{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:afc5f35f-a57d-4193-af36-8ee73bd9b739",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-09T20:01:59Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.158",
          "manufacturer": {
            "name": "CloudLinux"
          }
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.springframework/spring-web@2.5.4-tuxcare.1",
      "group": "org.springframework",
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@2.5.4-tuxcare.1",
      "version": "2.5.4-tuxcare.1",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
      "group": "commons-beanutils",
      "name": "commons-beanutils",
      "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
      "version": "1.7.0",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "group": "commons-logging",
      "name": "commons-logging",
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "version": "1.1.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-fileupload/commons-fileupload@1.2",
      "group": "commons-fileupload",
      "name": "commons-fileupload",
      "purl": "pkg:maven/commons-fileupload/commons-fileupload@1.2",
      "version": "1.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-httpclient/commons-httpclient@3.1",
      "group": "commons-httpclient",
      "name": "commons-httpclient",
      "purl": "pkg:maven/commons-httpclient/commons-httpclient@3.1",
      "version": "3.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.2",
      "group": "commons-codec",
      "name": "commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.2",
      "version": "1.2",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/hessian/hessian@3.1.3",
      "group": "hessian",
      "name": "hessian",
      "purl": "pkg:maven/hessian/hessian@3.1.3",
      "version": "3.1.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.faces/jsf-api@1.1",
      "group": "javax.faces",
      "name": "jsf-api",
      "purl": "pkg:maven/javax.faces/jsf-api@1.1",
      "version": "1.1",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.servlet/jsp-api@2.0",
      "group": "javax.servlet",
      "name": "jsp-api",
      "purl": "pkg:maven/javax.servlet/jsp-api@2.0",
      "version": "2.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.servlet/servlet-api@2.4",
      "group": "javax.servlet",
      "name": "servlet-api",
      "purl": "pkg:maven/javax.servlet/servlet-api@2.4",
      "version": "2.4",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/log4j/log4j@1.2.15",
      "group": "log4j",
      "name": "log4j",
      "purl": "pkg:maven/log4j/log4j@1.2.15",
      "version": "1.2.15",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.mail/mail@1.4",
      "group": "javax.mail",
      "name": "mail",
      "purl": "pkg:maven/javax.mail/mail@1.4",
      "version": "1.4",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Common Development and Distribution License (CDDL) v1.0",
            "url": "https://glassfish.dev.java.net/public/CDDLv1.0.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.activation/activation@1.1",
      "group": "javax.activation",
      "name": "activation",
      "purl": "pkg:maven/javax.activation/activation@1.1",
      "version": "1.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Common Development and Distribution License (CDDL) v1.0",
            "url": "https://glassfish.dev.java.net/public/CDDLv1.0.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.jms/jms@1.1",
      "group": "javax.jms",
      "name": "jms",
      "purl": "pkg:maven/javax.jms/jms@1.1",
      "version": "1.1",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.jdmk/jmxtools@1.2.1",
      "group": "com.sun.jdmk",
      "name": "jmxtools",
      "purl": "pkg:maven/com.sun.jdmk/jmxtools@1.2.1",
      "version": "1.2.1",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.jmx/jmxri@1.2.1",
      "group": "com.sun.jmx",
      "name": "jmxri",
      "purl": "pkg:maven/com.sun.jmx/jmxri@1.2.1",
      "version": "1.2.1",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.axis/axis@1.4",
      "group": "org.apache.axis",
      "name": "axis",
      "purl": "pkg:maven/org.apache.axis/axis@1.4",
      "version": "1.4",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/struts/struts@1.2.9",
      "group": "struts",
      "name": "struts",
      "purl": "pkg:maven/struts/struts@1.2.9",
      "version": "1.2.9",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.6",
      "group": "commons-digester",
      "name": "commons-digester",
      "purl": "pkg:maven/commons-digester/commons-digester@1.6",
      "version": "1.6",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-collections/commons-collections@2.1",
      "group": "commons-collections",
      "name": "commons-collections",
      "purl": "pkg:maven/commons-collections/commons-collections@2.1",
      "version": "2.1",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xml-apis/xml-apis@1.0.b2",
      "group": "xml-apis",
      "name": "xml-apis",
      "purl": "pkg:maven/xml-apis/xml-apis@1.0.b2",
      "version": "1.0.b2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-validator/commons-validator@1.1.4",
      "group": "commons-validator",
      "name": "commons-validator",
      "purl": "pkg:maven/commons-validator/commons-validator@1.1.4",
      "version": "1.1.4",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/oro/oro@2.0.7",
      "group": "oro",
      "name": "oro",
      "purl": "pkg:maven/oro/oro@2.0.7",
      "version": "2.0.7",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/antlr/antlr@2.7.2",
      "group": "antlr",
      "name": "antlr",
      "purl": "pkg:maven/antlr/antlr@2.7.2",
      "version": "2.7.2",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xalan/xalan@2.5.1",
      "group": "xalan",
      "name": "xalan",
      "purl": "pkg:maven/xalan/xalan@2.5.1",
      "version": "2.5.1",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/taglibs/standard@1.1.2",
      "group": "taglibs",
      "name": "standard",
      "purl": "pkg:maven/taglibs/standard@1.1.2",
      "version": "1.1.2",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@2.5.4-tuxcare.1",
      "group": "org.springframework",
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@2.5.4-tuxcare.1",
      "version": "2.5.4-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1",
      "group": "org.springframework",
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1",
      "version": "2.5.4-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.springframework/spring-context@2.5.4-tuxcare.1",
      "group": "org.springframework",
      "name": "spring-context",
      "purl": "pkg:maven/org.springframework/spring-context@2.5.4-tuxcare.1",
      "version": "2.5.4-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0",
      "group": "aopalliance",
      "name": "aopalliance",
      "purl": "pkg:maven/aopalliance/aopalliance@1.0",
      "version": "1.0",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@2.5.4-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
        "pkg:maven/commons-fileupload/commons-fileupload@1.2",
        "pkg:maven/commons-httpclient/commons-httpclient@3.1",
        "pkg:maven/commons-logging/commons-logging@1.1.1",
        "pkg:maven/hessian/hessian@3.1.3",
        "pkg:maven/javax.faces/jsf-api@1.1",
        "pkg:maven/javax.servlet/jsp-api@2.0",
        "pkg:maven/javax.servlet/servlet-api@2.4",
        "pkg:maven/log4j/log4j@1.2.15",
        "pkg:maven/org.apache.axis/axis@1.4",
        "pkg:maven/org.springframework/spring-beans@2.5.4-tuxcare.1",
        "pkg:maven/org.springframework/spring-context@2.5.4-tuxcare.1",
        "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1",
        "pkg:maven/struts/struts@1.2.9",
        "pkg:maven/taglibs/standard@1.1.2"
      ]
    },
    {
      "ref": "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.1.1"
      ]
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-fileupload/commons-fileupload@1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-httpclient/commons-httpclient@3.1",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.2",
        "pkg:maven/commons-logging/commons-logging@1.1.1"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/hessian/hessian@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.faces/jsf-api@1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.servlet/jsp-api@2.0",
      "dependsOn": [
        "pkg:maven/javax.servlet/servlet-api@2.4"
      ]
    },
    {
      "ref": "pkg:maven/javax.servlet/servlet-api@2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/log4j/log4j@1.2.15",
      "dependsOn": [
        "pkg:maven/com.sun.jdmk/jmxtools@1.2.1",
        "pkg:maven/com.sun.jmx/jmxri@1.2.1",
        "pkg:maven/javax.jms/jms@1.1",
        "pkg:maven/javax.mail/mail@1.4"
      ]
    },
    {
      "ref": "pkg:maven/javax.mail/mail@1.4",
      "dependsOn": [
        "pkg:maven/javax.activation/activation@1.1"
      ]
    },
    {
      "ref": "pkg:maven/javax.activation/activation@1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.jms/jms@1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.jdmk/jmxtools@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.jmx/jmxri@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.axis/axis@1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/struts/struts@1.2.9",
      "dependsOn": [
        "pkg:maven/antlr/antlr@2.7.2",
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
        "pkg:maven/commons-digester/commons-digester@1.6",
        "pkg:maven/commons-fileupload/commons-fileupload@1.2",
        "pkg:maven/commons-logging/commons-logging@1.1.1",
        "pkg:maven/commons-validator/commons-validator@1.1.4",
        "pkg:maven/oro/oro@2.0.7",
        "pkg:maven/xalan/xalan@2.5.1"
      ]
    },
    {
      "ref": "pkg:maven/commons-digester/commons-digester@1.6",
      "dependsOn": [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0",
        "pkg:maven/commons-collections/commons-collections@2.1",
        "pkg:maven/commons-logging/commons-logging@1.1.1",
        "pkg:maven/xml-apis/xml-apis@1.0.b2"
      ]
    },
    {
      "ref": "pkg:maven/commons-collections/commons-collections@2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/xml-apis/xml-apis@1.0.b2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-validator/commons-validator@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/oro/oro@2.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/antlr/antlr@2.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/xalan/xalan@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/taglibs/standard@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.springframework/spring-beans@2.5.4-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.1.1",
        "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.1.1"
      ]
    },
    {
      "ref": "pkg:maven/org.springframework/spring-context@2.5.4-tuxcare.1",
      "dependsOn": [
        "pkg:maven/aopalliance/aopalliance@1.0",
        "pkg:maven/commons-logging/commons-logging@1.1.1",
        "pkg:maven/org.springframework/spring-beans@2.5.4-tuxcare.1",
        "pkg:maven/org.springframework/spring-core@2.5.4-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/aopalliance/aopalliance@1.0",
      "dependsOn": []
    }
  ]
}