2130
+ <hash alg="SHA3-256">0d2f8b5a6b516f8e2d66fe73011fba5f011efd4af1891df85059473d8450482c</hash>
2131
+ <hash alg="SHA3-512">e1444ad163d973c4f2d5de93f1c80d09b622f11b19586e038e5cb95923542f98d79dfc536495b047e677fd29b2b80e2e6bebf4976c12352ab9ea55303f880696</hash>
2132
+ </hashes>
2133
+ <licenses>
2134
+ <license>
2135
+ <name>BSD-style</name>
2136
+ <url>http://pmd.sourceforge.net/license.html</url>
2137
+ </license>
2138
+ </licenses>
2139
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-lua@7.1.0?type=jar</purl>
2140
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-lua/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-lua</url></reference></externalReferences>
2141
+ </component>
2142
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-matlab@7.1.0?type=jar">
2143
+ <publisher>PMD</publisher>
2144
+ <group>net.sourceforge.pmd</group>
2145
+ <name>pmd-matlab</name>
2146
+ <version>7.1.0</version>
2147
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2148
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2149
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2150
+ Rules can be written in Java or using a XPath query.
2151
+
2152
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2153
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2154
+ Scala is supported, but there are currently no Scala rules available.
2155
+
2156
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2157
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2158
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2159
+ <scope>required</scope>
2160
+ <hashes>
2161
+ <hash alg="MD5">f4a0dea4860f1a9383db1599cc17f979</hash>
2162
+ <hash alg="SHA-1">b35d48a04a6e4f03ab77280859e56c836ca63474</hash>
2163
+ <hash alg="SHA-256">eae107fb111203b3da3ed4db6005d8676eb088efde923cd2cbd65424b8c41274</hash>
2164
+ <hash alg="SHA-512">7cd9e1cff95c831b2e92f3aa1f38cc17582e6dcbc980e54f0b23d57419a429e656c527344cd481d669f0d674418dcb066e5ddd3953110a8e85f13f2ea4838771</hash>
2165
+ <hash alg="SHA-384">659e4a821d34bbd361a0e6868fea6d6f8eb8310a302e473d60a4b5826817fcf9bbf750d0f9520a8899671fada7d838e3</hash>
2166
+ <hash alg="SHA3-384">b70f20eebb5012ee265d1a03a2e4d000567b3b954ffc45c1c361c3250469284cedffc7fc47e66f178c5835e1f39b3ac3</hash>
2167
+ <hash alg="SHA3-256">a50b8685da7889ca91bd4fb1ea68e4493fe53f26acf8600a812820aae52f7c78</hash>
2168
+ <hash alg="SHA3-512">6ebdec12782a40ccdc14a21447373ce07e4ad6451ab2491726998f0707cd61a081b839df20c05d13f751bebf1a5faf3a64c808866d5f985904d1586a02099b34</hash>
2169
+ </hashes>
2170
+ <licenses>
2171
+ <license>
2172
+ <name>BSD-style</name>
2173
+ <url>http://pmd.sourceforge.net/license.html</url>
2174
+ </license>
2175
+ </licenses>
2176
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-matlab@7.1.0?type=jar</purl>
2177
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-matlab/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-matlab</url></reference></externalReferences>
2178
+ </component>
2179
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-modelica@7.1.0?type=jar">
2180
+ <publisher>PMD</publisher>
2181
+ <group>net.sourceforge.pmd</group>
2182
+ <name>pmd-modelica</name>
2183
+ <version>7.1.0</version>
2184
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2185
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2186
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2187
+ Rules can be written in Java or using a XPath query.
2188
+
2189
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2190
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2191
+ Scala is supported, but there are currently no Scala rules available.
2192
+
2193
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2194
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2195
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2196
+ <scope>required</scope>
2197
+ <hashes>
2198
+ <hash alg="MD5">f211764d2ccc1c21902612e6cf2c8fb6</hash>
2199
+ <hash alg="SHA-1">05305ea268b1739559507fd3f7f93bacd675ced8</hash>
2200
+ <hash alg="SHA-256">5e869eab86a5cace9cf7d81938883f95dbe1cceaccaf5009d72687e3e1e8c5cf</hash>
2201
+ <hash alg="SHA-512">3bcd515f20346b742b93241fb7e6135fd1fbc33abc2592aaf2d85fae6f26bf86501d1048c11f0a391c0327a7cff47bec5ca03dff6be4f153208e4b30e24e455a</hash>
2202
+ <hash alg="SHA-384">393891525a04ee5bf15bcee1d75c5b5d95d7ef56924a3e92ae54e743d6a997ad11d2f362372677282b0ea510089fbd0f</hash>
2203
+ <hash alg="SHA3-384">b268e5c9ee2bb199e7b4f0534ebf00227b119fc3fbb8caae3049b28d183919fd50f0a8b88498e1079fe0f935823b8256</hash>
2204
+ <hash alg="SHA3-256">e256dba9a6802473610afd63c9be4b271587ebd9a97f8233cc73c06af5d45ffb</hash>
2205
+ <hash alg="SHA3-512">4ff03907dadc6a41181f145543196c5c17318163344e8f2bc066acb53334933056a9d4c87233c9efc647562dded80fc0cd601975eaf935840417c34bdb5e05ca</hash>
2206
+ </hashes>
2207
+ <licenses>
2208
+ <license>
2209
+ <name>BSD-style</name>
2210
+ <url>http://pmd.sourceforge.net/license.html</url>
2211
+ </license>
2212
+ </licenses>
2213
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-modelica@7.1.0?type=jar</purl>
2214
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-modelica/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-modelica</url></reference></externalReferences>
2215
+ </component>
2216
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.1.0?type=jar">
2217
+ <publisher>PMD</publisher>
2218
+ <group>net.sourceforge.pmd</group>
2219
+ <name>pmd-objectivec</name>
2220
+ <version>7.1.0</version>
2221
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2222
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2223
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2224
+ Rules can be written in Java or using a XPath query.
2225
+
2226
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2227
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2228
+ Scala is supported, but there are currently no Scala rules available.
2229
+
2230
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2231
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2232
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2233
+ <scope>required</scope>
2234
+ <hashes>
2235
+ <hash alg="MD5">d52c070553fe95fb6f8625feed4e102e</hash>
2236
+ <hash alg="SHA-1">0410a347469fdcd3c155472f10e0a6f46bb10b3a</hash>
2237
+ <hash alg="SHA-256">06d0ac15b4cc6788c6e1823afd3c9e09c802b1fa84aef29e5d2e688673b03b27</hash>
2238
+ <hash alg="SHA-512">8554a8186846ab16da7e54740f015fc277deb23d6833116413e89d082b8ffcb6c384b4f164e912b8031f91fbc96585763035662bae7fb45a8e667c76619c2bb0</hash>
2239
+ <hash alg="SHA-384">f53131904eed0693460266993b7e9fda0485317293c5f58cb2054c81b82c9c719a9076d9c69e72f7044292ecaac24d66</hash>
2240
+ <hash alg="SHA3-384">d809ba0d2fbd8391a32990ae4027846363e40a58d2f83ca351ff8eb2baa3c59dac3d0067112149fd878a86dda830f179</hash>
2241
+ <hash alg="SHA3-256">2fc92e4b8cba5ff4c8852c27cd72f72ba2e68fb7216736fdfc4cc7e38aeb4415</hash>
2242
+ <hash alg="SHA3-512">422221092110dfdb600e1bbfbe53b2d3f8e7fe68221fa25b9dcb23d412475f7bce61a38e5c2374279a0846f400649894aab1e09add8352f2912911b4a68faccf</hash>
2243
+ </hashes>
2244
+ <licenses>
2245
+ <license>
2246
+ <name>BSD-style</name>
2247
+ <url>http://pmd.sourceforge.net/license.html</url>
2248
+ </license>
2249
+ </licenses>
2250
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.1.0?type=jar</purl>
2251
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-objectivec/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-objectivec</url></reference></externalReferences>
2252
+ </component>
2253
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-perl@7.1.0?type=jar">
2254
+ <publisher>PMD</publisher>
2255
+ <group>net.sourceforge.pmd</group>
2256
+ <name>pmd-perl</name>
2257
+ <version>7.1.0</version>
2258
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2259
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2260
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2261
+ Rules can be written in Java or using a XPath query.
2262
+
2263
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2264
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2265
+ Scala is supported, but there are currently no Scala rules available.
2266
+
2267
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2268
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2269
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2270
+ <scope>required</scope>
2271
+ <hashes>
2272
+ <hash alg="MD5">bddb53fbb610bb149f4b44bd01a94881</hash>
2273
+ <hash alg="SHA-1">7967f4f6968b440e5c373d5b71324315c555ac4c</hash>
2274
+ <hash alg="SHA-256">91db65c0111ba5bdd17968c9c76d1141f82c81d7c9c0fb37121c7c72c6023bda</hash>
2275
+ <hash alg="SHA-512">43c730e4c58932a853cd19b831799ca07cd67de78d1d2b67af57a783e2e3f13b5b3e408cab938ce43a3366617fd2e81e58fd36c57f9b1cf24efcfd6fbb867ba1</hash>
2276
+ <hash alg="SHA-384">00768425a75fd81a52d7cd3cf6c25b656ae7dfc6d72a16d37a31f374b856a9cca6c44d4bdba2259549edd3052a7405a9</hash>
2277
+ <hash alg="SHA3-384">6107eaf014666cd60f4c4ea3c40079a06cd0331e0096da1ae10e8e65587c916e17248995178db89274b04b8946d0bf70</hash>
2278
+ <hash alg="SHA3-256">40a1bcd3dc96b1cbcf0aba6c784dd7000dfb9b19cd6039c68cf2fcfdc931f13f</hash>
2279
+ <hash alg="SHA3-512">a07b21fcea2215e2778962ce0016373fce159cd243840c88ed8413193a5a31d6a62490586c4d7e81e55037fbe39f1819596de356e102acd21e03674628362862</hash>
2280
+ </hashes>
2281
+ <licenses>
2282
+ <license>
2283
+ <name>BSD-style</name>
2284
+ <url>http://pmd.sourceforge.net/license.html</url>
2285
+ </license>
2286
+ </licenses>
2287
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-perl@7.1.0?type=jar</purl>
2288
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-perl/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-perl</url></reference></externalReferences>
2289
+ </component>
2290
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-php@7.1.0?type=jar">
2291
+ <publisher>PMD</publisher>
2292
+ <group>net.sourceforge.pmd</group>
2293
+ <name>pmd-php</name>
2294
+ <version>7.1.0</version>
2295
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2296
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2297
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2298
+ Rules can be written in Java or using a XPath query.
2299
+
2300
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2301
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2302
+ Scala is supported, but there are currently no Scala rules available.
2303
+
2304
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2305
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2306
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2307
+ <scope>required</scope>
2308
+ <hashes>
2309
+ <hash alg="MD5">e080c08046c3f7ecabf8e7fa7992aa7a</hash>
2310
+ <hash alg="SHA-1">0954a57b93b89bb28679c074b37fb55653b8c3c4</hash>
2311
+ <hash alg="SHA-256">48aa1fff3cad609de57c13a3f3a6e11227e6fa6d29e20779027226f492df72fe</hash>
2312
+ <hash alg="SHA-512">0d4f9c03f12783d98f9651fbcc7e7b5d93607069974394ae11333c6a9ce085611caf5225781700849e560afaf69936afaf1a72e8738f038162b82d1ac1467286</hash>
2313
+ <hash alg="SHA-384">f81c893ce5286574a708d0f5d9988743c73758266a474692c97e7ef4061e100ff7486b6f18111f4afc791bbb9c5519b9</hash>
2314
+ <hash alg="SHA3-384">0b3dece96834156d44483464c19a9d9ef6a14371ffa4662d63285518d3c89c6e91a70d1cf72cc1e26b0f8cc723deb0ba</hash>
2315
+ <hash alg="SHA3-256">11395030e27eb614c7b9243a40baca3ca3d7142a1df197e6f4aa16f827431224</hash>
2316
+ <hash alg="SHA3-512">0568612287ca791eb26b2f21a102b44df0fe2ac3237cf613005c82695072b32c59de8d96667e5504cc23f34f3be8aef518d79c347afcf11c6c284c620711a73d</hash>
2317
+ </hashes>
2318
+ <licenses>
2319
+ <license>
2320
+ <name>BSD-style</name>
2321
+ <url>http://pmd.sourceforge.net/license.html</url>
2322
+ </license>
2323
+ </licenses>
2324
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-php@7.1.0?type=jar</purl>
2325
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-php/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-php</url></reference></externalReferences>
2326
+ </component>
2327
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-plsql@7.1.0?type=jar">
2328
+ <publisher>PMD</publisher>
2329
+ <group>net.sourceforge.pmd</group>
2330
+ <name>pmd-plsql</name>
2331
+ <version>7.1.0</version>
2332
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2333
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2334
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2335
+ Rules can be written in Java or using a XPath query.
2336
+
2337
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2338
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2339
+ Scala is supported, but there are currently no Scala rules available.
2340
+
2341
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2342
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2343
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2344
+ <scope>required</scope>
2345
+ <hashes>
2346
+ <hash alg="MD5">9145f721944b7e9a722e12f6e724290f</hash>
2347
+ <hash alg="SHA-1">67e82955a8cca875ebe2909075805a4d5e40bb78</hash>
2348
+ <hash alg="SHA-256">288f6e0cd51000bd6bf972b238adde4695275fe61fbd8db50278ca3c3ced48d7</hash>
2349
+ <hash alg="SHA-512">16a29064ecf1a419004508c5f3497154cd5e98c4aea4c30f2b87edec473a6289bd30253cc7412bb433d86327f1cd96a56b89297cdc9b49468b855101bc6468d4</hash>
2350
+ <hash alg="SHA-384">0043bcaffa265c28cc7d3e707f9fe8ef16baf62f22782547c14e393ac21a6edaa8a9a2b452bcddfe44c37fec0d86d24d</hash>
2351
+ <hash alg="SHA3-384">9ff424823c4329b9914c83289546b7d5ec363625ba1209d4c4f80ad9de13490f005e42fbdb6e3bddf4dc8b715391d4ee</hash>
2352
+ <hash alg="SHA3-256">eb1427e8eacd3a11a3727cec676fc8d711aa9e32572c343eee96b1e0fed465f8</hash>
2353
+ <hash alg="SHA3-512">da6c5a3ef543e6a959c72437db042f1e42ccd4c93674d368a893cedb4c2202f7a5c190668cb249f1825295aba773e3be31b155304df55f1d32c4ff7b590f8597</hash>
2354
+ </hashes>
2355
+ <licenses>
2356
+ <license>
2357
+ <name>BSD-style</name>
2358
+ <url>http://pmd.sourceforge.net/license.html</url>
2359
+ </license>
2360
+ </licenses>
2361
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-plsql@7.1.0?type=jar</purl>
2362
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-plsql/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-plsql</url></reference></externalReferences>
2363
+ </component>
2364
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-python@7.1.0?type=jar">
2365
+ <publisher>PMD</publisher>
2366
+ <group>net.sourceforge.pmd</group>
2367
+ <name>pmd-python</name>
2368
+ <version>7.1.0</version>
2369
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2370
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2371
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2372
+ Rules can be written in Java or using a XPath query.
2373
+
2374
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2375
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2376
+ Scala is supported, but there are currently no Scala rules available.
2377
+
2378
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2379
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2380
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2381
+ <scope>required</scope>
2382
+ <hashes>
2383
+ <hash alg="MD5">87ae129157fc6f5ef905615681fe72eb</hash>
2384
+ <hash alg="SHA-1">8f29b739615d36b6903d147b3400f02371ea0180</hash>
2385
+ <hash alg="SHA-256">5a5337c9a2a65df164da83f465e62e6f37550c943473d60b5cc6d24742bc987e</hash>
2386
+ <hash alg="SHA-512">cf0e0785c6acdba7db5bc9100104ac3030aa89768c947b25c1e458516607a54d3ac2bc256c314180e8976d4f3be1b72d53c350989a334181d601162387ede199</hash>
2387
+ <hash alg="SHA-384">fab3e2f178de1179e1e47606abeea880ed063e16204135c0d553718426316c9bb554ef9c30b5612b2798d4452e44e418</hash>
2388
+ <hash alg="SHA3-384">8e439c33ada153c9c5fdac2f7661b56a3733a503a16d1e936623c704fe07070b52f8bcf5ea09d274da369175c7b94408</hash>
2389
+ <hash alg="SHA3-256">1667e31abdad21fb8a41cbf8d00c170cc953d954909306929232d3983180e3e2</hash>
2390
+ <hash alg="SHA3-512">ddc2215a20b4d87bbd59557ce5adaee095967d0a8b569f963272fd6d7805b83c459395126e8d0c4921b47e1f1370fb4442c5b34eb6917c6ceb9cb532817b4993</hash>
2391
+ </hashes>
2392
+ <licenses>
2393
+ <license>
2394
+ <name>BSD-style</name>
2395
+ <url>http://pmd.sourceforge.net/license.html</url>
2396
+ </license>
2397
+ </licenses>
2398
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-python@7.1.0?type=jar</purl>
2399
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-python/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-python</url></reference></externalReferences>
2400
+ </component>
2401
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-ruby@7.1.0?type=jar">
2402
+ <publisher>PMD</publisher>
2403
+ <group>net.sourceforge.pmd</group>
2404
+ <name>pmd-ruby</name>
2405
+ <version>7.1.0</version>
2406
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2407
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2408
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2409
+ Rules can be written in Java or using a XPath query.
2410
+
2411
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2412
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2413
+ Scala is supported, but there are currently no Scala rules available.
2414
+
2415
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2416
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2417
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2418
+ <scope>required</scope>
2419
+ <hashes>
2420
+ <hash alg="MD5">a4a203395592daf76723dd64a08fa579</hash>
2421
+ <hash alg="SHA-1">c610e823c89796dca8419bc577d3840e479a79b3</hash>
2422
+ <hash alg="SHA-256">2fabb45f24102011d5e1b48354a34a0ed12ca035ca9f3352292d4b00628719ac</hash>
2423
+ <hash alg="SHA-512">921af37fd708226ae2db8fcd1a261c757e40ba71e444f3dad9bce46f85a0bade7ca0267f623b090252aeff9add29066661e017190fe62cd16fe2cb17e2a67d83</hash>
2424
+ <hash alg="SHA-384">dce923bc95da9f3fb50fd6f3dc6290df6af745e038e3b6f005e9580c1dfd0af2ed00ce6858c8c84df252f72c8f6a0d22</hash>
2425
+ <hash alg="SHA3-384">ddc5839bd882c3088ecdc426d87346f983d9621c4608ebd64d565fed99fa2fc5a9bc9bcec4cef66714a98fdc5c9487e6</hash>
2426
+ <hash alg="SHA3-256">07a4dc3827305e577b51b52daf154b887a62fe84f578ecbef6f8cdfe8e3f1ab5</hash>
2427
+ <hash alg="SHA3-512">35f988fdcfb5c4f791e5294998aae7be1a541f2565a7764cadaa436faf3ef9605f3ffd58ac096ca72bb083af16e1d792b4a0a26cae240ae054d295bdb848bb09</hash>
2428
+ </hashes>
2429
+ <licenses>
2430
+ <license>
2431
+ <name>BSD-style</name>
2432
+ <url>http://pmd.sourceforge.net/license.html</url>
2433
+ </license>
2434
+ </licenses>
2435
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-ruby@7.1.0?type=jar</purl>
2436
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-ruby/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-ruby</url></reference></externalReferences>
2437
+ </component>
2438
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.1.0?type=jar">
2439
+ <publisher>PMD</publisher>
2440
+ <group>net.sourceforge.pmd</group>
2441
+ <name>pmd-scala_2.13</name>
2442
+ <version>7.1.0</version>
2443
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2444
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2445
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2446
+ Rules can be written in Java or using a XPath query.
2447
+
2448
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2449
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2450
+ Scala is supported, but there are currently no Scala rules available.
2451
+
2452
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2453
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2454
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2455
+ <scope>required</scope>
2456
+ <hashes>
2457
+ <hash alg="MD5">82d53b04c20ece43ef6ee12082b6c164</hash>
2458
+ <hash alg="SHA-1">45ec1d237fc21b519e20a2adee1c7a381cf414f3</hash>
2459
+ <hash alg="SHA-256">322e5d9b899d4bfe534e03853a5c03e7dfe12fb48f03f8c4ffb7e10c2856499a</hash>
2460
+ <hash alg="SHA-512">ca78575223671578f7dc95df07448256b8b1688d7ebc029afd191487de7dd70147f4ecc780a04f175d5b3c0c32290eaaedfb5bf906a8c267895c991f83307228</hash>
2461
+ <hash alg="SHA-384">4b86e8fae892dca86fbd239225974dbfe34cfc24cf8b61983e7e44d4004add6d1a125adeb82ee5f9448676d2f586fe03</hash>
2462
+ <hash alg="SHA3-384">a8ff51b0cb4bec08b7ed218c7138754254f12de5a5e96265e3a9c123f8cb67957f739d32758fcf2c8243f45f1ff8c74f</hash>
2463
+ <hash alg="SHA3-256">11ebce971f6ac2a317766485758b6f8191bfd62838ca4d7af579fdb26b8db269</hash>
2464
+ <hash alg="SHA3-512">2732698f4b01acad246cb2b5b4811265fc2e19e5c86fa5feed36be9d3c0a9fbae9da32ac22580945614d5cea0a45261b9835ef3616524a29d551054843253709</hash>
2465
+ </hashes>
2466
+ <licenses>
2467
+ <license>
2468
+ <name>BSD-style</name>
2469
+ <url>http://pmd.sourceforge.net/license.html</url>
2470
+ </license>
2471
+ </licenses>
2472
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.1.0?type=jar</purl>
2473
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-scala-modules/pmd-scala-common/pmd-scala_2.13/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-scala-modules/pmd-scala-common/pmd-scala_2.13</url></reference></externalReferences>
2474
+ </component>
2475
+ <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar">
2476
+ <publisher>LAMP/EPFL</publisher>
2477
+ <group>org.scala-lang</group>
2478
+ <name>scala-library</name>
2479
+ <version>2.13.13</version>
2480
+ <description>Standard library for the Scala Programming Language</description>
2481
+ <scope>required</scope>
2482
+ <hashes>
2483
+ <hash alg="MD5">0bc6519134e1851efd2816c776b9f775</hash>
2484
+ <hash alg="SHA-1">3b1434403ddb147b8030f98f246153e4ce622c78</hash>
2485
+ <hash alg="SHA-256">b58b223f9b59f88d04c9dc9ec26f4b463e93e6f296de5663dbd710a7dfce2743</hash>
2486
+ <hash alg="SHA-512">d1f282134c800e372e253c3b8a0361339ff0e30e9fdda9baea4af3829c149604287c2c9a1d552a92f77fc88090e386477e69dd02ee306d3c29906892fbe96aad</hash>
2487
+ <hash alg="SHA-384">577fa9bd85b00b5cda5c53a2feec5f9792839fbe999eeebfeda702102f4b66ff4a6e0113996effe947c9d76c5c76c464</hash>
2488
+ <hash alg="SHA3-384">4073268d2828ba9357c836f2cfcfefcc4b99e4d8c02e2494f5e3c9986690a14ddaed1a8d27903bf321b36fc7a1c4f668</hash>
2489
+ <hash alg="SHA3-256">7a9e53c2cef79aa8e44187d092021bddc604c2038d1ce8a6a90e8aa2a24e2e0c</hash>
2490
+ <hash alg="SHA3-512">30093db350f511a5e9116de72211a17dd2277fcebf2e1c31073440094e0d0bbf70909af9b17c8078720063df63d7a863c2650a85619c21885c111a62e97dd3b6</hash>
2491
+ </hashes>
2492
+ <licenses>
2493
+ <license>
2494
+ <id>Apache-2.0</id>
2495
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
2496
+ </license>
2497
+ </licenses>
2498
+ <purl>pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar</purl>
2499
+ <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
2500
+ </component>
2501
+ <component type="library" bom-ref="pkg:maven/org.scalameta/parsers_2.13@4.9.1?type=jar">
2502
+ <publisher>org.scalameta</publisher>
2503
+ <group>org.scalameta</group>
2504
+ <name>parsers_2.13</name>
2505
+ <version>4.9.1</version>
2506
+ <description>Scalameta APIs for parsing and their baseline implementation</description>
2507
+ <scope>required</scope>
2508
+ <hashes>
2509
+ <hash alg="MD5">11586fd4eccfbce24418f93b0658976f</hash>
2510
+ <hash alg="SHA-1">d4d6cb413b870a88e93a5cdb99373ac1ac14121c</hash>
2511
+ <hash alg="SHA-256">9240ab9c384572e1aa9cecef91b5a1276498a63b1d0794db7da72615aa0b44de</hash>
2512
+ <hash alg="SHA-512">3dba91923fc9968849902be7f10069f3721a9a36a9fe234e1f9cb8404975e9d27a8ecc9f5f0d9e0932c87ab09ebdbc8203198b2af6af7972c0c20e52cb48823a</hash>
2513
+ <hash alg="SHA-384">c4c515de696515de64cf9434241f2adead4710ad50ed45b10860759bd5e068aaef6dded0b5bdc9a58c8081f212776a62</hash>
2514
+ <hash alg="SHA3-384">4c3a6ca3a63cf9c0bfaf4330ae931cff016bf5bde730347dfafc1793c1c026ba8f7de10bba0c744cb77e00ed30e22c6d</hash>
2515
+ <hash alg="SHA3-256">4e4b007b0d415c6821e7827d8f88e596aa47e4a4d86c94e2ff69bb306d323a70</hash>
2516
+ <hash alg="SHA3-512">c7302c11c6e6403b846d497eeb56e77396d2c0056318e35449af8e075c3031ab63e4c271af111e7ba6bb4459ebadedc44fe112c06cf0e17aaa813b5823b79ffe</hash>
2517
+ </hashes>
2518
+ <licenses>
2519
+ <license>
2520
+ <id>BSD-4-Clause</id>
2521
+ </license>
2522
+ </licenses>
2523
+ <purl>pkg:maven/org.scalameta/parsers_2.13@4.9.1?type=jar</purl>
2524
+ <externalReferences><reference type="website"><url>https://github.com/scalameta/scalameta</url></reference><reference type="issue-tracker"><url>https://github.com/scalameta/scalameta/issues</url></reference><reference type="vcs"><url>https://github.com/scalameta/scalameta</url></reference></externalReferences>
2525
+ </component>
2526
+ <component type="library" bom-ref="pkg:maven/org.scalameta/trees_2.13@4.9.1?type=jar">
2527
+ <publisher>org.scalameta</publisher>
2528
+ <group>org.scalameta</group>
2529
+ <name>trees_2.13</name>
2530
+ <version>4.9.1</version>
2531
+ <description>Scalameta abstract syntax trees</description>
2532
+ <scope>required</scope>
2533
+ <hashes>
2534
+ <hash alg="MD5">8d4b5bb7d67317c47248cfeda2a61669</hash>
2535
+ <hash alg="SHA-1">d4fc3ffa2a74b1b37b4c70cc21bde2b4ba67f771</hash>
2536
+ <hash alg="SHA-256">d3a86bd56296d39fdf915c5f07629f60261852bd8127e11bef800e3b0c9d3e9e</hash>
2537
+ <hash alg="SHA-512">b63f1ef4ebd0128f464cbe63df4e2b5e06bfec47ef57110c89c1ccdd8b790de39a9845aa077b8f4d0b01eeb0473af4a941eb331fd8e76180204c4b173762b68b</hash>
2538
+ <hash alg="SHA-384">4993968b66ecc1dc1c1eadf8a957fc57c7e940c6812774a15d075ec32f0d017094cd34c8e1541f3942f7204c0d377e07</hash>
2539
+ <hash alg="SHA3-384">2efafee201067a59778ca569292166ae2783e22bc96eddd9db9a91e85bf5064a819f19b3bcb173700cec24abc9cad231</hash>
2540
+ <hash alg="SHA3-256">9f76e16bf11a1ab008df299ec80d8075f2f3d54d9753a3f5d967cedb97621077</hash>
2541
+ <hash alg="SHA3-512">dd78fde43d66f42bf25979100ac9e0ec7bf799e3675c8aa5ce6ed9917b1826b9a58cfcf0a22832f52794edc4429d02be17cc6b25155d19588202167fbf87dfe1</hash>
2542
+ </hashes>
2543
+ <licenses>
2544
+ <license>
2545
+ <id>BSD-4-Clause</id>
2546
+ </license>
2547
+ </licenses>
2548
+ <purl>pkg:maven/org.scalameta/trees_2.13@4.9.1?type=jar</purl>
2549
+ <externalReferences><reference type="website"><url>https://github.com/scalameta/scalameta</url></reference><reference type="issue-tracker"><url>https://github.com/scalameta/scalameta/issues</url></reference><reference type="vcs"><url>https://github.com/scalameta/scalameta</url></reference></externalReferences>
2550
+ </component>
2551
+ <component type="library" bom-ref="pkg:maven/org.scalameta/common_2.13@4.9.1?type=jar">
2552
+ <publisher>org.scalameta</publisher>
2553
+ <group>org.scalameta</group>
2554
+ <name>common_2.13</name>
2555
+ <version>4.9.1</version>
2556
+ <description>Bag of private and public helpers used in scalameta APIs and implementations</description>
2557
+ <scope>required</scope>
2558
+ <hashes>
2559
+ <hash alg="MD5">d14831136297b9b7667e3ea69c405175</hash>
2560
+ <hash alg="SHA-1">edc3d5565d9a25ca6bc3be9465c8ec8d2dd85a59</hash>
2561
+ <hash alg="SHA-256">223c3dc10561ffe4522bb29b2d5e93d2c3d12bbc81d896b6400a31a292e40ab3</hash>
2562
+ <hash alg="SHA-512">ebe6814e04ceaa1f01a01a8da3817f0659ace46f226c468680fad176c468292dd5cb271858d00c2ff5d34d561e0e44ec001b1f11df2cd0862b70ee3ca5129efe</hash>
2563
+ <hash alg="SHA-384">01be2f36a97493f32b9d09199e516b874ec5facbf49179b6bc3afdc8926706e06ec064cf216d3e235a0672ee4eaf407d</hash>
2564
+ <hash alg="SHA3-384">e0bf502cf1eebea2579bd218e557540c75d24885bad391728e5a1d0ba23afb0e8fa4ec2198eb664b43a17c1f358754c8</hash>
2565
+ <hash alg="SHA3-256">46c41cf94dfdaedbd0ebab36a77d029fa213f4d9fa3e0993aed98245d82f84d8</hash>
2566
+ <hash alg="SHA3-512">409df54e1d064239f92f16e394cad1baa12c054d0b3e05a8ea0c9315fa27085e5ff3fb0b3f0b5ecceab089d707e40192d003ad1886272527a782a6939fad74d7</hash>
2567
+ </hashes>
2568
+ <licenses>
2569
+ <license>
2570
+ <id>BSD-4-Clause</id>
2571
+ </license>
2572
+ </licenses>
2573
+ <purl>pkg:maven/org.scalameta/common_2.13@4.9.1?type=jar</purl>
2574
+ <externalReferences><reference type="website"><url>https://github.com/scalameta/scalameta</url></reference><reference type="issue-tracker"><url>https://github.com/scalameta/scalameta/issues</url></reference><reference type="vcs"><url>https://github.com/scalameta/scalameta</url></reference></externalReferences>
2575
+ </component>
2576
+ <component type="library" bom-ref="pkg:maven/com.lihaoyi/sourcecode_2.13@0.3.1?type=jar">
2577
+ <group>com.lihaoyi</group>
2578
+ <name>sourcecode_2.13</name>
2579
+ <version>0.3.1</version>
2580
+ <description>sourcecode</description>
2581
+ <scope>required</scope>
2582
+ <hashes>
2583
+ <hash alg="MD5">c8001189845020804687ee654121620b</hash>
2584
+ <hash alg="SHA-1">dd126526e346a1bd5b213f1f8850458b0720abaf</hash>
2585
+ <hash alg="SHA-256">0e663be9a6c81e9515bdd07c04831397e38ea648a211e85ad005300fe840a03d</hash>
2586
+ <hash alg="SHA-512">3c01f07b23b5e6fd4146afeb15b41afb31867b7656e6bbe70294cb53bf382a04a5b55d72edf495f185a1456fdafa8126acff5002cdb17f868720dafe702d51d7</hash>
2587
+ <hash alg="SHA-384">e7df2b720487bc1d5fb6ecd43ccd42eec9198b55dd209ce94694538d5de5829c722581ed03c0cf53f357567dde21b261</hash>
2588
+ <hash alg="SHA3-384">c71955da543a5aba86958903d1a931da89b4a71c9656440c2932d21251310e2a627756048b03d9a27ea85591e96c3399</hash>
2589
+ <hash alg="SHA3-256">0498eacde621c97237ebb3aeefd27ea25bccf4864e06f79e459944abf8fc2a2b</hash>
2590
+ <hash alg="SHA3-512">20a7f36821956bfbec76b765d124d4e1849b5e8af5e6545fcf32b1420cc399f71d3b019dd8b81ea1a0111d4059710ade53e42bd71de754f4185a34184d24795f</hash>
2591
+ </hashes>
2592
+ <licenses>
2593
+ <license>
2594
+ <id>MIT</id>
2595
+ <url>https://opensource.org/licenses/MIT</url>
2596
+ </license>
2597
+ </licenses>
2598
+ <purl>pkg:maven/com.lihaoyi/sourcecode_2.13@0.3.1?type=jar</purl>
2599
+ <externalReferences><reference type="website"><url>https://github.com/com-lihaoyi/sourcecode</url></reference><reference type="vcs"><url>https://github.com/com-lihaoyi/sourcecode</url></reference></externalReferences>
2600
+ </component>
2601
+ <component type="library" bom-ref="pkg:maven/com.thesamet.scalapb/scalapb-runtime_2.13@0.11.15?type=jar">
2602
+ <publisher>com.thesamet.scalapb</publisher>
2603
+ <group>com.thesamet.scalapb</group>
2604
+ <name>scalapb-runtime_2.13</name>
2605
+ <version>0.11.15</version>
2606
+ <description>scalapb-runtime</description>
2607
+ <scope>required</scope>
2608
+ <hashes>
2609
+ <hash alg="MD5">5ab75cfadf47915a5270f595ea2fe8dd</hash>
2610
+ <hash alg="SHA-1">fb6678d0109ed3a5262feaaf84d942eeb1c608d7</hash>
2611
+ <hash alg="SHA-256">7a5e7b4c6945d76bb05eb05905fe99b1fc6b58db3cc632d81ea7fb3879efbb77</hash>
2612
+ <hash alg="SHA-512">5a8f1458a912a3eec842f04de3502d20ec58dee968f480ef19405639faecb35369a0684ea9c75bc76a4ca03d61fd402e1d8189122003507663fb6ab3cf4e2a3a</hash>
2613
+ <hash alg="SHA-384">fa22ca9e4510cacfe92d0b8a1a28c6470280303bd63ee7a81215fd7c5afec5767963bd0afe28fdc891a43948db264022</hash>
2614
+ <hash alg="SHA3-384">70b7090aed84e06d84b9d87ac5e1f077b74654744ee81443c45a84b4c52583a93b02e72d507b49d3c3327f9d81f63989</hash>
2615
+ <hash alg="SHA3-256">59ac91e066dcc4e04c52a2fec63ec4a4178881ff8a609b6dac60f41df48c66b6</hash>
2616
+ <hash alg="SHA3-512">3378e3605607c441f9d2202cd30c43425d0b4695b217123b10ab899e302e7d98531bd67da3b7ceced11d33c6ac6206fc0edf64b2eda18874e7b2e21c23eab601</hash>
2617
+ </hashes>
2618
+ <licenses>
2619
+ <license>
2620
+ <id>Apache-2.0</id>
2621
+ </license>
2622
+ </licenses>
2623
+ <purl>pkg:maven/com.thesamet.scalapb/scalapb-runtime_2.13@0.11.15?type=jar</purl>
2624
+ <externalReferences><reference type="website"><url>https://github.com/scalapb/ScalaPB</url></reference><reference type="vcs"><url>https://github.com/scalapb/ScalaPB</url></reference></externalReferences>
2625
+ </component>
2626
+ <component type="library" bom-ref="pkg:maven/com.thesamet.scalapb/lenses_2.13@0.11.15?type=jar">
2627
+ <publisher>com.thesamet.scalapb</publisher>
2628
+ <group>com.thesamet.scalapb</group>
2629
+ <name>lenses_2.13</name>
2630
+ <version>0.11.15</version>
2631
+ <description>lenses</description>
2632
+ <scope>required</scope>
2633
+ <hashes>
2634
+ <hash alg="MD5">071d739d6c37f4ce3239363772533cba</hash>
2635
+ <hash alg="SHA-1">00391c5a2cddf23f670cecb81e3a77cec78d60db</hash>
2636
+ <hash alg="SHA-256">cf85c64803b72d2663b352301d292220ecdb86755897eb57054cd734bc3a35e3</hash>
2637
+ <hash alg="SHA-512">7790bb7184fd1c867b21a20b59bda142790a5199164de7c0dd88f8b89a47fb40c903b6676eb22c781a018fa27805bce23b4d7a4a969a98d36e7447a410ef4479</hash>
2638
+ <hash alg="SHA-384">308c1954205f0300ee4a9aaf555ab2b2f6dde3b944758e29a6cd5a98a36d9ba31039fae4c141180cb3ad3c5f106ecac6</hash>
2639
+ <hash alg="SHA3-384">9e89eb3aee04fb56ea1b44b0447ba46628d5b2b2821120bb8ccaf2b85e902819f5b523187791df411462a0b8c07e68c5</hash>
2640
+ <hash alg="SHA3-256">032f5486c68b2da92a870a12168e54d3814068b1caaa707d4b4902bbfb6a331e</hash>
2641
+ <hash alg="SHA3-512">e567df923a10c6c8020ec2ce737936323d875407268c9cbd1b26d1e1b8b34828dbc72b6b4b7b24b3dbdf0521e3bc2634b41d647e1cffc5fe853876e9c243030e</hash>
2642
+ </hashes>
2643
+ <licenses>
2644
+ <license>
2645
+ <id>Apache-2.0</id>
2646
+ </license>
2647
+ </licenses>
2648
+ <purl>pkg:maven/com.thesamet.scalapb/lenses_2.13@0.11.15?type=jar</purl>
2649
+ <externalReferences><reference type="website"><url>https://github.com/scalapb/ScalaPB</url></reference><reference type="vcs"><url>https://github.com/scalapb/ScalaPB</url></reference></externalReferences>
2650
+ </component>
2651
+ <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.25.3?type=jar">
2652
+ <group>com.google.protobuf</group>
2653
+ <name>protobuf-java</name>
2654
+ <version>3.25.3</version>
2655
+ <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
2656
+ efficient yet extensible format.</description>
2657
+ <scope>required</scope>
2658
+ <hashes>
2659
+ <hash alg="MD5">8f4aa3786a92e0273854038f98423f18</hash>
2660
+ <hash alg="SHA-1">d3200261955f3298e0d85c9892201e70492ce8eb</hash>
2661
+ <hash alg="SHA-256">e90d8ddb963b20a972a6a59b5093ade2b07cbe546cab3279aaf4383260385f58</hash>
2662
+ <hash alg="SHA-512">07784b20afb291ca4a593815b654779504ab19d3337f55655f2c5bac95f4629cc22dde5c916abb78beb3e049165e9960a38c5919585a07dc30702a2e943f0b06</hash>
2663
+ <hash alg="SHA-384">e7a61ceb9055994d46af6cada4c07cd0e04e77e27d33aae0aaf29595c996f74b63d927f1dae7b7c1052948d500d0943e</hash>
2664
+ <hash alg="SHA3-384">5d1b99e346d6da1694ae5edb441f31918f8c067cfaa860742eb0b59b8b8cd356644b4a3927173689e6aa10207edc3b3b</hash>
2665
+ <hash alg="SHA3-256">1514154314dfeaf1ee4f6ed39116f36e506eb7e92f38098d390db85b9e9ff1c9</hash>
2666
+ <hash alg="SHA3-512">1de7181f1402a07070c48eb9a83fb738669dd54738d7b7b0103110d6133806aa7fea5f426ec5bdfa970f9c3fb9dc3a001ec3502aad35d6adf2eb96f9497c64c4</hash>
2667
+ </hashes>
2668
+ <licenses>
2669
+ <license>
2670
+ <id>BSD-3-Clause</id>
2671
+ <url>https://opensource.org/licenses/BSD-3-Clause</url>
2672
+ </license>
2673
+ </licenses>
2674
+ <purl>pkg:maven/com.google.protobuf/protobuf-java@3.25.3?type=jar</purl>
2675
+ <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
2676
+ </component>
2677
+ <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar">
2678
+ <publisher>org.scala-lang.modules</publisher>
2679
+ <group>org.scala-lang.modules</group>
2680
+ <name>scala-collection-compat_2.13</name>
2681
+ <version>2.11.0</version>
2682
+ <description>scala-collection-compat</description>
2683
+ <scope>required</scope>
2684
+ <hashes>
2685
+ <hash alg="MD5">2076ab90ff32338088f01ab8475c6e28</hash>
2686
+ <hash alg="SHA-1">a1d1a4591c59ac01f041762692d81879accd849b</hash>
2687
+ <hash alg="SHA-256">0c1108883b7b97851750e8932f9584346ccb23f1260c197f97295ac2e6c56cec</hash>
2688
+ <hash alg="SHA-512">2a27b916bc49c72c4636a9cae9ea6339fc938ae1f1a1cfd82786587df2bc12134ffde7bb391cd06fbde37594053d7aaf24240f0f192929bdb087449ab12a93ab</hash>
2689
+ <hash alg="SHA-384">91c497b7a78af6b2f944fc82ff9fc152630987ccacf2b0a9d46fca2fcfbcadb6e91efde423a067c75acc8a66035cf1a4</hash>
2690
+ <hash alg="SHA3-384">b4089f7f167445fc499820a0426bf338e5213088a5a5f534323c7c7aa1c453b9b42fde884c0155c9ef9bae342439cce9</hash>
2691
+ <hash alg="SHA3-256">c3b360164e99cbd38cdd0ae1b7fdab6638e492af95aaaabdd5d2e22b9209a5eb</hash>
2692
+ <hash alg="SHA3-512">5f7d12a50337dfb2197ecf94f69a378dcf4049c2f843a2d59982f09840e08b58704d4a34da1af7f5cd80e7456d5272ffb58d1f535b3a92a91f9eb22a53cf6616</hash>
2693
+ </hashes>
2694
+ <licenses>
2695
+ <license>
2696
+ <id>Apache-2.0</id>
2697
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
2698
+ </license>
2699
+ </licenses>
2700
+ <purl>pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar</purl>
2701
+ <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-collection-compat/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-collection-compat</url></reference></externalReferences>
2702
+ </component>
2703
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-swift@7.1.0?type=jar">
2704
+ <publisher>PMD</publisher>
2705
+ <group>net.sourceforge.pmd</group>
2706
+ <name>pmd-swift</name>
2707
+ <version>7.1.0</version>
2708
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2709
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2710
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2711
+ Rules can be written in Java or using a XPath query.
2712
+
2713
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2714
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2715
+ Scala is supported, but there are currently no Scala rules available.
2716
+
2717
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2718
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2719
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2720
+ <scope>required</scope>
2721
+ <hashes>
2722
+ <hash alg="MD5">ad01a92040cdc803358febfdd867676c</hash>
2723
+ <hash alg="SHA-1">08c96e67a38fe58efe417720054375d707c27db6</hash>
2724
+ <hash alg="SHA-256">ed236679123727014d6f21b0d76d33d7175e5329574f2d967dab59b7a5ee99fd</hash>
2725
+ <hash alg="SHA-512">56a08ad20230fcd75c8d90558b5e0c3126f472573773e5cb710127bbe077ec4a02105a859e52f0bb98dd970efdc6748fc34b2d36025d6b54c53bf8302abbe6d4</hash>
2726
+ <hash alg="SHA-384">d9852ce5320eda1bdb4c3365d0537a5bb78d595611e90e42eb6b063e55f92437e43e9944c03b30358ddf4f28f5723849</hash>
2727
+ <hash alg="SHA3-384">f9f9a972d26272875b715511645a9158b50cfafec45c632feedf52de594c358b07c25ffa014b313de636af24a27899b2</hash>
2728
+ <hash alg="SHA3-256">38414e742a481258c1dd1190234cd4764be86b6774aee05f50bb98762cc2f827</hash>
2729
+ <hash alg="SHA3-512">cc28bf1f27d1a1bf4968925fb29cde72bae3d7c3a1480af24a0805be711e89b746f0c7d193099b30aeaec4f0a4898882367191f34f938e624b44d59f5c6a67e9</hash>
2730
+ </hashes>
2731
+ <licenses>
2732
+ <license>
2733
+ <name>BSD-style</name>
2734
+ <url>http://pmd.sourceforge.net/license.html</url>
2735
+ </license>
2736
+ </licenses>
2737
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-swift@7.1.0?type=jar</purl>
2738
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-swift/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-swift</url></reference></externalReferences>
2739
+ </component>
2740
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-tsql@7.1.0?type=jar">
2741
+ <publisher>PMD</publisher>
2742
+ <group>net.sourceforge.pmd</group>
2743
+ <name>pmd-tsql</name>
2744
+ <version>7.1.0</version>
2745
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2746
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2747
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2748
+ Rules can be written in Java or using a XPath query.
2749
+
2750
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2751
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2752
+ Scala is supported, but there are currently no Scala rules available.
2753
+
2754
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2755
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2756
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2757
+ <scope>required</scope>
2758
+ <hashes>
2759
+ <hash alg="MD5">4aa2baaf1e6b3efa671b098b4e31cb6c</hash>
2760
+ <hash alg="SHA-1">5d242ea99cc8710277cb55c4518405a2a410c01c</hash>
2761
+ <hash alg="SHA-256">780975704c4769339ecf32a0364f14bfd111ea91859ec58be642a7f170117230</hash>
2762
+ <hash alg="SHA-512">753f31cdf91da9e3d725cb7c03994b02a4566086a252b6188e023e067119c78518d07db812af1eed726fa0e87e89d5816abf64aed3492e87ab32d70929d5a1b2</hash>
2763
+ <hash alg="SHA-384">513d73f9ac7062821c8383fec573a834107ea6e4b8e9c494ced348e96af30e043e35976106fdaa81e754ef312e6b7947</hash>
2764
+ <hash alg="SHA3-384">da83fe59d3c77e5f177b99ee4c0b1bdad1ec670439574cf671edf3c24582fc2154806391764ebf13374c74b80bb54194</hash>
2765
+ <hash alg="SHA3-256">f5a5acea2c0418aa215475d7ce3ae88271f9ed0a35907df8abbe37b02618c378</hash>
2766
+ <hash alg="SHA3-512">fbb7f2b660040cfad3f02c4f4bfcf6c50d8d19dc95360d17d84c0c477a3f5e4a57168a29467cf531a87705390f91d9a71296c88d4fb7ea4883909cc5cc01ad33</hash>
2767
+ </hashes>
2768
+ <licenses>
2769
+ <license>
2770
+ <name>BSD-style</name>
2771
+ <url>http://pmd.sourceforge.net/license.html</url>
2772
+ </license>
2773
+ </licenses>
2774
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-tsql@7.1.0?type=jar</purl>
2775
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-tsql/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-tsql</url></reference></externalReferences>
2776
+ </component>
2777
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.1.0?type=jar">
2778
+ <publisher>PMD</publisher>
2779
+ <group>net.sourceforge.pmd</group>
2780
+ <name>pmd-visualforce</name>
2781
+ <version>7.1.0</version>
2782
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2783
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2784
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2785
+ Rules can be written in Java or using a XPath query.
2786
+
2787
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2788
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2789
+ Scala is supported, but there are currently no Scala rules available.
2790
+
2791
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2792
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2793
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2794
+ <scope>required</scope>
2795
+ <hashes>
2796
+ <hash alg="MD5">fca2dd015a54fb56d5dc226ce6d60427</hash>
2797
+ <hash alg="SHA-1">892b68735cab42abb668e6d06b66f651f933d121</hash>
2798
+ <hash alg="SHA-256">2f30f2fd976655953516ec180653a4f0f65f1ad2baba814d6cc4072bf5ab62c5</hash>
2799
+ <hash alg="SHA-512">9d05ce76b54f7c9d4a30ca25c5a5516055d81d60354185abe53ddce3e6e5449bc623df393c7542db254f2c20dcef73b73cfa587f0a4d8310d9d9afcbbb865010</hash>
2800
+ <hash alg="SHA-384">0f86865b80df3933f581901fea4e67bfbd991a3a9ff67256b4de2dc7dea7433c081f292c02be5d6ab8251cf771176b57</hash>
2801
+ <hash alg="SHA3-384">70889169e7c88d7ba4a1915f86c3d8112825860ea2b45e7386dfb15c5f5fc5b5b4a04c0931cb62329d2ea5e87185165c</hash>
2802
+ <hash alg="SHA3-256">5a1d36c214b61a75a53e5587a8ac529483762908d8826eec38b9834e52478713</hash>
2803
+ <hash alg="SHA3-512">42b302957d2dc6815e61c514cd510e8572d2b204b84a56968984fac11e5be379b0b84e49dd2591c7bdd55371f4526179b68d33eb05c5c3a88892c4a96147fb38</hash>
2804
+ </hashes>
2805
+ <licenses>
2806
+ <license>
2807
+ <name>BSD-style</name>
2808
+ <url>http://pmd.sourceforge.net/license.html</url>
2809
+ </license>
2810
+ </licenses>
2811
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.1.0?type=jar</purl>
2812
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-visualforce/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-visualforce</url></reference></externalReferences>
2813
+ </component>
2814
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-velocity@7.1.0?type=jar">
2815
+ <publisher>PMD</publisher>
2816
+ <group>net.sourceforge.pmd</group>
2817
+ <name>pmd-velocity</name>
2818
+ <version>7.1.0</version>
2819
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2820
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2821
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2822
+ Rules can be written in Java or using a XPath query.
2823
+
2824
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2825
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2826
+ Scala is supported, but there are currently no Scala rules available.
2827
+
2828
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2829
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2830
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2831
+ <scope>required</scope>
2832
+ <hashes>
2833
+ <hash alg="MD5">6e0d17dcd5d85bf6f43497b9123eaa39</hash>
2834
+ <hash alg="SHA-1">f9520f2ad4253495fee453a9780ccb467608deb6</hash>
2835
+ <hash alg="SHA-256">08dff501159b16d477a2d873a98feb307d30d7183d5d1268df9360c49fb48730</hash>
2836
+ <hash alg="SHA-512">9d3f594644c54426a19e594194a97c12148ff9ebc98ca60b0cd13f4ec3f022e3b5e71661affcd35b7d91336c040dd34abf759a03bfcd814db7d345a5cfa0341c</hash>
2837
+ <hash alg="SHA-384">5f133ce7a5444985859403016669e1364f5d2b471368eec38e2475e916fa3cf185266ab71fc0a7fa92549e2ea1c72d6d</hash>
2838
+ <hash alg="SHA3-384">b545fe03caecb0d35ee758f4413424d458a8b0f50b932df1116f991ec9c1fd867278b74b1b7b19a5362a1643ed2c1afe</hash>
2839
+ <hash alg="SHA3-256">5c47bb1ad9ada938715956c346e2a9ee42a780d8a637dc472bed321b91a481ef</hash>
2840
+ <hash alg="SHA3-512">61f9ef7edfd996e9ef8a251db7bbfa474f1ed4dca8b8711a3b0a75300ca58759b1d1986cdb5ad57c126a360cd91676045196f4f8674ed0429ea8f46f9b45814a</hash>
2841
+ </hashes>
2842
+ <licenses>
2843
+ <license>
2844
+ <name>BSD-style</name>
2845
+ <url>http://pmd.sourceforge.net/license.html</url>
2846
+ </license>
2847
+ </licenses>
2848
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-velocity@7.1.0?type=jar</purl>
2849
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-velocity/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-velocity</url></reference></externalReferences>
2850
+ </component>
2851
+ <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-xml@7.1.0?type=jar">
2852
+ <publisher>PMD</publisher>
2853
+ <group>net.sourceforge.pmd</group>
2854
+ <name>pmd-xml</name>
2855
+ <version>7.1.0</version>
2856
+ <description>PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks,
2857
+ unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules.
2858
+ It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations.
2859
+ Rules can be written in Java or using a XPath query.
2860
+
2861
+ It supports Java, JavaScript, Salesforce.com Apex and Visualforce,
2862
+ Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL.
2863
+ Scala is supported, but there are currently no Scala rules available.
2864
+
2865
+ Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
2866
+ Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica,
2867
+ Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.</description>
2868
+ <scope>required</scope>
2869
+ <hashes>
2870
+ <hash alg="MD5">0ae5c96dc6e304b08b90e60823205e18</hash>
2871
+ <hash alg="SHA-1">9146c41ab40f174d4a20d4b0b44a78b59ae1936e</hash>
2872
+ <hash alg="SHA-256">748cb4b2a3f0918507058adf0042f4b2499b89e15166f61525d23e0cfd652f7d</hash>
2873
+ <hash alg="SHA-512">ec3c7eea5e8c66dc6b85f3016ee9295b328b2ec7a7f0eb81b96389a45728f2a29f7c605bd4da2b852bf9208aababf1a0092ed616e0468954c0458cef60c9c947</hash>
2874
+ <hash alg="SHA-384">aeba8be71737ed73e5a9b84f5cbbb42aed5b5e557a9a6f145935eebb464d7adb185506e81c02e285163062dd8bf1644e</hash>
2875
+ <hash alg="SHA3-384">6719e87a484205649783f22e7d99810e55e0a6951398f134d4cd3a369b27460b826686b24983b508e4389ad2234f392b</hash>
2876
+ <hash alg="SHA3-256">2ed85eb4c212ecd55cd21af26ce5bfa4e317aaf0ab8655b9eb1adf521b593cdf</hash>
2877
+ <hash alg="SHA3-512">214b15c47dc325ba5efdfdb0bbe664a7c565b9a60292c739db40bdb1547a446948cf730708d983f6a389352ba4404d71ab0f15b35d69929005488dd980f2e48d</hash>
2878
+ </hashes>
2879
+ <licenses>
2880
+ <license>
2881
+ <name>BSD-style</name>
2882
+ <url>http://pmd.sourceforge.net/license.html</url>
2883
+ </license>
2884
+ </licenses>
2885
+ <purl>pkg:maven/net.sourceforge.pmd/pmd-xml@7.1.0?type=jar</purl>
2886
+ <externalReferences><reference type="website"><url>https://pmd.github.io/pmd-xml/</url></reference><reference type="build-system"><url>https://github.com/pmd/pmd/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/pmd/pmd/issues</url></reference><reference type="mailing-list"><url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url></reference><reference type="vcs"><url>https://github.com/pmd/pmd/pmd-xml</url></reference></externalReferences>
2887
+ </component>
2888
+ <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar">
2889
+ <publisher>QOS.ch</publisher>
2890
+ <group>org.slf4j</group>
2891
+ <name>slf4j-simple</name>
2892
+ <version>1.7.36</version>
2893
+ <description>SLF4J Simple binding</description>
2894
+ <scope>required</scope>
2895
+ <hashes>
2896
+ <hash alg="MD5">fd4a5fa54910b5ee561f639c903cf34a</hash>
2897
+ <hash alg="SHA-1">a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936</hash>
2898
+ <hash alg="SHA-256">2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f</hash>
2899
+ <hash alg="SHA-512">cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f</hash>
2900
+ <hash alg="SHA-384">57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24</hash>
2901
+ <hash alg="SHA3-384">15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038</hash>
2902
+ <hash alg="SHA3-256">a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428</hash>
2903
+ <hash alg="SHA3-512">335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017</hash>
2904
+ </hashes>
2905
+ <licenses>
2906
+ <license>
2907
+ <id>MIT</id>
2908
+ <url>https://opensource.org/licenses/MIT</url>
2909
+ </license>
2910
+ </licenses>
2911
+ <purl>pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar</purl>
2912
+ <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-simple</url></reference></externalReferences>
2913
+ </component>
2914
+ <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
2915
+ <publisher>The Apache Software Foundation</publisher>
2916
+ <group>org.apache.commons</group>
2917
+ <name>commons-lang3</name>
2918
+ <version>3.14.0</version>
2919
+ <description>Apache Commons Lang, a package of Java utility classes for the
2920
+ classes that are in java.lang's hierarchy, or are considered to be so
2921
+ standard as to justify existence in java.lang.</description>
2922
+ <scope>required</scope>
2923
+ <hashes>
2924
+ <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
2925
+ <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
2926
+ <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
2927
+ <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
2928
+ <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
2929
+ <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
2930
+ <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
2931
+ <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
2932
+ </hashes>
2933
+ <licenses>
2934
+ <license>
2935
+ <id>Apache-2.0</id>
2936
+ <url>https://www.apache.org/licenses/LICENSE-2.0</url>
2937
+ </license>
2938
+ </licenses>
2939
+ <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
2940
+ <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
2941
+ </component>
2942
+ </components>
2943
+ <dependencies>
2944
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-dist@7.1.0?type=jar">
2945
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
2946
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cli@7.1.0?type=jar"/>
2947
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-ant@7.1.0?type=jar"/>
2948
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-designer@7.0.0?type=jar"/>
2949
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.1.0?type=pom"/>
2950
+ <dependency ref="pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"/>
2951
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
2952
+ </dependency>
2953
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar">
2954
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
2955
+ <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
2956
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
2957
+ <dependency ref="pkg:maven/net.sf.saxon/Saxon-HE@12.4?type=jar"/>
2958
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
2959
+ <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
2960
+ <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
2961
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
2962
+ <dependency ref="pkg:maven/org.pcollections/pcollections@3.2.0?type=jar"/>
2963
+ <dependency ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"/>
2964
+ </dependency>
2965
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
2966
+ <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
2967
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
2968
+ </dependency>
2969
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
2970
+ <dependency ref="pkg:maven/net.sf.saxon/Saxon-HE@12.4?type=jar">
2971
+ <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar"/>
2972
+ <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar"/>
2973
+ </dependency>
2974
+ <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar">
2975
+ <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar"/>
2976
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
2977
+ </dependency>
2978
+ <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar">
2979
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
2980
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar"/>
2981
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
2982
+ <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
2983
+ </dependency>
2984
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
2985
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar">
2986
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
2987
+ </dependency>
2988
+ <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
2989
+ <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar">
2990
+ <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar"/>
2991
+ <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
2992
+ </dependency>
2993
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
2994
+ <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
2995
+ <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
2996
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
2997
+ <dependency ref="pkg:maven/org.pcollections/pcollections@3.2.0?type=jar"/>
2998
+ <dependency ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"/>
2999
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cli@7.1.0?type=jar">
3000
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3001
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-designer@7.0.0?type=jar"/>
3002
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
3003
+ <dependency ref="pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"/>
3004
+ <dependency ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar"/>
3005
+ <dependency ref="pkg:maven/me.tongfei/progressbar@0.9.5?type=jar"/>
3006
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
3007
+ </dependency>
3008
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-designer@7.0.0?type=jar"/>
3009
+ <dependency ref="pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar">
3010
+ <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
3011
+ </dependency>
3012
+ <dependency ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar"/>
3013
+ <dependency ref="pkg:maven/me.tongfei/progressbar@0.9.5?type=jar">
3014
+ <dependency ref="pkg:maven/org.jline/jline@3.21.0?type=jar"/>
3015
+ </dependency>
3016
+ <dependency ref="pkg:maven/org.jline/jline@3.21.0?type=jar"/>
3017
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-ant@7.1.0?type=jar">
3018
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3019
+ </dependency>
3020
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-languages-deps@7.1.0?type=pom">
3021
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-apex@7.1.0?type=jar"/>
3022
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-coco@7.1.0?type=jar"/>
3023
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cpp@7.1.0?type=jar"/>
3024
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cs@7.1.0?type=jar"/>
3025
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-dart@7.1.0?type=jar"/>
3026
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-fortran@7.1.0?type=jar"/>
3027
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.1.0?type=jar"/>
3028
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-go@7.1.0?type=jar"/>
3029
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-groovy@7.1.0?type=jar"/>
3030
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-html@7.1.0?type=jar"/>
3031
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-java@7.1.0?type=jar"/>
3032
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-javascript@7.1.0?type=jar"/>
3033
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-jsp@7.1.0?type=jar"/>
3034
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-julia@7.1.0?type=jar"/>
3035
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.1.0?type=jar"/>
3036
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-lua@7.1.0?type=jar"/>
3037
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-matlab@7.1.0?type=jar"/>
3038
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-modelica@7.1.0?type=jar"/>
3039
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.1.0?type=jar"/>
3040
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-perl@7.1.0?type=jar"/>
3041
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-php@7.1.0?type=jar"/>
3042
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-plsql@7.1.0?type=jar"/>
3043
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-python@7.1.0?type=jar"/>
3044
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-ruby@7.1.0?type=jar"/>
3045
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.1.0?type=jar"/>
3046
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-swift@7.1.0?type=jar"/>
3047
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-tsql@7.1.0?type=jar"/>
3048
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.1.0?type=jar"/>
3049
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-velocity@7.1.0?type=jar"/>
3050
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-xml@7.1.0?type=jar"/>
3051
+ </dependency>
3052
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-apex@7.1.0?type=jar">
3053
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3054
+ <dependency ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar"/>
3055
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar"/>
3056
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.7.20?type=jar"/>
3057
+ <dependency ref="pkg:maven/com.google.summit/summit-ast@2.2.0?type=jar"/>
3058
+ <dependency ref="pkg:maven/com.github.nawforce/apexlink@2.3.7?type=jar"/>
3059
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
3060
+ </dependency>
3061
+ <dependency ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar">
3062
+ <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"/>
3063
+ <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
3064
+ <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
3065
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
3066
+ <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0?type=jar"/>
3067
+ <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
3068
+ </dependency>
3069
+ <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"/>
3070
+ <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
3071
+ <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
3072
+ <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0?type=jar"/>
3073
+ <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
3074
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar">
3075
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.7.20?type=jar"/>
3076
+ </dependency>
3077
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.7.20?type=jar"/>
3078
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.7.20?type=jar">
3079
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar"/>
3080
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.7.20?type=jar"/>
3081
+ </dependency>
3082
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.7.20?type=jar">
3083
+ <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.7.20?type=jar"/>
3084
+ </dependency>
3085
+ <dependency ref="pkg:maven/com.google.summit/summit-ast@2.2.0?type=jar">
3086
+ <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
3087
+ <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
3088
+ <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
3089
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
3090
+ <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0?type=jar"/>
3091
+ <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"/>
3092
+ <dependency ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar"/>
3093
+ <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"/>
3094
+ <dependency ref="pkg:maven/com.google.flogger/flogger@0.7.4?type=jar"/>
3095
+ <dependency ref="pkg:maven/com.google.flogger/flogger-system-backend@0.7.4?type=jar"/>
3096
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3097
+ <dependency ref="pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar"/>
3098
+ <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
3099
+ <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
3100
+ <dependency ref="pkg:maven/org.danilopianini/gson-extras@1.0.0?type=jar"/>
3101
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
3102
+ </dependency>
3103
+ <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"/>
3104
+ <dependency ref="pkg:maven/com.google.flogger/flogger@0.7.4?type=jar">
3105
+ <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"/>
3106
+ </dependency>
3107
+ <dependency ref="pkg:maven/com.google.flogger/flogger-system-backend@0.7.4?type=jar">
3108
+ <dependency ref="pkg:maven/com.google.flogger/flogger@0.7.4?type=jar"/>
3109
+ <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.5.3?type=jar"/>
3110
+ </dependency>
3111
+ <dependency ref="pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar">
3112
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3113
+ </dependency>
3114
+ <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
3115
+ <dependency ref="pkg:maven/org.danilopianini/gson-extras@1.0.0?type=jar">
3116
+ <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
3117
+ <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
3118
+ </dependency>
3119
+ <dependency ref="pkg:maven/com.github.nawforce/apexlink@2.3.7?type=jar">
3120
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3121
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar"/>
3122
+ <dependency ref="pkg:maven/com.github.nawforce/pkgforce_2.13@2.3.7?type=jar"/>
3123
+ <dependency ref="pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar"/>
3124
+ <dependency ref="pkg:maven/com.github.nawforce/runforce@55.5.0?type=jar"/>
3125
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar"/>
3126
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.0.1?type=jar"/>
3127
+ <dependency ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"/>
3128
+ </dependency>
3129
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3130
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.0?type=jar">
3131
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3132
+ </dependency>
3133
+ <dependency ref="pkg:maven/com.github.nawforce/pkgforce_2.13@2.3.7?type=jar">
3134
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3135
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar"/>
3136
+ <dependency ref="pkg:maven/io.github.apex-dev-tools/apex-parser@3.6.0?type=jar"/>
3137
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar"/>
3138
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.0.1?type=jar"/>
3139
+ <dependency ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"/>
3140
+ </dependency>
3141
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@1.3.0?type=jar">
3142
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3143
+ </dependency>
3144
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar">
3145
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3146
+ <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.13?type=jar"/>
3147
+ <dependency ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"/>
3148
+ </dependency>
3149
+ <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.13?type=jar">
3150
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3151
+ </dependency>
3152
+ <dependency ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar">
3153
+ <dependency ref="pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar"/>
3154
+ <dependency ref="pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar"/>
3155
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar"/>
3156
+ </dependency>
3157
+ <dependency ref="pkg:maven/com.lihaoyi/ujson_2.13@1.2.0?type=jar">
3158
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"/>
3159
+ </dependency>
3160
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar">
3161
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar"/>
3162
+ <dependency ref="pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar"/>
3163
+ </dependency>
3164
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar">
3165
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3166
+ </dependency>
3167
+ <dependency ref="pkg:maven/com.lihaoyi/geny_2.13@0.6.2?type=jar"/>
3168
+ <dependency ref="pkg:maven/com.lihaoyi/upack_2.13@1.2.0?type=jar">
3169
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"/>
3170
+ </dependency>
3171
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-implicits_2.13@1.2.0?type=jar">
3172
+ <dependency ref="pkg:maven/com.lihaoyi/upickle-core_2.13@1.2.0?type=jar"/>
3173
+ </dependency>
3174
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc-upickle-json-serializer_2.13@1.0.1?type=jar">
3175
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3176
+ <dependency ref="pkg:maven/com.github.nawforce/scala-json-rpc_2.13@1.0.1?type=jar"/>
3177
+ <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.13?type=jar"/>
3178
+ <dependency ref="pkg:maven/com.lihaoyi/upickle_2.13@1.2.0?type=jar"/>
3179
+ </dependency>
3180
+ <dependency ref="pkg:maven/com.github.nawforce/runforce@55.5.0?type=jar"/>
3181
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-coco@7.1.0?type=jar">
3182
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3183
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3184
+ </dependency>
3185
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cpp@7.1.0?type=jar">
3186
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3187
+ </dependency>
3188
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-cs@7.1.0?type=jar">
3189
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3190
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3191
+ </dependency>
3192
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-dart@7.1.0?type=jar">
3193
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3194
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3195
+ </dependency>
3196
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-fortran@7.1.0?type=jar">
3197
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3198
+ </dependency>
3199
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-gherkin@7.1.0?type=jar">
3200
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3201
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3202
+ </dependency>
3203
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-go@7.1.0?type=jar">
3204
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3205
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3206
+ </dependency>
3207
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-groovy@7.1.0?type=jar">
3208
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3209
+ <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.19?type=jar"/>
3210
+ </dependency>
3211
+ <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.19?type=jar"/>
3212
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-html@7.1.0?type=jar">
3213
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3214
+ <dependency ref="pkg:maven/org.jsoup/jsoup@1.17.2?type=jar"/>
3215
+ </dependency>
3216
+ <dependency ref="pkg:maven/org.jsoup/jsoup@1.17.2?type=jar"/>
3217
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-java@7.1.0?type=jar">
3218
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3219
+ <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
3220
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
3221
+ <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"/>
3222
+ <dependency ref="pkg:maven/net.sf.saxon/Saxon-HE@12.4?type=jar"/>
3223
+ <dependency ref="pkg:maven/org.pcollections/pcollections@3.2.0?type=jar"/>
3224
+ </dependency>
3225
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-javascript@7.1.0?type=jar">
3226
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3227
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3228
+ <dependency ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar"/>
3229
+ </dependency>
3230
+ <dependency ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar"/>
3231
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-jsp@7.1.0?type=jar">
3232
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3233
+ </dependency>
3234
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-julia@7.1.0?type=jar">
3235
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3236
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3237
+ </dependency>
3238
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-kotlin@7.1.0?type=jar">
3239
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3240
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3241
+ </dependency>
3242
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-lua@7.1.0?type=jar">
3243
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3244
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3245
+ </dependency>
3246
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-matlab@7.1.0?type=jar">
3247
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3248
+ </dependency>
3249
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-modelica@7.1.0?type=jar">
3250
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3251
+ </dependency>
3252
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-objectivec@7.1.0?type=jar">
3253
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3254
+ </dependency>
3255
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-perl@7.1.0?type=jar">
3256
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3257
+ </dependency>
3258
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-php@7.1.0?type=jar">
3259
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3260
+ </dependency>
3261
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-plsql@7.1.0?type=jar">
3262
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3263
+ </dependency>
3264
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-python@7.1.0?type=jar">
3265
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3266
+ </dependency>
3267
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-ruby@7.1.0?type=jar">
3268
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3269
+ </dependency>
3270
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-scala_2.13@7.1.0?type=jar">
3271
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3272
+ <dependency ref="pkg:maven/org.scalameta/parsers_2.13@4.9.1?type=jar"/>
3273
+ <dependency ref="pkg:maven/org.scalameta/trees_2.13@4.9.1?type=jar"/>
3274
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3275
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
3276
+ </dependency>
3277
+ <dependency ref="pkg:maven/org.scalameta/parsers_2.13@4.9.1?type=jar">
3278
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3279
+ <dependency ref="pkg:maven/org.scalameta/trees_2.13@4.9.1?type=jar"/>
3280
+ </dependency>
3281
+ <dependency ref="pkg:maven/org.scalameta/trees_2.13@4.9.1?type=jar">
3282
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3283
+ <dependency ref="pkg:maven/org.scalameta/common_2.13@4.9.1?type=jar"/>
3284
+ </dependency>
3285
+ <dependency ref="pkg:maven/org.scalameta/common_2.13@4.9.1?type=jar">
3286
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3287
+ <dependency ref="pkg:maven/com.lihaoyi/sourcecode_2.13@0.3.1?type=jar"/>
3288
+ <dependency ref="pkg:maven/com.thesamet.scalapb/scalapb-runtime_2.13@0.11.15?type=jar"/>
3289
+ </dependency>
3290
+ <dependency ref="pkg:maven/com.lihaoyi/sourcecode_2.13@0.3.1?type=jar">
3291
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3292
+ </dependency>
3293
+ <dependency ref="pkg:maven/com.thesamet.scalapb/scalapb-runtime_2.13@0.11.15?type=jar">
3294
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3295
+ <dependency ref="pkg:maven/com.thesamet.scalapb/lenses_2.13@0.11.15?type=jar"/>
3296
+ <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.25.3?type=jar"/>
3297
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar"/>
3298
+ </dependency>
3299
+ <dependency ref="pkg:maven/com.thesamet.scalapb/lenses_2.13@0.11.15?type=jar">
3300
+ <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.13?type=jar"/>
3301
+ <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.13@2.11.0?type=jar"/>
3302
+ </dependency>
3303
+ <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.25.3?type=jar"/>
3304
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-swift@7.1.0?type=jar">
3305
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3306
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3307
+ </dependency>
3308
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-tsql@7.1.0?type=jar">
3309
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3310
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3311
+ </dependency>
3312
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-visualforce@7.1.0?type=jar">
3313
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3314
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-apex@7.1.0?type=jar"/>
3315
+ </dependency>
3316
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-velocity@7.1.0?type=jar">
3317
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3318
+ <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
3319
+ </dependency>
3320
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-xml@7.1.0?type=jar">
3321
+ <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.1.0?type=jar"/>
3322
+ <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
3323
+ </dependency>
3324
+ </dependencies>
3325
+ </bom>