diff --git a/README.md b/README.md index 5ceb83d..02c99ff 100644 --- a/README.md +++ b/README.md @@ -1,9 +1 @@ -# Workflow Commons module - -Provides out-of-the-box content to get you started with building workflows in Mendix. Read more about this module and how to set it up in the documentation at https://docs.mendix.com/appstore/modules/workflow-commons. - -## License -https://www.mendix.com/terms-of-use/ - -## Mendix marketplace -https://marketplace.mendix.com/link/component/117066 \ No newline at end of file +Please see [Workflow Commons](https://docs.mendix.com/appstore/modules/workflow-commons) in the Mendix documentation for details. \ No newline at end of file diff --git a/ReleaseNotes.md b/ReleaseNotes.md index d36408b..ffbc8f5 100644 --- a/ReleaseNotes.md +++ b/ReleaseNotes.md @@ -1,3 +1,14 @@ +## Release 3.6.0 + +* We introduced the audit trail feature to track all events and actions that have taken place in the workflows in your application. Refer to the module documentation for more details on how to configure a workflow event handler for audit trails. +* We added a key attribute to WorkflowView and UserTaskView entities, that uniquely identifies the workflow and user task instances. The value is helpful for correlating audit trail data to the related workflow or user task. + +Note: If you want to add the keys to existing WorkflowView and UserTaskView data you need to run a migration, you can either: +* Use the migration microflow 'ACT_Key_Migrate' (also added to the 'WorkflowAdminCenter' page), or: +* Add the 'ASu_Key_Migrate' microflow to the project's after startup microflow. + +_______ + ## Release 3.5.0 * We added support for React client, introduced as public beta in Mendix 10.7.0. As part of this, we updated all dropdown and reference selector widgets to the new Combo Box widget. diff --git a/Releases/WorkflowCommons-3-6-0.mpk b/Releases/WorkflowCommons-3-6-0.mpk new file mode 100644 index 0000000..457ae92 Binary files /dev/null and b/Releases/WorkflowCommons-3-6-0.mpk differ diff --git a/Source/ExpenseRequestStarterApp.mpr b/Source/ExpenseRequestStarterApp.mpr index ea9590b..9b02f4b 100644 Binary files a/Source/ExpenseRequestStarterApp.mpr and b/Source/ExpenseRequestStarterApp.mpr differ diff --git a/Source/javasource/workflowcommons/actions/JA_WorkflowUserTask_GetKey.java b/Source/javasource/workflowcommons/actions/JA_WorkflowUserTask_GetKey.java new file mode 100644 index 0000000..c6e83f9 --- /dev/null +++ b/Source/javasource/workflowcommons/actions/JA_WorkflowUserTask_GetKey.java @@ -0,0 +1,57 @@ +// This file was generated by Mendix Studio Pro. +// +// WARNING: Only the following code will be retained when actions are regenerated: +// - the import list +// - the code between BEGIN USER CODE and END USER CODE +// - the code between BEGIN EXTRA CODE and END EXTRA CODE +// Other code you write will be lost the next time you deploy the project. +// Special characters, e.g., é, ö, à, etc. are supported in comments. + +package workflowcommons.actions; + +import com.mendix.core.Core; +import com.mendix.systemwideinterfaces.core.IContext; +import com.mendix.webui.CustomJavaAction; +import com.mendix.systemwideinterfaces.core.IMendixObject; + +public class JA_WorkflowUserTask_GetKey extends CustomJavaAction +{ + /** @deprecated use workflowUserTask.getMendixObject() instead. */ + @java.lang.Deprecated(forRemoval = true) + private final IMendixObject __workflowUserTask; + private final system.proxies.WorkflowUserTask workflowUserTask; + + public JA_WorkflowUserTask_GetKey( + IContext context, + IMendixObject _workflowUserTask + ) + { + super(context); + this.__workflowUserTask = _workflowUserTask; + this.workflowUserTask = _workflowUserTask == null ? null : system.proxies.WorkflowUserTask.initialize(getContext(), _workflowUserTask); + } + + @java.lang.Override + public java.lang.String executeAction() throws Exception + { + // BEGIN USER CODE + if (workflowUserTask == null) + throw new RuntimeException("No WorkflowUserTask object provided"); + + return Core.workflows().getUserTask(getContext(), workflowUserTask.getMendixObject()).getKey(); + // END USER CODE + } + + /** + * Returns a string representation of this action + * @return a string representation of this action + */ + @java.lang.Override + public java.lang.String toString() + { + return "JA_WorkflowUserTask_GetKey"; + } + + // BEGIN EXTRA CODE + // END EXTRA CODE +} diff --git a/Source/javasource/workflowcommons/actions/JA_Workflow_GetKey.java b/Source/javasource/workflowcommons/actions/JA_Workflow_GetKey.java new file mode 100644 index 0000000..f682102 --- /dev/null +++ b/Source/javasource/workflowcommons/actions/JA_Workflow_GetKey.java @@ -0,0 +1,57 @@ +// This file was generated by Mendix Studio Pro. +// +// WARNING: Only the following code will be retained when actions are regenerated: +// - the import list +// - the code between BEGIN USER CODE and END USER CODE +// - the code between BEGIN EXTRA CODE and END EXTRA CODE +// Other code you write will be lost the next time you deploy the project. +// Special characters, e.g., é, ö, à, etc. are supported in comments. + +package workflowcommons.actions; + +import com.mendix.core.Core; +import com.mendix.systemwideinterfaces.core.IContext; +import com.mendix.webui.CustomJavaAction; +import com.mendix.systemwideinterfaces.core.IMendixObject; + +public class JA_Workflow_GetKey extends CustomJavaAction +{ + /** @deprecated use workflow.getMendixObject() instead. */ + @java.lang.Deprecated(forRemoval = true) + private final IMendixObject __workflow; + private final system.proxies.Workflow workflow; + + public JA_Workflow_GetKey( + IContext context, + IMendixObject _workflow + ) + { + super(context); + this.__workflow = _workflow; + this.workflow = _workflow == null ? null : system.proxies.Workflow.initialize(getContext(), _workflow); + } + + @java.lang.Override + public java.lang.String executeAction() throws Exception + { + // BEGIN USER CODE + if (workflow == null) + throw new RuntimeException("No Workflow object provided"); + + return Core.workflows().getWorkflow(getContext(), workflow.getMendixObject()).getKey(); + // END USER CODE + } + + /** + * Returns a string representation of this action + * @return a string representation of this action + */ + @java.lang.Override + public java.lang.String toString() + { + return "JA_Workflow_GetKey"; + } + + // BEGIN EXTRA CODE + // END EXTRA CODE +} diff --git a/Source/vendorlib/vendorlib-sbom.json b/Source/vendorlib/vendorlib-sbom.json index f826c3c..2ee4459 100644 --- a/Source/vendorlib/vendorlib-sbom.json +++ b/Source/vendorlib/vendorlib-sbom.json @@ -21,42 +21,42 @@ }, "components" : [ { - "group" : "com.google.guava", - "name" : "guava", - "version" : "32.0.1-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "group" : "org.apache.pdfbox", + "name" : "pdfbox", + "version" : "2.0.30", + "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents.", "hashes" : [ { "alg" : "MD5", - "content" : "6951895e804b36322214c95917e598d4" + "content" : "da9a5490ecf28832ee6d003f9bcd95bd" }, { "alg" : "SHA-1", - "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" + "content" : "730753a91f7f2c574eb09a8af7288065d1e551bd" }, { "alg" : "SHA-256", - "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" + "content" : "abb468d07abe76e34efb3337d1cfd48e365241623320e277e8341ce3cd670760" }, { "alg" : "SHA-512", - "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" + "content" : "3727ede4a890c7c5c23e048fa037e013e8a3c85fcbe014e239c8c4dc7044a45b1143c4d773973f4f78032fb98d427486dd38f79f22dd6fb62dd713fee82e754f" }, { "alg" : "SHA-384", - "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" + "content" : "d191b697ea322c23fe8a142fae04b8d84eb67d9852af5f7d89caf85db4c6573eafc830093f51edaa1622e6330090e860" }, { "alg" : "SHA3-384", - "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" + "content" : "ba9f6d207a618edf1f9d496731538f2e774ce1238fb8252665cb1efedd4d17c85e319663cf2b8c9bd415ee17ea926bda" }, { "alg" : "SHA3-256", - "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" + "content" : "9b62e73a41d0f73b805918bbc2c9da4c60e86d454366bf9ae56917264fc8d085" }, { "alg" : "SHA3-512", - "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" + "content" : "41f714619824293519067fd3ba3e7295595f447778e60b21209bd09a46222af0d8492d7cc6a72e1d16012d727402c9e3a1767959be788c5e3a49ad537f3bf3ad" } ], "licenses" : [ @@ -66,48 +66,48 @@ } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "purl" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" + "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar" }, { - "group" : "org.apache.httpcomponents.core5", - "name" : "httpcore5", - "version" : "5.2", - "description" : "Apache HttpComponents HTTP/1.1 core components", + "group" : "com.google.j2objc", + "name" : "j2objc-annotations", + "version" : "2.8", + "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "hashes" : [ { "alg" : "MD5", - "content" : "3a40241f9a99cf063f347dfb73c5c4e8" + "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", - "content" : "ab7d251b8dfa3f2878f1eefbcca0e1fc0ebeba27" + "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", - "content" : "293321cbf594d79ea8a0cb0214f75f146d17f088be17ad5ce11c2fe864df124c" + "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", - "content" : "214dcc370a8ca0c7fdb7c7afdea37a0bf1b9ba838aa3e074d64b0d9b950ebc7ff1dae87892fad0f44cc6d56828101d640584b45358ace20076f19a78aa503300" + "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", - "content" : "af7cbc6d6ba74d974665529431a57de332c69cf5bd5080368015de28e7a9f652c2daa777e78bec68350c95d168ec2280" + "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" }, { "alg" : "SHA3-384", - "content" : "22dfb21741aef07351a10123e1531db56cac4b2a158fdcf27d6ebc937b9e23169926741c27b9dcec2a29acc866549f38" + "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" }, { "alg" : "SHA3-256", - "content" : "3a97502a187ede8286a82c46af76cc8088e6b75de7f971a03ce0845ee5163ca6" + "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" }, { "alg" : "SHA3-512", - "content" : "9e814868255af14978947519b640d362f41bfddda6c9e47caf07e31403c2b0a64776e521d77b7df56a8970f173a509ec01e667b0863b11738b45ab6fadddfff1" + "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" } ], "licenses" : [ @@ -117,47 +117,48 @@ } } ], - "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar", + "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar" + "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" }, { - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.18.0", + "group" : "com.googlecode.owasp-java-html-sanitizer", + "name" : "owasp-java-html-sanitizer", + "version" : "20211018.2", + "description" : "Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.", "hashes" : [ { "alg" : "MD5", - "content" : "64145d0e7fee5a69ed7b84cf402de998" + "content" : "5b0008f2b94e1d3100de8d3cdcb670cb" }, { "alg" : "SHA-1", - "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" + "content" : "a3226c13cf72633122e94810a53e60529dae2b80" }, { "alg" : "SHA-256", - "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" + "content" : "48234cd74e35d91a31a683820a35b5b6d11b55527f32a5b162c6757408b95d7a" }, { "alg" : "SHA-512", - "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" + "content" : "2aa772e369e93ae10fff441e063f0439ab36d87803dfcd76b492dbe61848c2b976649a921b9518c6dff9e8751dc9bff0802e1ef793d8cdb232f8e0da77e34732" }, { "alg" : "SHA-384", - "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" + "content" : "0caedafcf42e8a2e6a7a10665f48c9ae5cdbb586bbd5337bd63600a91362ec329c12558ce4d967f42ea7d7c83769e69f" }, { "alg" : "SHA3-384", - "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" + "content" : "aae645eb112a6d5bce213a766a6cf76df828545df07438340b007e9eb8db546e62b2a01d94385daea86bfb7b1952c34a" }, { "alg" : "SHA3-256", - "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" + "content" : "c805dca696ff5b10f8c21fca1e99c0771d3778507888ab7da4aa939a6c770e61" }, { "alg" : "SHA3-512", - "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" + "content" : "851caf550ca3f5cf9ff38c0961d18c60e752df41b6a8a28a8c856ea8e421cc9de7090155f688cffc889b576aa4ff0558b1138b1810ed25b135c1f68509c8be7f" } ], "licenses" : [ @@ -167,150 +168,123 @@ } } ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", + "purl" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" + "bom-ref" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar" }, { - "group" : "org.apache.httpcomponents.client5", - "name" : "httpclient5", - "version" : "5.2.1", - "description" : "Apache HttpComponents Client", + "publisher" : "JUnit", + "group" : "junit", + "name" : "junit", + "version" : "4.13.1", + "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "hashes" : [ { "alg" : "MD5", - "content" : "fbbefc687f2e0c55b34b77edf53d486a" + "content" : "83d91f209ddcb104776fa41c448c7ee2" }, { "alg" : "SHA-1", - "content" : "0c900514d3446d9ce5d9dbd90c21192048125440" + "content" : "cdd00374f1fee76b11e2a9d127405aa3f6be5b6a" }, { "alg" : "SHA-256", - "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51" + "content" : "c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122" }, { "alg" : "SHA-512", - "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b" + "content" : "29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f" }, { "alg" : "SHA-384", - "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54" + "content" : "f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160" }, { "alg" : "SHA3-384", - "content" : "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361" + "content" : "79a11e53c134bf2a6fcffd64b1371bacdcbda3eff96094970a5123fb9eaca195044313a647ed7bfa21c0ef9f36994bd2" }, { "alg" : "SHA3-256", - "content" : "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35" + "content" : "2c44fd3ad2e0e1f2f5ce27f9efd357cecdeb38d074ac8bb23fbd7be683c53e99" }, { "alg" : "SHA3-512", - "content" : "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10" + "content" : "c34310659381936cf3f16a58f90372a2a3829e020889a7cab118127e6c96e5dc120f350a89d56abfffbfe1862aca51e8e419f48429fb8e5ea3a54f0b3ef809c2" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "EPL-1.0", + "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], - "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", + "purl" : "pkg:maven/junit/junit@4.13.1?type=jar", "modified" : false, - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar" - }, - { - "group" : "com.google.guava", - "name" : "failureaccess", - "version" : "1.0.1", - "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", - "hashes" : [ - { - "alg" : "MD5", - "content" : "091883993ef5bfa91da01dcc8fc52236" - }, - { - "alg" : "SHA-1", - "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" - }, - { - "alg" : "SHA-256", - "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" - }, + "externalReferences" : [ { - "alg" : "SHA-512", - "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + "type" : "website", + "url" : "http://www.junit.org" }, { - "alg" : "SHA-384", - "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + "type" : "build-system", + "url" : "https://travis-ci.org/junit-team/junit4" }, { - "alg" : "SHA3-384", - "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + "type" : "distribution", + "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { - "alg" : "SHA3-256", - "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + "type" : "issue-tracker", + "url" : "https://github.com/junit-team/junit4/issues" }, { - "alg" : "SHA3-512", - "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } + "type" : "vcs", + "url" : "https://github.com/junit-team/junit4" } ], - "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", - "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" + "bom-ref" : "pkg:maven/junit/junit@4.13.1?type=jar" }, { - "group" : "org.apache.httpcomponents.core5", - "name" : "httpcore5-h2", - "version" : "5.2", - "description" : "Apache HttpComponents HTTP/2 Core Components", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "hashes" : [ { "alg" : "MD5", - "content" : "272112133e0dd0559efdd8f5e615a344" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ @@ -320,10 +294,16 @@ } } ], - "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "modified" : false, + "externalReferences" : [ + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { "group" : "commons-io", @@ -387,178 +367,200 @@ "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" }, { - "publisher" : "JUnit", - "group" : "junit", - "name" : "junit", - "version" : "4.13.1", - "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", + "group" : "org.hamcrest", + "name" : "hamcrest-core", + "version" : "1.3", + "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "hashes" : [ { "alg" : "MD5", - "content" : "83d91f209ddcb104776fa41c448c7ee2" + "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", - "content" : "cdd00374f1fee76b11e2a9d127405aa3f6be5b6a" + "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", - "content" : "c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122" + "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", - "content" : "29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f" + "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", - "content" : "f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160" + "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" }, { "alg" : "SHA3-384", - "content" : "79a11e53c134bf2a6fcffd64b1371bacdcbda3eff96094970a5123fb9eaca195044313a647ed7bfa21c0ef9f36994bd2" + "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" }, { "alg" : "SHA3-256", - "content" : "2c44fd3ad2e0e1f2f5ce27f9efd357cecdeb38d074ac8bb23fbd7be683c53e99" + "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" }, { "alg" : "SHA3-512", - "content" : "c34310659381936cf3f16a58f90372a2a3829e020889a7cab118127e6c96e5dc120f350a89d56abfffbfe1862aca51e8e419f48429fb8e5ea3a54f0b3ef809c2" + "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" } ], "licenses" : [ { "license" : { - "id" : "EPL-1.0", - "url" : "http://www.eclipse.org/legal/epl-v10.html" + "id" : "BSD-3-Clause" } } ], - "purl" : "pkg:maven/junit/junit@4.13.1?type=jar", + "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "modified" : false, - "externalReferences" : [ + "type" : "library", + "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" + }, + { + "group" : "com.google.guava", + "name" : "listenablefuture", + "version" : "9999.0-empty-to-avoid-conflict-with-guava", + "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "hashes" : [ { - "type" : "website", - "url" : "http://www.junit.org" + "alg" : "MD5", + "content" : "d094c22570d65e132c19cea5d352e381" }, { - "type" : "build-system", - "url" : "https://travis-ci.org/junit-team/junit4" + "alg" : "SHA-1", + "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { - "type" : "distribution", - "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" + "alg" : "SHA-256", + "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { - "type" : "issue-tracker", - "url" : "https://github.com/junit-team/junit4/issues" + "alg" : "SHA-512", + "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { - "type" : "vcs", - "url" : "https://github.com/junit-team/junit4" + "alg" : "SHA-384", + "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + }, + { + "alg" : "SHA3-384", + "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + }, + { + "alg" : "SHA3-256", + "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + }, + { + "alg" : "SHA3-512", + "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } } ], + "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/junit/junit@4.13.1?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.12.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.checkerframework", + "name" : "checker-qual", + "version" : "3.33.0", + "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "hashes" : [ { "alg" : "MD5", - "content" : "19fe50567358922bdad277959ea69545" + "content" : "fc9418b779d9d57dcd52197006cbdb9b" }, { "alg" : "SHA-1", - "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e" + "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" }, { "alg" : "SHA-256", - "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e" + "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" }, { "alg" : "SHA-512", - "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81" + "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" }, { "alg" : "SHA-384", - "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc" + "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" }, { "alg" : "SHA3-384", - "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def" + "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" }, { "alg" : "SHA3-256", - "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c" + "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" }, { "alg" : "SHA3-512", - "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da" + "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "MIT" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", + "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "modified" : false, "externalReferences" : [ - { - "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/typetools/checker-framework.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" + "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" }, { - "group" : "org.apache.pdfbox", - "name" : "fontbox", - "version" : "2.0.30", - "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.18.0", "hashes" : [ { "alg" : "MD5", - "content" : "3a7b597c9dbd56e18455e6efca52cbb3" + "content" : "64145d0e7fee5a69ed7b84cf402de998" }, { "alg" : "SHA-1", - "content" : "555e5d59a4d83c95c4330f018a6c32861880b6df" + "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" }, { "alg" : "SHA-256", - "content" : "aae7518f9c17d347531e63b22a46de582cb78f7e45d079a78a79dc9bdb23f8ba" + "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" }, { "alg" : "SHA-512", - "content" : "61eb46fee25826a8b0750fbe3823504e043f7e809f6ac3d144a1ba773195de29ebcffe30faee1bc9d2db50c94c45ebf65b67eb19e3358dbabf7878d36f133396" + "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" }, { "alg" : "SHA-384", - "content" : "ca4ccf8281e1b481f83b8e156a3c2cfab0590f3d0a0a19f9cf80997966170affb01da293bacb880ae70ff8e6f54deb0e" + "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" }, { "alg" : "SHA3-384", - "content" : "184a9a72f221f34fb98b9d5e132b74b18bab569b8f6e86a5e1e7b88e5d6f82095607809e2cd98620f43cdbd3efd0b277" + "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" }, { "alg" : "SHA3-256", - "content" : "1c1333b59673e8caf3db1fc6453ce9c799b133faaee9017c2860a03257107325" + "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" }, { "alg" : "SHA3-512", - "content" : "4b018c517e51185debe39adc9237728b6a189cbfc8053bc8401fa2c115f2a40c1e242b5ce1ebf0339480bc332bd4681e9a3dcbb1c4c5bc8d7fca16f202e3ef5b" + "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" } ], "licenses" : [ @@ -568,10 +570,10 @@ } } ], - "purl" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" }, { "group" : "org.slf4j", @@ -627,41 +629,41 @@ }, { "group" : "com.google.guava", - "name" : "listenablefuture", - "version" : "9999.0-empty-to-avoid-conflict-with-guava", - "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "name" : "guava", + "version" : "32.0.1-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "hashes" : [ { "alg" : "MD5", - "content" : "d094c22570d65e132c19cea5d352e381" + "content" : "6951895e804b36322214c95917e598d4" }, { "alg" : "SHA-1", - "content" : "b421526c5f297295adef1c886e5246c39d4ac629" + "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" }, { "alg" : "SHA-256", - "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" + "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" }, { "alg" : "SHA-512", - "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" + "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" }, { "alg" : "SHA-384", - "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" }, { "alg" : "SHA3-384", - "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" }, { "alg" : "SHA3-256", - "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" }, { "alg" : "SHA3-512", - "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" } ], "licenses" : [ @@ -671,48 +673,48 @@ } } ], - "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.12.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "19fe50567358922bdad277959ea69545" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da" } ], "licenses" : [ @@ -722,54 +724,58 @@ } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "modified" : false, "externalReferences" : [ + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" }, { "group" : "org.apache.pdfbox", - "name" : "pdfbox", + "name" : "fontbox", "version" : "2.0.30", - "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents.", + "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.", "hashes" : [ { "alg" : "MD5", - "content" : "da9a5490ecf28832ee6d003f9bcd95bd" + "content" : "3a7b597c9dbd56e18455e6efca52cbb3" }, { "alg" : "SHA-1", - "content" : "730753a91f7f2c574eb09a8af7288065d1e551bd" + "content" : "555e5d59a4d83c95c4330f018a6c32861880b6df" }, { "alg" : "SHA-256", - "content" : "abb468d07abe76e34efb3337d1cfd48e365241623320e277e8341ce3cd670760" + "content" : "aae7518f9c17d347531e63b22a46de582cb78f7e45d079a78a79dc9bdb23f8ba" }, { "alg" : "SHA-512", - "content" : "3727ede4a890c7c5c23e048fa037e013e8a3c85fcbe014e239c8c4dc7044a45b1143c4d773973f4f78032fb98d427486dd38f79f22dd6fb62dd713fee82e754f" + "content" : "61eb46fee25826a8b0750fbe3823504e043f7e809f6ac3d144a1ba773195de29ebcffe30faee1bc9d2db50c94c45ebf65b67eb19e3358dbabf7878d36f133396" }, { "alg" : "SHA-384", - "content" : "d191b697ea322c23fe8a142fae04b8d84eb67d9852af5f7d89caf85db4c6573eafc830093f51edaa1622e6330090e860" + "content" : "ca4ccf8281e1b481f83b8e156a3c2cfab0590f3d0a0a19f9cf80997966170affb01da293bacb880ae70ff8e6f54deb0e" }, { "alg" : "SHA3-384", - "content" : "ba9f6d207a618edf1f9d496731538f2e774ce1238fb8252665cb1efedd4d17c85e319663cf2b8c9bd415ee17ea926bda" + "content" : "184a9a72f221f34fb98b9d5e132b74b18bab569b8f6e86a5e1e7b88e5d6f82095607809e2cd98620f43cdbd3efd0b277" }, { "alg" : "SHA3-256", - "content" : "9b62e73a41d0f73b805918bbc2c9da4c60e86d454366bf9ae56917264fc8d085" + "content" : "1c1333b59673e8caf3db1fc6453ce9c799b133faaee9017c2860a03257107325" }, { "alg" : "SHA3-512", - "content" : "41f714619824293519067fd3ba3e7295595f447778e60b21209bd09a46222af0d8492d7cc6a72e1d16012d727402c9e3a1767959be788c5e3a49ad537f3bf3ad" + "content" : "4b018c517e51185debe39adc9237728b6a189cbfc8053bc8401fa2c115f2a40c1e242b5ce1ebf0339480bc332bd4681e9a3dcbb1c4c5bc8d7fca16f202e3ef5b" } ], "licenses" : [ @@ -779,105 +785,99 @@ } } ], - "purl" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar", + "purl" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar" + "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.33.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "group" : "org.apache.httpcomponents.core5", + "name" : "httpcore5", + "version" : "5.2", + "description" : "Apache HttpComponents HTTP/1.1 core components", "hashes" : [ { "alg" : "MD5", - "content" : "fc9418b779d9d57dcd52197006cbdb9b" + "content" : "3a40241f9a99cf063f347dfb73c5c4e8" }, { "alg" : "SHA-1", - "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" + "content" : "ab7d251b8dfa3f2878f1eefbcca0e1fc0ebeba27" }, { "alg" : "SHA-256", - "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" + "content" : "293321cbf594d79ea8a0cb0214f75f146d17f088be17ad5ce11c2fe864df124c" }, { "alg" : "SHA-512", - "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" + "content" : "214dcc370a8ca0c7fdb7c7afdea37a0bf1b9ba838aa3e074d64b0d9b950ebc7ff1dae87892fad0f44cc6d56828101d640584b45358ace20076f19a78aa503300" }, { "alg" : "SHA-384", - "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" + "content" : "af7cbc6d6ba74d974665529431a57de332c69cf5bd5080368015de28e7a9f652c2daa777e78bec68350c95d168ec2280" }, { "alg" : "SHA3-384", - "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" + "content" : "22dfb21741aef07351a10123e1531db56cac4b2a158fdcf27d6ebc937b9e23169926741c27b9dcec2a29acc866549f38" }, { "alg" : "SHA3-256", - "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" + "content" : "3a97502a187ede8286a82c46af76cc8088e6b75de7f971a03ce0845ee5163ca6" }, { "alg" : "SHA3-512", - "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" + "content" : "9e814868255af14978947519b640d362f41bfddda6c9e47caf07e31403c2b0a64776e521d77b7df56a8970f173a509ec01e667b0863b11738b45ab6fadddfff1" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar", "modified" : false, - "externalReferences" : [ - { - "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" - } - ], "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar" }, { - "group" : "com.google.j2objc", - "name" : "j2objc-annotations", - "version" : "2.8", - "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", + "group" : "org.apache.httpcomponents.core5", + "name" : "httpcore5-h2", + "version" : "5.2", + "description" : "Apache HttpComponents HTTP/2 Core Components", "hashes" : [ { "alg" : "MD5", - "content" : "c50af69b704dc91050efb98e0dff66d1" + "content" : "272112133e0dd0559efdd8f5e615a344" }, { "alg" : "SHA-1", - "content" : "c85270e307e7b822f1086b93689124b89768e273" + "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16" }, { "alg" : "SHA-256", - "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" + "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578" }, { "alg" : "SHA-512", - "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" + "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1" }, { "alg" : "SHA-384", - "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" + "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63" }, { "alg" : "SHA3-384", - "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" + "content" : "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256" }, { "alg" : "SHA3-256", - "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" + "content" : "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d" }, { "alg" : "SHA3-512", - "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" + "content" : "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32" } ], "licenses" : [ @@ -887,48 +887,48 @@ } } ], - "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" }, { - "group" : "com.googlecode.owasp-java-html-sanitizer", - "name" : "owasp-java-html-sanitizer", - "version" : "20211018.2", - "description" : "Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.", + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.1", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "hashes" : [ { "alg" : "MD5", - "content" : "5b0008f2b94e1d3100de8d3cdcb670cb" + "content" : "091883993ef5bfa91da01dcc8fc52236" }, { "alg" : "SHA-1", - "content" : "a3226c13cf72633122e94810a53e60529dae2b80" + "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" }, { "alg" : "SHA-256", - "content" : "48234cd74e35d91a31a683820a35b5b6d11b55527f32a5b162c6757408b95d7a" + "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" }, { "alg" : "SHA-512", - "content" : "2aa772e369e93ae10fff441e063f0439ab36d87803dfcd76b492dbe61848c2b976649a921b9518c6dff9e8751dc9bff0802e1ef793d8cdb232f8e0da77e34732" + "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" }, { "alg" : "SHA-384", - "content" : "0caedafcf42e8a2e6a7a10665f48c9ae5cdbb586bbd5337bd63600a91362ec329c12558ce4d967f42ea7d7c83769e69f" + "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" }, { "alg" : "SHA3-384", - "content" : "aae645eb112a6d5bce213a766a6cf76df828545df07438340b007e9eb8db546e62b2a01d94385daea86bfb7b1952c34a" + "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" }, { "alg" : "SHA3-256", - "content" : "c805dca696ff5b10f8c21fca1e99c0771d3778507888ab7da4aa939a6c770e61" + "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" }, { "alg" : "SHA3-512", - "content" : "851caf550ca3f5cf9ff38c0961d18c60e752df41b6a8a28a8c856ea8e421cc9de7090155f688cffc889b576aa4ff0558b1138b1810ed25b135c1f68509c8be7f" + "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" } ], "licenses" : [ @@ -938,99 +938,99 @@ } } ], - "purl" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar", + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" }, { - "group" : "org.hamcrest", - "name" : "hamcrest-core", - "version" : "1.3", - "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", + "group" : "org.apache.httpcomponents.client5", + "name" : "httpclient5", + "version" : "5.2.1", + "description" : "Apache HttpComponents Client", "hashes" : [ { "alg" : "MD5", - "content" : "6393363b47ddcbba82321110c3e07519" + "content" : "fbbefc687f2e0c55b34b77edf53d486a" }, { "alg" : "SHA-1", - "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" + "content" : "0c900514d3446d9ce5d9dbd90c21192048125440" }, { "alg" : "SHA-256", - "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" + "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51" }, { "alg" : "SHA-512", - "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" + "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b" }, { "alg" : "SHA-384", - "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" + "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54" }, { "alg" : "SHA3-384", - "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" + "content" : "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361" }, { "alg" : "SHA3-256", - "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" + "content" : "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35" }, { "alg" : "SHA3-512", - "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" + "content" : "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar" }, { - "group" : "commons-logging", - "name" : "commons-logging", - "version" : "1.2", - "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.10.0", + "description" : "Apache Commons Text is a library focused on algorithms working on strings.", "hashes" : [ { "alg" : "MD5", - "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00" + "content" : "4afc9bfa2d31dbf7330c98fcc954b892" }, { "alg" : "SHA-1", - "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686" + "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" }, { "alg" : "SHA-256", - "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636" + "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" }, { "alg" : "SHA-512", - "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557" + "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" }, { "alg" : "SHA-384", - "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c" + "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" }, { "alg" : "SHA3-384", - "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078" + "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" }, { "alg" : "SHA3-256", - "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807" + "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" }, { "alg" : "SHA3-512", - "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552" + "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" } ], "licenses" : [ @@ -1040,58 +1040,58 @@ } } ], - "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "modified" : false, "externalReferences" : [ { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LOGGING" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "vcs", - "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" }, { - "group" : "org.apache.commons", - "name" : "commons-text", - "version" : "1.10.0", - "description" : "Apache Commons Text is a library focused on algorithms working on strings.", + "group" : "commons-logging", + "name" : "commons-logging", + "version" : "1.2", + "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.", "hashes" : [ { "alg" : "MD5", - "content" : "4afc9bfa2d31dbf7330c98fcc954b892" + "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00" }, { "alg" : "SHA-1", - "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" + "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686" }, { "alg" : "SHA-256", - "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" + "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636" }, { "alg" : "SHA-512", - "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" + "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557" }, { "alg" : "SHA-384", - "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" + "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c" }, { "alg" : "SHA3-384", - "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" + "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078" }, { "alg" : "SHA3-256", - "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" + "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807" }, { "alg" : "SHA3-512", - "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" + "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552" } ], "licenses" : [ @@ -1101,20 +1101,20 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", + "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar", "modified" : false, "externalReferences" : [ { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/TEXT" + "url" : "http://issues.apache.org/jira/browse/LOGGING" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" + "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" + "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar" } ], "dependencies" : [