diff --git a/cyclonedx_py/_internal/environment.py b/cyclonedx_py/_internal/environment.py
index daa58ad3..9a9bb088 100644
--- a/cyclonedx_py/_internal/environment.py
+++ b/cyclonedx_py/_internal/environment.py
@@ -202,7 +202,7 @@ def __finalize_dependencies(self, bom: 'Bom', all_components: 'T_AllComponents')
                 req_component.properties.update(
                     Property(
                         name=PropertyName.PackageExtra.value,
-                        value=extra
+                        value=normalize_packagename(extra)
                     ) for extra in req.extras
                 )
             bom.register_dependency(component, component_deps)
diff --git a/cyclonedx_py/_internal/pipenv.py b/cyclonedx_py/_internal/pipenv.py
index 07940afc..da1b8b99 100644
--- a/cyclonedx_py/_internal/pipenv.py
+++ b/cyclonedx_py/_internal/pipenv.py
@@ -21,7 +21,7 @@
 from os import getenv
 from os.path import join
 from textwrap import dedent
-from typing import TYPE_CHECKING, Any, Dict, Generator, List, Optional, Set, Tuple
+from typing import TYPE_CHECKING, Any, Dict, FrozenSet, Generator, List, Optional, Set, Tuple
 
 from cyclonedx.exception.model import InvalidUriException, UnknownHashTypeException
 from cyclonedx.model import ExternalReference, ExternalReferenceType, HashType, Property, XsUri
@@ -132,10 +132,10 @@ def __call__(self, *,  # type:ignore[override]
 
             return self._make_bom(rc,
                                   json_loads(lock.read()),
-                                  lock_groups)
+                                  frozenset(lock_groups))
 
     def _make_bom(self, root_c: Optional['Component'],
-                  locker: 'NameDict', use_groups: Set[str]) -> 'Bom':
+                  locker: 'NameDict', use_groups: FrozenSet[str]) -> 'Bom':
         self._logger.debug('use_groups: %r', use_groups)
 
         bom = make_bom()
@@ -181,10 +181,12 @@ def _make_bom(self, root_c: Optional['Component'],
                     name=PropertyName.PipenvCategory.value,
                     value=group_name
                 ))
-                component.properties.update(Property(
-                    name=PropertyName.PackageExtra.value,
-                    value=package_extra
-                ) for package_extra in package_data.get('extras', ()))
+                component.properties.update(
+                    Property(
+                        name=PropertyName.PackageExtra.value,
+                        value=normalize_packagename(package_extra)
+                    ) for package_extra in package_data.get('extras', ())
+                )
 
         return bom
 
diff --git a/cyclonedx_py/_internal/poetry.py b/cyclonedx_py/_internal/poetry.py
index a78c2f07..531c55a5 100644
--- a/cyclonedx_py/_internal/poetry.py
+++ b/cyclonedx_py/_internal/poetry.py
@@ -21,7 +21,7 @@
 from itertools import chain
 from os.path import join
 from textwrap import dedent
-from typing import TYPE_CHECKING, Any, Dict, Generator, Iterable, List, Set, Tuple
+from typing import TYPE_CHECKING, Any, Dict, FrozenSet, Generator, Iterable, List, Tuple
 
 from cyclonedx.exception.model import InvalidUriException, UnknownHashTypeException
 from cyclonedx.model import ExternalReference, ExternalReferenceType, HashType, Property, XsUri
@@ -44,21 +44,19 @@
     from cyclonedx.model.bom import Bom
     from cyclonedx.model.component import ComponentType
 
-    NameDict = Dict[str, Any]
+    T_NameDict = Dict[str, Any]
+    T_LockData = Dict[str, List['_LockEntry']]
 
 
 @dataclass
 class _LockEntry:
     name: str
     component: Component
-    dependencies: Dict[str, 'NameDict']  # keys MUST go through `normalize_packagename()`
+    dependencies: Dict[str, 'T_NameDict']  # keys MUST go through `normalize_packagename()`
     extras: Dict[str, List[str]]  # keys MUST go through `normalize_packagename()`
     added2bom: bool
 
 
-_LockData = Dict[str, List[_LockEntry]]
-
-
 class GroupsNotFoundError(ValueError):
     def __init__(self, groups: Iterable[str]) -> None:
         self.__groups = frozenset(groups)
@@ -161,15 +159,18 @@ def __call__(self, *,  # type:ignore[override]
             po_cfg_group = po_cfg.setdefault('group', {})
             po_cfg_group.setdefault('main', {'dependencies': po_cfg.get('dependencies', {})})
             po_cfg_group.setdefault('dev', {'dependencies': po_cfg.get('dev-dependencies', {})})
-            po_cfg_extras = po_cfg.setdefault('extras', {})
+            po_cfg_extras = po_cfg['extras'] = {
+                normalize_packagename(en): es
+                for en, es in po_cfg.get('extras', {}).items()
+            }
 
             # the group-args shall mimic the ones from poetry, which uses comma-separated lists and multi-use
             # values be like: ['foo', 'bar,bazz'] -> ['foo', 'bar', 'bazz']
-            groups_only_s = set(filter(None, ','.join(groups_only).split(',')))
-            groups_with_s = set(filter(None, ','.join(groups_with).split(',')))
-            groups_without_s = set(filter(None, ','.join(groups_without).split(',')))
+            groups_only_s = frozenset(filter(None, ','.join(groups_only).split(',')))
+            groups_with_s = frozenset(filter(None, ','.join(groups_with).split(',')))
+            groups_without_s = frozenset(filter(None, ','.join(groups_without).split(',')))
             del groups_only, groups_with, groups_without
-            groups_not_found = set(
+            groups_not_found = frozenset(
                 (gn, srcn) for gns, srcn in [
                     (groups_only_s, 'only'),
                     (groups_with_s, 'with'),
@@ -182,27 +183,30 @@ def __call__(self, *,  # type:ignore[override]
                 raise ValueError('some Poetry groups are unknown') from groups_error
             del groups_not_found
 
-            # values be like: ['foo', 'bar,bazz'] -> ['foo', 'bar', 'bazz']
-            extras_s = set(filter(None, ','.join(extras).split(',')))
+            if all_extras:
+                extras_s = frozenset(po_cfg_extras)
+            else:
+                extras_s = frozenset(map(normalize_packagename,
+                                         # values be like: ['foo', 'bar,bazz'] -> ['foo', 'bar', 'bazz']
+                                         filter(None, ','.join(extras).split(','))))
+                extras_not_found = extras_s - po_cfg_extras.keys()
+                if len(extras_not_found) > 0:
+                    extras_error = ExtrasNotFoundError(extras_not_found)
+                    self._logger.error(extras_error)
+                    raise ValueError('some package extras are unknown') from extras_error
+                del extras_not_found
             del extras
-            extras_defined = set(po_cfg_extras)
-            extras_not_found = extras_s - extras_defined
-            if len(extras_not_found) > 0:
-                extras_error = ExtrasNotFoundError(extras_not_found)
-                self._logger.error(extras_error)
-                raise ValueError('some package extras are unknown') from extras_error
-            del extras_not_found
 
             # the group-args shall mimic the ones from Poetry.
             # Poetry handles this pseudo-exclusive-group of args programmatically
             if no_dev:
-                groups = {'main', }
+                groups = frozenset({'main', })
             elif len(groups_only_s) > 0:
                 groups = groups_only_s
             else:
                 # When used together, `--without` takes precedence over `--with`.
                 # see https://python-poetry.org/docs/managing-dependencies/#installing-group-dependencies
-                groups = set(
+                groups = frozenset(
                     gn for gn, gc in po_cfg['group'].items()
                     # all non-optionals and the `with`-whitelisted optionals
                     if not gc.get('optional') or gn in groups_with_s
@@ -212,12 +216,12 @@ def __call__(self, *,  # type:ignore[override]
             return self._make_bom(
                 project, toml_loads(lock.read()),
                 groups,
-                extras_defined if all_extras else extras_s,
+                extras_s,
                 mc_type,
             )
 
-    def _make_bom(self, project: 'NameDict', locker: 'NameDict',
-                  use_groups: Set[str], use_extras: Set[str],
+    def _make_bom(self, project: 'T_NameDict', locker: 'T_NameDict',
+                  use_groups: FrozenSet[str], use_extras: FrozenSet[str],
                   mc_type: 'ComponentType') -> 'Bom':
         self._logger.debug('use_groups: %r', use_groups)
         self._logger.debug('use_extras: %r', use_extras)
@@ -228,15 +232,17 @@ def _make_bom(self, project: 'NameDict', locker: 'NameDict',
 
         bom.metadata.component = root_c = poetry2component(po_cfg, type=mc_type)
         root_c.bom_ref.value = root_c.name
-        root_c.properties.update(Property(
-            name=PropertyName.PackageExtra.value,
-            value=extra
-        ) for extra in use_extras)
+        root_c.properties.update(
+            Property(
+                name=PropertyName.PackageExtra.value,
+                value=extra
+            ) for extra in use_extras
+        )
         self._logger.debug('root-component: %r', root_c)
         root_d = Dependency(root_c.bom_ref)
         bom.dependencies.add(root_d)
 
-        lock_data: '_LockData' = {}
+        lock_data: 'T_LockData' = {}
         for lock_entry in self._parse_lock(locker):
             _ld = lock_data.setdefault(lock_entry.name, [])
             _ldl = len(_ld)
@@ -256,8 +262,8 @@ def _make_bom(self, project: 'NameDict', locker: 'NameDict',
         )]
         del root_c_nname
 
-        use_extras_dep_names = set(map(normalize_packagename,
-                                       chain.from_iterable(po_cfg['extras'][e] for e in use_extras)))
+        use_extras_dep_names = frozenset(map(normalize_packagename,
+                                             chain.from_iterable(po_cfg['extras'][e] for e in use_extras)))
         for group_name in use_groups:
             for dep_name, dep_spec in po_cfg['group'][group_name].get('dependencies', {}).items():
                 dep_name = normalize_packagename(dep_name)
@@ -282,12 +288,7 @@ def _make_bom(self, project: 'NameDict', locker: 'NameDict',
 
         return bom
 
-    def __add_dep(self, bom: 'Bom', lock_entry: _LockEntry, use_extras: Iterable[str], lock_data: '_LockData') -> None:
-        use_extras = set(map(normalize_packagename, use_extras))
-        lock_entry.component.properties.update(Property(
-            name=PropertyName.PackageExtra.value,
-            value=extra
-        ) for extra in use_extras)
+    def __add_dep(self, bom: 'Bom', lock_entry: _LockEntry, use_extras: Iterable[str], lock_data: 'T_LockData') -> None:
         if lock_entry.added2bom:
             self._logger.debug('existing component: %r', lock_entry.component)
             lock_entry_dep = None
@@ -313,6 +314,13 @@ def __add_dep(self, bom: 'Bom', lock_entry: _LockEntry, use_extras: Iterable[str
                     lock_entry_dep.dependencies.add(Dependency(dep_lock_entry.component.bom_ref))
                     self.__add_dep(bom, dep_lock_entry, dep_spec.get('extras', ()), lock_data)
         if use_extras:
+            use_extras = frozenset(map(normalize_packagename, use_extras))
+            lock_entry.component.properties.update(
+                Property(
+                    name=PropertyName.PackageExtra.value,
+                    value=extra
+                ) for extra in use_extras
+            )
             lock_entry_dep = lock_entry_dep \
                 or next(filter(lambda d: d.ref is lock_entry.component.bom_ref, bom.dependencies))
             for req in map(
@@ -329,14 +337,14 @@ def __add_dep(self, bom: 'Bom', lock_entry: _LockEntry, use_extras: Iterable[str
                     self.__add_dep(bom, dep_lock_entry, req.extras, lock_data)
 
     @staticmethod
-    def _get_lockfile_version(locker: 'NameDict') -> Tuple[int, ...]:
+    def _get_lockfile_version(locker: 'T_NameDict') -> Tuple[int, ...]:
         return tuple(map(int, locker['metadata'].get('lock-version', '1.0').split('.')))
 
-    def _parse_lock(self, locker: 'NameDict') -> Generator[_LockEntry, None, None]:
+    def _parse_lock(self, locker: 'T_NameDict') -> Generator[_LockEntry, None, None]:
         lock_version = self._get_lockfile_version(locker)
         self._logger.debug('lock_version: %r', lock_version)
         metavar_files = locker.get('metadata', {}).get('files', {}) if lock_version < (2,) else {}
-        package: 'NameDict'
+        package: 'T_NameDict'
         for package in locker.get('package', []):
             package.setdefault('files', metavar_files.get(package['name'], []))
             yield _LockEntry(
@@ -356,7 +364,7 @@ def _parse_lock(self, locker: 'NameDict') -> Generator[_LockEntry, None, None]:
     __PACKAGE_SRC_VCS = ['git']  # not supported yet: hg, svn
     __PACKAGE_SRC_LOCAL = ['file', 'directory']
 
-    def __make_component4lock(self, package: 'NameDict') -> 'Component':
+    def __make_component4lock(self, package: 'T_NameDict') -> 'Component':
         source = package.get('source', {})
         is_vcs = source.get('type') in self.__PACKAGE_SRC_VCS
         is_local = source.get('type') in self.__PACKAGE_SRC_LOCAL
@@ -389,7 +397,7 @@ def __make_component4lock(self, package: 'NameDict') -> 'Component':
                             ) if not is_local else None
         )
 
-    def __purl_qualifiers4lock(self, package: 'NameDict') -> 'NameDict':
+    def __purl_qualifiers4lock(self, package: 'T_NameDict') -> 'T_NameDict':
         # see https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst
         qs = {}
 
@@ -414,7 +422,7 @@ def __purl_qualifiers4lock(self, package: 'NameDict') -> 'NameDict':
 
         return qs
 
-    def __extrefs4lock(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         source_type = package.get('source', {}).get('type', 'legacy')
         if 'legacy' == source_type:
             yield from self.__extrefs4lock_legacy(package)
@@ -427,7 +435,7 @@ def __extrefs4lock(self, package: 'NameDict') -> Generator['ExternalReference',
         elif source_type in self.__PACKAGE_SRC_VCS:
             yield from self.__extrefs4lock_vcs(package)
 
-    def __extrefs4lock_legacy(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock_legacy(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         source_url = redact_auth_from_url(package.get('source', {}).get('url', 'https://pypi.org/simple'))
         for file in package['files']:
             try:
@@ -441,7 +449,7 @@ def __extrefs4lock_legacy(self, package: 'NameDict') -> Generator['ExternalRefer
                 self._logger.debug('skipped dist-extRef for: %r | %r', package['name'], file, exc_info=error)
                 del error
 
-    def __extrefs4lock_url(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock_url(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         try:
             yield ExternalReference(
                 comment='from url',
@@ -452,7 +460,7 @@ def __extrefs4lock_url(self, package: 'NameDict') -> Generator['ExternalReferenc
         except (InvalidUriException, UnknownHashTypeException) as error:  # pragma: nocover
             self._logger.debug('skipped dist-extRef for: %r', package['name'], exc_info=error)
 
-    def __extrefs4lock_file(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock_file(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         try:
             yield ExternalReference(
                 comment='from file',
@@ -463,7 +471,7 @@ def __extrefs4lock_file(self, package: 'NameDict') -> Generator['ExternalReferen
         except (InvalidUriException, UnknownHashTypeException) as error:  # pragma: nocover
             self._logger.debug('skipped dist-extRef for: %r', package['name'], exc_info=error)
 
-    def __extrefs4lock_directory(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock_directory(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         try:
             yield ExternalReference(
                 comment='from directory',
@@ -474,7 +482,7 @@ def __extrefs4lock_directory(self, package: 'NameDict') -> Generator['ExternalRe
         except InvalidUriException as error:  # pragma: nocover
             self._logger.debug('skipped dist-extRef for: %r', package['name'], exc_info=error)
 
-    def __extrefs4lock_vcs(self, package: 'NameDict') -> Generator['ExternalReference', None, None]:
+    def __extrefs4lock_vcs(self, package: 'T_NameDict') -> Generator['ExternalReference', None, None]:
         source = package['source']
         vcs_ref = source.get('resolved_reference', source.get('reference', ''))
         try:
diff --git a/cyclonedx_py/_internal/requirements.py b/cyclonedx_py/_internal/requirements.py
index e2b8ce69..059184ee 100644
--- a/cyclonedx_py/_internal/requirements.py
+++ b/cyclonedx_py/_internal/requirements.py
@@ -21,7 +21,7 @@
 from itertools import chain
 from os import unlink
 from textwrap import dedent
-from typing import TYPE_CHECKING, Any, Generator, Iterable, Optional, Set
+from typing import TYPE_CHECKING, Any, FrozenSet, Generator, Iterable, Optional
 
 from cyclonedx.exception.model import InvalidUriException, UnknownHashTypeException
 from cyclonedx.model import ExternalReference, ExternalReferenceType, HashType, Property, XsUri
@@ -33,6 +33,7 @@
 from .cli_common import add_argument_mc_type, add_argument_pyproject
 from .utils.cdx import make_bom
 from .utils.io import io2file
+from .utils.packaging import normalize_packagename
 from .utils.pyproject import pyproject_file2component
 from .utils.secret import redact_auth_from_url
 
@@ -141,7 +142,7 @@ def _add_components(self, bom: 'Bom', rf: 'RequirementsFile') -> None:
         index_url = redact_auth_from_url(reduce(
             lambda c, i: i.options.get('index_url') or c, rf.options, self._index_url
         ).rstrip('/'))
-        extra_index_urls = set(map(
+        extra_index_urls = frozenset(map(
             lambda u: redact_auth_from_url(u.rstrip('/')),
             chain(self._extra_index_urls, chain.from_iterable(
                 i.options['extra_index_urls'] for i in rf.options if 'extra_index_urls' in i.options
@@ -167,7 +168,7 @@ def __hashes4req(self, req: 'InstallRequirement') -> Generator['HashType', None,
                 del error
 
     def _make_component(self, req: 'InstallRequirement',
-                        index_url: str, extra_index_urls: Set[str]) -> 'Component':
+                        index_url: str, extra_index_urls: FrozenSet[str]) -> 'Component':
         name = req.name
         version = req.get_pinned_version or None
         hashes = list(self.__hashes4req(req))
@@ -216,12 +217,13 @@ def _make_component(self, req: 'InstallRequirement',
             type=ComponentType.LIBRARY,
             name=name or 'unknown',
             version=version,
-            purl=PackageURL(type='pypi', name=req.name, version=version,
-                            qualifiers=purl_qualifiers
-                            ) if not is_local and name else None,
+            purl=PackageURL(
+                type='pypi', name=req.name, version=version,
+                qualifiers=purl_qualifiers
+            ) if not is_local and name else None,
             external_references=external_references,
             properties=(Property(
                 name=PropertyName.PackageExtra.value,
-                value=extra
+                value=normalize_packagename(extra)
             ) for extra in req.extras)
         )
diff --git a/tests/_data/infiles/environment/with-extras/pyproject.toml b/tests/_data/infiles/environment/with-extras/pyproject.toml
index 1420454b..f4846010 100644
--- a/tests/_data/infiles/environment/with-extras/pyproject.toml
+++ b/tests/_data/infiles/environment/with-extras/pyproject.toml
@@ -3,3 +3,7 @@
 name = "with-extras"
 version = "0.1.0"
 description = "depenndencies with extras"
+
+dependencies = [
+  "cyclonedx-python-lib[xml-Validation]"   # exrra name is expected to be normalized
+]
diff --git a/tests/_data/infiles/pipenv/with-extras/Pipfile b/tests/_data/infiles/pipenv/with-extras/Pipfile
index b779fbec..7ee70542 100644
--- a/tests/_data/infiles/pipenv/with-extras/Pipfile
+++ b/tests/_data/infiles/pipenv/with-extras/Pipfile
@@ -2,6 +2,6 @@
 sort_pipfile = true
 
 [packages]
-cyclonedx-python-lib = {version = "==5.1.1", extras = ["xml-validation", "json-validation"]}
+cyclonedx-python-lib = {version = "==5.1.1", extras = ["xml-Validation", "JSON-validation"]}
 
 [dev-packages]
diff --git a/tests/_data/infiles/pipenv/with-extras/Pipfile.lock b/tests/_data/infiles/pipenv/with-extras/Pipfile.lock
index 4c2b6f13..29fbd849 100644
--- a/tests/_data/infiles/pipenv/with-extras/Pipfile.lock
+++ b/tests/_data/infiles/pipenv/with-extras/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "7fc80a7a63ba5f91c6df003ab8001fc91ef79d9669d32a2159d52cad351e52cf"
+            "sha256": "76014a968ef57cf31e5ffa4fef904fb259cc579c81eca7c8bca9c070635eff89"
         },
         "pipfile-spec": 6,
         "requires": {},
@@ -24,11 +24,11 @@
         },
         "attrs": {
             "hashes": [
-                "sha256:1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04",
-                "sha256:6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+                "sha256:935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30",
+                "sha256:99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1"
             ],
             "markers": "python_version >= '3.7'",
-            "version": "==23.1.0"
+            "version": "==23.2.0"
         },
         "boolean.py": {
             "hashes": [
@@ -39,8 +39,8 @@
         },
         "cyclonedx-python-lib": {
             "extras": [
-                "json-validation",
-                "xml-validation"
+                "JSON-validation",
+                "xml-Validation"
             ],
             "hashes": [
                 "sha256:215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6",
@@ -90,18 +90,18 @@
                 "format"
             ],
             "hashes": [
-                "sha256:4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa",
-                "sha256:ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3"
+                "sha256:7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f",
+                "sha256:85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5"
             ],
-            "version": "==4.20.0"
+            "version": "==4.21.1"
         },
         "jsonschema-specifications": {
             "hashes": [
-                "sha256:9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8",
-                "sha256:e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93"
+                "sha256:48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc",
+                "sha256:87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==2023.11.2"
+            "version": "==2023.12.1"
         },
         "license-expression": {
             "hashes": [
@@ -113,108 +113,109 @@
         },
         "lxml": {
             "hashes": [
-                "sha256:05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3",
-                "sha256:075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d",
-                "sha256:081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a",
-                "sha256:0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120",
-                "sha256:0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305",
-                "sha256:0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287",
-                "sha256:0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23",
-                "sha256:120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52",
-                "sha256:1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f",
-                "sha256:141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4",
-                "sha256:14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584",
-                "sha256:1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f",
-                "sha256:17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693",
-                "sha256:1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef",
-                "sha256:1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5",
-                "sha256:23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02",
-                "sha256:25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc",
-                "sha256:2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7",
-                "sha256:303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da",
-                "sha256:3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a",
-                "sha256:3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40",
-                "sha256:411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8",
-                "sha256:42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd",
-                "sha256:46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601",
-                "sha256:48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c",
-                "sha256:48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be",
-                "sha256:4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2",
-                "sha256:4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c",
-                "sha256:4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129",
-                "sha256:4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc",
-                "sha256:4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2",
-                "sha256:4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1",
-                "sha256:4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7",
-                "sha256:50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d",
-                "sha256:50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477",
-                "sha256:53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d",
-                "sha256:5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e",
-                "sha256:56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7",
-                "sha256:578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2",
-                "sha256:57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574",
-                "sha256:57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf",
-                "sha256:5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b",
-                "sha256:5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98",
-                "sha256:64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12",
-                "sha256:65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42",
-                "sha256:6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35",
-                "sha256:690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d",
-                "sha256:6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce",
-                "sha256:704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d",
-                "sha256:71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f",
-                "sha256:71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db",
-                "sha256:7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4",
-                "sha256:8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694",
-                "sha256:8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac",
-                "sha256:8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2",
-                "sha256:8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7",
-                "sha256:92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96",
-                "sha256:97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d",
-                "sha256:9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b",
-                "sha256:9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a",
-                "sha256:9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13",
-                "sha256:9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340",
-                "sha256:9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6",
-                "sha256:aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458",
-                "sha256:ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c",
-                "sha256:b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c",
-                "sha256:b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9",
-                "sha256:b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432",
-                "sha256:b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991",
-                "sha256:bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69",
-                "sha256:bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf",
-                "sha256:c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb",
-                "sha256:c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b",
-                "sha256:c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833",
-                "sha256:cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76",
-                "sha256:cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85",
-                "sha256:cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e",
-                "sha256:d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50",
-                "sha256:d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8",
-                "sha256:d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4",
-                "sha256:d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b",
-                "sha256:dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5",
-                "sha256:e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190",
-                "sha256:e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7",
-                "sha256:eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa",
-                "sha256:ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0",
-                "sha256:f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9",
-                "sha256:f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0",
-                "sha256:fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b",
-                "sha256:fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5",
-                "sha256:fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7",
-                "sha256:fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+                "sha256:00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91",
+                "sha256:01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229",
+                "sha256:056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8",
+                "sha256:0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5",
+                "sha256:1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545",
+                "sha256:1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2",
+                "sha256:16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd",
+                "sha256:1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a",
+                "sha256:231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771",
+                "sha256:232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba",
+                "sha256:23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20",
+                "sha256:266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b",
+                "sha256:273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac",
+                "sha256:2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7",
+                "sha256:33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be",
+                "sha256:359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28",
+                "sha256:365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9",
+                "sha256:389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622",
+                "sha256:3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43",
+                "sha256:3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197",
+                "sha256:3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20",
+                "sha256:43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2",
+                "sha256:4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97",
+                "sha256:4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48",
+                "sha256:4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d",
+                "sha256:506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d",
+                "sha256:520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7",
+                "sha256:5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d",
+                "sha256:562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca",
+                "sha256:59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc",
+                "sha256:606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4",
+                "sha256:6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225",
+                "sha256:647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663",
+                "sha256:647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2",
+                "sha256:6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590",
+                "sha256:6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c",
+                "sha256:701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46",
+                "sha256:786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58",
+                "sha256:7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16",
+                "sha256:7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013",
+                "sha256:857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c",
+                "sha256:8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02",
+                "sha256:88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec",
+                "sha256:8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3",
+                "sha256:91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573",
+                "sha256:936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899",
+                "sha256:953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10",
+                "sha256:95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2",
+                "sha256:9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a",
+                "sha256:9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37",
+                "sha256:9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5",
+                "sha256:9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745",
+                "sha256:9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9",
+                "sha256:a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7",
+                "sha256:a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868",
+                "sha256:a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c",
+                "sha256:a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b",
+                "sha256:a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45",
+                "sha256:aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd",
+                "sha256:aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644",
+                "sha256:ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4",
+                "sha256:b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e",
+                "sha256:b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192",
+                "sha256:bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be",
+                "sha256:bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab",
+                "sha256:bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d",
+                "sha256:bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85",
+                "sha256:bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9",
+                "sha256:bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307",
+                "sha256:c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd",
+                "sha256:c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e",
+                "sha256:c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8",
+                "sha256:ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964",
+                "sha256:cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69",
+                "sha256:cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683",
+                "sha256:d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5",
+                "sha256:d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979",
+                "sha256:dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8",
+                "sha256:dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e",
+                "sha256:ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53",
+                "sha256:de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7",
+                "sha256:e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722",
+                "sha256:e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d",
+                "sha256:e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66",
+                "sha256:ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1",
+                "sha256:f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137",
+                "sha256:f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56",
+                "sha256:f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a",
+                "sha256:f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0",
+                "sha256:f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23",
+                "sha256:f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847",
+                "sha256:fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382",
+                "sha256:fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b"
             ],
-            "version": "==4.9.3"
+            "version": "==4.9.4"
         },
         "packageurl-python": {
             "hashes": [
-                "sha256:01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471",
-                "sha256:799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+                "sha256:62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f",
+                "sha256:6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8"
             ],
             "markers": "python_version >= '3.7'",
-            "version": "==0.11.2"
+            "version": "==0.13.4"
         },
         "py-serializable": {
             "hashes": [
@@ -229,16 +230,16 @@
                 "sha256:0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86",
                 "sha256:961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
             ],
-            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'",
+            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'",
             "version": "==2.8.2"
         },
         "referencing": {
             "hashes": [
-                "sha256:81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec",
-                "sha256:c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d"
+                "sha256:39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5",
+                "sha256:c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==0.31.1"
+            "version": "==0.33.0"
         },
         "rfc3339-validator": {
             "hashes": [
@@ -256,115 +257,115 @@
         },
         "rpds-py": {
             "hashes": [
-                "sha256:06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276",
-                "sha256:12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f",
-                "sha256:15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60",
-                "sha256:188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0",
-                "sha256:1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d",
-                "sha256:244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3",
-                "sha256:25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2",
-                "sha256:25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9",
-                "sha256:29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb",
-                "sha256:2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b",
-                "sha256:2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a",
-                "sha256:2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d",
-                "sha256:2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1",
-                "sha256:31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7",
-                "sha256:35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9",
-                "sha256:38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4",
-                "sha256:38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53",
-                "sha256:3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea",
-                "sha256:3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66",
-                "sha256:3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190",
-                "sha256:46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3",
-                "sha256:4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12",
-                "sha256:4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824",
-                "sha256:4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27",
-                "sha256:4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e",
-                "sha256:4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8",
-                "sha256:51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8",
-                "sha256:530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914",
-                "sha256:5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211",
-                "sha256:5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab",
-                "sha256:5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468",
-                "sha256:5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3",
-                "sha256:5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff",
-                "sha256:5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c",
-                "sha256:603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d",
-                "sha256:61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e",
-                "sha256:61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a",
-                "sha256:65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e",
-                "sha256:67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a",
-                "sha256:6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0",
-                "sha256:6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1",
-                "sha256:6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3",
-                "sha256:729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42",
-                "sha256:751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452",
-                "sha256:76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198",
-                "sha256:79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa",
-                "sha256:7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b",
-                "sha256:7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4",
-                "sha256:80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1",
-                "sha256:87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad",
-                "sha256:881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c",
-                "sha256:8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381",
-                "sha256:8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0",
-                "sha256:8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2",
-                "sha256:96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3",
-                "sha256:96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31",
-                "sha256:97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74",
-                "sha256:9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6",
-                "sha256:9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff",
-                "sha256:a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b",
-                "sha256:aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca",
-                "sha256:ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd",
-                "sha256:ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a",
-                "sha256:aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568",
-                "sha256:b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1",
-                "sha256:b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c",
-                "sha256:b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad",
-                "sha256:b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7",
-                "sha256:b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d",
-                "sha256:b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658",
-                "sha256:bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1",
-                "sha256:bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64",
-                "sha256:bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815",
-                "sha256:c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1",
-                "sha256:c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac",
-                "sha256:c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07",
-                "sha256:c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e",
-                "sha256:c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee",
-                "sha256:d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45",
-                "sha256:d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc",
-                "sha256:d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41",
-                "sha256:d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2",
-                "sha256:d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083",
-                "sha256:d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e",
-                "sha256:db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266",
-                "sha256:ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141",
-                "sha256:e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b",
-                "sha256:e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933",
-                "sha256:e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21",
-                "sha256:eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0",
-                "sha256:ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7",
-                "sha256:ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc",
-                "sha256:efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba",
-                "sha256:f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a",
-                "sha256:f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57",
-                "sha256:f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2",
-                "sha256:f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007",
-                "sha256:f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f",
-                "sha256:fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f"
+                "sha256:01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147",
+                "sha256:0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7",
+                "sha256:02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2",
+                "sha256:0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68",
+                "sha256:060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1",
+                "sha256:071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382",
+                "sha256:0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d",
+                "sha256:10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921",
+                "sha256:149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38",
+                "sha256:1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4",
+                "sha256:1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a",
+                "sha256:1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d",
+                "sha256:1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518",
+                "sha256:1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e",
+                "sha256:1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d",
+                "sha256:1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf",
+                "sha256:1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5",
+                "sha256:1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba",
+                "sha256:20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6",
+                "sha256:24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59",
+                "sha256:2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253",
+                "sha256:25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6",
+                "sha256:270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f",
+                "sha256:292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3",
+                "sha256:2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea",
+                "sha256:2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1",
+                "sha256:2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76",
+                "sha256:2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93",
+                "sha256:3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad",
+                "sha256:3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad",
+                "sha256:380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc",
+                "sha256:3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049",
+                "sha256:4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d",
+                "sha256:4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90",
+                "sha256:436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d",
+                "sha256:4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd",
+                "sha256:4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25",
+                "sha256:516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2",
+                "sha256:5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f",
+                "sha256:5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6",
+                "sha256:5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4",
+                "sha256:5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c",
+                "sha256:60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8",
+                "sha256:637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d",
+                "sha256:65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b",
+                "sha256:698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19",
+                "sha256:70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453",
+                "sha256:720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9",
+                "sha256:7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde",
+                "sha256:7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296",
+                "sha256:7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58",
+                "sha256:81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec",
+                "sha256:810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99",
+                "sha256:82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a",
+                "sha256:841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb",
+                "sha256:8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383",
+                "sha256:8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d",
+                "sha256:9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896",
+                "sha256:91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc",
+                "sha256:93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6",
+                "sha256:938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b",
+                "sha256:9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7",
+                "sha256:9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22",
+                "sha256:99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf",
+                "sha256:99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394",
+                "sha256:9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0",
+                "sha256:9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57",
+                "sha256:a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74",
+                "sha256:a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83",
+                "sha256:a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29",
+                "sha256:a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9",
+                "sha256:aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f",
+                "sha256:ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745",
+                "sha256:b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb",
+                "sha256:b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811",
+                "sha256:b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55",
+                "sha256:b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342",
+                "sha256:bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23",
+                "sha256:be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82",
+                "sha256:bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041",
+                "sha256:c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb",
+                "sha256:c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066",
+                "sha256:d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55",
+                "sha256:d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6",
+                "sha256:da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a",
+                "sha256:dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140",
+                "sha256:dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b",
+                "sha256:df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9",
+                "sha256:dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256",
+                "sha256:e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c",
+                "sha256:efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772",
+                "sha256:f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4",
+                "sha256:f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae",
+                "sha256:f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920",
+                "sha256:f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a",
+                "sha256:f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b",
+                "sha256:fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361",
+                "sha256:ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8",
+                "sha256:ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a"
             ],
             "markers": "python_version >= '3.8'",
-            "version": "==0.13.2"
+            "version": "==0.17.1"
         },
         "six": {
             "hashes": [
                 "sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926",
                 "sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
             ],
-            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'",
+            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'",
             "version": "==1.16.0"
         },
         "sortedcontainers": {
@@ -376,10 +377,11 @@
         },
         "types-python-dateutil": {
             "hashes": [
-                "sha256:1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b",
-                "sha256:f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+                "sha256:1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f",
+                "sha256:efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2"
             ],
-            "version": "==2.8.19.14"
+            "markers": "python_version >= '3.8'",
+            "version": "==2.8.19.20240106"
         },
         "uri-template": {
             "hashes": [
diff --git a/tests/_data/infiles/pipenv/with-extras/pyproject.toml b/tests/_data/infiles/pipenv/with-extras/pyproject.toml
index 1420454b..6dc3921f 100644
--- a/tests/_data/infiles/pipenv/with-extras/pyproject.toml
+++ b/tests/_data/infiles/pipenv/with-extras/pyproject.toml
@@ -3,3 +3,7 @@
 name = "with-extras"
 version = "0.1.0"
 description = "depenndencies with extras"
+
+dependencies = [
+  "cyclonedx-python-lib[xml-Validation]"   # extra name is expected to be normalized
+]
diff --git a/tests/_data/infiles/poetry/with-extras/pyproject-proto.toml b/tests/_data/infiles/poetry/with-extras/pyproject-proto.toml
index a35ec674..c741b990 100644
--- a/tests/_data/infiles/poetry/with-extras/pyproject-proto.toml
+++ b/tests/_data/infiles/poetry/with-extras/pyproject-proto.toml
@@ -7,7 +7,7 @@ authors = ["Your Name <you@example.com>"]
 
 [tool.poetry.dependencies]
 python  = "^3.8"
-cyclonedx-python-lib = {version = "5.1.1", extras = ["json-validation", "xml-validation"], optional = true}
+cyclonedx-python-lib = {version = "5.1.1", extras = ["json-validation", "xml-Validation"], optional = true}
 
 [tool.poetry.extras]
 my-extra = ["cyclonedx-python-lib"]
diff --git a/tests/_data/infiles/requirements/with-extras.txt b/tests/_data/infiles/requirements/with-extras.txt
index 92c506eb..e7955ac3 100644
--- a/tests/_data/infiles/requirements/with-extras.txt
+++ b/tests/_data/infiles/requirements/with-extras.txt
@@ -1,3 +1,4 @@
 # package with extras
 
-cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1
+# extra names are expected to be normalized
+cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.2.json.bin b/tests/_data/snapshots/environment/plain_with-extras_1.2.json.bin
index 96446c3c..5947ad69 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.2.json.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.2.json.bin
@@ -990,6 +990,9 @@
       "ref": "rfc3987==1.3.8"
     },
     {
+      "dependsOn": [
+        "cyclonedx-python-lib==6.0.0"
+      ],
       "ref": "root-component"
     },
     {
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.2.xml.bin b/tests/_data/snapshots/environment/plain_with-extras_1.2.xml.bin
index 3bb76ace..2c3c416c 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.2.xml.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.2.xml.bin
@@ -762,7 +762,9 @@
       <dependency ref="six==1.16.0"/>
     </dependency>
     <dependency ref="rfc3987==1.3.8"/>
-    <dependency ref="root-component"/>
+    <dependency ref="root-component">
+      <dependency ref="cyclonedx-python-lib==6.0.0"/>
+    </dependency>
     <dependency ref="rpds-py==0.15.2"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.3.json.bin b/tests/_data/snapshots/environment/plain_with-extras_1.3.json.bin
index bae627bb..ac47eb8a 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.3.json.bin
@@ -132,6 +132,12 @@
         }
       ],
       "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
       "purl": "pkg:pypi/cyclonedx-python-lib@6.0.0",
       "type": "library",
       "version": "6.0.0"
@@ -996,6 +1002,9 @@
       "ref": "rfc3987==1.3.8"
     },
     {
+      "dependsOn": [
+        "cyclonedx-python-lib==6.0.0"
+      ],
       "ref": "root-component"
     },
     {
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.3.xml.bin b/tests/_data/snapshots/environment/plain_with-extras_1.3.xml.bin
index 05ce5717..984c9fee 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.3.xml.bin
@@ -129,6 +129,9 @@
           <comment>from packaging metadata: Home-page</comment>
         </reference>
       </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
     </component>
     <component type="library" bom-ref="defusedxml==0.7.1">
       <name>defusedxml</name>
@@ -768,7 +771,9 @@
       <dependency ref="six==1.16.0"/>
     </dependency>
     <dependency ref="rfc3987==1.3.8"/>
-    <dependency ref="root-component"/>
+    <dependency ref="root-component">
+      <dependency ref="cyclonedx-python-lib==6.0.0"/>
+    </dependency>
     <dependency ref="rpds-py==0.15.2"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.4.json.bin b/tests/_data/snapshots/environment/plain_with-extras_1.4.json.bin
index f4ad8771..354a3737 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.4.json.bin
@@ -132,6 +132,12 @@
         }
       ],
       "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
       "purl": "pkg:pypi/cyclonedx-python-lib@6.0.0",
       "type": "library",
       "version": "6.0.0"
@@ -996,6 +1002,9 @@
       "ref": "rfc3987==1.3.8"
     },
     {
+      "dependsOn": [
+        "cyclonedx-python-lib==6.0.0"
+      ],
       "ref": "root-component"
     },
     {
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.4.xml.bin b/tests/_data/snapshots/environment/plain_with-extras_1.4.xml.bin
index e3480792..6d289b3f 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.4.xml.bin
@@ -156,6 +156,9 @@
           <comment>from packaging metadata: Home-page</comment>
         </reference>
       </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
     </component>
     <component type="library" bom-ref="defusedxml==0.7.1">
       <name>defusedxml</name>
@@ -795,7 +798,9 @@
       <dependency ref="six==1.16.0"/>
     </dependency>
     <dependency ref="rfc3987==1.3.8"/>
-    <dependency ref="root-component"/>
+    <dependency ref="root-component">
+      <dependency ref="cyclonedx-python-lib==6.0.0"/>
+    </dependency>
     <dependency ref="rpds-py==0.15.2"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.5.json.bin b/tests/_data/snapshots/environment/plain_with-extras_1.5.json.bin
index d1409f9a..147b5ec9 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.5.json.bin
@@ -132,6 +132,12 @@
         }
       ],
       "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
       "purl": "pkg:pypi/cyclonedx-python-lib@6.0.0",
       "type": "library",
       "version": "6.0.0"
@@ -996,6 +1002,9 @@
       "ref": "rfc3987==1.3.8"
     },
     {
+      "dependsOn": [
+        "cyclonedx-python-lib==6.0.0"
+      ],
       "ref": "root-component"
     },
     {
diff --git a/tests/_data/snapshots/environment/plain_with-extras_1.5.xml.bin b/tests/_data/snapshots/environment/plain_with-extras_1.5.xml.bin
index 1ef817bd..1606c3ec 100644
--- a/tests/_data/snapshots/environment/plain_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/environment/plain_with-extras_1.5.xml.bin
@@ -156,6 +156,9 @@
           <comment>from packaging metadata: Home-page</comment>
         </reference>
       </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
     </component>
     <component type="library" bom-ref="defusedxml==0.7.1">
       <name>defusedxml</name>
@@ -795,7 +798,9 @@
       <dependency ref="six==1.16.0"/>
     </dependency>
     <dependency ref="rfc3987==1.3.8"/>
-    <dependency ref="root-component"/>
+    <dependency ref="root-component">
+      <dependency ref="cyclonedx-python-lib==6.0.0"/>
+    </dependency>
     <dependency ref="rpds-py==0.15.2"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.0.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.0.xml.bin
index feca9cd7..ec4c8902 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.0.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.0.xml.bin
@@ -9,8 +9,8 @@
     </component>
     <component type="library">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <modified>false</modified>
     </component>
     <component type="library">
@@ -57,14 +57,14 @@
     </component>
     <component type="library">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <modified>false</modified>
     </component>
     <component type="library">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <modified>false</modified>
     </component>
     <component type="library">
@@ -75,14 +75,14 @@
     </component>
     <component type="library">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <modified>false</modified>
     </component>
     <component type="library">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <modified>false</modified>
     </component>
     <component type="library">
@@ -99,8 +99,8 @@
     </component>
     <component type="library">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <modified>false</modified>
     </component>
     <component type="library">
@@ -117,8 +117,8 @@
     </component>
     <component type="library">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <modified>false</modified>
     </component>
     <component type="library">
@@ -135,8 +135,8 @@
     </component>
     <component type="library">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <modified>false</modified>
     </component>
     <component type="library">
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.1.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.1.xml.bin
index 7d3c4504..6db26588 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.1.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.1.xml.bin
@@ -12,10 +12,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="attrs==23.1.0">
+    <component type="library" bom-ref="attrs==23.2.0">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/attrs/</url>
@@ -100,10 +100,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="jsonschema==4.20.0">
+    <component type="library" bom-ref="jsonschema==4.21.1">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema/</url>
@@ -111,10 +111,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="jsonschema-specifications==2023.11.2">
+    <component type="library" bom-ref="jsonschema-specifications==2023.12.1">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema-specifications/</url>
@@ -133,10 +133,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="lxml==4.9.3">
+    <component type="library" bom-ref="lxml==4.9.4">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/lxml/</url>
@@ -144,10 +144,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="packageurl-python==0.11.2">
+    <component type="library" bom-ref="packageurl-python==0.13.4">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/packageurl-python/</url>
@@ -177,10 +177,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="referencing==0.31.1">
+    <component type="library" bom-ref="referencing==0.33.0">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/referencing/</url>
@@ -210,10 +210,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="rpds-py==0.13.2">
+    <component type="library" bom-ref="rpds-py==0.17.1">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/rpds-py/</url>
@@ -243,10 +243,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="types-python-dateutil==2.8.19.14">
+    <component type="library" bom-ref="types-python-dateutil==2.8.19.20240106">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/types-python-dateutil/</url>
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.2.json.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.2.json.bin
index 99ec13a2..702fba85 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.2.json.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.2.json.bin
@@ -15,7 +15,7 @@
       "version": "1.3.0"
     },
     {
-      "bom-ref": "attrs==23.1.0",
+      "bom-ref": "attrs==23.2.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -24,9 +24,9 @@
         }
       ],
       "name": "attrs",
-      "purl": "pkg:pypi/attrs@23.1.0",
+      "purl": "pkg:pypi/attrs@23.2.0",
       "type": "library",
-      "version": "23.1.0"
+      "version": "23.2.0"
     },
     {
       "bom-ref": "boolean.py==4.0",
@@ -127,7 +127,7 @@
       "version": "2.4"
     },
     {
-      "bom-ref": "jsonschema==4.20.0",
+      "bom-ref": "jsonschema==4.21.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -136,12 +136,12 @@
         }
       ],
       "name": "jsonschema",
-      "purl": "pkg:pypi/jsonschema@4.20.0",
+      "purl": "pkg:pypi/jsonschema@4.21.1",
       "type": "library",
-      "version": "4.20.0"
+      "version": "4.21.1"
     },
     {
-      "bom-ref": "jsonschema-specifications==2023.11.2",
+      "bom-ref": "jsonschema-specifications==2023.12.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -150,9 +150,9 @@
         }
       ],
       "name": "jsonschema-specifications",
-      "purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
       "type": "library",
-      "version": "2023.11.2"
+      "version": "2023.12.1"
     },
     {
       "bom-ref": "license-expression==30.2.0",
@@ -169,7 +169,7 @@
       "version": "30.2.0"
     },
     {
-      "bom-ref": "lxml==4.9.3",
+      "bom-ref": "lxml==4.9.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -178,12 +178,12 @@
         }
       ],
       "name": "lxml",
-      "purl": "pkg:pypi/lxml@4.9.3",
+      "purl": "pkg:pypi/lxml@4.9.4",
       "type": "library",
-      "version": "4.9.3"
+      "version": "4.9.4"
     },
     {
-      "bom-ref": "packageurl-python==0.11.2",
+      "bom-ref": "packageurl-python==0.13.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -192,9 +192,9 @@
         }
       ],
       "name": "packageurl-python",
-      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "purl": "pkg:pypi/packageurl-python@0.13.4",
       "type": "library",
-      "version": "0.11.2"
+      "version": "0.13.4"
     },
     {
       "bom-ref": "py-serializable==0.15.0",
@@ -225,7 +225,7 @@
       "version": "2.8.2"
     },
     {
-      "bom-ref": "referencing==0.31.1",
+      "bom-ref": "referencing==0.33.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -234,9 +234,9 @@
         }
       ],
       "name": "referencing",
-      "purl": "pkg:pypi/referencing@0.31.1",
+      "purl": "pkg:pypi/referencing@0.33.0",
       "type": "library",
-      "version": "0.31.1"
+      "version": "0.33.0"
     },
     {
       "bom-ref": "rfc3339-validator==0.1.4",
@@ -267,7 +267,7 @@
       "version": "1.3.8"
     },
     {
-      "bom-ref": "rpds-py==0.13.2",
+      "bom-ref": "rpds-py==0.17.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -276,9 +276,9 @@
         }
       ],
       "name": "rpds-py",
-      "purl": "pkg:pypi/rpds-py@0.13.2",
+      "purl": "pkg:pypi/rpds-py@0.17.1",
       "type": "library",
-      "version": "0.13.2"
+      "version": "0.17.1"
     },
     {
       "bom-ref": "six==1.16.0",
@@ -309,7 +309,7 @@
       "version": "2.4.0"
     },
     {
-      "bom-ref": "types-python-dateutil==2.8.19.14",
+      "bom-ref": "types-python-dateutil==2.8.19.20240106",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
@@ -318,9 +318,9 @@
         }
       ],
       "name": "types-python-dateutil",
-      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.20240106",
       "type": "library",
-      "version": "2.8.19.14"
+      "version": "2.8.19.20240106"
     },
     {
       "bom-ref": "uri-template==1.3.0",
@@ -356,7 +356,7 @@
       "ref": "arrow==1.3.0"
     },
     {
-      "ref": "attrs==23.1.0"
+      "ref": "attrs==23.2.0"
     },
     {
       "ref": "boolean.py==4.0"
@@ -380,19 +380,19 @@
       "ref": "jsonpointer==2.4"
     },
     {
-      "ref": "jsonschema-specifications==2023.11.2"
+      "ref": "jsonschema-specifications==2023.12.1"
     },
     {
-      "ref": "jsonschema==4.20.0"
+      "ref": "jsonschema==4.21.1"
     },
     {
       "ref": "license-expression==30.2.0"
     },
     {
-      "ref": "lxml==4.9.3"
+      "ref": "lxml==4.9.4"
     },
     {
-      "ref": "packageurl-python==0.11.2"
+      "ref": "packageurl-python==0.13.4"
     },
     {
       "ref": "py-serializable==0.15.0"
@@ -401,7 +401,7 @@
       "ref": "python-dateutil==2.8.2"
     },
     {
-      "ref": "referencing==0.31.1"
+      "ref": "referencing==0.33.0"
     },
     {
       "ref": "rfc3339-validator==0.1.4"
@@ -413,7 +413,7 @@
       "ref": "root-component"
     },
     {
-      "ref": "rpds-py==0.13.2"
+      "ref": "rpds-py==0.17.1"
     },
     {
       "ref": "six==1.16.0"
@@ -422,7 +422,7 @@
       "ref": "sortedcontainers==2.4.0"
     },
     {
-      "ref": "types-python-dateutil==2.8.19.14"
+      "ref": "types-python-dateutil==2.8.19.20240106"
     },
     {
       "ref": "uri-template==1.3.0"
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.2.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.2.xml.bin
index 22bbe3c0..fdd001ee 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.2.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.2.xml.bin
@@ -31,10 +31,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="attrs==23.1.0">
+    <component type="library" bom-ref="attrs==23.2.0">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/attrs/</url>
@@ -119,10 +119,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="jsonschema==4.20.0">
+    <component type="library" bom-ref="jsonschema==4.21.1">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema/</url>
@@ -130,10 +130,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="jsonschema-specifications==2023.11.2">
+    <component type="library" bom-ref="jsonschema-specifications==2023.12.1">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema-specifications/</url>
@@ -152,10 +152,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="lxml==4.9.3">
+    <component type="library" bom-ref="lxml==4.9.4">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/lxml/</url>
@@ -163,10 +163,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="packageurl-python==0.11.2">
+    <component type="library" bom-ref="packageurl-python==0.13.4">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/packageurl-python/</url>
@@ -196,10 +196,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="referencing==0.31.1">
+    <component type="library" bom-ref="referencing==0.33.0">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/referencing/</url>
@@ -229,10 +229,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="rpds-py==0.13.2">
+    <component type="library" bom-ref="rpds-py==0.17.1">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/rpds-py/</url>
@@ -262,10 +262,10 @@
         </reference>
       </externalReferences>
     </component>
-    <component type="library" bom-ref="types-python-dateutil==2.8.19.14">
+    <component type="library" bom-ref="types-python-dateutil==2.8.19.20240106">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/types-python-dateutil/</url>
@@ -298,7 +298,7 @@
   </components>
   <dependencies>
     <dependency ref="arrow==1.3.0"/>
-    <dependency ref="attrs==23.1.0"/>
+    <dependency ref="attrs==23.2.0"/>
     <dependency ref="boolean.py==4.0"/>
     <dependency ref="cyclonedx-python-lib==5.1.1"/>
     <dependency ref="defusedxml==0.7.1"/>
@@ -306,21 +306,21 @@
     <dependency ref="idna==3.6"/>
     <dependency ref="isoduration==20.11.0"/>
     <dependency ref="jsonpointer==2.4"/>
-    <dependency ref="jsonschema-specifications==2023.11.2"/>
-    <dependency ref="jsonschema==4.20.0"/>
+    <dependency ref="jsonschema-specifications==2023.12.1"/>
+    <dependency ref="jsonschema==4.21.1"/>
     <dependency ref="license-expression==30.2.0"/>
-    <dependency ref="lxml==4.9.3"/>
-    <dependency ref="packageurl-python==0.11.2"/>
+    <dependency ref="lxml==4.9.4"/>
+    <dependency ref="packageurl-python==0.13.4"/>
     <dependency ref="py-serializable==0.15.0"/>
     <dependency ref="python-dateutil==2.8.2"/>
-    <dependency ref="referencing==0.31.1"/>
+    <dependency ref="referencing==0.33.0"/>
     <dependency ref="rfc3339-validator==0.1.4"/>
     <dependency ref="rfc3987==1.3.8"/>
     <dependency ref="root-component"/>
-    <dependency ref="rpds-py==0.13.2"/>
+    <dependency ref="rpds-py==0.17.1"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
-    <dependency ref="types-python-dateutil==2.8.19.14"/>
+    <dependency ref="types-python-dateutil==2.8.19.20240106"/>
     <dependency ref="uri-template==1.3.0"/>
     <dependency ref="webcolors==1.13"/>
   </dependencies>
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.3.json.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.3.json.bin
index d94a3448..462fac4e 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.3.json.bin
@@ -31,18 +31,18 @@
       "version": "1.3.0"
     },
     {
-      "bom-ref": "attrs==23.1.0",
+      "bom-ref": "attrs==23.2.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+              "content": "935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30"
             },
             {
               "alg": "SHA-256",
-              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+              "content": "99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1"
             }
           ],
           "type": "distribution",
@@ -56,9 +56,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/attrs@23.1.0",
+      "purl": "pkg:pypi/attrs@23.2.0",
       "type": "library",
-      "version": "23.1.0"
+      "version": "23.2.0"
     },
     {
       "bom-ref": "boolean.py==4.0",
@@ -279,18 +279,18 @@
       "version": "2.4"
     },
     {
-      "bom-ref": "jsonschema==4.20.0",
+      "bom-ref": "jsonschema==4.21.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa"
+              "content": "7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f"
             },
             {
               "alg": "SHA-256",
-              "content": "ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3"
+              "content": "85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5"
             }
           ],
           "type": "distribution",
@@ -308,23 +308,23 @@
           "value": "format"
         }
       ],
-      "purl": "pkg:pypi/jsonschema@4.20.0",
+      "purl": "pkg:pypi/jsonschema@4.21.1",
       "type": "library",
-      "version": "4.20.0"
+      "version": "4.21.1"
     },
     {
-      "bom-ref": "jsonschema-specifications==2023.11.2",
+      "bom-ref": "jsonschema-specifications==2023.12.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8"
+              "content": "48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc"
             },
             {
               "alg": "SHA-256",
-              "content": "e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93"
+              "content": "87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c"
             }
           ],
           "type": "distribution",
@@ -338,9 +338,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
       "type": "library",
-      "version": "2023.11.2"
+      "version": "2023.12.1"
     },
     {
       "bom-ref": "license-expression==30.2.0",
@@ -373,378 +373,382 @@
       "version": "30.2.0"
     },
     {
-      "bom-ref": "lxml==4.9.3",
+      "bom-ref": "lxml==4.9.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+              "content": "00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91"
             },
             {
               "alg": "SHA-256",
-              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+              "content": "01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229"
             },
             {
               "alg": "SHA-256",
-              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+              "content": "056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8"
             },
             {
               "alg": "SHA-256",
-              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+              "content": "0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5"
             },
             {
               "alg": "SHA-256",
-              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+              "content": "1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545"
             },
             {
               "alg": "SHA-256",
-              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+              "content": "1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2"
             },
             {
               "alg": "SHA-256",
-              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+              "content": "16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd"
             },
             {
               "alg": "SHA-256",
-              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+              "content": "1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a"
             },
             {
               "alg": "SHA-256",
-              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+              "content": "231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771"
             },
             {
               "alg": "SHA-256",
-              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+              "content": "232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba"
             },
             {
               "alg": "SHA-256",
-              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+              "content": "23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20"
             },
             {
               "alg": "SHA-256",
-              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+              "content": "266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b"
             },
             {
               "alg": "SHA-256",
-              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+              "content": "273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac"
             },
             {
               "alg": "SHA-256",
-              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+              "content": "2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7"
             },
             {
               "alg": "SHA-256",
-              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+              "content": "33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be"
             },
             {
               "alg": "SHA-256",
-              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+              "content": "359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28"
             },
             {
               "alg": "SHA-256",
-              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+              "content": "365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9"
             },
             {
               "alg": "SHA-256",
-              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+              "content": "389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622"
             },
             {
               "alg": "SHA-256",
-              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+              "content": "3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43"
             },
             {
               "alg": "SHA-256",
-              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+              "content": "3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197"
             },
             {
               "alg": "SHA-256",
-              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+              "content": "3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20"
             },
             {
               "alg": "SHA-256",
-              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+              "content": "43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2"
             },
             {
               "alg": "SHA-256",
-              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+              "content": "4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97"
             },
             {
               "alg": "SHA-256",
-              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+              "content": "4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48"
             },
             {
               "alg": "SHA-256",
-              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+              "content": "4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d"
             },
             {
               "alg": "SHA-256",
-              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+              "content": "506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d"
             },
             {
               "alg": "SHA-256",
-              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+              "content": "520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7"
             },
             {
               "alg": "SHA-256",
-              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+              "content": "5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d"
             },
             {
               "alg": "SHA-256",
-              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+              "content": "562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca"
             },
             {
               "alg": "SHA-256",
-              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+              "content": "59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc"
             },
             {
               "alg": "SHA-256",
-              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+              "content": "606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4"
             },
             {
               "alg": "SHA-256",
-              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+              "content": "6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225"
             },
             {
               "alg": "SHA-256",
-              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+              "content": "647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663"
             },
             {
               "alg": "SHA-256",
-              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+              "content": "647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2"
             },
             {
               "alg": "SHA-256",
-              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+              "content": "6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590"
             },
             {
               "alg": "SHA-256",
-              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+              "content": "6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c"
             },
             {
               "alg": "SHA-256",
-              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+              "content": "701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46"
             },
             {
               "alg": "SHA-256",
-              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+              "content": "786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58"
             },
             {
               "alg": "SHA-256",
-              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+              "content": "7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16"
             },
             {
               "alg": "SHA-256",
-              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+              "content": "7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013"
             },
             {
               "alg": "SHA-256",
-              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+              "content": "857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c"
             },
             {
               "alg": "SHA-256",
-              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+              "content": "8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02"
             },
             {
               "alg": "SHA-256",
-              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+              "content": "88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec"
             },
             {
               "alg": "SHA-256",
-              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+              "content": "8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3"
             },
             {
               "alg": "SHA-256",
-              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+              "content": "91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573"
             },
             {
               "alg": "SHA-256",
-              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+              "content": "936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899"
             },
             {
               "alg": "SHA-256",
-              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+              "content": "953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10"
             },
             {
               "alg": "SHA-256",
-              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+              "content": "95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2"
             },
             {
               "alg": "SHA-256",
-              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+              "content": "9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a"
             },
             {
               "alg": "SHA-256",
-              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+              "content": "9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37"
             },
             {
               "alg": "SHA-256",
-              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+              "content": "9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5"
             },
             {
               "alg": "SHA-256",
-              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+              "content": "9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745"
             },
             {
               "alg": "SHA-256",
-              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+              "content": "9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9"
             },
             {
               "alg": "SHA-256",
-              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+              "content": "a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7"
             },
             {
               "alg": "SHA-256",
-              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+              "content": "a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868"
             },
             {
               "alg": "SHA-256",
-              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+              "content": "a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c"
             },
             {
               "alg": "SHA-256",
-              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+              "content": "a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b"
             },
             {
               "alg": "SHA-256",
-              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+              "content": "a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45"
             },
             {
               "alg": "SHA-256",
-              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+              "content": "aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd"
             },
             {
               "alg": "SHA-256",
-              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+              "content": "aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644"
             },
             {
               "alg": "SHA-256",
-              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+              "content": "ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4"
             },
             {
               "alg": "SHA-256",
-              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+              "content": "b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e"
             },
             {
               "alg": "SHA-256",
-              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+              "content": "b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192"
             },
             {
               "alg": "SHA-256",
-              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+              "content": "bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be"
             },
             {
               "alg": "SHA-256",
-              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+              "content": "bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab"
             },
             {
               "alg": "SHA-256",
-              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+              "content": "bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d"
             },
             {
               "alg": "SHA-256",
-              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+              "content": "bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85"
             },
             {
               "alg": "SHA-256",
-              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+              "content": "bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9"
             },
             {
               "alg": "SHA-256",
-              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+              "content": "bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307"
             },
             {
               "alg": "SHA-256",
-              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+              "content": "c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd"
             },
             {
               "alg": "SHA-256",
-              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+              "content": "c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e"
             },
             {
               "alg": "SHA-256",
-              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+              "content": "c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8"
             },
             {
               "alg": "SHA-256",
-              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+              "content": "ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964"
             },
             {
               "alg": "SHA-256",
-              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+              "content": "cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69"
             },
             {
               "alg": "SHA-256",
-              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+              "content": "cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683"
             },
             {
               "alg": "SHA-256",
-              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+              "content": "d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5"
             },
             {
               "alg": "SHA-256",
-              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+              "content": "d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979"
             },
             {
               "alg": "SHA-256",
-              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+              "content": "dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8"
             },
             {
               "alg": "SHA-256",
-              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+              "content": "dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e"
             },
             {
               "alg": "SHA-256",
-              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+              "content": "ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53"
             },
             {
               "alg": "SHA-256",
-              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+              "content": "de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7"
             },
             {
               "alg": "SHA-256",
-              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+              "content": "e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722"
             },
             {
               "alg": "SHA-256",
-              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+              "content": "e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d"
             },
             {
               "alg": "SHA-256",
-              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+              "content": "e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66"
             },
             {
               "alg": "SHA-256",
-              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+              "content": "ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1"
             },
             {
               "alg": "SHA-256",
-              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+              "content": "f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137"
             },
             {
               "alg": "SHA-256",
-              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+              "content": "f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56"
             },
             {
               "alg": "SHA-256",
-              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+              "content": "f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a"
             },
             {
               "alg": "SHA-256",
-              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+              "content": "f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0"
             },
             {
               "alg": "SHA-256",
-              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+              "content": "f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23"
             },
             {
               "alg": "SHA-256",
-              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+              "content": "f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847"
             },
             {
               "alg": "SHA-256",
-              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+              "content": "fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382"
+            },
+            {
+              "alg": "SHA-256",
+              "content": "fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b"
             }
           ],
           "type": "distribution",
@@ -758,23 +762,23 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/lxml@4.9.3",
+      "purl": "pkg:pypi/lxml@4.9.4",
       "type": "library",
-      "version": "4.9.3"
+      "version": "4.9.4"
     },
     {
-      "bom-ref": "packageurl-python==0.11.2",
+      "bom-ref": "packageurl-python==0.13.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+              "content": "62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f"
             },
             {
               "alg": "SHA-256",
-              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+              "content": "6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8"
             }
           ],
           "type": "distribution",
@@ -788,9 +792,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "purl": "pkg:pypi/packageurl-python@0.13.4",
       "type": "library",
-      "version": "0.11.2"
+      "version": "0.13.4"
     },
     {
       "bom-ref": "py-serializable==0.15.0",
@@ -853,18 +857,18 @@
       "version": "2.8.2"
     },
     {
-      "bom-ref": "referencing==0.31.1",
+      "bom-ref": "referencing==0.33.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec"
+              "content": "39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5"
             },
             {
               "alg": "SHA-256",
-              "content": "c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d"
+              "content": "c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7"
             }
           ],
           "type": "distribution",
@@ -878,9 +882,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/referencing@0.31.1",
+      "purl": "pkg:pypi/referencing@0.33.0",
       "type": "library",
-      "version": "0.31.1"
+      "version": "0.33.0"
     },
     {
       "bom-ref": "rfc3339-validator==0.1.4",
@@ -943,406 +947,406 @@
       "version": "1.3.8"
     },
     {
-      "bom-ref": "rpds-py==0.13.2",
+      "bom-ref": "rpds-py==0.17.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276"
+              "content": "01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147"
             },
             {
               "alg": "SHA-256",
-              "content": "12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f"
+              "content": "0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7"
             },
             {
               "alg": "SHA-256",
-              "content": "15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60"
+              "content": "02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2"
             },
             {
               "alg": "SHA-256",
-              "content": "188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0"
+              "content": "0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68"
             },
             {
               "alg": "SHA-256",
-              "content": "1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d"
+              "content": "060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1"
             },
             {
               "alg": "SHA-256",
-              "content": "244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3"
+              "content": "071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382"
             },
             {
               "alg": "SHA-256",
-              "content": "25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2"
+              "content": "0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d"
             },
             {
               "alg": "SHA-256",
-              "content": "25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9"
+              "content": "10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921"
             },
             {
               "alg": "SHA-256",
-              "content": "29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb"
+              "content": "149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38"
             },
             {
               "alg": "SHA-256",
-              "content": "2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b"
+              "content": "1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4"
             },
             {
               "alg": "SHA-256",
-              "content": "2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a"
+              "content": "1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a"
             },
             {
               "alg": "SHA-256",
-              "content": "2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d"
+              "content": "1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d"
             },
             {
               "alg": "SHA-256",
-              "content": "2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1"
+              "content": "1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518"
             },
             {
               "alg": "SHA-256",
-              "content": "31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7"
+              "content": "1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e"
             },
             {
               "alg": "SHA-256",
-              "content": "35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9"
+              "content": "1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d"
             },
             {
               "alg": "SHA-256",
-              "content": "38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4"
+              "content": "1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf"
             },
             {
               "alg": "SHA-256",
-              "content": "38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53"
+              "content": "1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5"
             },
             {
               "alg": "SHA-256",
-              "content": "3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea"
+              "content": "1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba"
             },
             {
               "alg": "SHA-256",
-              "content": "3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66"
+              "content": "20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6"
             },
             {
               "alg": "SHA-256",
-              "content": "3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190"
+              "content": "24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59"
             },
             {
               "alg": "SHA-256",
-              "content": "46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3"
+              "content": "2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253"
             },
             {
               "alg": "SHA-256",
-              "content": "4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12"
+              "content": "25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6"
             },
             {
               "alg": "SHA-256",
-              "content": "4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824"
+              "content": "270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f"
             },
             {
               "alg": "SHA-256",
-              "content": "4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27"
+              "content": "292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3"
             },
             {
               "alg": "SHA-256",
-              "content": "4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e"
+              "content": "2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea"
             },
             {
               "alg": "SHA-256",
-              "content": "4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8"
+              "content": "2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1"
             },
             {
               "alg": "SHA-256",
-              "content": "51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8"
+              "content": "2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76"
             },
             {
               "alg": "SHA-256",
-              "content": "530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914"
+              "content": "2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93"
             },
             {
               "alg": "SHA-256",
-              "content": "5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211"
+              "content": "3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad"
             },
             {
               "alg": "SHA-256",
-              "content": "5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab"
+              "content": "3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad"
             },
             {
               "alg": "SHA-256",
-              "content": "5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468"
+              "content": "380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc"
             },
             {
               "alg": "SHA-256",
-              "content": "5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3"
+              "content": "3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049"
             },
             {
               "alg": "SHA-256",
-              "content": "5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff"
+              "content": "4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d"
             },
             {
               "alg": "SHA-256",
-              "content": "5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c"
+              "content": "4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90"
             },
             {
               "alg": "SHA-256",
-              "content": "603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d"
+              "content": "436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d"
             },
             {
               "alg": "SHA-256",
-              "content": "61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e"
+              "content": "4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd"
             },
             {
               "alg": "SHA-256",
-              "content": "61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a"
+              "content": "4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25"
             },
             {
               "alg": "SHA-256",
-              "content": "65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e"
+              "content": "516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2"
             },
             {
               "alg": "SHA-256",
-              "content": "67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a"
+              "content": "5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f"
             },
             {
               "alg": "SHA-256",
-              "content": "6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0"
+              "content": "5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6"
             },
             {
               "alg": "SHA-256",
-              "content": "6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1"
+              "content": "5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4"
             },
             {
               "alg": "SHA-256",
-              "content": "6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3"
+              "content": "5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c"
             },
             {
               "alg": "SHA-256",
-              "content": "729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42"
+              "content": "60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8"
             },
             {
               "alg": "SHA-256",
-              "content": "751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452"
+              "content": "637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d"
             },
             {
               "alg": "SHA-256",
-              "content": "76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198"
+              "content": "65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b"
             },
             {
               "alg": "SHA-256",
-              "content": "79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa"
+              "content": "698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19"
             },
             {
               "alg": "SHA-256",
-              "content": "7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b"
+              "content": "70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453"
             },
             {
               "alg": "SHA-256",
-              "content": "7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4"
+              "content": "720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9"
             },
             {
               "alg": "SHA-256",
-              "content": "80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1"
+              "content": "7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde"
             },
             {
               "alg": "SHA-256",
-              "content": "87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad"
+              "content": "7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296"
             },
             {
               "alg": "SHA-256",
-              "content": "881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c"
+              "content": "7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58"
             },
             {
               "alg": "SHA-256",
-              "content": "8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381"
+              "content": "81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec"
             },
             {
               "alg": "SHA-256",
-              "content": "8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0"
+              "content": "810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99"
             },
             {
               "alg": "SHA-256",
-              "content": "8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2"
+              "content": "82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a"
             },
             {
               "alg": "SHA-256",
-              "content": "96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3"
+              "content": "841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb"
             },
             {
               "alg": "SHA-256",
-              "content": "96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31"
+              "content": "8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383"
             },
             {
               "alg": "SHA-256",
-              "content": "97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74"
+              "content": "8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d"
             },
             {
               "alg": "SHA-256",
-              "content": "9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6"
+              "content": "9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896"
             },
             {
               "alg": "SHA-256",
-              "content": "9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff"
+              "content": "91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc"
             },
             {
               "alg": "SHA-256",
-              "content": "a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b"
+              "content": "93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6"
             },
             {
               "alg": "SHA-256",
-              "content": "aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca"
+              "content": "938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b"
             },
             {
               "alg": "SHA-256",
-              "content": "ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd"
+              "content": "9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7"
             },
             {
               "alg": "SHA-256",
-              "content": "ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a"
+              "content": "9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22"
             },
             {
               "alg": "SHA-256",
-              "content": "aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568"
+              "content": "99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf"
             },
             {
               "alg": "SHA-256",
-              "content": "b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1"
+              "content": "99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394"
             },
             {
               "alg": "SHA-256",
-              "content": "b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c"
+              "content": "9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0"
             },
             {
               "alg": "SHA-256",
-              "content": "b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad"
+              "content": "9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57"
             },
             {
               "alg": "SHA-256",
-              "content": "b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7"
+              "content": "a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74"
             },
             {
               "alg": "SHA-256",
-              "content": "b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d"
+              "content": "a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83"
             },
             {
               "alg": "SHA-256",
-              "content": "b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658"
+              "content": "a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29"
             },
             {
               "alg": "SHA-256",
-              "content": "bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1"
+              "content": "a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9"
             },
             {
               "alg": "SHA-256",
-              "content": "bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64"
+              "content": "aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f"
             },
             {
               "alg": "SHA-256",
-              "content": "bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815"
+              "content": "ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745"
             },
             {
               "alg": "SHA-256",
-              "content": "c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1"
+              "content": "b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb"
             },
             {
               "alg": "SHA-256",
-              "content": "c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac"
+              "content": "b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811"
             },
             {
               "alg": "SHA-256",
-              "content": "c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07"
+              "content": "b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55"
             },
             {
               "alg": "SHA-256",
-              "content": "c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e"
+              "content": "b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342"
             },
             {
               "alg": "SHA-256",
-              "content": "c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee"
+              "content": "bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23"
             },
             {
               "alg": "SHA-256",
-              "content": "d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45"
+              "content": "be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82"
             },
             {
               "alg": "SHA-256",
-              "content": "d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc"
+              "content": "bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041"
             },
             {
               "alg": "SHA-256",
-              "content": "d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41"
+              "content": "c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb"
             },
             {
               "alg": "SHA-256",
-              "content": "d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2"
+              "content": "c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066"
             },
             {
               "alg": "SHA-256",
-              "content": "d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083"
+              "content": "d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55"
             },
             {
               "alg": "SHA-256",
-              "content": "d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e"
+              "content": "d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6"
             },
             {
               "alg": "SHA-256",
-              "content": "db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266"
+              "content": "da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a"
             },
             {
               "alg": "SHA-256",
-              "content": "ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141"
+              "content": "dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140"
             },
             {
               "alg": "SHA-256",
-              "content": "e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b"
+              "content": "dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b"
             },
             {
               "alg": "SHA-256",
-              "content": "e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933"
+              "content": "df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9"
             },
             {
               "alg": "SHA-256",
-              "content": "e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21"
+              "content": "dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256"
             },
             {
               "alg": "SHA-256",
-              "content": "eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0"
+              "content": "e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c"
             },
             {
               "alg": "SHA-256",
-              "content": "ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7"
+              "content": "efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772"
             },
             {
               "alg": "SHA-256",
-              "content": "ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc"
+              "content": "f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4"
             },
             {
               "alg": "SHA-256",
-              "content": "efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba"
+              "content": "f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae"
             },
             {
               "alg": "SHA-256",
-              "content": "f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a"
+              "content": "f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920"
             },
             {
               "alg": "SHA-256",
-              "content": "f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57"
+              "content": "f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a"
             },
             {
               "alg": "SHA-256",
-              "content": "f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2"
+              "content": "f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b"
             },
             {
               "alg": "SHA-256",
-              "content": "f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007"
+              "content": "fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361"
             },
             {
               "alg": "SHA-256",
-              "content": "f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f"
+              "content": "ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8"
             },
             {
               "alg": "SHA-256",
-              "content": "fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f"
+              "content": "ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a"
             }
           ],
           "type": "distribution",
@@ -1356,9 +1360,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/rpds-py@0.13.2",
+      "purl": "pkg:pypi/rpds-py@0.17.1",
       "type": "library",
-      "version": "0.13.2"
+      "version": "0.17.1"
     },
     {
       "bom-ref": "six==1.16.0",
@@ -1421,18 +1425,18 @@
       "version": "2.4.0"
     },
     {
-      "bom-ref": "types-python-dateutil==2.8.19.14",
+      "bom-ref": "types-python-dateutil==2.8.19.20240106",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+              "content": "1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f"
             },
             {
               "alg": "SHA-256",
-              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+              "content": "efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2"
             }
           ],
           "type": "distribution",
@@ -1446,9 +1450,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.20240106",
       "type": "library",
-      "version": "2.8.19.14"
+      "version": "2.8.19.20240106"
     },
     {
       "bom-ref": "uri-template==1.3.0",
@@ -1516,7 +1520,7 @@
       "ref": "arrow==1.3.0"
     },
     {
-      "ref": "attrs==23.1.0"
+      "ref": "attrs==23.2.0"
     },
     {
       "ref": "boolean.py==4.0"
@@ -1540,19 +1544,19 @@
       "ref": "jsonpointer==2.4"
     },
     {
-      "ref": "jsonschema-specifications==2023.11.2"
+      "ref": "jsonschema-specifications==2023.12.1"
     },
     {
-      "ref": "jsonschema==4.20.0"
+      "ref": "jsonschema==4.21.1"
     },
     {
       "ref": "license-expression==30.2.0"
     },
     {
-      "ref": "lxml==4.9.3"
+      "ref": "lxml==4.9.4"
     },
     {
-      "ref": "packageurl-python==0.11.2"
+      "ref": "packageurl-python==0.13.4"
     },
     {
       "ref": "py-serializable==0.15.0"
@@ -1561,7 +1565,7 @@
       "ref": "python-dateutil==2.8.2"
     },
     {
-      "ref": "referencing==0.31.1"
+      "ref": "referencing==0.33.0"
     },
     {
       "ref": "rfc3339-validator==0.1.4"
@@ -1573,7 +1577,7 @@
       "ref": "root-component"
     },
     {
-      "ref": "rpds-py==0.13.2"
+      "ref": "rpds-py==0.17.1"
     },
     {
       "ref": "six==1.16.0"
@@ -1582,7 +1586,7 @@
       "ref": "sortedcontainers==2.4.0"
     },
     {
-      "ref": "types-python-dateutil==2.8.19.14"
+      "ref": "types-python-dateutil==2.8.19.20240106"
     },
     {
       "ref": "uri-template==1.3.0"
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.3.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.3.xml.bin
index 15f27e1e..96211627 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.3.xml.bin
@@ -41,17 +41,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="attrs==23.1.0">
+    <component type="library" bom-ref="attrs==23.2.0">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/attrs/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
-            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+            <hash alg="SHA-256">935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30</hash>
+            <hash alg="SHA-256">99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -187,17 +187,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema==4.20.0">
+    <component type="library" bom-ref="jsonschema==4.21.1">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa</hash>
-            <hash alg="SHA-256">ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3</hash>
+            <hash alg="SHA-256">7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f</hash>
+            <hash alg="SHA-256">85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -206,17 +206,17 @@
         <property name="cdx:python:package:required-extra">format</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema-specifications==2023.11.2">
+    <component type="library" bom-ref="jsonschema-specifications==2023.12.1">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema-specifications/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8</hash>
-            <hash alg="SHA-256">e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93</hash>
+            <hash alg="SHA-256">48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc</hash>
+            <hash alg="SHA-256">87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -242,107 +242,108 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="lxml==4.9.3">
+    <component type="library" bom-ref="lxml==4.9.4">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/lxml/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
-            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
-            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
-            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
-            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
-            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
-            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
-            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
-            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
-            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
-            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
-            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
-            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
-            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
-            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
-            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
-            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
-            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
-            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
-            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
-            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
-            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
-            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
-            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
-            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
-            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
-            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
-            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
-            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
-            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
-            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
-            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
-            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
-            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
-            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
-            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
-            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
-            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
-            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
-            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
-            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
-            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
-            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
-            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
-            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
-            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
-            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
-            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
-            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
-            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
-            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
-            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
-            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
-            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
-            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
-            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
-            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
-            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
-            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
-            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
-            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
-            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
-            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
-            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
-            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
-            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
-            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
-            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
-            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
-            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
-            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
-            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
-            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
-            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
-            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
-            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
-            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
-            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
-            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
-            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
-            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
-            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
-            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
-            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
-            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
-            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
-            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
-            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
-            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
-            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
-            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
-            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+            <hash alg="SHA-256">00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91</hash>
+            <hash alg="SHA-256">01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229</hash>
+            <hash alg="SHA-256">056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8</hash>
+            <hash alg="SHA-256">0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5</hash>
+            <hash alg="SHA-256">1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545</hash>
+            <hash alg="SHA-256">1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2</hash>
+            <hash alg="SHA-256">16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd</hash>
+            <hash alg="SHA-256">1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a</hash>
+            <hash alg="SHA-256">231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771</hash>
+            <hash alg="SHA-256">232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba</hash>
+            <hash alg="SHA-256">23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20</hash>
+            <hash alg="SHA-256">266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b</hash>
+            <hash alg="SHA-256">273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac</hash>
+            <hash alg="SHA-256">2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7</hash>
+            <hash alg="SHA-256">33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be</hash>
+            <hash alg="SHA-256">359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28</hash>
+            <hash alg="SHA-256">365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9</hash>
+            <hash alg="SHA-256">389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622</hash>
+            <hash alg="SHA-256">3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43</hash>
+            <hash alg="SHA-256">3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197</hash>
+            <hash alg="SHA-256">3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20</hash>
+            <hash alg="SHA-256">43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2</hash>
+            <hash alg="SHA-256">4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97</hash>
+            <hash alg="SHA-256">4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48</hash>
+            <hash alg="SHA-256">4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d</hash>
+            <hash alg="SHA-256">506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d</hash>
+            <hash alg="SHA-256">520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7</hash>
+            <hash alg="SHA-256">5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d</hash>
+            <hash alg="SHA-256">562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca</hash>
+            <hash alg="SHA-256">59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc</hash>
+            <hash alg="SHA-256">606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4</hash>
+            <hash alg="SHA-256">6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225</hash>
+            <hash alg="SHA-256">647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663</hash>
+            <hash alg="SHA-256">647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2</hash>
+            <hash alg="SHA-256">6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590</hash>
+            <hash alg="SHA-256">6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c</hash>
+            <hash alg="SHA-256">701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46</hash>
+            <hash alg="SHA-256">786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58</hash>
+            <hash alg="SHA-256">7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16</hash>
+            <hash alg="SHA-256">7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013</hash>
+            <hash alg="SHA-256">857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c</hash>
+            <hash alg="SHA-256">8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02</hash>
+            <hash alg="SHA-256">88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec</hash>
+            <hash alg="SHA-256">8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3</hash>
+            <hash alg="SHA-256">91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573</hash>
+            <hash alg="SHA-256">936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899</hash>
+            <hash alg="SHA-256">953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10</hash>
+            <hash alg="SHA-256">95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2</hash>
+            <hash alg="SHA-256">9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a</hash>
+            <hash alg="SHA-256">9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37</hash>
+            <hash alg="SHA-256">9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5</hash>
+            <hash alg="SHA-256">9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745</hash>
+            <hash alg="SHA-256">9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9</hash>
+            <hash alg="SHA-256">a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7</hash>
+            <hash alg="SHA-256">a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868</hash>
+            <hash alg="SHA-256">a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c</hash>
+            <hash alg="SHA-256">a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b</hash>
+            <hash alg="SHA-256">a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45</hash>
+            <hash alg="SHA-256">aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd</hash>
+            <hash alg="SHA-256">aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644</hash>
+            <hash alg="SHA-256">ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4</hash>
+            <hash alg="SHA-256">b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e</hash>
+            <hash alg="SHA-256">b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192</hash>
+            <hash alg="SHA-256">bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be</hash>
+            <hash alg="SHA-256">bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab</hash>
+            <hash alg="SHA-256">bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d</hash>
+            <hash alg="SHA-256">bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85</hash>
+            <hash alg="SHA-256">bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9</hash>
+            <hash alg="SHA-256">bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307</hash>
+            <hash alg="SHA-256">c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd</hash>
+            <hash alg="SHA-256">c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e</hash>
+            <hash alg="SHA-256">c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8</hash>
+            <hash alg="SHA-256">ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964</hash>
+            <hash alg="SHA-256">cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69</hash>
+            <hash alg="SHA-256">cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683</hash>
+            <hash alg="SHA-256">d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5</hash>
+            <hash alg="SHA-256">d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979</hash>
+            <hash alg="SHA-256">dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8</hash>
+            <hash alg="SHA-256">dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e</hash>
+            <hash alg="SHA-256">ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53</hash>
+            <hash alg="SHA-256">de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7</hash>
+            <hash alg="SHA-256">e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722</hash>
+            <hash alg="SHA-256">e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d</hash>
+            <hash alg="SHA-256">e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66</hash>
+            <hash alg="SHA-256">ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1</hash>
+            <hash alg="SHA-256">f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137</hash>
+            <hash alg="SHA-256">f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56</hash>
+            <hash alg="SHA-256">f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a</hash>
+            <hash alg="SHA-256">f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0</hash>
+            <hash alg="SHA-256">f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23</hash>
+            <hash alg="SHA-256">f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847</hash>
+            <hash alg="SHA-256">fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382</hash>
+            <hash alg="SHA-256">fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -350,17 +351,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="packageurl-python==0.11.2">
+    <component type="library" bom-ref="packageurl-python==0.13.4">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/packageurl-python/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
-            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+            <hash alg="SHA-256">62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f</hash>
+            <hash alg="SHA-256">6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -404,17 +405,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="referencing==0.31.1">
+    <component type="library" bom-ref="referencing==0.33.0">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/referencing/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec</hash>
-            <hash alg="SHA-256">c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d</hash>
+            <hash alg="SHA-256">39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5</hash>
+            <hash alg="SHA-256">c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -458,114 +459,114 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="rpds-py==0.13.2">
+    <component type="library" bom-ref="rpds-py==0.17.1">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/rpds-py/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276</hash>
-            <hash alg="SHA-256">12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f</hash>
-            <hash alg="SHA-256">15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60</hash>
-            <hash alg="SHA-256">188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0</hash>
-            <hash alg="SHA-256">1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d</hash>
-            <hash alg="SHA-256">244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3</hash>
-            <hash alg="SHA-256">25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2</hash>
-            <hash alg="SHA-256">25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9</hash>
-            <hash alg="SHA-256">29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb</hash>
-            <hash alg="SHA-256">2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b</hash>
-            <hash alg="SHA-256">2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a</hash>
-            <hash alg="SHA-256">2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d</hash>
-            <hash alg="SHA-256">2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1</hash>
-            <hash alg="SHA-256">31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7</hash>
-            <hash alg="SHA-256">35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9</hash>
-            <hash alg="SHA-256">38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4</hash>
-            <hash alg="SHA-256">38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53</hash>
-            <hash alg="SHA-256">3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea</hash>
-            <hash alg="SHA-256">3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66</hash>
-            <hash alg="SHA-256">3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190</hash>
-            <hash alg="SHA-256">46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3</hash>
-            <hash alg="SHA-256">4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12</hash>
-            <hash alg="SHA-256">4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824</hash>
-            <hash alg="SHA-256">4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27</hash>
-            <hash alg="SHA-256">4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e</hash>
-            <hash alg="SHA-256">4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8</hash>
-            <hash alg="SHA-256">51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8</hash>
-            <hash alg="SHA-256">530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914</hash>
-            <hash alg="SHA-256">5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211</hash>
-            <hash alg="SHA-256">5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab</hash>
-            <hash alg="SHA-256">5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468</hash>
-            <hash alg="SHA-256">5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3</hash>
-            <hash alg="SHA-256">5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff</hash>
-            <hash alg="SHA-256">5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c</hash>
-            <hash alg="SHA-256">603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d</hash>
-            <hash alg="SHA-256">61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e</hash>
-            <hash alg="SHA-256">61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a</hash>
-            <hash alg="SHA-256">65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e</hash>
-            <hash alg="SHA-256">67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a</hash>
-            <hash alg="SHA-256">6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0</hash>
-            <hash alg="SHA-256">6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1</hash>
-            <hash alg="SHA-256">6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3</hash>
-            <hash alg="SHA-256">729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42</hash>
-            <hash alg="SHA-256">751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452</hash>
-            <hash alg="SHA-256">76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198</hash>
-            <hash alg="SHA-256">79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa</hash>
-            <hash alg="SHA-256">7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b</hash>
-            <hash alg="SHA-256">7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4</hash>
-            <hash alg="SHA-256">80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1</hash>
-            <hash alg="SHA-256">87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad</hash>
-            <hash alg="SHA-256">881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c</hash>
-            <hash alg="SHA-256">8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381</hash>
-            <hash alg="SHA-256">8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0</hash>
-            <hash alg="SHA-256">8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2</hash>
-            <hash alg="SHA-256">96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3</hash>
-            <hash alg="SHA-256">96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31</hash>
-            <hash alg="SHA-256">97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74</hash>
-            <hash alg="SHA-256">9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6</hash>
-            <hash alg="SHA-256">9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff</hash>
-            <hash alg="SHA-256">a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b</hash>
-            <hash alg="SHA-256">aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca</hash>
-            <hash alg="SHA-256">ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd</hash>
-            <hash alg="SHA-256">ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a</hash>
-            <hash alg="SHA-256">aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568</hash>
-            <hash alg="SHA-256">b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1</hash>
-            <hash alg="SHA-256">b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c</hash>
-            <hash alg="SHA-256">b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad</hash>
-            <hash alg="SHA-256">b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7</hash>
-            <hash alg="SHA-256">b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d</hash>
-            <hash alg="SHA-256">b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658</hash>
-            <hash alg="SHA-256">bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1</hash>
-            <hash alg="SHA-256">bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64</hash>
-            <hash alg="SHA-256">bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815</hash>
-            <hash alg="SHA-256">c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1</hash>
-            <hash alg="SHA-256">c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac</hash>
-            <hash alg="SHA-256">c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07</hash>
-            <hash alg="SHA-256">c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e</hash>
-            <hash alg="SHA-256">c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee</hash>
-            <hash alg="SHA-256">d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45</hash>
-            <hash alg="SHA-256">d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc</hash>
-            <hash alg="SHA-256">d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41</hash>
-            <hash alg="SHA-256">d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2</hash>
-            <hash alg="SHA-256">d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083</hash>
-            <hash alg="SHA-256">d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e</hash>
-            <hash alg="SHA-256">db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266</hash>
-            <hash alg="SHA-256">ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141</hash>
-            <hash alg="SHA-256">e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b</hash>
-            <hash alg="SHA-256">e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933</hash>
-            <hash alg="SHA-256">e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21</hash>
-            <hash alg="SHA-256">eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0</hash>
-            <hash alg="SHA-256">ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7</hash>
-            <hash alg="SHA-256">ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc</hash>
-            <hash alg="SHA-256">efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba</hash>
-            <hash alg="SHA-256">f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a</hash>
-            <hash alg="SHA-256">f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57</hash>
-            <hash alg="SHA-256">f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2</hash>
-            <hash alg="SHA-256">f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007</hash>
-            <hash alg="SHA-256">f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f</hash>
-            <hash alg="SHA-256">fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f</hash>
+            <hash alg="SHA-256">01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147</hash>
+            <hash alg="SHA-256">0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7</hash>
+            <hash alg="SHA-256">02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2</hash>
+            <hash alg="SHA-256">0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68</hash>
+            <hash alg="SHA-256">060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1</hash>
+            <hash alg="SHA-256">071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382</hash>
+            <hash alg="SHA-256">0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d</hash>
+            <hash alg="SHA-256">10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921</hash>
+            <hash alg="SHA-256">149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38</hash>
+            <hash alg="SHA-256">1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4</hash>
+            <hash alg="SHA-256">1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a</hash>
+            <hash alg="SHA-256">1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d</hash>
+            <hash alg="SHA-256">1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518</hash>
+            <hash alg="SHA-256">1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e</hash>
+            <hash alg="SHA-256">1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d</hash>
+            <hash alg="SHA-256">1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf</hash>
+            <hash alg="SHA-256">1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5</hash>
+            <hash alg="SHA-256">1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba</hash>
+            <hash alg="SHA-256">20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6</hash>
+            <hash alg="SHA-256">24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59</hash>
+            <hash alg="SHA-256">2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253</hash>
+            <hash alg="SHA-256">25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6</hash>
+            <hash alg="SHA-256">270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f</hash>
+            <hash alg="SHA-256">292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3</hash>
+            <hash alg="SHA-256">2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea</hash>
+            <hash alg="SHA-256">2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1</hash>
+            <hash alg="SHA-256">2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76</hash>
+            <hash alg="SHA-256">2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93</hash>
+            <hash alg="SHA-256">3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad</hash>
+            <hash alg="SHA-256">3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad</hash>
+            <hash alg="SHA-256">380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc</hash>
+            <hash alg="SHA-256">3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049</hash>
+            <hash alg="SHA-256">4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d</hash>
+            <hash alg="SHA-256">4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90</hash>
+            <hash alg="SHA-256">436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d</hash>
+            <hash alg="SHA-256">4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd</hash>
+            <hash alg="SHA-256">4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25</hash>
+            <hash alg="SHA-256">516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2</hash>
+            <hash alg="SHA-256">5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f</hash>
+            <hash alg="SHA-256">5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6</hash>
+            <hash alg="SHA-256">5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4</hash>
+            <hash alg="SHA-256">5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c</hash>
+            <hash alg="SHA-256">60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8</hash>
+            <hash alg="SHA-256">637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d</hash>
+            <hash alg="SHA-256">65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b</hash>
+            <hash alg="SHA-256">698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19</hash>
+            <hash alg="SHA-256">70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453</hash>
+            <hash alg="SHA-256">720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9</hash>
+            <hash alg="SHA-256">7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde</hash>
+            <hash alg="SHA-256">7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296</hash>
+            <hash alg="SHA-256">7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58</hash>
+            <hash alg="SHA-256">81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec</hash>
+            <hash alg="SHA-256">810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99</hash>
+            <hash alg="SHA-256">82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a</hash>
+            <hash alg="SHA-256">841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb</hash>
+            <hash alg="SHA-256">8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383</hash>
+            <hash alg="SHA-256">8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d</hash>
+            <hash alg="SHA-256">9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896</hash>
+            <hash alg="SHA-256">91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc</hash>
+            <hash alg="SHA-256">93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6</hash>
+            <hash alg="SHA-256">938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b</hash>
+            <hash alg="SHA-256">9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7</hash>
+            <hash alg="SHA-256">9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22</hash>
+            <hash alg="SHA-256">99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf</hash>
+            <hash alg="SHA-256">99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394</hash>
+            <hash alg="SHA-256">9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0</hash>
+            <hash alg="SHA-256">9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57</hash>
+            <hash alg="SHA-256">a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74</hash>
+            <hash alg="SHA-256">a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83</hash>
+            <hash alg="SHA-256">a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29</hash>
+            <hash alg="SHA-256">a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9</hash>
+            <hash alg="SHA-256">aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f</hash>
+            <hash alg="SHA-256">ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745</hash>
+            <hash alg="SHA-256">b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb</hash>
+            <hash alg="SHA-256">b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811</hash>
+            <hash alg="SHA-256">b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55</hash>
+            <hash alg="SHA-256">b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342</hash>
+            <hash alg="SHA-256">bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23</hash>
+            <hash alg="SHA-256">be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82</hash>
+            <hash alg="SHA-256">bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041</hash>
+            <hash alg="SHA-256">c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb</hash>
+            <hash alg="SHA-256">c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066</hash>
+            <hash alg="SHA-256">d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55</hash>
+            <hash alg="SHA-256">d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6</hash>
+            <hash alg="SHA-256">da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a</hash>
+            <hash alg="SHA-256">dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140</hash>
+            <hash alg="SHA-256">dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b</hash>
+            <hash alg="SHA-256">df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9</hash>
+            <hash alg="SHA-256">dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256</hash>
+            <hash alg="SHA-256">e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c</hash>
+            <hash alg="SHA-256">efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772</hash>
+            <hash alg="SHA-256">f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4</hash>
+            <hash alg="SHA-256">f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae</hash>
+            <hash alg="SHA-256">f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920</hash>
+            <hash alg="SHA-256">f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a</hash>
+            <hash alg="SHA-256">f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b</hash>
+            <hash alg="SHA-256">fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361</hash>
+            <hash alg="SHA-256">ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8</hash>
+            <hash alg="SHA-256">ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -609,17 +610,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="types-python-dateutil==2.8.19.14">
+    <component type="library" bom-ref="types-python-dateutil==2.8.19.20240106">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/types-python-dateutil/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
-            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+            <hash alg="SHA-256">1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f</hash>
+            <hash alg="SHA-256">efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -666,7 +667,7 @@
   </components>
   <dependencies>
     <dependency ref="arrow==1.3.0"/>
-    <dependency ref="attrs==23.1.0"/>
+    <dependency ref="attrs==23.2.0"/>
     <dependency ref="boolean.py==4.0"/>
     <dependency ref="cyclonedx-python-lib==5.1.1"/>
     <dependency ref="defusedxml==0.7.1"/>
@@ -674,21 +675,21 @@
     <dependency ref="idna==3.6"/>
     <dependency ref="isoduration==20.11.0"/>
     <dependency ref="jsonpointer==2.4"/>
-    <dependency ref="jsonschema-specifications==2023.11.2"/>
-    <dependency ref="jsonschema==4.20.0"/>
+    <dependency ref="jsonschema-specifications==2023.12.1"/>
+    <dependency ref="jsonschema==4.21.1"/>
     <dependency ref="license-expression==30.2.0"/>
-    <dependency ref="lxml==4.9.3"/>
-    <dependency ref="packageurl-python==0.11.2"/>
+    <dependency ref="lxml==4.9.4"/>
+    <dependency ref="packageurl-python==0.13.4"/>
     <dependency ref="py-serializable==0.15.0"/>
     <dependency ref="python-dateutil==2.8.2"/>
-    <dependency ref="referencing==0.31.1"/>
+    <dependency ref="referencing==0.33.0"/>
     <dependency ref="rfc3339-validator==0.1.4"/>
     <dependency ref="rfc3987==1.3.8"/>
     <dependency ref="root-component"/>
-    <dependency ref="rpds-py==0.13.2"/>
+    <dependency ref="rpds-py==0.17.1"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
-    <dependency ref="types-python-dateutil==2.8.19.14"/>
+    <dependency ref="types-python-dateutil==2.8.19.20240106"/>
     <dependency ref="uri-template==1.3.0"/>
     <dependency ref="webcolors==1.13"/>
   </dependencies>
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.4.json.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.4.json.bin
index 641ff2d3..6f50e4ee 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.4.json.bin
@@ -31,18 +31,18 @@
       "version": "1.3.0"
     },
     {
-      "bom-ref": "attrs==23.1.0",
+      "bom-ref": "attrs==23.2.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+              "content": "935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30"
             },
             {
               "alg": "SHA-256",
-              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+              "content": "99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1"
             }
           ],
           "type": "distribution",
@@ -56,9 +56,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/attrs@23.1.0",
+      "purl": "pkg:pypi/attrs@23.2.0",
       "type": "library",
-      "version": "23.1.0"
+      "version": "23.2.0"
     },
     {
       "bom-ref": "boolean.py==4.0",
@@ -279,18 +279,18 @@
       "version": "2.4"
     },
     {
-      "bom-ref": "jsonschema==4.20.0",
+      "bom-ref": "jsonschema==4.21.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa"
+              "content": "7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f"
             },
             {
               "alg": "SHA-256",
-              "content": "ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3"
+              "content": "85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5"
             }
           ],
           "type": "distribution",
@@ -308,23 +308,23 @@
           "value": "format"
         }
       ],
-      "purl": "pkg:pypi/jsonschema@4.20.0",
+      "purl": "pkg:pypi/jsonschema@4.21.1",
       "type": "library",
-      "version": "4.20.0"
+      "version": "4.21.1"
     },
     {
-      "bom-ref": "jsonschema-specifications==2023.11.2",
+      "bom-ref": "jsonschema-specifications==2023.12.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8"
+              "content": "48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc"
             },
             {
               "alg": "SHA-256",
-              "content": "e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93"
+              "content": "87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c"
             }
           ],
           "type": "distribution",
@@ -338,9 +338,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
       "type": "library",
-      "version": "2023.11.2"
+      "version": "2023.12.1"
     },
     {
       "bom-ref": "license-expression==30.2.0",
@@ -373,378 +373,382 @@
       "version": "30.2.0"
     },
     {
-      "bom-ref": "lxml==4.9.3",
+      "bom-ref": "lxml==4.9.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+              "content": "00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91"
             },
             {
               "alg": "SHA-256",
-              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+              "content": "01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229"
             },
             {
               "alg": "SHA-256",
-              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+              "content": "056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8"
             },
             {
               "alg": "SHA-256",
-              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+              "content": "0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5"
             },
             {
               "alg": "SHA-256",
-              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+              "content": "1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545"
             },
             {
               "alg": "SHA-256",
-              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+              "content": "1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2"
             },
             {
               "alg": "SHA-256",
-              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+              "content": "16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd"
             },
             {
               "alg": "SHA-256",
-              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+              "content": "1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a"
             },
             {
               "alg": "SHA-256",
-              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+              "content": "231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771"
             },
             {
               "alg": "SHA-256",
-              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+              "content": "232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba"
             },
             {
               "alg": "SHA-256",
-              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+              "content": "23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20"
             },
             {
               "alg": "SHA-256",
-              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+              "content": "266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b"
             },
             {
               "alg": "SHA-256",
-              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+              "content": "273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac"
             },
             {
               "alg": "SHA-256",
-              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+              "content": "2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7"
             },
             {
               "alg": "SHA-256",
-              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+              "content": "33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be"
             },
             {
               "alg": "SHA-256",
-              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+              "content": "359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28"
             },
             {
               "alg": "SHA-256",
-              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+              "content": "365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9"
             },
             {
               "alg": "SHA-256",
-              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+              "content": "389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622"
             },
             {
               "alg": "SHA-256",
-              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+              "content": "3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43"
             },
             {
               "alg": "SHA-256",
-              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+              "content": "3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197"
             },
             {
               "alg": "SHA-256",
-              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+              "content": "3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20"
             },
             {
               "alg": "SHA-256",
-              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+              "content": "43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2"
             },
             {
               "alg": "SHA-256",
-              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+              "content": "4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97"
             },
             {
               "alg": "SHA-256",
-              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+              "content": "4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48"
             },
             {
               "alg": "SHA-256",
-              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+              "content": "4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d"
             },
             {
               "alg": "SHA-256",
-              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+              "content": "506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d"
             },
             {
               "alg": "SHA-256",
-              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+              "content": "520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7"
             },
             {
               "alg": "SHA-256",
-              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+              "content": "5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d"
             },
             {
               "alg": "SHA-256",
-              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+              "content": "562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca"
             },
             {
               "alg": "SHA-256",
-              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+              "content": "59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc"
             },
             {
               "alg": "SHA-256",
-              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+              "content": "606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4"
             },
             {
               "alg": "SHA-256",
-              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+              "content": "6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225"
             },
             {
               "alg": "SHA-256",
-              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+              "content": "647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663"
             },
             {
               "alg": "SHA-256",
-              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+              "content": "647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2"
             },
             {
               "alg": "SHA-256",
-              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+              "content": "6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590"
             },
             {
               "alg": "SHA-256",
-              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+              "content": "6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c"
             },
             {
               "alg": "SHA-256",
-              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+              "content": "701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46"
             },
             {
               "alg": "SHA-256",
-              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+              "content": "786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58"
             },
             {
               "alg": "SHA-256",
-              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+              "content": "7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16"
             },
             {
               "alg": "SHA-256",
-              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+              "content": "7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013"
             },
             {
               "alg": "SHA-256",
-              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+              "content": "857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c"
             },
             {
               "alg": "SHA-256",
-              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+              "content": "8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02"
             },
             {
               "alg": "SHA-256",
-              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+              "content": "88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec"
             },
             {
               "alg": "SHA-256",
-              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+              "content": "8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3"
             },
             {
               "alg": "SHA-256",
-              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+              "content": "91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573"
             },
             {
               "alg": "SHA-256",
-              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+              "content": "936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899"
             },
             {
               "alg": "SHA-256",
-              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+              "content": "953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10"
             },
             {
               "alg": "SHA-256",
-              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+              "content": "95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2"
             },
             {
               "alg": "SHA-256",
-              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+              "content": "9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a"
             },
             {
               "alg": "SHA-256",
-              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+              "content": "9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37"
             },
             {
               "alg": "SHA-256",
-              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+              "content": "9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5"
             },
             {
               "alg": "SHA-256",
-              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+              "content": "9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745"
             },
             {
               "alg": "SHA-256",
-              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+              "content": "9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9"
             },
             {
               "alg": "SHA-256",
-              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+              "content": "a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7"
             },
             {
               "alg": "SHA-256",
-              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+              "content": "a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868"
             },
             {
               "alg": "SHA-256",
-              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+              "content": "a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c"
             },
             {
               "alg": "SHA-256",
-              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+              "content": "a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b"
             },
             {
               "alg": "SHA-256",
-              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+              "content": "a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45"
             },
             {
               "alg": "SHA-256",
-              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+              "content": "aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd"
             },
             {
               "alg": "SHA-256",
-              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+              "content": "aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644"
             },
             {
               "alg": "SHA-256",
-              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+              "content": "ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4"
             },
             {
               "alg": "SHA-256",
-              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+              "content": "b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e"
             },
             {
               "alg": "SHA-256",
-              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+              "content": "b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192"
             },
             {
               "alg": "SHA-256",
-              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+              "content": "bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be"
             },
             {
               "alg": "SHA-256",
-              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+              "content": "bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab"
             },
             {
               "alg": "SHA-256",
-              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+              "content": "bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d"
             },
             {
               "alg": "SHA-256",
-              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+              "content": "bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85"
             },
             {
               "alg": "SHA-256",
-              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+              "content": "bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9"
             },
             {
               "alg": "SHA-256",
-              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+              "content": "bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307"
             },
             {
               "alg": "SHA-256",
-              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+              "content": "c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd"
             },
             {
               "alg": "SHA-256",
-              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+              "content": "c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e"
             },
             {
               "alg": "SHA-256",
-              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+              "content": "c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8"
             },
             {
               "alg": "SHA-256",
-              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+              "content": "ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964"
             },
             {
               "alg": "SHA-256",
-              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+              "content": "cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69"
             },
             {
               "alg": "SHA-256",
-              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+              "content": "cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683"
             },
             {
               "alg": "SHA-256",
-              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+              "content": "d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5"
             },
             {
               "alg": "SHA-256",
-              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+              "content": "d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979"
             },
             {
               "alg": "SHA-256",
-              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+              "content": "dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8"
             },
             {
               "alg": "SHA-256",
-              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+              "content": "dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e"
             },
             {
               "alg": "SHA-256",
-              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+              "content": "ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53"
             },
             {
               "alg": "SHA-256",
-              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+              "content": "de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7"
             },
             {
               "alg": "SHA-256",
-              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+              "content": "e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722"
             },
             {
               "alg": "SHA-256",
-              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+              "content": "e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d"
             },
             {
               "alg": "SHA-256",
-              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+              "content": "e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66"
             },
             {
               "alg": "SHA-256",
-              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+              "content": "ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1"
             },
             {
               "alg": "SHA-256",
-              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+              "content": "f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137"
             },
             {
               "alg": "SHA-256",
-              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+              "content": "f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56"
             },
             {
               "alg": "SHA-256",
-              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+              "content": "f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a"
             },
             {
               "alg": "SHA-256",
-              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+              "content": "f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0"
             },
             {
               "alg": "SHA-256",
-              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+              "content": "f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23"
             },
             {
               "alg": "SHA-256",
-              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+              "content": "f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847"
             },
             {
               "alg": "SHA-256",
-              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+              "content": "fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382"
+            },
+            {
+              "alg": "SHA-256",
+              "content": "fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b"
             }
           ],
           "type": "distribution",
@@ -758,23 +762,23 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/lxml@4.9.3",
+      "purl": "pkg:pypi/lxml@4.9.4",
       "type": "library",
-      "version": "4.9.3"
+      "version": "4.9.4"
     },
     {
-      "bom-ref": "packageurl-python==0.11.2",
+      "bom-ref": "packageurl-python==0.13.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+              "content": "62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f"
             },
             {
               "alg": "SHA-256",
-              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+              "content": "6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8"
             }
           ],
           "type": "distribution",
@@ -788,9 +792,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "purl": "pkg:pypi/packageurl-python@0.13.4",
       "type": "library",
-      "version": "0.11.2"
+      "version": "0.13.4"
     },
     {
       "bom-ref": "py-serializable==0.15.0",
@@ -853,18 +857,18 @@
       "version": "2.8.2"
     },
     {
-      "bom-ref": "referencing==0.31.1",
+      "bom-ref": "referencing==0.33.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec"
+              "content": "39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5"
             },
             {
               "alg": "SHA-256",
-              "content": "c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d"
+              "content": "c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7"
             }
           ],
           "type": "distribution",
@@ -878,9 +882,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/referencing@0.31.1",
+      "purl": "pkg:pypi/referencing@0.33.0",
       "type": "library",
-      "version": "0.31.1"
+      "version": "0.33.0"
     },
     {
       "bom-ref": "rfc3339-validator==0.1.4",
@@ -943,406 +947,406 @@
       "version": "1.3.8"
     },
     {
-      "bom-ref": "rpds-py==0.13.2",
+      "bom-ref": "rpds-py==0.17.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276"
+              "content": "01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147"
             },
             {
               "alg": "SHA-256",
-              "content": "12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f"
+              "content": "0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7"
             },
             {
               "alg": "SHA-256",
-              "content": "15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60"
+              "content": "02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2"
             },
             {
               "alg": "SHA-256",
-              "content": "188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0"
+              "content": "0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68"
             },
             {
               "alg": "SHA-256",
-              "content": "1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d"
+              "content": "060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1"
             },
             {
               "alg": "SHA-256",
-              "content": "244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3"
+              "content": "071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382"
             },
             {
               "alg": "SHA-256",
-              "content": "25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2"
+              "content": "0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d"
             },
             {
               "alg": "SHA-256",
-              "content": "25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9"
+              "content": "10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921"
             },
             {
               "alg": "SHA-256",
-              "content": "29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb"
+              "content": "149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38"
             },
             {
               "alg": "SHA-256",
-              "content": "2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b"
+              "content": "1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4"
             },
             {
               "alg": "SHA-256",
-              "content": "2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a"
+              "content": "1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a"
             },
             {
               "alg": "SHA-256",
-              "content": "2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d"
+              "content": "1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d"
             },
             {
               "alg": "SHA-256",
-              "content": "2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1"
+              "content": "1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518"
             },
             {
               "alg": "SHA-256",
-              "content": "31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7"
+              "content": "1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e"
             },
             {
               "alg": "SHA-256",
-              "content": "35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9"
+              "content": "1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d"
             },
             {
               "alg": "SHA-256",
-              "content": "38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4"
+              "content": "1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf"
             },
             {
               "alg": "SHA-256",
-              "content": "38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53"
+              "content": "1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5"
             },
             {
               "alg": "SHA-256",
-              "content": "3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea"
+              "content": "1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba"
             },
             {
               "alg": "SHA-256",
-              "content": "3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66"
+              "content": "20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6"
             },
             {
               "alg": "SHA-256",
-              "content": "3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190"
+              "content": "24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59"
             },
             {
               "alg": "SHA-256",
-              "content": "46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3"
+              "content": "2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253"
             },
             {
               "alg": "SHA-256",
-              "content": "4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12"
+              "content": "25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6"
             },
             {
               "alg": "SHA-256",
-              "content": "4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824"
+              "content": "270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f"
             },
             {
               "alg": "SHA-256",
-              "content": "4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27"
+              "content": "292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3"
             },
             {
               "alg": "SHA-256",
-              "content": "4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e"
+              "content": "2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea"
             },
             {
               "alg": "SHA-256",
-              "content": "4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8"
+              "content": "2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1"
             },
             {
               "alg": "SHA-256",
-              "content": "51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8"
+              "content": "2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76"
             },
             {
               "alg": "SHA-256",
-              "content": "530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914"
+              "content": "2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93"
             },
             {
               "alg": "SHA-256",
-              "content": "5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211"
+              "content": "3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad"
             },
             {
               "alg": "SHA-256",
-              "content": "5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab"
+              "content": "3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad"
             },
             {
               "alg": "SHA-256",
-              "content": "5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468"
+              "content": "380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc"
             },
             {
               "alg": "SHA-256",
-              "content": "5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3"
+              "content": "3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049"
             },
             {
               "alg": "SHA-256",
-              "content": "5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff"
+              "content": "4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d"
             },
             {
               "alg": "SHA-256",
-              "content": "5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c"
+              "content": "4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90"
             },
             {
               "alg": "SHA-256",
-              "content": "603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d"
+              "content": "436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d"
             },
             {
               "alg": "SHA-256",
-              "content": "61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e"
+              "content": "4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd"
             },
             {
               "alg": "SHA-256",
-              "content": "61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a"
+              "content": "4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25"
             },
             {
               "alg": "SHA-256",
-              "content": "65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e"
+              "content": "516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2"
             },
             {
               "alg": "SHA-256",
-              "content": "67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a"
+              "content": "5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f"
             },
             {
               "alg": "SHA-256",
-              "content": "6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0"
+              "content": "5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6"
             },
             {
               "alg": "SHA-256",
-              "content": "6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1"
+              "content": "5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4"
             },
             {
               "alg": "SHA-256",
-              "content": "6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3"
+              "content": "5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c"
             },
             {
               "alg": "SHA-256",
-              "content": "729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42"
+              "content": "60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8"
             },
             {
               "alg": "SHA-256",
-              "content": "751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452"
+              "content": "637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d"
             },
             {
               "alg": "SHA-256",
-              "content": "76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198"
+              "content": "65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b"
             },
             {
               "alg": "SHA-256",
-              "content": "79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa"
+              "content": "698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19"
             },
             {
               "alg": "SHA-256",
-              "content": "7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b"
+              "content": "70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453"
             },
             {
               "alg": "SHA-256",
-              "content": "7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4"
+              "content": "720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9"
             },
             {
               "alg": "SHA-256",
-              "content": "80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1"
+              "content": "7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde"
             },
             {
               "alg": "SHA-256",
-              "content": "87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad"
+              "content": "7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296"
             },
             {
               "alg": "SHA-256",
-              "content": "881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c"
+              "content": "7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58"
             },
             {
               "alg": "SHA-256",
-              "content": "8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381"
+              "content": "81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec"
             },
             {
               "alg": "SHA-256",
-              "content": "8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0"
+              "content": "810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99"
             },
             {
               "alg": "SHA-256",
-              "content": "8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2"
+              "content": "82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a"
             },
             {
               "alg": "SHA-256",
-              "content": "96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3"
+              "content": "841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb"
             },
             {
               "alg": "SHA-256",
-              "content": "96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31"
+              "content": "8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383"
             },
             {
               "alg": "SHA-256",
-              "content": "97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74"
+              "content": "8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d"
             },
             {
               "alg": "SHA-256",
-              "content": "9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6"
+              "content": "9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896"
             },
             {
               "alg": "SHA-256",
-              "content": "9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff"
+              "content": "91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc"
             },
             {
               "alg": "SHA-256",
-              "content": "a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b"
+              "content": "93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6"
             },
             {
               "alg": "SHA-256",
-              "content": "aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca"
+              "content": "938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b"
             },
             {
               "alg": "SHA-256",
-              "content": "ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd"
+              "content": "9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7"
             },
             {
               "alg": "SHA-256",
-              "content": "ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a"
+              "content": "9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22"
             },
             {
               "alg": "SHA-256",
-              "content": "aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568"
+              "content": "99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf"
             },
             {
               "alg": "SHA-256",
-              "content": "b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1"
+              "content": "99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394"
             },
             {
               "alg": "SHA-256",
-              "content": "b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c"
+              "content": "9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0"
             },
             {
               "alg": "SHA-256",
-              "content": "b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad"
+              "content": "9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57"
             },
             {
               "alg": "SHA-256",
-              "content": "b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7"
+              "content": "a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74"
             },
             {
               "alg": "SHA-256",
-              "content": "b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d"
+              "content": "a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83"
             },
             {
               "alg": "SHA-256",
-              "content": "b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658"
+              "content": "a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29"
             },
             {
               "alg": "SHA-256",
-              "content": "bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1"
+              "content": "a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9"
             },
             {
               "alg": "SHA-256",
-              "content": "bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64"
+              "content": "aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f"
             },
             {
               "alg": "SHA-256",
-              "content": "bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815"
+              "content": "ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745"
             },
             {
               "alg": "SHA-256",
-              "content": "c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1"
+              "content": "b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb"
             },
             {
               "alg": "SHA-256",
-              "content": "c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac"
+              "content": "b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811"
             },
             {
               "alg": "SHA-256",
-              "content": "c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07"
+              "content": "b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55"
             },
             {
               "alg": "SHA-256",
-              "content": "c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e"
+              "content": "b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342"
             },
             {
               "alg": "SHA-256",
-              "content": "c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee"
+              "content": "bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23"
             },
             {
               "alg": "SHA-256",
-              "content": "d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45"
+              "content": "be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82"
             },
             {
               "alg": "SHA-256",
-              "content": "d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc"
+              "content": "bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041"
             },
             {
               "alg": "SHA-256",
-              "content": "d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41"
+              "content": "c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb"
             },
             {
               "alg": "SHA-256",
-              "content": "d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2"
+              "content": "c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066"
             },
             {
               "alg": "SHA-256",
-              "content": "d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083"
+              "content": "d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55"
             },
             {
               "alg": "SHA-256",
-              "content": "d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e"
+              "content": "d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6"
             },
             {
               "alg": "SHA-256",
-              "content": "db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266"
+              "content": "da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a"
             },
             {
               "alg": "SHA-256",
-              "content": "ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141"
+              "content": "dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140"
             },
             {
               "alg": "SHA-256",
-              "content": "e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b"
+              "content": "dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b"
             },
             {
               "alg": "SHA-256",
-              "content": "e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933"
+              "content": "df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9"
             },
             {
               "alg": "SHA-256",
-              "content": "e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21"
+              "content": "dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256"
             },
             {
               "alg": "SHA-256",
-              "content": "eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0"
+              "content": "e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c"
             },
             {
               "alg": "SHA-256",
-              "content": "ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7"
+              "content": "efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772"
             },
             {
               "alg": "SHA-256",
-              "content": "ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc"
+              "content": "f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4"
             },
             {
               "alg": "SHA-256",
-              "content": "efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba"
+              "content": "f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae"
             },
             {
               "alg": "SHA-256",
-              "content": "f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a"
+              "content": "f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920"
             },
             {
               "alg": "SHA-256",
-              "content": "f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57"
+              "content": "f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a"
             },
             {
               "alg": "SHA-256",
-              "content": "f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2"
+              "content": "f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b"
             },
             {
               "alg": "SHA-256",
-              "content": "f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007"
+              "content": "fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361"
             },
             {
               "alg": "SHA-256",
-              "content": "f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f"
+              "content": "ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8"
             },
             {
               "alg": "SHA-256",
-              "content": "fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f"
+              "content": "ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a"
             }
           ],
           "type": "distribution",
@@ -1356,9 +1360,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/rpds-py@0.13.2",
+      "purl": "pkg:pypi/rpds-py@0.17.1",
       "type": "library",
-      "version": "0.13.2"
+      "version": "0.17.1"
     },
     {
       "bom-ref": "six==1.16.0",
@@ -1421,18 +1425,18 @@
       "version": "2.4.0"
     },
     {
-      "bom-ref": "types-python-dateutil==2.8.19.14",
+      "bom-ref": "types-python-dateutil==2.8.19.20240106",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+              "content": "1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f"
             },
             {
               "alg": "SHA-256",
-              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+              "content": "efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2"
             }
           ],
           "type": "distribution",
@@ -1446,9 +1450,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.20240106",
       "type": "library",
-      "version": "2.8.19.14"
+      "version": "2.8.19.20240106"
     },
     {
       "bom-ref": "uri-template==1.3.0",
@@ -1516,7 +1520,7 @@
       "ref": "arrow==1.3.0"
     },
     {
-      "ref": "attrs==23.1.0"
+      "ref": "attrs==23.2.0"
     },
     {
       "ref": "boolean.py==4.0"
@@ -1540,19 +1544,19 @@
       "ref": "jsonpointer==2.4"
     },
     {
-      "ref": "jsonschema-specifications==2023.11.2"
+      "ref": "jsonschema-specifications==2023.12.1"
     },
     {
-      "ref": "jsonschema==4.20.0"
+      "ref": "jsonschema==4.21.1"
     },
     {
       "ref": "license-expression==30.2.0"
     },
     {
-      "ref": "lxml==4.9.3"
+      "ref": "lxml==4.9.4"
     },
     {
-      "ref": "packageurl-python==0.11.2"
+      "ref": "packageurl-python==0.13.4"
     },
     {
       "ref": "py-serializable==0.15.0"
@@ -1561,7 +1565,7 @@
       "ref": "python-dateutil==2.8.2"
     },
     {
-      "ref": "referencing==0.31.1"
+      "ref": "referencing==0.33.0"
     },
     {
       "ref": "rfc3339-validator==0.1.4"
@@ -1573,7 +1577,7 @@
       "ref": "root-component"
     },
     {
-      "ref": "rpds-py==0.13.2"
+      "ref": "rpds-py==0.17.1"
     },
     {
       "ref": "six==1.16.0"
@@ -1582,7 +1586,7 @@
       "ref": "sortedcontainers==2.4.0"
     },
     {
-      "ref": "types-python-dateutil==2.8.19.14"
+      "ref": "types-python-dateutil==2.8.19.20240106"
     },
     {
       "ref": "uri-template==1.3.0"
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.4.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.4.xml.bin
index ba44ce9e..fa6de8b6 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.4.xml.bin
@@ -68,17 +68,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="attrs==23.1.0">
+    <component type="library" bom-ref="attrs==23.2.0">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/attrs/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
-            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+            <hash alg="SHA-256">935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30</hash>
+            <hash alg="SHA-256">99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -214,17 +214,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema==4.20.0">
+    <component type="library" bom-ref="jsonschema==4.21.1">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa</hash>
-            <hash alg="SHA-256">ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3</hash>
+            <hash alg="SHA-256">7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f</hash>
+            <hash alg="SHA-256">85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -233,17 +233,17 @@
         <property name="cdx:python:package:required-extra">format</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema-specifications==2023.11.2">
+    <component type="library" bom-ref="jsonschema-specifications==2023.12.1">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema-specifications/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8</hash>
-            <hash alg="SHA-256">e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93</hash>
+            <hash alg="SHA-256">48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc</hash>
+            <hash alg="SHA-256">87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -269,107 +269,108 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="lxml==4.9.3">
+    <component type="library" bom-ref="lxml==4.9.4">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/lxml/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
-            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
-            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
-            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
-            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
-            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
-            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
-            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
-            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
-            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
-            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
-            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
-            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
-            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
-            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
-            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
-            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
-            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
-            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
-            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
-            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
-            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
-            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
-            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
-            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
-            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
-            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
-            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
-            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
-            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
-            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
-            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
-            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
-            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
-            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
-            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
-            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
-            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
-            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
-            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
-            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
-            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
-            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
-            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
-            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
-            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
-            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
-            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
-            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
-            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
-            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
-            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
-            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
-            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
-            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
-            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
-            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
-            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
-            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
-            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
-            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
-            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
-            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
-            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
-            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
-            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
-            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
-            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
-            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
-            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
-            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
-            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
-            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
-            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
-            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
-            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
-            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
-            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
-            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
-            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
-            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
-            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
-            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
-            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
-            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
-            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
-            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
-            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
-            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
-            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
-            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
-            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+            <hash alg="SHA-256">00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91</hash>
+            <hash alg="SHA-256">01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229</hash>
+            <hash alg="SHA-256">056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8</hash>
+            <hash alg="SHA-256">0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5</hash>
+            <hash alg="SHA-256">1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545</hash>
+            <hash alg="SHA-256">1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2</hash>
+            <hash alg="SHA-256">16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd</hash>
+            <hash alg="SHA-256">1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a</hash>
+            <hash alg="SHA-256">231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771</hash>
+            <hash alg="SHA-256">232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba</hash>
+            <hash alg="SHA-256">23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20</hash>
+            <hash alg="SHA-256">266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b</hash>
+            <hash alg="SHA-256">273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac</hash>
+            <hash alg="SHA-256">2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7</hash>
+            <hash alg="SHA-256">33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be</hash>
+            <hash alg="SHA-256">359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28</hash>
+            <hash alg="SHA-256">365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9</hash>
+            <hash alg="SHA-256">389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622</hash>
+            <hash alg="SHA-256">3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43</hash>
+            <hash alg="SHA-256">3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197</hash>
+            <hash alg="SHA-256">3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20</hash>
+            <hash alg="SHA-256">43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2</hash>
+            <hash alg="SHA-256">4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97</hash>
+            <hash alg="SHA-256">4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48</hash>
+            <hash alg="SHA-256">4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d</hash>
+            <hash alg="SHA-256">506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d</hash>
+            <hash alg="SHA-256">520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7</hash>
+            <hash alg="SHA-256">5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d</hash>
+            <hash alg="SHA-256">562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca</hash>
+            <hash alg="SHA-256">59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc</hash>
+            <hash alg="SHA-256">606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4</hash>
+            <hash alg="SHA-256">6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225</hash>
+            <hash alg="SHA-256">647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663</hash>
+            <hash alg="SHA-256">647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2</hash>
+            <hash alg="SHA-256">6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590</hash>
+            <hash alg="SHA-256">6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c</hash>
+            <hash alg="SHA-256">701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46</hash>
+            <hash alg="SHA-256">786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58</hash>
+            <hash alg="SHA-256">7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16</hash>
+            <hash alg="SHA-256">7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013</hash>
+            <hash alg="SHA-256">857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c</hash>
+            <hash alg="SHA-256">8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02</hash>
+            <hash alg="SHA-256">88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec</hash>
+            <hash alg="SHA-256">8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3</hash>
+            <hash alg="SHA-256">91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573</hash>
+            <hash alg="SHA-256">936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899</hash>
+            <hash alg="SHA-256">953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10</hash>
+            <hash alg="SHA-256">95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2</hash>
+            <hash alg="SHA-256">9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a</hash>
+            <hash alg="SHA-256">9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37</hash>
+            <hash alg="SHA-256">9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5</hash>
+            <hash alg="SHA-256">9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745</hash>
+            <hash alg="SHA-256">9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9</hash>
+            <hash alg="SHA-256">a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7</hash>
+            <hash alg="SHA-256">a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868</hash>
+            <hash alg="SHA-256">a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c</hash>
+            <hash alg="SHA-256">a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b</hash>
+            <hash alg="SHA-256">a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45</hash>
+            <hash alg="SHA-256">aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd</hash>
+            <hash alg="SHA-256">aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644</hash>
+            <hash alg="SHA-256">ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4</hash>
+            <hash alg="SHA-256">b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e</hash>
+            <hash alg="SHA-256">b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192</hash>
+            <hash alg="SHA-256">bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be</hash>
+            <hash alg="SHA-256">bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab</hash>
+            <hash alg="SHA-256">bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d</hash>
+            <hash alg="SHA-256">bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85</hash>
+            <hash alg="SHA-256">bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9</hash>
+            <hash alg="SHA-256">bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307</hash>
+            <hash alg="SHA-256">c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd</hash>
+            <hash alg="SHA-256">c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e</hash>
+            <hash alg="SHA-256">c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8</hash>
+            <hash alg="SHA-256">ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964</hash>
+            <hash alg="SHA-256">cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69</hash>
+            <hash alg="SHA-256">cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683</hash>
+            <hash alg="SHA-256">d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5</hash>
+            <hash alg="SHA-256">d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979</hash>
+            <hash alg="SHA-256">dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8</hash>
+            <hash alg="SHA-256">dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e</hash>
+            <hash alg="SHA-256">ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53</hash>
+            <hash alg="SHA-256">de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7</hash>
+            <hash alg="SHA-256">e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722</hash>
+            <hash alg="SHA-256">e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d</hash>
+            <hash alg="SHA-256">e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66</hash>
+            <hash alg="SHA-256">ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1</hash>
+            <hash alg="SHA-256">f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137</hash>
+            <hash alg="SHA-256">f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56</hash>
+            <hash alg="SHA-256">f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a</hash>
+            <hash alg="SHA-256">f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0</hash>
+            <hash alg="SHA-256">f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23</hash>
+            <hash alg="SHA-256">f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847</hash>
+            <hash alg="SHA-256">fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382</hash>
+            <hash alg="SHA-256">fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -377,17 +378,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="packageurl-python==0.11.2">
+    <component type="library" bom-ref="packageurl-python==0.13.4">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/packageurl-python/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
-            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+            <hash alg="SHA-256">62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f</hash>
+            <hash alg="SHA-256">6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -431,17 +432,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="referencing==0.31.1">
+    <component type="library" bom-ref="referencing==0.33.0">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/referencing/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec</hash>
-            <hash alg="SHA-256">c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d</hash>
+            <hash alg="SHA-256">39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5</hash>
+            <hash alg="SHA-256">c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -485,114 +486,114 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="rpds-py==0.13.2">
+    <component type="library" bom-ref="rpds-py==0.17.1">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/rpds-py/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276</hash>
-            <hash alg="SHA-256">12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f</hash>
-            <hash alg="SHA-256">15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60</hash>
-            <hash alg="SHA-256">188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0</hash>
-            <hash alg="SHA-256">1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d</hash>
-            <hash alg="SHA-256">244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3</hash>
-            <hash alg="SHA-256">25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2</hash>
-            <hash alg="SHA-256">25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9</hash>
-            <hash alg="SHA-256">29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb</hash>
-            <hash alg="SHA-256">2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b</hash>
-            <hash alg="SHA-256">2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a</hash>
-            <hash alg="SHA-256">2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d</hash>
-            <hash alg="SHA-256">2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1</hash>
-            <hash alg="SHA-256">31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7</hash>
-            <hash alg="SHA-256">35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9</hash>
-            <hash alg="SHA-256">38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4</hash>
-            <hash alg="SHA-256">38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53</hash>
-            <hash alg="SHA-256">3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea</hash>
-            <hash alg="SHA-256">3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66</hash>
-            <hash alg="SHA-256">3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190</hash>
-            <hash alg="SHA-256">46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3</hash>
-            <hash alg="SHA-256">4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12</hash>
-            <hash alg="SHA-256">4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824</hash>
-            <hash alg="SHA-256">4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27</hash>
-            <hash alg="SHA-256">4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e</hash>
-            <hash alg="SHA-256">4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8</hash>
-            <hash alg="SHA-256">51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8</hash>
-            <hash alg="SHA-256">530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914</hash>
-            <hash alg="SHA-256">5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211</hash>
-            <hash alg="SHA-256">5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab</hash>
-            <hash alg="SHA-256">5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468</hash>
-            <hash alg="SHA-256">5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3</hash>
-            <hash alg="SHA-256">5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff</hash>
-            <hash alg="SHA-256">5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c</hash>
-            <hash alg="SHA-256">603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d</hash>
-            <hash alg="SHA-256">61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e</hash>
-            <hash alg="SHA-256">61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a</hash>
-            <hash alg="SHA-256">65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e</hash>
-            <hash alg="SHA-256">67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a</hash>
-            <hash alg="SHA-256">6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0</hash>
-            <hash alg="SHA-256">6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1</hash>
-            <hash alg="SHA-256">6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3</hash>
-            <hash alg="SHA-256">729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42</hash>
-            <hash alg="SHA-256">751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452</hash>
-            <hash alg="SHA-256">76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198</hash>
-            <hash alg="SHA-256">79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa</hash>
-            <hash alg="SHA-256">7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b</hash>
-            <hash alg="SHA-256">7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4</hash>
-            <hash alg="SHA-256">80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1</hash>
-            <hash alg="SHA-256">87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad</hash>
-            <hash alg="SHA-256">881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c</hash>
-            <hash alg="SHA-256">8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381</hash>
-            <hash alg="SHA-256">8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0</hash>
-            <hash alg="SHA-256">8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2</hash>
-            <hash alg="SHA-256">96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3</hash>
-            <hash alg="SHA-256">96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31</hash>
-            <hash alg="SHA-256">97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74</hash>
-            <hash alg="SHA-256">9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6</hash>
-            <hash alg="SHA-256">9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff</hash>
-            <hash alg="SHA-256">a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b</hash>
-            <hash alg="SHA-256">aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca</hash>
-            <hash alg="SHA-256">ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd</hash>
-            <hash alg="SHA-256">ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a</hash>
-            <hash alg="SHA-256">aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568</hash>
-            <hash alg="SHA-256">b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1</hash>
-            <hash alg="SHA-256">b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c</hash>
-            <hash alg="SHA-256">b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad</hash>
-            <hash alg="SHA-256">b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7</hash>
-            <hash alg="SHA-256">b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d</hash>
-            <hash alg="SHA-256">b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658</hash>
-            <hash alg="SHA-256">bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1</hash>
-            <hash alg="SHA-256">bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64</hash>
-            <hash alg="SHA-256">bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815</hash>
-            <hash alg="SHA-256">c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1</hash>
-            <hash alg="SHA-256">c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac</hash>
-            <hash alg="SHA-256">c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07</hash>
-            <hash alg="SHA-256">c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e</hash>
-            <hash alg="SHA-256">c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee</hash>
-            <hash alg="SHA-256">d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45</hash>
-            <hash alg="SHA-256">d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc</hash>
-            <hash alg="SHA-256">d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41</hash>
-            <hash alg="SHA-256">d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2</hash>
-            <hash alg="SHA-256">d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083</hash>
-            <hash alg="SHA-256">d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e</hash>
-            <hash alg="SHA-256">db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266</hash>
-            <hash alg="SHA-256">ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141</hash>
-            <hash alg="SHA-256">e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b</hash>
-            <hash alg="SHA-256">e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933</hash>
-            <hash alg="SHA-256">e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21</hash>
-            <hash alg="SHA-256">eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0</hash>
-            <hash alg="SHA-256">ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7</hash>
-            <hash alg="SHA-256">ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc</hash>
-            <hash alg="SHA-256">efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba</hash>
-            <hash alg="SHA-256">f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a</hash>
-            <hash alg="SHA-256">f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57</hash>
-            <hash alg="SHA-256">f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2</hash>
-            <hash alg="SHA-256">f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007</hash>
-            <hash alg="SHA-256">f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f</hash>
-            <hash alg="SHA-256">fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f</hash>
+            <hash alg="SHA-256">01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147</hash>
+            <hash alg="SHA-256">0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7</hash>
+            <hash alg="SHA-256">02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2</hash>
+            <hash alg="SHA-256">0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68</hash>
+            <hash alg="SHA-256">060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1</hash>
+            <hash alg="SHA-256">071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382</hash>
+            <hash alg="SHA-256">0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d</hash>
+            <hash alg="SHA-256">10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921</hash>
+            <hash alg="SHA-256">149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38</hash>
+            <hash alg="SHA-256">1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4</hash>
+            <hash alg="SHA-256">1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a</hash>
+            <hash alg="SHA-256">1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d</hash>
+            <hash alg="SHA-256">1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518</hash>
+            <hash alg="SHA-256">1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e</hash>
+            <hash alg="SHA-256">1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d</hash>
+            <hash alg="SHA-256">1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf</hash>
+            <hash alg="SHA-256">1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5</hash>
+            <hash alg="SHA-256">1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba</hash>
+            <hash alg="SHA-256">20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6</hash>
+            <hash alg="SHA-256">24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59</hash>
+            <hash alg="SHA-256">2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253</hash>
+            <hash alg="SHA-256">25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6</hash>
+            <hash alg="SHA-256">270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f</hash>
+            <hash alg="SHA-256">292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3</hash>
+            <hash alg="SHA-256">2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea</hash>
+            <hash alg="SHA-256">2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1</hash>
+            <hash alg="SHA-256">2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76</hash>
+            <hash alg="SHA-256">2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93</hash>
+            <hash alg="SHA-256">3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad</hash>
+            <hash alg="SHA-256">3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad</hash>
+            <hash alg="SHA-256">380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc</hash>
+            <hash alg="SHA-256">3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049</hash>
+            <hash alg="SHA-256">4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d</hash>
+            <hash alg="SHA-256">4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90</hash>
+            <hash alg="SHA-256">436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d</hash>
+            <hash alg="SHA-256">4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd</hash>
+            <hash alg="SHA-256">4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25</hash>
+            <hash alg="SHA-256">516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2</hash>
+            <hash alg="SHA-256">5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f</hash>
+            <hash alg="SHA-256">5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6</hash>
+            <hash alg="SHA-256">5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4</hash>
+            <hash alg="SHA-256">5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c</hash>
+            <hash alg="SHA-256">60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8</hash>
+            <hash alg="SHA-256">637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d</hash>
+            <hash alg="SHA-256">65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b</hash>
+            <hash alg="SHA-256">698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19</hash>
+            <hash alg="SHA-256">70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453</hash>
+            <hash alg="SHA-256">720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9</hash>
+            <hash alg="SHA-256">7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde</hash>
+            <hash alg="SHA-256">7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296</hash>
+            <hash alg="SHA-256">7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58</hash>
+            <hash alg="SHA-256">81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec</hash>
+            <hash alg="SHA-256">810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99</hash>
+            <hash alg="SHA-256">82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a</hash>
+            <hash alg="SHA-256">841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb</hash>
+            <hash alg="SHA-256">8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383</hash>
+            <hash alg="SHA-256">8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d</hash>
+            <hash alg="SHA-256">9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896</hash>
+            <hash alg="SHA-256">91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc</hash>
+            <hash alg="SHA-256">93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6</hash>
+            <hash alg="SHA-256">938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b</hash>
+            <hash alg="SHA-256">9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7</hash>
+            <hash alg="SHA-256">9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22</hash>
+            <hash alg="SHA-256">99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf</hash>
+            <hash alg="SHA-256">99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394</hash>
+            <hash alg="SHA-256">9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0</hash>
+            <hash alg="SHA-256">9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57</hash>
+            <hash alg="SHA-256">a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74</hash>
+            <hash alg="SHA-256">a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83</hash>
+            <hash alg="SHA-256">a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29</hash>
+            <hash alg="SHA-256">a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9</hash>
+            <hash alg="SHA-256">aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f</hash>
+            <hash alg="SHA-256">ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745</hash>
+            <hash alg="SHA-256">b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb</hash>
+            <hash alg="SHA-256">b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811</hash>
+            <hash alg="SHA-256">b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55</hash>
+            <hash alg="SHA-256">b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342</hash>
+            <hash alg="SHA-256">bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23</hash>
+            <hash alg="SHA-256">be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82</hash>
+            <hash alg="SHA-256">bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041</hash>
+            <hash alg="SHA-256">c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb</hash>
+            <hash alg="SHA-256">c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066</hash>
+            <hash alg="SHA-256">d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55</hash>
+            <hash alg="SHA-256">d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6</hash>
+            <hash alg="SHA-256">da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a</hash>
+            <hash alg="SHA-256">dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140</hash>
+            <hash alg="SHA-256">dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b</hash>
+            <hash alg="SHA-256">df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9</hash>
+            <hash alg="SHA-256">dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256</hash>
+            <hash alg="SHA-256">e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c</hash>
+            <hash alg="SHA-256">efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772</hash>
+            <hash alg="SHA-256">f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4</hash>
+            <hash alg="SHA-256">f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae</hash>
+            <hash alg="SHA-256">f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920</hash>
+            <hash alg="SHA-256">f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a</hash>
+            <hash alg="SHA-256">f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b</hash>
+            <hash alg="SHA-256">fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361</hash>
+            <hash alg="SHA-256">ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8</hash>
+            <hash alg="SHA-256">ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -636,17 +637,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="types-python-dateutil==2.8.19.14">
+    <component type="library" bom-ref="types-python-dateutil==2.8.19.20240106">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/types-python-dateutil/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
-            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+            <hash alg="SHA-256">1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f</hash>
+            <hash alg="SHA-256">efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -693,7 +694,7 @@
   </components>
   <dependencies>
     <dependency ref="arrow==1.3.0"/>
-    <dependency ref="attrs==23.1.0"/>
+    <dependency ref="attrs==23.2.0"/>
     <dependency ref="boolean.py==4.0"/>
     <dependency ref="cyclonedx-python-lib==5.1.1"/>
     <dependency ref="defusedxml==0.7.1"/>
@@ -701,21 +702,21 @@
     <dependency ref="idna==3.6"/>
     <dependency ref="isoduration==20.11.0"/>
     <dependency ref="jsonpointer==2.4"/>
-    <dependency ref="jsonschema-specifications==2023.11.2"/>
-    <dependency ref="jsonschema==4.20.0"/>
+    <dependency ref="jsonschema-specifications==2023.12.1"/>
+    <dependency ref="jsonschema==4.21.1"/>
     <dependency ref="license-expression==30.2.0"/>
-    <dependency ref="lxml==4.9.3"/>
-    <dependency ref="packageurl-python==0.11.2"/>
+    <dependency ref="lxml==4.9.4"/>
+    <dependency ref="packageurl-python==0.13.4"/>
     <dependency ref="py-serializable==0.15.0"/>
     <dependency ref="python-dateutil==2.8.2"/>
-    <dependency ref="referencing==0.31.1"/>
+    <dependency ref="referencing==0.33.0"/>
     <dependency ref="rfc3339-validator==0.1.4"/>
     <dependency ref="rfc3987==1.3.8"/>
     <dependency ref="root-component"/>
-    <dependency ref="rpds-py==0.13.2"/>
+    <dependency ref="rpds-py==0.17.1"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
-    <dependency ref="types-python-dateutil==2.8.19.14"/>
+    <dependency ref="types-python-dateutil==2.8.19.20240106"/>
     <dependency ref="uri-template==1.3.0"/>
     <dependency ref="webcolors==1.13"/>
   </dependencies>
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.5.json.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.5.json.bin
index 9707f3a4..581961b0 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.5.json.bin
@@ -31,18 +31,18 @@
       "version": "1.3.0"
     },
     {
-      "bom-ref": "attrs==23.1.0",
+      "bom-ref": "attrs==23.2.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+              "content": "935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30"
             },
             {
               "alg": "SHA-256",
-              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+              "content": "99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1"
             }
           ],
           "type": "distribution",
@@ -56,9 +56,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/attrs@23.1.0",
+      "purl": "pkg:pypi/attrs@23.2.0",
       "type": "library",
-      "version": "23.1.0"
+      "version": "23.2.0"
     },
     {
       "bom-ref": "boolean.py==4.0",
@@ -279,18 +279,18 @@
       "version": "2.4"
     },
     {
-      "bom-ref": "jsonschema==4.20.0",
+      "bom-ref": "jsonschema==4.21.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa"
+              "content": "7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f"
             },
             {
               "alg": "SHA-256",
-              "content": "ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3"
+              "content": "85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5"
             }
           ],
           "type": "distribution",
@@ -308,23 +308,23 @@
           "value": "format"
         }
       ],
-      "purl": "pkg:pypi/jsonschema@4.20.0",
+      "purl": "pkg:pypi/jsonschema@4.21.1",
       "type": "library",
-      "version": "4.20.0"
+      "version": "4.21.1"
     },
     {
-      "bom-ref": "jsonschema-specifications==2023.11.2",
+      "bom-ref": "jsonschema-specifications==2023.12.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8"
+              "content": "48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc"
             },
             {
               "alg": "SHA-256",
-              "content": "e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93"
+              "content": "87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c"
             }
           ],
           "type": "distribution",
@@ -338,9 +338,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
       "type": "library",
-      "version": "2023.11.2"
+      "version": "2023.12.1"
     },
     {
       "bom-ref": "license-expression==30.2.0",
@@ -373,378 +373,382 @@
       "version": "30.2.0"
     },
     {
-      "bom-ref": "lxml==4.9.3",
+      "bom-ref": "lxml==4.9.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+              "content": "00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91"
             },
             {
               "alg": "SHA-256",
-              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+              "content": "01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229"
             },
             {
               "alg": "SHA-256",
-              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+              "content": "056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8"
             },
             {
               "alg": "SHA-256",
-              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+              "content": "0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5"
             },
             {
               "alg": "SHA-256",
-              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+              "content": "1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545"
             },
             {
               "alg": "SHA-256",
-              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+              "content": "1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2"
             },
             {
               "alg": "SHA-256",
-              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+              "content": "16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd"
             },
             {
               "alg": "SHA-256",
-              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+              "content": "1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a"
             },
             {
               "alg": "SHA-256",
-              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+              "content": "231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771"
             },
             {
               "alg": "SHA-256",
-              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+              "content": "232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba"
             },
             {
               "alg": "SHA-256",
-              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+              "content": "23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20"
             },
             {
               "alg": "SHA-256",
-              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+              "content": "266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b"
             },
             {
               "alg": "SHA-256",
-              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+              "content": "273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac"
             },
             {
               "alg": "SHA-256",
-              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+              "content": "2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7"
             },
             {
               "alg": "SHA-256",
-              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+              "content": "33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be"
             },
             {
               "alg": "SHA-256",
-              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+              "content": "359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28"
             },
             {
               "alg": "SHA-256",
-              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+              "content": "365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9"
             },
             {
               "alg": "SHA-256",
-              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+              "content": "389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622"
             },
             {
               "alg": "SHA-256",
-              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+              "content": "3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43"
             },
             {
               "alg": "SHA-256",
-              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+              "content": "3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197"
             },
             {
               "alg": "SHA-256",
-              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+              "content": "3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20"
             },
             {
               "alg": "SHA-256",
-              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+              "content": "43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2"
             },
             {
               "alg": "SHA-256",
-              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+              "content": "4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97"
             },
             {
               "alg": "SHA-256",
-              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+              "content": "4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48"
             },
             {
               "alg": "SHA-256",
-              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+              "content": "4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d"
             },
             {
               "alg": "SHA-256",
-              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+              "content": "506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d"
             },
             {
               "alg": "SHA-256",
-              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+              "content": "520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7"
             },
             {
               "alg": "SHA-256",
-              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+              "content": "5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d"
             },
             {
               "alg": "SHA-256",
-              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+              "content": "562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca"
             },
             {
               "alg": "SHA-256",
-              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+              "content": "59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc"
             },
             {
               "alg": "SHA-256",
-              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+              "content": "606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4"
             },
             {
               "alg": "SHA-256",
-              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+              "content": "6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225"
             },
             {
               "alg": "SHA-256",
-              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+              "content": "647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663"
             },
             {
               "alg": "SHA-256",
-              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+              "content": "647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2"
             },
             {
               "alg": "SHA-256",
-              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+              "content": "6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590"
             },
             {
               "alg": "SHA-256",
-              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+              "content": "6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c"
             },
             {
               "alg": "SHA-256",
-              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+              "content": "701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46"
             },
             {
               "alg": "SHA-256",
-              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+              "content": "786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58"
             },
             {
               "alg": "SHA-256",
-              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+              "content": "7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16"
             },
             {
               "alg": "SHA-256",
-              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+              "content": "7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013"
             },
             {
               "alg": "SHA-256",
-              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+              "content": "857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c"
             },
             {
               "alg": "SHA-256",
-              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+              "content": "8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02"
             },
             {
               "alg": "SHA-256",
-              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+              "content": "88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec"
             },
             {
               "alg": "SHA-256",
-              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+              "content": "8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3"
             },
             {
               "alg": "SHA-256",
-              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+              "content": "91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573"
             },
             {
               "alg": "SHA-256",
-              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+              "content": "936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899"
             },
             {
               "alg": "SHA-256",
-              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+              "content": "953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10"
             },
             {
               "alg": "SHA-256",
-              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+              "content": "95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2"
             },
             {
               "alg": "SHA-256",
-              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+              "content": "9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a"
             },
             {
               "alg": "SHA-256",
-              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+              "content": "9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37"
             },
             {
               "alg": "SHA-256",
-              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+              "content": "9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5"
             },
             {
               "alg": "SHA-256",
-              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+              "content": "9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745"
             },
             {
               "alg": "SHA-256",
-              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+              "content": "9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9"
             },
             {
               "alg": "SHA-256",
-              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+              "content": "a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7"
             },
             {
               "alg": "SHA-256",
-              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+              "content": "a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868"
             },
             {
               "alg": "SHA-256",
-              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+              "content": "a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c"
             },
             {
               "alg": "SHA-256",
-              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+              "content": "a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b"
             },
             {
               "alg": "SHA-256",
-              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+              "content": "a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45"
             },
             {
               "alg": "SHA-256",
-              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+              "content": "aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd"
             },
             {
               "alg": "SHA-256",
-              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+              "content": "aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644"
             },
             {
               "alg": "SHA-256",
-              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+              "content": "ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4"
             },
             {
               "alg": "SHA-256",
-              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+              "content": "b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e"
             },
             {
               "alg": "SHA-256",
-              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+              "content": "b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192"
             },
             {
               "alg": "SHA-256",
-              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+              "content": "bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be"
             },
             {
               "alg": "SHA-256",
-              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+              "content": "bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab"
             },
             {
               "alg": "SHA-256",
-              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+              "content": "bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d"
             },
             {
               "alg": "SHA-256",
-              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+              "content": "bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85"
             },
             {
               "alg": "SHA-256",
-              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+              "content": "bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9"
             },
             {
               "alg": "SHA-256",
-              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+              "content": "bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307"
             },
             {
               "alg": "SHA-256",
-              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+              "content": "c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd"
             },
             {
               "alg": "SHA-256",
-              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+              "content": "c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e"
             },
             {
               "alg": "SHA-256",
-              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+              "content": "c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8"
             },
             {
               "alg": "SHA-256",
-              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+              "content": "ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964"
             },
             {
               "alg": "SHA-256",
-              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+              "content": "cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69"
             },
             {
               "alg": "SHA-256",
-              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+              "content": "cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683"
             },
             {
               "alg": "SHA-256",
-              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+              "content": "d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5"
             },
             {
               "alg": "SHA-256",
-              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+              "content": "d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979"
             },
             {
               "alg": "SHA-256",
-              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+              "content": "dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8"
             },
             {
               "alg": "SHA-256",
-              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+              "content": "dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e"
             },
             {
               "alg": "SHA-256",
-              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+              "content": "ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53"
             },
             {
               "alg": "SHA-256",
-              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+              "content": "de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7"
             },
             {
               "alg": "SHA-256",
-              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+              "content": "e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722"
             },
             {
               "alg": "SHA-256",
-              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+              "content": "e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d"
             },
             {
               "alg": "SHA-256",
-              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+              "content": "e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66"
             },
             {
               "alg": "SHA-256",
-              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+              "content": "ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1"
             },
             {
               "alg": "SHA-256",
-              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+              "content": "f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137"
             },
             {
               "alg": "SHA-256",
-              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+              "content": "f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56"
             },
             {
               "alg": "SHA-256",
-              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+              "content": "f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a"
             },
             {
               "alg": "SHA-256",
-              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+              "content": "f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0"
             },
             {
               "alg": "SHA-256",
-              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+              "content": "f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23"
             },
             {
               "alg": "SHA-256",
-              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+              "content": "f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847"
             },
             {
               "alg": "SHA-256",
-              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+              "content": "fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382"
+            },
+            {
+              "alg": "SHA-256",
+              "content": "fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b"
             }
           ],
           "type": "distribution",
@@ -758,23 +762,23 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/lxml@4.9.3",
+      "purl": "pkg:pypi/lxml@4.9.4",
       "type": "library",
-      "version": "4.9.3"
+      "version": "4.9.4"
     },
     {
-      "bom-ref": "packageurl-python==0.11.2",
+      "bom-ref": "packageurl-python==0.13.4",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+              "content": "62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f"
             },
             {
               "alg": "SHA-256",
-              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+              "content": "6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8"
             }
           ],
           "type": "distribution",
@@ -788,9 +792,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "purl": "pkg:pypi/packageurl-python@0.13.4",
       "type": "library",
-      "version": "0.11.2"
+      "version": "0.13.4"
     },
     {
       "bom-ref": "py-serializable==0.15.0",
@@ -853,18 +857,18 @@
       "version": "2.8.2"
     },
     {
-      "bom-ref": "referencing==0.31.1",
+      "bom-ref": "referencing==0.33.0",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec"
+              "content": "39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5"
             },
             {
               "alg": "SHA-256",
-              "content": "c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d"
+              "content": "c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7"
             }
           ],
           "type": "distribution",
@@ -878,9 +882,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/referencing@0.31.1",
+      "purl": "pkg:pypi/referencing@0.33.0",
       "type": "library",
-      "version": "0.31.1"
+      "version": "0.33.0"
     },
     {
       "bom-ref": "rfc3339-validator==0.1.4",
@@ -943,406 +947,406 @@
       "version": "1.3.8"
     },
     {
-      "bom-ref": "rpds-py==0.13.2",
+      "bom-ref": "rpds-py==0.17.1",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276"
+              "content": "01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147"
             },
             {
               "alg": "SHA-256",
-              "content": "12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f"
+              "content": "0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7"
             },
             {
               "alg": "SHA-256",
-              "content": "15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60"
+              "content": "02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2"
             },
             {
               "alg": "SHA-256",
-              "content": "188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0"
+              "content": "0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68"
             },
             {
               "alg": "SHA-256",
-              "content": "1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d"
+              "content": "060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1"
             },
             {
               "alg": "SHA-256",
-              "content": "244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3"
+              "content": "071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382"
             },
             {
               "alg": "SHA-256",
-              "content": "25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2"
+              "content": "0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d"
             },
             {
               "alg": "SHA-256",
-              "content": "25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9"
+              "content": "10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921"
             },
             {
               "alg": "SHA-256",
-              "content": "29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb"
+              "content": "149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38"
             },
             {
               "alg": "SHA-256",
-              "content": "2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b"
+              "content": "1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4"
             },
             {
               "alg": "SHA-256",
-              "content": "2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a"
+              "content": "1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a"
             },
             {
               "alg": "SHA-256",
-              "content": "2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d"
+              "content": "1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d"
             },
             {
               "alg": "SHA-256",
-              "content": "2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1"
+              "content": "1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518"
             },
             {
               "alg": "SHA-256",
-              "content": "31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7"
+              "content": "1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e"
             },
             {
               "alg": "SHA-256",
-              "content": "35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9"
+              "content": "1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d"
             },
             {
               "alg": "SHA-256",
-              "content": "38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4"
+              "content": "1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf"
             },
             {
               "alg": "SHA-256",
-              "content": "38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53"
+              "content": "1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5"
             },
             {
               "alg": "SHA-256",
-              "content": "3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea"
+              "content": "1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba"
             },
             {
               "alg": "SHA-256",
-              "content": "3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66"
+              "content": "20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6"
             },
             {
               "alg": "SHA-256",
-              "content": "3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190"
+              "content": "24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59"
             },
             {
               "alg": "SHA-256",
-              "content": "46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3"
+              "content": "2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253"
             },
             {
               "alg": "SHA-256",
-              "content": "4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12"
+              "content": "25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6"
             },
             {
               "alg": "SHA-256",
-              "content": "4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824"
+              "content": "270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f"
             },
             {
               "alg": "SHA-256",
-              "content": "4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27"
+              "content": "292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3"
             },
             {
               "alg": "SHA-256",
-              "content": "4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e"
+              "content": "2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea"
             },
             {
               "alg": "SHA-256",
-              "content": "4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8"
+              "content": "2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1"
             },
             {
               "alg": "SHA-256",
-              "content": "51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8"
+              "content": "2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76"
             },
             {
               "alg": "SHA-256",
-              "content": "530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914"
+              "content": "2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93"
             },
             {
               "alg": "SHA-256",
-              "content": "5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211"
+              "content": "3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad"
             },
             {
               "alg": "SHA-256",
-              "content": "5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab"
+              "content": "3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad"
             },
             {
               "alg": "SHA-256",
-              "content": "5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468"
+              "content": "380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc"
             },
             {
               "alg": "SHA-256",
-              "content": "5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3"
+              "content": "3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049"
             },
             {
               "alg": "SHA-256",
-              "content": "5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff"
+              "content": "4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d"
             },
             {
               "alg": "SHA-256",
-              "content": "5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c"
+              "content": "4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90"
             },
             {
               "alg": "SHA-256",
-              "content": "603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d"
+              "content": "436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d"
             },
             {
               "alg": "SHA-256",
-              "content": "61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e"
+              "content": "4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd"
             },
             {
               "alg": "SHA-256",
-              "content": "61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a"
+              "content": "4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25"
             },
             {
               "alg": "SHA-256",
-              "content": "65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e"
+              "content": "516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2"
             },
             {
               "alg": "SHA-256",
-              "content": "67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a"
+              "content": "5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f"
             },
             {
               "alg": "SHA-256",
-              "content": "6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0"
+              "content": "5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6"
             },
             {
               "alg": "SHA-256",
-              "content": "6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1"
+              "content": "5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4"
             },
             {
               "alg": "SHA-256",
-              "content": "6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3"
+              "content": "5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c"
             },
             {
               "alg": "SHA-256",
-              "content": "729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42"
+              "content": "60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8"
             },
             {
               "alg": "SHA-256",
-              "content": "751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452"
+              "content": "637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d"
             },
             {
               "alg": "SHA-256",
-              "content": "76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198"
+              "content": "65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b"
             },
             {
               "alg": "SHA-256",
-              "content": "79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa"
+              "content": "698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19"
             },
             {
               "alg": "SHA-256",
-              "content": "7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b"
+              "content": "70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453"
             },
             {
               "alg": "SHA-256",
-              "content": "7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4"
+              "content": "720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9"
             },
             {
               "alg": "SHA-256",
-              "content": "80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1"
+              "content": "7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde"
             },
             {
               "alg": "SHA-256",
-              "content": "87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad"
+              "content": "7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296"
             },
             {
               "alg": "SHA-256",
-              "content": "881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c"
+              "content": "7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58"
             },
             {
               "alg": "SHA-256",
-              "content": "8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381"
+              "content": "81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec"
             },
             {
               "alg": "SHA-256",
-              "content": "8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0"
+              "content": "810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99"
             },
             {
               "alg": "SHA-256",
-              "content": "8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2"
+              "content": "82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a"
             },
             {
               "alg": "SHA-256",
-              "content": "96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3"
+              "content": "841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb"
             },
             {
               "alg": "SHA-256",
-              "content": "96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31"
+              "content": "8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383"
             },
             {
               "alg": "SHA-256",
-              "content": "97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74"
+              "content": "8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d"
             },
             {
               "alg": "SHA-256",
-              "content": "9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6"
+              "content": "9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896"
             },
             {
               "alg": "SHA-256",
-              "content": "9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff"
+              "content": "91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc"
             },
             {
               "alg": "SHA-256",
-              "content": "a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b"
+              "content": "93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6"
             },
             {
               "alg": "SHA-256",
-              "content": "aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca"
+              "content": "938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b"
             },
             {
               "alg": "SHA-256",
-              "content": "ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd"
+              "content": "9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7"
             },
             {
               "alg": "SHA-256",
-              "content": "ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a"
+              "content": "9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22"
             },
             {
               "alg": "SHA-256",
-              "content": "aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568"
+              "content": "99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf"
             },
             {
               "alg": "SHA-256",
-              "content": "b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1"
+              "content": "99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394"
             },
             {
               "alg": "SHA-256",
-              "content": "b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c"
+              "content": "9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0"
             },
             {
               "alg": "SHA-256",
-              "content": "b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad"
+              "content": "9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57"
             },
             {
               "alg": "SHA-256",
-              "content": "b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7"
+              "content": "a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74"
             },
             {
               "alg": "SHA-256",
-              "content": "b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d"
+              "content": "a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83"
             },
             {
               "alg": "SHA-256",
-              "content": "b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658"
+              "content": "a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29"
             },
             {
               "alg": "SHA-256",
-              "content": "bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1"
+              "content": "a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9"
             },
             {
               "alg": "SHA-256",
-              "content": "bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64"
+              "content": "aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f"
             },
             {
               "alg": "SHA-256",
-              "content": "bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815"
+              "content": "ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745"
             },
             {
               "alg": "SHA-256",
-              "content": "c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1"
+              "content": "b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb"
             },
             {
               "alg": "SHA-256",
-              "content": "c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac"
+              "content": "b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811"
             },
             {
               "alg": "SHA-256",
-              "content": "c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07"
+              "content": "b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55"
             },
             {
               "alg": "SHA-256",
-              "content": "c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e"
+              "content": "b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342"
             },
             {
               "alg": "SHA-256",
-              "content": "c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee"
+              "content": "bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23"
             },
             {
               "alg": "SHA-256",
-              "content": "d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45"
+              "content": "be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82"
             },
             {
               "alg": "SHA-256",
-              "content": "d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc"
+              "content": "bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041"
             },
             {
               "alg": "SHA-256",
-              "content": "d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41"
+              "content": "c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb"
             },
             {
               "alg": "SHA-256",
-              "content": "d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2"
+              "content": "c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066"
             },
             {
               "alg": "SHA-256",
-              "content": "d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083"
+              "content": "d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55"
             },
             {
               "alg": "SHA-256",
-              "content": "d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e"
+              "content": "d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6"
             },
             {
               "alg": "SHA-256",
-              "content": "db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266"
+              "content": "da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a"
             },
             {
               "alg": "SHA-256",
-              "content": "ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141"
+              "content": "dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140"
             },
             {
               "alg": "SHA-256",
-              "content": "e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b"
+              "content": "dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b"
             },
             {
               "alg": "SHA-256",
-              "content": "e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933"
+              "content": "df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9"
             },
             {
               "alg": "SHA-256",
-              "content": "e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21"
+              "content": "dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256"
             },
             {
               "alg": "SHA-256",
-              "content": "eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0"
+              "content": "e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c"
             },
             {
               "alg": "SHA-256",
-              "content": "ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7"
+              "content": "efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772"
             },
             {
               "alg": "SHA-256",
-              "content": "ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc"
+              "content": "f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4"
             },
             {
               "alg": "SHA-256",
-              "content": "efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba"
+              "content": "f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae"
             },
             {
               "alg": "SHA-256",
-              "content": "f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a"
+              "content": "f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920"
             },
             {
               "alg": "SHA-256",
-              "content": "f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57"
+              "content": "f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a"
             },
             {
               "alg": "SHA-256",
-              "content": "f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2"
+              "content": "f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b"
             },
             {
               "alg": "SHA-256",
-              "content": "f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007"
+              "content": "fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361"
             },
             {
               "alg": "SHA-256",
-              "content": "f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f"
+              "content": "ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8"
             },
             {
               "alg": "SHA-256",
-              "content": "fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f"
+              "content": "ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a"
             }
           ],
           "type": "distribution",
@@ -1356,9 +1360,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/rpds-py@0.13.2",
+      "purl": "pkg:pypi/rpds-py@0.17.1",
       "type": "library",
-      "version": "0.13.2"
+      "version": "0.17.1"
     },
     {
       "bom-ref": "six==1.16.0",
@@ -1421,18 +1425,18 @@
       "version": "2.4.0"
     },
     {
-      "bom-ref": "types-python-dateutil==2.8.19.14",
+      "bom-ref": "types-python-dateutil==2.8.19.20240106",
       "externalReferences": [
         {
           "comment": "from implicit index: pypi",
           "hashes": [
             {
               "alg": "SHA-256",
-              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+              "content": "1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f"
             },
             {
               "alg": "SHA-256",
-              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+              "content": "efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2"
             }
           ],
           "type": "distribution",
@@ -1446,9 +1450,9 @@
           "value": "default"
         }
       ],
-      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.20240106",
       "type": "library",
-      "version": "2.8.19.14"
+      "version": "2.8.19.20240106"
     },
     {
       "bom-ref": "uri-template==1.3.0",
@@ -1516,7 +1520,7 @@
       "ref": "arrow==1.3.0"
     },
     {
-      "ref": "attrs==23.1.0"
+      "ref": "attrs==23.2.0"
     },
     {
       "ref": "boolean.py==4.0"
@@ -1540,19 +1544,19 @@
       "ref": "jsonpointer==2.4"
     },
     {
-      "ref": "jsonschema-specifications==2023.11.2"
+      "ref": "jsonschema-specifications==2023.12.1"
     },
     {
-      "ref": "jsonschema==4.20.0"
+      "ref": "jsonschema==4.21.1"
     },
     {
       "ref": "license-expression==30.2.0"
     },
     {
-      "ref": "lxml==4.9.3"
+      "ref": "lxml==4.9.4"
     },
     {
-      "ref": "packageurl-python==0.11.2"
+      "ref": "packageurl-python==0.13.4"
     },
     {
       "ref": "py-serializable==0.15.0"
@@ -1561,7 +1565,7 @@
       "ref": "python-dateutil==2.8.2"
     },
     {
-      "ref": "referencing==0.31.1"
+      "ref": "referencing==0.33.0"
     },
     {
       "ref": "rfc3339-validator==0.1.4"
@@ -1573,7 +1577,7 @@
       "ref": "root-component"
     },
     {
-      "ref": "rpds-py==0.13.2"
+      "ref": "rpds-py==0.17.1"
     },
     {
       "ref": "six==1.16.0"
@@ -1582,7 +1586,7 @@
       "ref": "sortedcontainers==2.4.0"
     },
     {
-      "ref": "types-python-dateutil==2.8.19.14"
+      "ref": "types-python-dateutil==2.8.19.20240106"
     },
     {
       "ref": "uri-template==1.3.0"
diff --git a/tests/_data/snapshots/pipenv/plain_with-extras_1.5.xml.bin b/tests/_data/snapshots/pipenv/plain_with-extras_1.5.xml.bin
index 40c44268..18ba1d2d 100644
--- a/tests/_data/snapshots/pipenv/plain_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/pipenv/plain_with-extras_1.5.xml.bin
@@ -68,17 +68,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="attrs==23.1.0">
+    <component type="library" bom-ref="attrs==23.2.0">
       <name>attrs</name>
-      <version>23.1.0</version>
-      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <version>23.2.0</version>
+      <purl>pkg:pypi/attrs@23.2.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/attrs/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
-            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+            <hash alg="SHA-256">935dc3b529c262f6cf76e50877d35a4bd3c1de194fd41f47a2b7ae8f19971f30</hash>
+            <hash alg="SHA-256">99b87a485a5820b23b879f04c2305b44b951b502fd64be915879d77a7e8fc6f1</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -214,17 +214,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema==4.20.0">
+    <component type="library" bom-ref="jsonschema==4.21.1">
       <name>jsonschema</name>
-      <version>4.20.0</version>
-      <purl>pkg:pypi/jsonschema@4.20.0</purl>
+      <version>4.21.1</version>
+      <purl>pkg:pypi/jsonschema@4.21.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">4f614fd46d8d61258610998997743ec5492a648b33cf478c1ddc23ed4598a5fa</hash>
-            <hash alg="SHA-256">ed6231f0429ecf966f5bc8dfef245998220549cbbcf140f913b7464c52c3b6b3</hash>
+            <hash alg="SHA-256">7996507afae316306f9e2290407761157c6f78002dcf7419acb99822143d1c6f</hash>
+            <hash alg="SHA-256">85727c00279f5fa6bedbe6238d2aa6403bedd8b4864ab11207d07df3cc1b2ee5</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -233,17 +233,17 @@
         <property name="cdx:python:package:required-extra">format</property>
       </properties>
     </component>
-    <component type="library" bom-ref="jsonschema-specifications==2023.11.2">
+    <component type="library" bom-ref="jsonschema-specifications==2023.12.1">
       <name>jsonschema-specifications</name>
-      <version>2023.11.2</version>
-      <purl>pkg:pypi/jsonschema-specifications@2023.11.2</purl>
+      <version>2023.12.1</version>
+      <purl>pkg:pypi/jsonschema-specifications@2023.12.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/jsonschema-specifications/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">9472fc4fea474cd74bea4a2b190daeccb5a9e4db2ea80efcf7a1b582fc9a81b8</hash>
-            <hash alg="SHA-256">e74ba7c0a65e8cb49dc26837d6cfe576557084a8b423ed16a420984228104f93</hash>
+            <hash alg="SHA-256">48a76787b3e70f5ed53f1160d2b81f586e4ca6d1548c5de7085d1682674764cc</hash>
+            <hash alg="SHA-256">87e4fdf3a94858b8a2ba2778d9ba57d8a9cafca7c7489c46ba0d30a8bc6a9c3c</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -269,107 +269,108 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="lxml==4.9.3">
+    <component type="library" bom-ref="lxml==4.9.4">
       <name>lxml</name>
-      <version>4.9.3</version>
-      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <version>4.9.4</version>
+      <purl>pkg:pypi/lxml@4.9.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/lxml/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
-            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
-            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
-            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
-            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
-            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
-            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
-            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
-            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
-            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
-            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
-            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
-            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
-            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
-            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
-            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
-            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
-            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
-            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
-            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
-            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
-            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
-            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
-            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
-            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
-            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
-            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
-            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
-            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
-            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
-            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
-            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
-            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
-            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
-            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
-            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
-            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
-            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
-            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
-            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
-            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
-            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
-            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
-            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
-            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
-            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
-            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
-            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
-            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
-            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
-            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
-            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
-            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
-            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
-            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
-            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
-            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
-            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
-            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
-            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
-            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
-            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
-            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
-            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
-            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
-            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
-            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
-            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
-            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
-            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
-            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
-            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
-            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
-            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
-            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
-            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
-            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
-            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
-            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
-            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
-            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
-            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
-            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
-            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
-            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
-            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
-            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
-            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
-            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
-            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
-            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
-            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+            <hash alg="SHA-256">00e91573183ad273e242db5585b52670eddf92bacad095ce25c1e682da14ed91</hash>
+            <hash alg="SHA-256">01bf1df1db327e748dcb152d17389cf6d0a8c5d533ef9bab781e9d5037619229</hash>
+            <hash alg="SHA-256">056a17eaaf3da87a05523472ae84246f87ac2f29a53306466c22e60282e54ff8</hash>
+            <hash alg="SHA-256">0a08c89b23117049ba171bf51d2f9c5f3abf507d65d016d6e0fa2f37e18c0fc5</hash>
+            <hash alg="SHA-256">1343df4e2e6e51182aad12162b23b0a4b3fd77f17527a78c53f0f23573663545</hash>
+            <hash alg="SHA-256">1449f9451cd53e0fd0a7ec2ff5ede4686add13ac7a7bfa6988ff6d75cff3ebe2</hash>
+            <hash alg="SHA-256">16b9ec51cc2feab009e800f2c6327338d6ee4e752c76e95a35c4465e80390ccd</hash>
+            <hash alg="SHA-256">1f10f250430a4caf84115b1e0f23f3615566ca2369d1962f82bef40dd99cd81a</hash>
+            <hash alg="SHA-256">231142459d32779b209aa4b4d460b175cadd604fed856f25c1571a9d78114771</hash>
+            <hash alg="SHA-256">232fd30903d3123be4c435fb5159938c6225ee8607b635a4d3fca847003134ba</hash>
+            <hash alg="SHA-256">23d891e5bdc12e2e506e7d225d6aa929e0a0368c9916c1fddefab88166e98b20</hash>
+            <hash alg="SHA-256">266f655d1baff9c47b52f529b5f6bec33f66042f65f7c56adde3fcf2ed62ae8b</hash>
+            <hash alg="SHA-256">273473d34462ae6e97c0f4e517bd1bf9588aa67a1d47d93f760a1282640e24ac</hash>
+            <hash alg="SHA-256">2bd9ac6e44f2db368ef8986f3989a4cad3de4cd55dbdda536e253000c801bcc7</hash>
+            <hash alg="SHA-256">33714fcf5af4ff7e70a49731a7cc8fd9ce910b9ac194f66eaa18c3cc0a4c02be</hash>
+            <hash alg="SHA-256">359a8b09d712df27849e0bcb62c6a3404e780b274b0b7e4c39a88826d1926c28</hash>
+            <hash alg="SHA-256">365005e8b0718ea6d64b374423e870648ab47c3a905356ab6e5a5ff03962b9a9</hash>
+            <hash alg="SHA-256">389d2b2e543b27962990ab529ac6720c3dded588cc6d0f6557eec153305a3622</hash>
+            <hash alg="SHA-256">3b505f2bbff50d261176e67be24e8909e54b5d9d08b12d4946344066d66b3e43</hash>
+            <hash alg="SHA-256">3d74d4a3c4b8f7a1f676cedf8e84bcc57705a6d7925e6daef7a1e54ae543a197</hash>
+            <hash alg="SHA-256">3f3f00a9061605725df1816f5713d10cd94636347ed651abdbc75828df302b20</hash>
+            <hash alg="SHA-256">43498ea734ccdfb92e1886dfedaebeb81178a241d39a79d5351ba2b671bff2b2</hash>
+            <hash alg="SHA-256">4855161013dfb2b762e02b3f4d4a21cc7c6aec13c69e3bffbf5022b3e708dd97</hash>
+            <hash alg="SHA-256">4d973729ce04784906a19108054e1fd476bc85279a403ea1a72fdb051c76fa48</hash>
+            <hash alg="SHA-256">4ece9cca4cd1c8ba889bfa67eae7f21d0d1a2e715b4d5045395113361e8c533d</hash>
+            <hash alg="SHA-256">506becdf2ecaebaf7f7995f776394fcc8bd8a78022772de66677c84fb02dd33d</hash>
+            <hash alg="SHA-256">520486f27f1d4ce9654154b4494cf9307b495527f3a2908ad4cb48e4f7ed7ef7</hash>
+            <hash alg="SHA-256">5557461f83bb7cc718bc9ee1f7156d50e31747e5b38d79cf40f79ab1447afd2d</hash>
+            <hash alg="SHA-256">562778586949be7e0d7435fcb24aca4810913771f845d99145a6cee64d5b67ca</hash>
+            <hash alg="SHA-256">59bb5979f9941c61e907ee571732219fa4774d5a18f3fa5ff2df963f5dfaa6bc</hash>
+            <hash alg="SHA-256">606d445feeb0856c2b424405236a01c71af7c97e5fe42fbc778634faef2b47e4</hash>
+            <hash alg="SHA-256">6197c3f3c0b960ad033b9b7d611db11285bb461fc6b802c1dd50d04ad715c225</hash>
+            <hash alg="SHA-256">647459b23594f370c1c01768edaa0ba0959afc39caeeb793b43158bb9bb6a663</hash>
+            <hash alg="SHA-256">647bfe88b1997d7ae8d45dabc7c868d8cb0c8412a6e730a7651050b8c7289cf2</hash>
+            <hash alg="SHA-256">6bee9c2e501d835f91460b2c904bc359f8433e96799f5c2ff20feebd9bb1e590</hash>
+            <hash alg="SHA-256">6dbdacf5752fbd78ccdb434698230c4f0f95df7dd956d5f205b5ed6911a1367c</hash>
+            <hash alg="SHA-256">701847a7aaefef121c5c0d855b2affa5f9bd45196ef00266724a80e439220e46</hash>
+            <hash alg="SHA-256">786d6b57026e7e04d184313c1359ac3d68002c33e4b1042ca58c362f1d09ff58</hash>
+            <hash alg="SHA-256">7b378847a09d6bd46047f5f3599cdc64fcb4cc5a5a2dd0a2af610361fbe77b16</hash>
+            <hash alg="SHA-256">7d1d6c9e74c70ddf524e3c09d9dc0522aba9370708c2cb58680ea40174800013</hash>
+            <hash alg="SHA-256">857d6565f9aa3464764c2cb6a2e3c2e75e1970e877c188f4aeae45954a314e0c</hash>
+            <hash alg="SHA-256">8671622256a0859f5089cbe0ce4693c2af407bc053dcc99aadff7f5310b4aa02</hash>
+            <hash alg="SHA-256">88f7c383071981c74ec1998ba9b437659e4fd02a3c4a4d3efc16774eb108d0ec</hash>
+            <hash alg="SHA-256">8aecb5a7f6f7f8fe9cac0bcadd39efaca8bbf8d1bf242e9f175cbe4c925116c3</hash>
+            <hash alg="SHA-256">91bbf398ac8bb7d65a5a52127407c05f75a18d7015a270fdd94bbcb04e65d573</hash>
+            <hash alg="SHA-256">936e8880cc00f839aa4173f94466a8406a96ddce814651075f95837316369899</hash>
+            <hash alg="SHA-256">953dd5481bd6252bd480d6ec431f61d7d87fdcbbb71b0d2bdcfc6ae00bb6fb10</hash>
+            <hash alg="SHA-256">95ae6c5a196e2f239150aa4a479967351df7f44800c93e5a975ec726fef005e2</hash>
+            <hash alg="SHA-256">9a2b5915c333e4364367140443b59f09feae42184459b913f0f41b9fed55794a</hash>
+            <hash alg="SHA-256">9ae6c3363261021144121427b1552b29e7b59de9d6a75bf51e03bc072efb3c37</hash>
+            <hash alg="SHA-256">9b556596c49fa1232b0fff4b0e69b9d4083a502e60e404b44341e2f8fb7187f5</hash>
+            <hash alg="SHA-256">9c131447768ed7bc05a02553d939e7f0e807e533441901dd504e217b76307745</hash>
+            <hash alg="SHA-256">9d9d5726474cbbef279fd709008f91a49c4f758bec9c062dfbba88eab00e3ff9</hash>
+            <hash alg="SHA-256">a1bdcbebd4e13446a14de4dd1825f1e778e099f17f79718b4aeaf2403624b0f7</hash>
+            <hash alg="SHA-256">a602ed9bd2c7d85bd58592c28e101bd9ff9c718fbde06545a70945ffd5d11868</hash>
+            <hash alg="SHA-256">a8edae5253efa75c2fc79a90068fe540b197d1c7ab5803b800fccfe240eed33c</hash>
+            <hash alg="SHA-256">a905affe76f1802edcac554e3ccf68188bea16546071d7583fb1b693f9cf756b</hash>
+            <hash alg="SHA-256">a9e7c6d89c77bb2770c9491d988f26a4b161d05c8ca58f63fb1f1b6b9a74be45</hash>
+            <hash alg="SHA-256">aa9b5abd07f71b081a33115d9758ef6077924082055005808f68feccb27616bd</hash>
+            <hash alg="SHA-256">aaa5c173a26960fe67daa69aa93d6d6a1cd714a6eb13802d4e4bd1d24a530644</hash>
+            <hash alg="SHA-256">ac7674d1638df129d9cb4503d20ffc3922bd463c865ef3cb412f2c926108e9a4</hash>
+            <hash alg="SHA-256">b1541e50b78e15fa06a2670157a1962ef06591d4c998b998047fff5e3236880e</hash>
+            <hash alg="SHA-256">b1980dbcaad634fe78e710c8587383e6e3f61dbe146bcbfd13a9c8ab2d7b1192</hash>
+            <hash alg="SHA-256">bafa65e3acae612a7799ada439bd202403414ebe23f52e5b17f6ffc2eb98c2be</hash>
+            <hash alg="SHA-256">bb5bd6212eb0edfd1e8f254585290ea1dadc3687dd8fd5e2fd9a87c31915cdab</hash>
+            <hash alg="SHA-256">bbdd69e20fe2943b51e2841fc1e6a3c1de460d630f65bde12452d8c97209464d</hash>
+            <hash alg="SHA-256">bc354b1393dce46026ab13075f77b30e40b61b1a53e852e99d3cc5dd1af4bc85</hash>
+            <hash alg="SHA-256">bcee502c649fa6351b44bb014b98c09cb00982a475a1912a9881ca28ab4f9cd9</hash>
+            <hash alg="SHA-256">bdd9abccd0927673cffe601d2c6cdad1c9321bf3437a2f507d6b037ef91ea307</hash>
+            <hash alg="SHA-256">c42ae7e010d7d6bc51875d768110c10e8a59494855c3d4c348b068f5fb81fdcd</hash>
+            <hash alg="SHA-256">c71b5b860c5215fdbaa56f715bc218e45a98477f816b46cfde4a84d25b13274e</hash>
+            <hash alg="SHA-256">c7721a3ef41591341388bb2265395ce522aba52f969d33dacd822da8f018aff8</hash>
+            <hash alg="SHA-256">ca8e44b5ba3edb682ea4e6185b49661fc22b230cf811b9c13963c9f982d1d964</hash>
+            <hash alg="SHA-256">cb53669442895763e61df5c995f0e8361b61662f26c1b04ee82899c2789c8f69</hash>
+            <hash alg="SHA-256">cc02c06e9e320869d7d1bd323df6dd4281e78ac2e7f8526835d3d48c69060683</hash>
+            <hash alg="SHA-256">d3caa09e613ece43ac292fbed513a4bce170681a447d25ffcbc1b647d45a39c5</hash>
+            <hash alg="SHA-256">d82411dbf4d3127b6cde7da0f9373e37ad3a43e89ef374965465928f01c2b979</hash>
+            <hash alg="SHA-256">dbcb2dc07308453db428a95a4d03259bd8caea97d7f0776842299f2d00c72fc8</hash>
+            <hash alg="SHA-256">dd4fda67f5faaef4f9ee5383435048ee3e11ad996901225ad7615bc92245bc8e</hash>
+            <hash alg="SHA-256">ddd92e18b783aeb86ad2132d84a4b795fc5ec612e3545c1b687e7747e66e2b53</hash>
+            <hash alg="SHA-256">de362ac8bc962408ad8fae28f3967ce1a262b5d63ab8cefb42662566737f1dc7</hash>
+            <hash alg="SHA-256">e214025e23db238805a600f1f37bf9f9a15413c7bf5f9d6ae194f84980c78722</hash>
+            <hash alg="SHA-256">e8f9f93a23634cfafbad6e46ad7d09e0f4a25a2400e4a64b1b7b7c0fbaa06d9d</hash>
+            <hash alg="SHA-256">e96a1788f24d03e8d61679f9881a883ecdf9c445a38f9ae3f3f193ab6c591c66</hash>
+            <hash alg="SHA-256">ec53a09aee61d45e7dbe7e91252ff0491b6b5fee3d85b2d45b173d8ab453efc1</hash>
+            <hash alg="SHA-256">f10250bb190fb0742e3e1958dd5c100524c2cc5096c67c8da51233f7448dc137</hash>
+            <hash alg="SHA-256">f1faee2a831fe249e1bae9cbc68d3cd8a30f7e37851deee4d7962b17c410dd56</hash>
+            <hash alg="SHA-256">f610d980e3fccf4394ab3806de6065682982f3d27c12d4ce3ee46a8183d64a6a</hash>
+            <hash alg="SHA-256">f6c35b2f87c004270fa2e703b872fcc984d714d430b305145c39d53074e1ffe0</hash>
+            <hash alg="SHA-256">f836f39678cb47c9541f04d8ed4545719dc31ad850bf1832d6b4171e30d65d23</hash>
+            <hash alg="SHA-256">f99768232f036b4776ce419d3244a04fe83784bce871b16d2c2e984c7fcea847</hash>
+            <hash alg="SHA-256">fd814847901df6e8de13ce69b84c31fc9b3fb591224d6762d0b256d510cbf382</hash>
+            <hash alg="SHA-256">fdb325b7fba1e2c40b9b1db407f85642e32404131c08480dd652110fc908561b</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -377,17 +378,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="packageurl-python==0.11.2">
+    <component type="library" bom-ref="packageurl-python==0.13.4">
       <name>packageurl-python</name>
-      <version>0.11.2</version>
-      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <version>0.13.4</version>
+      <purl>pkg:pypi/packageurl-python@0.13.4</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/packageurl-python/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
-            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+            <hash alg="SHA-256">62aa13d60a0082ff115784fefdfe73a12f310e455365cca7c6d362161067f35f</hash>
+            <hash alg="SHA-256">6eb5e995009cc73387095e0b507ab65df51357d25ddc5fce3d3545ad6dcbbee8</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -431,17 +432,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="referencing==0.31.1">
+    <component type="library" bom-ref="referencing==0.33.0">
       <name>referencing</name>
-      <version>0.31.1</version>
-      <purl>pkg:pypi/referencing@0.31.1</purl>
+      <version>0.33.0</version>
+      <purl>pkg:pypi/referencing@0.33.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/referencing/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">81a1471c68c9d5e3831c30ad1dd9815c45b558e596653db751a2bfdd17b3b9ec</hash>
-            <hash alg="SHA-256">c19c4d006f1757e3dd75c4f784d38f8698d87b649c54f9ace14e5e8c9667c01d</hash>
+            <hash alg="SHA-256">39240f2ecc770258f28b642dd47fd74bc8b02484de54e1882b74b35ebd779bd5</hash>
+            <hash alg="SHA-256">c775fedf74bc0f9189c2a3be1c12fd03e8c23f4d371dce795df44e06c5b412f7</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -485,114 +486,114 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="rpds-py==0.13.2">
+    <component type="library" bom-ref="rpds-py==0.17.1">
       <name>rpds-py</name>
-      <version>0.13.2</version>
-      <purl>pkg:pypi/rpds-py@0.13.2</purl>
+      <version>0.17.1</version>
+      <purl>pkg:pypi/rpds-py@0.17.1</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/rpds-py/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">06d218e4464d31301e943b65b2c6919318ea6f69703a351961e1baaf60347276</hash>
-            <hash alg="SHA-256">12ecf89bd54734c3c2c79898ae2021dca42750c7bcfb67f8fb3315453738ac8f</hash>
-            <hash alg="SHA-256">15253fff410873ebf3cfba1cc686a37711efcd9b8cb30ea21bb14a973e393f60</hash>
-            <hash alg="SHA-256">188435794405c7f0573311747c85a96b63c954a5f2111b1df8018979eca0f2f0</hash>
-            <hash alg="SHA-256">1ceebd0ae4f3e9b2b6b553b51971921853ae4eebf3f54086be0565d59291e53d</hash>
-            <hash alg="SHA-256">244e173bb6d8f3b2f0c4d7370a1aa341f35da3e57ffd1798e5b2917b91731fd3</hash>
-            <hash alg="SHA-256">25b28b3d33ec0a78e944aaaed7e5e2a94ac811bcd68b557ca48a0c30f87497d2</hash>
-            <hash alg="SHA-256">25ea41635d22b2eb6326f58e608550e55d01df51b8a580ea7e75396bafbb28e9</hash>
-            <hash alg="SHA-256">29d311e44dd16d2434d5506d57ef4d7036544fc3c25c14b6992ef41f541b10fb</hash>
-            <hash alg="SHA-256">2a1472956c5bcc49fb0252b965239bffe801acc9394f8b7c1014ae9258e4572b</hash>
-            <hash alg="SHA-256">2a7bef6977043673750a88da064fd513f89505111014b4e00fbdd13329cd4e9a</hash>
-            <hash alg="SHA-256">2ac26f50736324beb0282c819668328d53fc38543fa61eeea2c32ea8ea6eab8d</hash>
-            <hash alg="SHA-256">2e72f750048b32d39e87fc85c225c50b2a6715034848dbb196bf3348aa761fa1</hash>
-            <hash alg="SHA-256">31e220a040b89a01505128c2f8a59ee74732f666439a03e65ccbf3824cdddae7</hash>
-            <hash alg="SHA-256">35f53c76a712e323c779ca39b9a81b13f219a8e3bc15f106ed1e1462d56fcfe9</hash>
-            <hash alg="SHA-256">38d4f822ee2f338febcc85aaa2547eb5ba31ba6ff68d10b8ec988929d23bb6b4</hash>
-            <hash alg="SHA-256">38f9bf2ad754b4a45b8210a6c732fe876b8a14e14d5992a8c4b7c1ef78740f53</hash>
-            <hash alg="SHA-256">3a44c8440183b43167fd1a0819e8356692bf5db1ad14ce140dbd40a1485f2dea</hash>
-            <hash alg="SHA-256">3ab96754d23372009638a402a1ed12a27711598dd49d8316a22597141962fe66</hash>
-            <hash alg="SHA-256">3c55d7f2d817183d43220738270efd3ce4e7a7b7cbdaefa6d551ed3d6ed89190</hash>
-            <hash alg="SHA-256">46e1ed994a0920f350a4547a38471217eb86f57377e9314fbaaa329b71b7dfe3</hash>
-            <hash alg="SHA-256">4a5375c5fff13f209527cd886dc75394f040c7d1ecad0a2cb0627f13ebe78a12</hash>
-            <hash alg="SHA-256">4c2d26aa03d877c9730bf005621c92da263523a1e99247590abbbe252ccb7824</hash>
-            <hash alg="SHA-256">4c4e314d36d4f31236a545696a480aa04ea170a0b021e9a59ab1ed94d4c3ef27</hash>
-            <hash alg="SHA-256">4d0c10d803549427f427085ed7aebc39832f6e818a011dcd8785e9c6a1ba9b3e</hash>
-            <hash alg="SHA-256">4dcc5ee1d0275cb78d443fdebd0241e58772a354a6d518b1d7af1580bbd2c4e8</hash>
-            <hash alg="SHA-256">51967a67ea0d7b9b5cd86036878e2d82c0b6183616961c26d825b8c994d4f2c8</hash>
-            <hash alg="SHA-256">530190eb0cd778363bbb7596612ded0bb9fef662daa98e9d92a0419ab27ae914</hash>
-            <hash alg="SHA-256">5379e49d7e80dca9811b36894493d1c1ecb4c57de05c36f5d0dd09982af20211</hash>
-            <hash alg="SHA-256">5493569f861fb7b05af6d048d00d773c6162415ae521b7010197c98810a14cab</hash>
-            <hash alg="SHA-256">5a4c1058cdae6237d97af272b326e5f78ee7ee3bbffa6b24b09db4d828810468</hash>
-            <hash alg="SHA-256">5d75d6d220d55cdced2f32cc22f599475dbe881229aeddba6c79c2e9df35a2b3</hash>
-            <hash alg="SHA-256">5d97e9ae94fb96df1ee3cb09ca376c34e8a122f36927230f4c8a97f469994bff</hash>
-            <hash alg="SHA-256">5feae2f9aa7270e2c071f488fab256d768e88e01b958f123a690f1cc3061a09c</hash>
-            <hash alg="SHA-256">603d5868f7419081d616dab7ac3cfa285296735e7350f7b1e4f548f6f953ee7d</hash>
-            <hash alg="SHA-256">61d42d2b08430854485135504f672c14d4fc644dd243a9c17e7c4e0faf5ed07e</hash>
-            <hash alg="SHA-256">61dbc1e01dc0c5875da2f7ae36d6e918dc1b8d2ce04e871793976594aad8a57a</hash>
-            <hash alg="SHA-256">65cfed9c807c27dee76407e8bb29e6f4e391e436774bcc769a037ff25ad8646e</hash>
-            <hash alg="SHA-256">67a429520e97621a763cf9b3ba27574779c4e96e49a27ff8a1aa99ee70beb28a</hash>
-            <hash alg="SHA-256">6aadae3042f8e6db3376d9e91f194c606c9a45273c170621d46128f35aef7cd0</hash>
-            <hash alg="SHA-256">6ba8858933f0c1a979781272a5f65646fca8c18c93c99c6ddb5513ad96fa54b1</hash>
-            <hash alg="SHA-256">6bc568b05e02cd612be53900c88aaa55012e744930ba2eeb56279db4c6676eb3</hash>
-            <hash alg="SHA-256">729408136ef8d45a28ee9a7411917c9e3459cf266c7e23c2f7d4bb8ef9e0da42</hash>
-            <hash alg="SHA-256">751758d9dd04d548ec679224cc00e3591f5ebf1ff159ed0d4aba6a0746352452</hash>
-            <hash alg="SHA-256">76d59d4d451ba77f08cb4cd9268dec07be5bc65f73666302dbb5061989b17198</hash>
-            <hash alg="SHA-256">79bf58c08f0756adba691d480b5a20e4ad23f33e1ae121584cf3a21717c36dfa</hash>
-            <hash alg="SHA-256">7de12b69d95072394998c622cfd7e8cea8f560db5fca6a62a148f902a1029f8b</hash>
-            <hash alg="SHA-256">7f55cd9cf1564b7b03f238e4c017ca4794c05b01a783e9291065cb2858d86ce4</hash>
-            <hash alg="SHA-256">80e5acb81cb49fd9f2d5c08f8b74ffff14ee73b10ca88297ab4619e946bcb1e1</hash>
-            <hash alg="SHA-256">87a90f5545fd61f6964e65eebde4dc3fa8660bb7d87adb01d4cf17e0a2b484ad</hash>
-            <hash alg="SHA-256">881df98f0a8404d32b6de0fd33e91c1b90ed1516a80d4d6dc69d414b8850474c</hash>
-            <hash alg="SHA-256">8a776a29b77fe0cc28fedfd87277b0d0f7aa930174b7e504d764e0b43a05f381</hash>
-            <hash alg="SHA-256">8c2a61c0e4811012b0ba9f6cdcb4437865df5d29eab5d6018ba13cee1c3064a0</hash>
-            <hash alg="SHA-256">8fa6bd071ec6d90f6e7baa66ae25820d57a8ab1b0a3c6d3edf1834d4b26fafa2</hash>
-            <hash alg="SHA-256">96f2975fb14f39c5fe75203f33dd3010fe37d1c4e33177feef1107b5ced750e3</hash>
-            <hash alg="SHA-256">96fb0899bb2ab353f42e5374c8f0789f54e0a94ef2f02b9ac7149c56622eaf31</hash>
-            <hash alg="SHA-256">97163a1ab265a1073a6372eca9f4eeb9f8c6327457a0b22ddfc4a17dcd613e74</hash>
-            <hash alg="SHA-256">9c95a1a290f9acf7a8f2ebbdd183e99215d491beea52d61aa2a7a7d2c618ddc6</hash>
-            <hash alg="SHA-256">9d94d78418203904730585efa71002286ac4c8ac0689d0eb61e3c465f9e608ff</hash>
-            <hash alg="SHA-256">a6ba2cb7d676e9415b9e9ac7e2aae401dc1b1e666943d1f7bc66223d3d73467b</hash>
-            <hash alg="SHA-256">aa0379c1935c44053c98826bc99ac95f3a5355675a297ac9ce0dfad0ce2d50ca</hash>
-            <hash alg="SHA-256">ac96d67b37f28e4b6ecf507c3405f52a40658c0a806dffde624a8fcb0314d5fd</hash>
-            <hash alg="SHA-256">ade2ccb937060c299ab0dfb2dea3d2ddf7e098ed63ee3d651ebfc2c8d1e8632a</hash>
-            <hash alg="SHA-256">aefbdc934115d2f9278f153952003ac52cd2650e7313750390b334518c589568</hash>
-            <hash alg="SHA-256">b07501b720cf060c5856f7b5626e75b8e353b5f98b9b354a21eb4bfa47e421b1</hash>
-            <hash alg="SHA-256">b5267feb19070bef34b8dea27e2b504ebd9d31748e3ecacb3a4101da6fcb255c</hash>
-            <hash alg="SHA-256">b5f6328e8e2ae8238fc767703ab7b95785521c42bb2b8790984e3477d7fa71ad</hash>
-            <hash alg="SHA-256">b8996ffb60c69f677245f5abdbcc623e9442bcc91ed81b6cd6187129ad1fa3e7</hash>
-            <hash alg="SHA-256">b981a370f8f41c4024c170b42fbe9e691ae2dbc19d1d99151a69e2c84a0d194d</hash>
-            <hash alg="SHA-256">b9d121be0217787a7d59a5c6195b0842d3f701007333426e5154bf72346aa658</hash>
-            <hash alg="SHA-256">bcef4f2d3dc603150421de85c916da19471f24d838c3c62a4f04c1eb511642c1</hash>
-            <hash alg="SHA-256">bed0252c85e21cf73d2d033643c945b460d6a02fc4a7d644e3b2d6f5f2956c64</hash>
-            <hash alg="SHA-256">bfdfbe6a36bc3059fff845d64c42f2644cf875c65f5005db54f90cdfdf1df815</hash>
-            <hash alg="SHA-256">c0095b8aa3e432e32d372e9a7737e65b58d5ed23b9620fea7cb81f17672f1fa1</hash>
-            <hash alg="SHA-256">c1f41d32a2ddc5a94df4b829b395916a4b7f103350fa76ba6de625fcb9e773ac</hash>
-            <hash alg="SHA-256">c45008ca79bad237cbc03c72bc5205e8c6f66403773929b1b50f7d84ef9e4d07</hash>
-            <hash alg="SHA-256">c82bbf7e03748417c3a88c1b0b291288ce3e4887a795a3addaa7a1cfd9e7153e</hash>
-            <hash alg="SHA-256">c918621ee0a3d1fe61c313f2489464f2ae3d13633e60f520a8002a5e910982ee</hash>
-            <hash alg="SHA-256">d204957169f0b3511fb95395a9da7d4490fb361763a9f8b32b345a7fe119cb45</hash>
-            <hash alg="SHA-256">d329896c40d9e1e5c7715c98529e4a188a1f2df51212fd65102b32465612b5dc</hash>
-            <hash alg="SHA-256">d3a61e928feddc458a55110f42f626a2a20bea942ccedb6fb4cee70b4830ed41</hash>
-            <hash alg="SHA-256">d48db29bd47814671afdd76c7652aefacc25cf96aad6daefa82d738ee87461e2</hash>
-            <hash alg="SHA-256">d5593855b5b2b73dd8413c3fdfa5d95b99d657658f947ba2c4318591e745d083</hash>
-            <hash alg="SHA-256">d79c159adea0f1f4617f54aa156568ac69968f9ef4d1e5fefffc0a180830308e</hash>
-            <hash alg="SHA-256">db09b98c7540df69d4b47218da3fbd7cb466db0fb932e971c321f1c76f155266</hash>
-            <hash alg="SHA-256">ddf23960cb42b69bce13045d5bc66f18c7d53774c66c13f24cf1b9c144ba3141</hash>
-            <hash alg="SHA-256">e06cfea0ece444571d24c18ed465bc93afb8c8d8d74422eb7026662f3d3f779b</hash>
-            <hash alg="SHA-256">e7c564c58cf8f248fe859a4f0fe501b050663f3d7fbc342172f259124fb59933</hash>
-            <hash alg="SHA-256">e86593bf8637659e6a6ed58854b6c87ec4e9e45ee8a4adfd936831cef55c2d21</hash>
-            <hash alg="SHA-256">eaffbd8814bb1b5dc3ea156a4c5928081ba50419f9175f4fc95269e040eff8f0</hash>
-            <hash alg="SHA-256">ee353bb51f648924926ed05e0122b6a0b1ae709396a80eb583449d5d477fcdf7</hash>
-            <hash alg="SHA-256">ee6faebb265e28920a6f23a7d4c362414b3f4bb30607141d718b991669e49ddc</hash>
-            <hash alg="SHA-256">efe093acc43e869348f6f2224df7f452eab63a2c60a6c6cd6b50fd35c4e075ba</hash>
-            <hash alg="SHA-256">f03a1b3a4c03e3e0161642ac5367f08479ab29972ea0ffcd4fa18f729cd2be0a</hash>
-            <hash alg="SHA-256">f0d320e70b6b2300ff6029e234e79fe44e9dbbfc7b98597ba28e054bd6606a57</hash>
-            <hash alg="SHA-256">f252dfb4852a527987a9156cbcae3022a30f86c9d26f4f17b8c967d7580d65d2</hash>
-            <hash alg="SHA-256">f5f4424cb87a20b016bfdc157ff48757b89d2cc426256961643d443c6c277007</hash>
-            <hash alg="SHA-256">f8eae66a1304de7368932b42d801c67969fd090ddb1a7a24f27b435ed4bed68f</hash>
-            <hash alg="SHA-256">fdb82eb60d31b0c033a8e8ee9f3fc7dfbaa042211131c29da29aea8531b4f18f</hash>
+            <hash alg="SHA-256">01f58a7306b64e0a4fe042047dd2b7d411ee82e54240284bab63e325762c1147</hash>
+            <hash alg="SHA-256">0210b2668f24c078307260bf88bdac9d6f1093635df5123789bfee4d8d7fc8e7</hash>
+            <hash alg="SHA-256">02866e060219514940342a1f84303a1ef7a1dad0ac311792fbbe19b521b489d2</hash>
+            <hash alg="SHA-256">0387ce69ba06e43df54e43968090f3626e231e4bc9150e4c3246947567695f68</hash>
+            <hash alg="SHA-256">060f412230d5f19fc8c8b75f315931b408d8ebf56aec33ef4168d1b9e54200b1</hash>
+            <hash alg="SHA-256">071bc28c589b86bc6351a339114fb7a029f5cddbaca34103aa573eba7b482382</hash>
+            <hash alg="SHA-256">0bfb09bf41fe7c51413f563373e5f537eaa653d7adc4830399d4e9bdc199959d</hash>
+            <hash alg="SHA-256">10162fe3f5f47c37ebf6d8ff5a2368508fe22007e3077bf25b9c7d803454d921</hash>
+            <hash alg="SHA-256">149c5cd24f729e3567b56e1795f74577aa3126c14c11e457bec1b1c90d212e38</hash>
+            <hash alg="SHA-256">1701fc54460ae2e5efc1dd6350eafd7a760f516df8dbe51d4a1c79d69472fbd4</hash>
+            <hash alg="SHA-256">1957a2ab607f9added64478a6982742eb29f109d89d065fa44e01691a20fc20a</hash>
+            <hash alg="SHA-256">1a746a6d49665058a5896000e8d9d2f1a6acba8a03b389c1e4c06e11e0b7f40d</hash>
+            <hash alg="SHA-256">1bfcad3109c1e5ba3cbe2f421614e70439f72897515a96c462ea657261b96518</hash>
+            <hash alg="SHA-256">1d36b2b59e8cc6e576f8f7b671e32f2ff43153f0ad6d0201250a7c07f25d570e</hash>
+            <hash alg="SHA-256">1db228102ab9d1ff4c64148c96320d0be7044fa28bd865a9ce628ce98da5973d</hash>
+            <hash alg="SHA-256">1dc29db3900cb1bb40353772417800f29c3d078dbc8024fd64655a04ee3c4bdf</hash>
+            <hash alg="SHA-256">1e626b365293a2142a62b9a614e1f8e331b28f3ca57b9f05ebbf4cf2a0f0bdc5</hash>
+            <hash alg="SHA-256">1f3c3461ebb4c4f1bbc70b15d20b565759f97a5aaf13af811fcefc892e9197ba</hash>
+            <hash alg="SHA-256">20de7b7179e2031a04042e85dc463a93a82bc177eeba5ddd13ff746325558aa6</hash>
+            <hash alg="SHA-256">24e4900a6643f87058a27320f81336d527ccfe503984528edde4bb660c8c8d59</hash>
+            <hash alg="SHA-256">2528ff96d09f12e638695f3a2e0c609c7b84c6df7c5ae9bfeb9252b6fa686253</hash>
+            <hash alg="SHA-256">25f071737dae674ca8937a73d0f43f5a52e92c2d178330b4c0bb6ab05586ffa6</hash>
+            <hash alg="SHA-256">270987bc22e7e5a962b1094953ae901395e8c1e1e83ad016c5cfcfff75a15a3f</hash>
+            <hash alg="SHA-256">292f7344a3301802e7c25c53792fae7d1593cb0e50964e7bcdcc5cf533d634e3</hash>
+            <hash alg="SHA-256">2953937f83820376b5979318840f3ee47477d94c17b940fe31d9458d79ae7eea</hash>
+            <hash alg="SHA-256">2a792b2e1d3038daa83fa474d559acfd6dc1e3650ee93b2662ddc17dbff20ad1</hash>
+            <hash alg="SHA-256">2a7b2f2f56a16a6d62e55354dd329d929560442bd92e87397b7a9586a32e3e76</hash>
+            <hash alg="SHA-256">2f4eb548daf4836e3b2c662033bfbfc551db58d30fd8fe660314f86bf8510b93</hash>
+            <hash alg="SHA-256">3664d126d3388a887db44c2e293f87d500c4184ec43d5d14d2d2babdb4c64cad</hash>
+            <hash alg="SHA-256">3677fcca7fb728c86a78660c7fb1b07b69b281964673f486ae72860e13f512ad</hash>
+            <hash alg="SHA-256">380e0df2e9d5d5d339803cfc6d183a5442ad7ab3c63c2a0982e8c824566c5ccc</hash>
+            <hash alg="SHA-256">3ac732390d529d8469b831949c78085b034bff67f584559340008d0f6041a049</hash>
+            <hash alg="SHA-256">4128980a14ed805e1b91a7ed551250282a8ddf8201a4e9f8f5b7e6225f54170d</hash>
+            <hash alg="SHA-256">4341bd7579611cf50e7b20bb8c2e23512a3dc79de987a1f411cb458ab670eb90</hash>
+            <hash alg="SHA-256">436474f17733c7dca0fbf096d36ae65277e8645039df12a0fa52445ca494729d</hash>
+            <hash alg="SHA-256">4dc889a9d8a34758d0fcc9ac86adb97bab3fb7f0c4d29794357eb147536483fd</hash>
+            <hash alg="SHA-256">4e21b76075c01d65d0f0f34302b5a7457d95721d5e0667aea65e5bb3ab415c25</hash>
+            <hash alg="SHA-256">516fb8c77805159e97a689e2f1c80655c7658f5af601c34ffdb916605598cda2</hash>
+            <hash alg="SHA-256">5576ee2f3a309d2bb403ec292d5958ce03953b0e57a11d224c1f134feaf8c40f</hash>
+            <hash alg="SHA-256">5a024fa96d541fd7edaa0e9d904601c6445e95a729a2900c5aec6555fe921ed6</hash>
+            <hash alg="SHA-256">5d0e8a6434a3fbf77d11448c9c25b2f25244226cfbec1a5159947cac5b8c5fa4</hash>
+            <hash alg="SHA-256">5e7d63ec01fe7c76c2dbb7e972fece45acbb8836e72682bde138e7e039906e2c</hash>
+            <hash alg="SHA-256">60e820ee1004327609b28db8307acc27f5f2e9a0b185b2064c5f23e815f248f8</hash>
+            <hash alg="SHA-256">637b802f3f069a64436d432117a7e58fab414b4e27a7e81049817ae94de45d8d</hash>
+            <hash alg="SHA-256">65dcf105c1943cba45d19207ef51b8bc46d232a381e94dd38719d52d3980015b</hash>
+            <hash alg="SHA-256">698ea95a60c8b16b58be9d854c9f993c639f5c214cf9ba782eca53a8789d6b19</hash>
+            <hash alg="SHA-256">70fcc6c2906cfa5c6a552ba7ae2ce64b6c32f437d8f3f8eea49925b278a61453</hash>
+            <hash alg="SHA-256">720215373a280f78a1814becb1312d4e4d1077b1202a56d2b0815e95ccb99ce9</hash>
+            <hash alg="SHA-256">7450dbd659fed6dd41d1a7d47ed767e893ba402af8ae664c157c255ec6067fde</hash>
+            <hash alg="SHA-256">7b7d9ca34542099b4e185b3c2a2b2eda2e318a7dbde0b0d83357a6d4421b5296</hash>
+            <hash alg="SHA-256">7fbd70cb8b54fe745301921b0816c08b6d917593429dfc437fd024b5ba713c58</hash>
+            <hash alg="SHA-256">81038ff87a4e04c22e1d81f947c6ac46f122e0c80460b9006e6517c4d842a6ec</hash>
+            <hash alg="SHA-256">810685321f4a304b2b55577c915bece4c4a06dfe38f6e62d9cc1d6ca8ee86b99</hash>
+            <hash alg="SHA-256">82ada4a8ed9e82e443fcef87e22a3eed3654dd3adf6e3b3a0deb70f03e86142a</hash>
+            <hash alg="SHA-256">841320e1841bb53fada91c9725e766bb25009cfd4144e92298db296fb6c894fb</hash>
+            <hash alg="SHA-256">8587fd64c2a91c33cdc39d0cebdaf30e79491cc029a37fcd458ba863f8815383</hash>
+            <hash alg="SHA-256">8ffe53e1d8ef2520ebcf0c9fec15bb721da59e8ef283b6ff3079613b1e30513d</hash>
+            <hash alg="SHA-256">9051e3d2af8f55b42061603e29e744724cb5f65b128a491446cc029b3e2ea896</hash>
+            <hash alg="SHA-256">91e5a8200e65aaac342a791272c564dffcf1281abd635d304d6c4e6b495f29dc</hash>
+            <hash alg="SHA-256">93432e747fb07fa567ad9cc7aaadd6e29710e515aabf939dfbed8046041346c6</hash>
+            <hash alg="SHA-256">938eab7323a736533f015e6069a7d53ef2dcc841e4e533b782c2bfb9fb12d84b</hash>
+            <hash alg="SHA-256">9584f8f52010295a4a417221861df9bea4c72d9632562b6e59b3c7b87a1522b7</hash>
+            <hash alg="SHA-256">9737bdaa0ad33d34c0efc718741abaafce62fadae72c8b251df9b0c823c63b22</hash>
+            <hash alg="SHA-256">99da0a4686ada4ed0f778120a0ea8d066de1a0a92ab0d13ae68492a437db78bf</hash>
+            <hash alg="SHA-256">99f567dae93e10be2daaa896e07513dd4bf9c2ecf0576e0533ac36ba3b1d5394</hash>
+            <hash alg="SHA-256">9bdf1303df671179eaf2cb41e8515a07fc78d9d00f111eadbe3e14262f59c3d0</hash>
+            <hash alg="SHA-256">9f0e4dc0f17dcea4ab9d13ac5c666b6b5337042b4d8f27e01b70fae41dd65c57</hash>
+            <hash alg="SHA-256">a000133a90eea274a6f28adc3084643263b1e7c1a5a66eb0a0a7a36aa757ed74</hash>
+            <hash alg="SHA-256">a3264e3e858de4fc601741498215835ff324ff2482fd4e4af61b46512dd7fc83</hash>
+            <hash alg="SHA-256">a71169d505af63bb4d20d23a8fbd4c6ce272e7bce6cc31f617152aa784436f29</hash>
+            <hash alg="SHA-256">a967dd6afda7715d911c25a6ba1517975acd8d1092b2f326718725461a3d33f9</hash>
+            <hash alg="SHA-256">aa5bfb13f1e89151ade0eb812f7b0d7a4d643406caaad65ce1cbabe0a66d695f</hash>
+            <hash alg="SHA-256">ae35e8e6801c5ab071b992cb2da958eee76340e6926ec693b5ff7d6381441745</hash>
+            <hash alg="SHA-256">b686f25377f9c006acbac63f61614416a6317133ab7fafe5de5f7dc8a06d42eb</hash>
+            <hash alg="SHA-256">b760a56e080a826c2e5af09002c1a037382ed21d03134eb6294812dda268c811</hash>
+            <hash alg="SHA-256">b86b21b348f7e5485fae740d845c65a880f5d1eda1e063bc59bef92d1f7d0c55</hash>
+            <hash alg="SHA-256">b9412abdf0ba70faa6e2ee6c0cc62a8defb772e78860cef419865917d86c7342</hash>
+            <hash alg="SHA-256">bd345a13ce06e94c753dab52f8e71e5252aec1e4f8022d24d56decd31e1b9b23</hash>
+            <hash alg="SHA-256">be22ae34d68544df293152b7e50895ba70d2a833ad9566932d750d3625918b82</hash>
+            <hash alg="SHA-256">bf046179d011e6114daf12a534d874958b039342b347348a78b7cdf0dd9d6041</hash>
+            <hash alg="SHA-256">c3d2010656999b63e628a3c694f23020322b4178c450dc478558a2b6ef3cb9bb</hash>
+            <hash alg="SHA-256">c64602e8be701c6cfe42064b71c84ce62ce66ddc6422c15463fd8127db3d8066</hash>
+            <hash alg="SHA-256">d65e6b4f1443048eb7e833c2accb4fa7ee67cc7d54f31b4f0555b474758bee55</hash>
+            <hash alg="SHA-256">d8bbd8e56f3ba25a7d0cf980fc42b34028848a53a0e36c9918550e0280b9d0b6</hash>
+            <hash alg="SHA-256">da1ead63368c04a9bded7904757dfcae01eba0e0f9bc41d3d7f57ebf1c04015a</hash>
+            <hash alg="SHA-256">dbbb95e6fc91ea3102505d111b327004d1c4ce98d56a4a02e82cd451f9f57140</hash>
+            <hash alg="SHA-256">dbc56680ecf585a384fbd93cd42bc82668b77cb525343170a2d86dafaed2a84b</hash>
+            <hash alg="SHA-256">df3b6f45ba4515632c5064e35ca7f31d51d13d1479673185ba8f9fefbbed58b9</hash>
+            <hash alg="SHA-256">dfe07308b311a8293a0d5ef4e61411c5c20f682db6b5e73de6c7c8824272c256</hash>
+            <hash alg="SHA-256">e796051f2070f47230c745d0a77a91088fbee2cc0502e9b796b9c6471983718c</hash>
+            <hash alg="SHA-256">efa767c220d94aa4ac3a6dd3aeb986e9f229eaf5bce92d8b1b3018d06bed3772</hash>
+            <hash alg="SHA-256">f0b8bf5b8db49d8fd40f54772a1dcf262e8be0ad2ab0206b5a2ec109c176c0a4</hash>
+            <hash alg="SHA-256">f175e95a197f6a4059b50757a3dca33b32b61691bdbd22c29e8a8d21d3914cae</hash>
+            <hash alg="SHA-256">f2f3b28b40fddcb6c1f1f6c88c6f3769cd933fa493ceb79da45968a21dccc920</hash>
+            <hash alg="SHA-256">f6c43b6f97209e370124baf2bf40bb1e8edc25311a158867eb1c3a5d449ebc7a</hash>
+            <hash alg="SHA-256">f7f4cb1f173385e8a39c29510dd11a78bf44e360fb75610594973f5ea141028b</hash>
+            <hash alg="SHA-256">fad059a4bd14c45776600d223ec194e77db6c20255578bb5bcdd7c18fd169361</hash>
+            <hash alg="SHA-256">ff1dcb8e8bc2261a088821b2595ef031c91d499a0c1b031c152d43fe0a6ecec8</hash>
+            <hash alg="SHA-256">ffee088ea9b593cc6160518ba9bd319b5475e5f3e578e4552d63818773c6f56a</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -636,17 +637,17 @@
         <property name="cdx:pipenv:category">default</property>
       </properties>
     </component>
-    <component type="library" bom-ref="types-python-dateutil==2.8.19.14">
+    <component type="library" bom-ref="types-python-dateutil==2.8.19.20240106">
       <name>types-python-dateutil</name>
-      <version>2.8.19.14</version>
-      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <version>2.8.19.20240106</version>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.20240106</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://pypi.org/simple/types-python-dateutil/</url>
           <comment>from implicit index: pypi</comment>
           <hashes>
-            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
-            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+            <hash alg="SHA-256">1f8db221c3b98e6ca02ea83a58371b22c374f42ae5bbdf186db9c9a76581459f</hash>
+            <hash alg="SHA-256">efbbdc54590d0f16152fa103c9879c7d4a00e82078f6e2cf01769042165acaa2</hash>
           </hashes>
         </reference>
       </externalReferences>
@@ -693,7 +694,7 @@
   </components>
   <dependencies>
     <dependency ref="arrow==1.3.0"/>
-    <dependency ref="attrs==23.1.0"/>
+    <dependency ref="attrs==23.2.0"/>
     <dependency ref="boolean.py==4.0"/>
     <dependency ref="cyclonedx-python-lib==5.1.1"/>
     <dependency ref="defusedxml==0.7.1"/>
@@ -701,21 +702,21 @@
     <dependency ref="idna==3.6"/>
     <dependency ref="isoduration==20.11.0"/>
     <dependency ref="jsonpointer==2.4"/>
-    <dependency ref="jsonschema-specifications==2023.11.2"/>
-    <dependency ref="jsonschema==4.20.0"/>
+    <dependency ref="jsonschema-specifications==2023.12.1"/>
+    <dependency ref="jsonschema==4.21.1"/>
     <dependency ref="license-expression==30.2.0"/>
-    <dependency ref="lxml==4.9.3"/>
-    <dependency ref="packageurl-python==0.11.2"/>
+    <dependency ref="lxml==4.9.4"/>
+    <dependency ref="packageurl-python==0.13.4"/>
     <dependency ref="py-serializable==0.15.0"/>
     <dependency ref="python-dateutil==2.8.2"/>
-    <dependency ref="referencing==0.31.1"/>
+    <dependency ref="referencing==0.33.0"/>
     <dependency ref="rfc3339-validator==0.1.4"/>
     <dependency ref="rfc3987==1.3.8"/>
     <dependency ref="root-component"/>
-    <dependency ref="rpds-py==0.13.2"/>
+    <dependency ref="rpds-py==0.17.1"/>
     <dependency ref="six==1.16.0"/>
     <dependency ref="sortedcontainers==2.4.0"/>
-    <dependency ref="types-python-dateutil==2.8.19.14"/>
+    <dependency ref="types-python-dateutil==2.8.19.20240106"/>
     <dependency ref="uri-template==1.3.0"/>
     <dependency ref="webcolors==1.13"/>
   </dependencies>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.0.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.0.xml.bin
new file mode 100644
index 00000000..7f9505ed
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.0.xml.bin
@@ -0,0 +1,61 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.0" version="1">
+  <components>
+    <component type="library">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <modified>false</modified>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.1.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.1.xml.bin
new file mode 100644
index 00000000..a15cf69c
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.1.xml.bin
@@ -0,0 +1,54 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1">
+  <components>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.json.bin
new file mode 100644
index 00000000..9fa9ff65
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.json.bin
@@ -0,0 +1,133 @@
+{
+  "components": [
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "license-expression@30.1.1",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.2b.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.2"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.xml.bin
new file mode 100644
index 00000000..19802b19
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.2.xml.bin
@@ -0,0 +1,94 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.2" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+    </component>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.json.bin
new file mode 100644
index 00000000..b2c46da2
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.json.bin
@@ -0,0 +1,195 @@
+{
+  "components": [
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "license-expression@30.1.1",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.3a.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.3"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.xml.bin
new file mode 100644
index 00000000..c244f88f
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.3.xml.bin
@@ -0,0 +1,123 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.3" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.json.bin
new file mode 100644
index 00000000..9d2c8300
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.json.bin
@@ -0,0 +1,191 @@
+{
+  "components": [
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "license-expression@30.1.1",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.4"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.xml.bin
new file mode 100644
index 00000000..613527a0
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.4.xml.bin
@@ -0,0 +1,150 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.4" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.json.bin
new file mode 100644
index 00000000..913113e4
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.json.bin
@@ -0,0 +1,191 @@
+{
+  "components": [
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "license-expression@30.1.1",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.xml.bin
new file mode 100644
index 00000000..181a1f4a
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock10_1.5.xml.bin
@@ -0,0 +1,150 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.0.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.0.xml.bin
new file mode 100644
index 00000000..b81d4049
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.0.xml.bin
@@ -0,0 +1,229 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.0" version="1">
+  <components>
+    <component type="library">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <modified>false</modified>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.1.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.1.xml.bin
new file mode 100644
index 00000000..4a279cc5
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.1.xml.bin
@@ -0,0 +1,779 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1">
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.json.bin
new file mode 100644
index 00000000..f9f876b3
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.json.bin
@@ -0,0 +1,1140 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "name": "jsonschema",
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "name": "lxml",
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.2b.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.2"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.xml.bin
new file mode 100644
index 00000000..c8224de0
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.2.xml.bin
@@ -0,0 +1,874 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.2" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+    </component>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.json.bin
new file mode 100644
index 00000000..c6f3eedd
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.json.bin
@@ -0,0 +1,2142 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "name": "lxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.3a.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.3"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.xml.bin
new file mode 100644
index 00000000..f6bbeb3e
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.3.xml.bin
@@ -0,0 +1,1372 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.3" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.json.bin
new file mode 100644
index 00000000..04eeeac3
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.json.bin
@@ -0,0 +1,2138 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "name": "lxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.4"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.xml.bin
new file mode 100644
index 00000000..8f1401ef
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.4.xml.bin
@@ -0,0 +1,1399 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.4" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.json.bin
new file mode 100644
index 00000000..db2452cd
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.json.bin
@@ -0,0 +1,2138 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean.py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "name": "boolean.py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/boolean.py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "name": "defusedxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "name": "license-expression",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "name": "lxml",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "name": "packageurl-python",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "name": "py-serializable",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "name": "sortedcontainers",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        }
+      ],
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean.py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean.py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.xml.bin
new file mode 100644
index 00000000..9dd62f6d
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock11_1.5.xml.bin
@@ -0,0 +1,1399 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="boolean.py@4.0">
+      <name>boolean.py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean.py@4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+      </properties>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean.py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean.py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.0.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.0.xml.bin
new file mode 100644
index 00000000..1d56ec37
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.0.xml.bin
@@ -0,0 +1,229 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.0" version="1">
+  <components>
+    <component type="library">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <modified>false</modified>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.1.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.1.xml.bin
new file mode 100644
index 00000000..9a40829b
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.1.xml.bin
@@ -0,0 +1,1229 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1">
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean-py@4.0">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.json.bin
new file mode 100644
index 00000000..2a8d2398
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.json.bin
@@ -0,0 +1,1698 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean-py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz"
+        }
+      ],
+      "name": "boolean-py",
+      "purl": "pkg:pypi/boolean-py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz"
+        }
+      ],
+      "name": "cyclonedx-python-lib",
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz"
+        }
+      ],
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz"
+        }
+      ],
+      "name": "jsonschema",
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl"
+        }
+      ],
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz"
+        }
+      ],
+      "name": "lxml",
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl"
+        }
+      ],
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl"
+        }
+      ],
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz"
+        }
+      ],
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean-py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean-py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.2b.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.2"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.xml.bin
new file mode 100644
index 00000000..300bf5ad
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.2.xml.bin
@@ -0,0 +1,1324 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.2" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+    </component>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean-py@4.0">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean-py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean-py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.json.bin
new file mode 100644
index 00000000..a6d6fd0d
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.json.bin
@@ -0,0 +1,3188 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean-py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz"
+        }
+      ],
+      "name": "boolean-py",
+      "purl": "pkg:pypi/boolean-py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz"
+        }
+      ],
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz"
+        }
+      ],
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz"
+        }
+      ],
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl"
+        }
+      ],
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz"
+        }
+      ],
+      "name": "lxml",
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl"
+        }
+      ],
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl"
+        }
+      ],
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz"
+        }
+      ],
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean-py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean-py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "name": "cyclonedx-bom",
+        "vendor": "CycloneDX",
+        "version": "thisVersion-testing"
+      },
+      {
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.3a.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.3"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.xml.bin
new file mode 100644
index 00000000..d93b0190
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.3.xml.bin
@@ -0,0 +1,2067 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.3" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean-py@4.0">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean-py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean-py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.json.bin
new file mode 100644
index 00000000..6eaa1df7
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.json.bin
@@ -0,0 +1,3184 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean-py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz"
+        }
+      ],
+      "name": "boolean-py",
+      "purl": "pkg:pypi/boolean-py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz"
+        }
+      ],
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz"
+        }
+      ],
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz"
+        }
+      ],
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl"
+        }
+      ],
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz"
+        }
+      ],
+      "name": "lxml",
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl"
+        }
+      ],
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl"
+        }
+      ],
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz"
+        }
+      ],
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean-py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean-py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.4"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.xml.bin
new file mode 100644
index 00000000..82c9034b
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.4.xml.bin
@@ -0,0 +1,2094 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.4" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean-py@4.0">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean-py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean-py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.json.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.json.bin
new file mode 100644
index 00000000..740ee9f9
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.json.bin
@@ -0,0 +1,3184 @@
+{
+  "components": [
+    {
+      "bom-ref": "arrow@1.3.0",
+      "description": "Better dates & times for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz"
+        }
+      ],
+      "name": "arrow",
+      "purl": "pkg:pypi/arrow@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "attrs@23.1.0",
+      "description": "Classes Without Boilerplate",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz"
+        }
+      ],
+      "name": "attrs",
+      "purl": "pkg:pypi/attrs@23.1.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "23.1.0"
+    },
+    {
+      "bom-ref": "boolean-py@4.0",
+      "description": "Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz"
+        }
+      ],
+      "name": "boolean-py",
+      "purl": "pkg:pypi/boolean-py@4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.0"
+    },
+    {
+      "bom-ref": "cyclonedx-python-lib@5.1.1",
+      "description": "Python library for CycloneDX",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz"
+        }
+      ],
+      "name": "cyclonedx-python-lib",
+      "properties": [
+        {
+          "name": "cdx:poetry:group",
+          "value": "main"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "json-validation"
+        },
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "xml-validation"
+        }
+      ],
+      "purl": "pkg:pypi/cyclonedx-python-lib@5.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "5.1.1"
+    },
+    {
+      "bom-ref": "defusedxml@0.7.1",
+      "description": "XML bomb protection for Python stdlib modules",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz"
+        }
+      ],
+      "name": "defusedxml",
+      "purl": "pkg:pypi/defusedxml@0.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.7.1"
+    },
+    {
+      "bom-ref": "fqdn@1.5.1",
+      "description": "Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz"
+        }
+      ],
+      "name": "fqdn",
+      "purl": "pkg:pypi/fqdn@1.5.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.5.1"
+    },
+    {
+      "bom-ref": "idna@3.4",
+      "description": "Internationalized Domain Names in Applications (IDNA)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/idna/#idna-3.4.tar.gz"
+        }
+      ],
+      "name": "idna",
+      "purl": "pkg:pypi/idna@3.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.4"
+    },
+    {
+      "bom-ref": "importlib-resources@6.1.1",
+      "description": "Read resources from Python packages",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz"
+        }
+      ],
+      "name": "importlib-resources",
+      "purl": "pkg:pypi/importlib-resources@6.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "6.1.1"
+    },
+    {
+      "bom-ref": "isoduration@20.11.0",
+      "description": "Operations with ISO 8601 durations",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz"
+        }
+      ],
+      "name": "isoduration",
+      "purl": "pkg:pypi/isoduration@20.11.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "20.11.0"
+    },
+    {
+      "bom-ref": "jsonpointer@2.4",
+      "description": "Identify specific nodes in a JSON document (RFC 6901)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz"
+        }
+      ],
+      "name": "jsonpointer",
+      "purl": "pkg:pypi/jsonpointer@2.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4"
+    },
+    {
+      "bom-ref": "jsonschema@4.19.2",
+      "description": "An implementation of JSON Schema validation for Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz"
+        }
+      ],
+      "name": "jsonschema",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "format"
+        }
+      ],
+      "purl": "pkg:pypi/jsonschema@4.19.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.19.2"
+    },
+    {
+      "bom-ref": "jsonschema-specifications@2023.7.1",
+      "description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz"
+        }
+      ],
+      "name": "jsonschema-specifications",
+      "purl": "pkg:pypi/jsonschema-specifications@2023.7.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "2023.7.1"
+    },
+    {
+      "bom-ref": "license-expression@30.1.1",
+      "description": "license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl"
+        }
+      ],
+      "name": "license-expression",
+      "purl": "pkg:pypi/license-expression@30.1.1",
+      "scope": "optional",
+      "type": "library",
+      "version": "30.1.1"
+    },
+    {
+      "bom-ref": "lxml@4.9.3",
+      "description": "Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz"
+        }
+      ],
+      "name": "lxml",
+      "purl": "pkg:pypi/lxml@4.9.3",
+      "scope": "optional",
+      "type": "library",
+      "version": "4.9.3"
+    },
+    {
+      "bom-ref": "packageurl-python@0.11.2",
+      "description": "A purl aka. Package URL parser and builder",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl"
+        }
+      ],
+      "name": "packageurl-python",
+      "purl": "pkg:pypi/packageurl-python@0.11.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.11.2"
+    },
+    {
+      "bom-ref": "pkgutil-resolve-name@1.3.10",
+      "description": "Resolve a name to an object.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz"
+        }
+      ],
+      "name": "pkgutil-resolve-name",
+      "purl": "pkg:pypi/pkgutil-resolve-name@1.3.10",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.10"
+    },
+    {
+      "bom-ref": "py-serializable@0.15.0",
+      "description": "Library for serializing and deserializing Python Objects to and from JSON and XML.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl"
+        }
+      ],
+      "name": "py-serializable",
+      "purl": "pkg:pypi/py-serializable@0.15.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.15.0"
+    },
+    {
+      "bom-ref": "python-dateutil@2.8.2",
+      "description": "Extensions to the standard Python datetime module",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl"
+        }
+      ],
+      "name": "python-dateutil",
+      "purl": "pkg:pypi/python-dateutil@2.8.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.2"
+    },
+    {
+      "bom-ref": "referencing@0.30.2",
+      "description": "JSON Referencing + Python",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz"
+        }
+      ],
+      "name": "referencing",
+      "purl": "pkg:pypi/referencing@0.30.2",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.30.2"
+    },
+    {
+      "bom-ref": "rfc3339-validator@0.1.4",
+      "description": "A pure python RFC3339 validator",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz"
+        }
+      ],
+      "name": "rfc3339-validator",
+      "purl": "pkg:pypi/rfc3339-validator@0.1.4",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.1.4"
+    },
+    {
+      "bom-ref": "rfc3987@1.3.8",
+      "description": "Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz"
+        }
+      ],
+      "name": "rfc3987",
+      "purl": "pkg:pypi/rfc3987@1.3.8",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.8"
+    },
+    {
+      "bom-ref": "rpds-py@0.12.0",
+      "description": "Python bindings to Rust's persistent data structures (rpds)",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz"
+        }
+      ],
+      "name": "rpds-py",
+      "purl": "pkg:pypi/rpds-py@0.12.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "0.12.0"
+    },
+    {
+      "bom-ref": "six@1.16.0",
+      "description": "Python 2 and 3 compatibility utilities",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/six/#six-1.16.0.tar.gz"
+        }
+      ],
+      "name": "six",
+      "purl": "pkg:pypi/six@1.16.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.16.0"
+    },
+    {
+      "bom-ref": "sortedcontainers@2.4.0",
+      "description": "Sorted Containers -- Sorted List, Sorted Dict, Sorted Set",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz"
+        }
+      ],
+      "name": "sortedcontainers",
+      "purl": "pkg:pypi/sortedcontainers@2.4.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.4.0"
+    },
+    {
+      "bom-ref": "types-python-dateutil@2.8.19.14",
+      "description": "Typing stubs for python-dateutil",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl"
+        }
+      ],
+      "name": "types-python-dateutil",
+      "purl": "pkg:pypi/types-python-dateutil@2.8.19.14",
+      "scope": "optional",
+      "type": "library",
+      "version": "2.8.19.14"
+    },
+    {
+      "bom-ref": "uri-template@1.3.0",
+      "description": "RFC 6570 URI Template Processor",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl"
+        }
+      ],
+      "name": "uri-template",
+      "purl": "pkg:pypi/uri-template@1.3.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.3.0"
+    },
+    {
+      "bom-ref": "webcolors@1.13",
+      "description": "A library for working with the color formats defined by HTML and CSS.",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz"
+        }
+      ],
+      "name": "webcolors",
+      "purl": "pkg:pypi/webcolors@1.13",
+      "scope": "optional",
+      "type": "library",
+      "version": "1.13"
+    },
+    {
+      "bom-ref": "zipp@3.17.0",
+      "description": "Backport of pathlib-compatible object wrapper for zip files",
+      "externalReferences": [
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl"
+        },
+        {
+          "comment": "from legacy-api",
+          "hashes": [
+            {
+              "alg": "SHA-256",
+              "content": "84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0"
+            }
+          ],
+          "type": "distribution",
+          "url": "https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz"
+        }
+      ],
+      "name": "zipp",
+      "purl": "pkg:pypi/zipp@3.17.0",
+      "scope": "optional",
+      "type": "library",
+      "version": "3.17.0"
+    }
+  ],
+  "dependencies": [
+    {
+      "dependsOn": [
+        "python-dateutil@2.8.2",
+        "types-python-dateutil@2.8.19.14"
+      ],
+      "ref": "arrow@1.3.0"
+    },
+    {
+      "ref": "attrs@23.1.0"
+    },
+    {
+      "ref": "boolean-py@4.0"
+    },
+    {
+      "dependsOn": [
+        "jsonschema@4.19.2",
+        "license-expression@30.1.1",
+        "lxml@4.9.3",
+        "packageurl-python@0.11.2",
+        "py-serializable@0.15.0",
+        "sortedcontainers@2.4.0"
+      ],
+      "ref": "cyclonedx-python-lib@5.1.1"
+    },
+    {
+      "ref": "defusedxml@0.7.1"
+    },
+    {
+      "ref": "fqdn@1.5.1"
+    },
+    {
+      "ref": "idna@3.4"
+    },
+    {
+      "dependsOn": [
+        "zipp@3.17.0"
+      ],
+      "ref": "importlib-resources@6.1.1"
+    },
+    {
+      "dependsOn": [
+        "arrow@1.3.0"
+      ],
+      "ref": "isoduration@20.11.0"
+    },
+    {
+      "ref": "jsonpointer@2.4"
+    },
+    {
+      "dependsOn": [
+        "importlib-resources@6.1.1",
+        "referencing@0.30.2"
+      ],
+      "ref": "jsonschema-specifications@2023.7.1"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "fqdn@1.5.1",
+        "idna@3.4",
+        "importlib-resources@6.1.1",
+        "isoduration@20.11.0",
+        "jsonpointer@2.4",
+        "jsonschema-specifications@2023.7.1",
+        "pkgutil-resolve-name@1.3.10",
+        "referencing@0.30.2",
+        "rfc3339-validator@0.1.4",
+        "rfc3987@1.3.8",
+        "rpds-py@0.12.0",
+        "uri-template@1.3.0",
+        "webcolors@1.13"
+      ],
+      "ref": "jsonschema@4.19.2"
+    },
+    {
+      "dependsOn": [
+        "boolean-py@4.0"
+      ],
+      "ref": "license-expression@30.1.1"
+    },
+    {
+      "ref": "lxml@4.9.3"
+    },
+    {
+      "ref": "packageurl-python@0.11.2"
+    },
+    {
+      "ref": "pkgutil-resolve-name@1.3.10"
+    },
+    {
+      "dependsOn": [
+        "defusedxml@0.7.1"
+      ],
+      "ref": "py-serializable@0.15.0"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "python-dateutil@2.8.2"
+    },
+    {
+      "dependsOn": [
+        "attrs@23.1.0",
+        "rpds-py@0.12.0"
+      ],
+      "ref": "referencing@0.30.2"
+    },
+    {
+      "dependsOn": [
+        "six@1.16.0"
+      ],
+      "ref": "rfc3339-validator@0.1.4"
+    },
+    {
+      "ref": "rfc3987@1.3.8"
+    },
+    {
+      "ref": "rpds-py@0.12.0"
+    },
+    {
+      "ref": "six@1.16.0"
+    },
+    {
+      "ref": "sortedcontainers@2.4.0"
+    },
+    {
+      "ref": "types-python-dateutil@2.8.19.14"
+    },
+    {
+      "ref": "uri-template@1.3.0"
+    },
+    {
+      "ref": "webcolors@1.13"
+    },
+    {
+      "dependsOn": [
+        "cyclonedx-python-lib@5.1.1"
+      ],
+      "ref": "with-extras"
+    },
+    {
+      "ref": "zipp@3.17.0"
+    }
+  ],
+  "metadata": {
+    "component": {
+      "bom-ref": "with-extras",
+      "description": "depenndencies with extras",
+      "name": "with-extras",
+      "properties": [
+        {
+          "name": "cdx:python:package:required-extra",
+          "value": "my-extra"
+        }
+      ],
+      "type": "application",
+      "version": "0.1.0"
+    },
+    "properties": [
+      {
+        "name": "cdx:reproducible",
+        "value": "true"
+      }
+    ],
+    "tools": [
+      {
+        "externalReferences": [   ],
+        "name": "cyclonedx-python-lib",
+        "vendor": "CycloneDX",
+        "version": "libVersion-testing"
+      }
+    ]
+  },
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5"
+}
\ No newline at end of file
diff --git a/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.xml.bin b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.xml.bin
new file mode 100644
index 00000000..177793b8
--- /dev/null
+++ b/tests/_data/snapshots/poetry/all-extras_with-extras_lock20_1.5.xml.bin
@@ -0,0 +1,2094 @@
+<?xml version="1.0" ?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1">
+  <metadata>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-bom</name>
+        <version>thisVersion-testing</version>
+        <externalReferences>
+          <reference type="build-system">
+            <url>https://github.com/CycloneDX/cyclonedx-python/actions</url>
+          </reference>
+          <reference type="distribution">
+            <url>https://pypi.org/project/cyclonedx-bom/</url>
+          </reference>
+          <reference type="documentation">
+            <url>https://cyclonedx-bom-tool.readthedocs.io/</url>
+          </reference>
+          <reference type="issue-tracker">
+            <url>https://github.com/CycloneDX/cyclonedx-python/issues</url>
+          </reference>
+          <reference type="license">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE</url>
+          </reference>
+          <reference type="release-notes">
+            <url>https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md</url>
+          </reference>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-python/</url>
+          </reference>
+          <reference type="website">
+            <url>https://github.com/CycloneDX/cyclonedx-python/#readme</url>
+          </reference>
+        </externalReferences>
+      </tool>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-python-lib</name>
+        <version>libVersion-testing</version>
+        <externalReferences><!-- stripped --></externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="with-extras">
+      <name>with-extras</name>
+      <version>0.1.0</version>
+      <description>depenndencies with extras</description>
+      <properties>
+        <property name="cdx:python:package:required-extra">my-extra</property>
+      </properties>
+    </component>
+    <properties>
+      <property name="cdx:reproducible">true</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="arrow@1.3.0">
+      <name>arrow</name>
+      <version>1.3.0</version>
+      <description>Better dates &amp; times for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/arrow@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c728b120ebc00eb84e01882a6f5e7927a53960aa990ce7dd2b10f39005a67f80</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/arrow/#arrow-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d4540617648cb5f895730f1ad8c82a65f2dad0166f57b75f3ca54759c4d67a85</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="attrs@23.1.0">
+      <name>attrs</name>
+      <version>23.1.0</version>
+      <description>Classes Without Boilerplate</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/attrs@23.1.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f28b4522cdc2fb4256ac1a020c78acf9cba2c6b461ccd2c126f3aa8e8335d04</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/attrs/#attrs-23.1.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6279836d581513a26f1bf235f9acd333bc9115683f14f7e8fae46c98fc50e015</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="boolean-py@4.0">
+      <name>boolean-py</name>
+      <version>4.0</version>
+      <description>Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/boolean-py@4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2876f2051d7d6394a531d82dc6eb407faa0b01a0a0b3083817ccd7323b8d96bd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/boolean-py/#boolean.py-4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17b9a181630e43dde1851d42bef546d616d5d9b4480357514597e78b203d06e4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="cyclonedx-python-lib@5.1.1">
+      <name>cyclonedx-python-lib</name>
+      <version>5.1.1</version>
+      <description>Python library for CycloneDX</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2989db0cd8bb4c0c442423d71ed7a84ae059e16a2d0f932cc4bf92da7385cdb3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/cyclonedx-python-lib/#cyclonedx_python_lib-5.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">215a636a4e77385d2cf4c6c9801c9bad4791849634f2c6daa45ab2c6cb0a85f6</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:poetry:group">main</property>
+        <property name="cdx:python:package:required-extra">json-validation</property>
+        <property name="cdx:python:package:required-extra">xml-validation</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="defusedxml@0.7.1">
+      <name>defusedxml</name>
+      <version>0.7.1</version>
+      <description>XML bomb protection for Python stdlib modules</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/defusedxml@0.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/defusedxml/#defusedxml-0.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="fqdn@1.5.1">
+      <name>fqdn</name>
+      <version>1.5.1</version>
+      <description>Validates fully-qualified domain names against RFC 1123, so that they are acceptable to modern bowsers</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/fqdn@1.5.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3a179af3761e4df6eb2e026ff9e1a3033d3587bf980a0b1b2e1e5d08d7358014</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/fqdn/#fqdn-1.5.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">105ed3677e767fb5ca086a0c1f4bb66ebc3c100be518f0e0d755d9eae164d89f</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="idna@3.4">
+      <name>idna</name>
+      <version>3.4</version>
+      <description>Internationalized Domain Names in Applications (IDNA)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/idna@3.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">90b77e79eaa3eba6de819a0c442c0b4ceefc341a7a2ab77d7562bf49f425c5c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/idna/#idna-3.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">814f528e8dead7d329833b91c5faa87d60bf71824cd12a7530b5526063d02cb4</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="importlib-resources@6.1.1">
+      <name>importlib-resources</name>
+      <version>6.1.1</version>
+      <description>Read resources from Python packages</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/importlib-resources@6.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e8bf90d8213b486f428c9c39714b920041cb02c184686a3dee24905aaa8105d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/importlib-resources/#importlib_resources-6.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3893a00122eafde6894c59914446a512f728a0c1a45f9bb9b63721b6bacf0b4a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="isoduration@20.11.0">
+      <name>isoduration</name>
+      <version>20.11.0</version>
+      <description>Operations with ISO 8601 durations</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/isoduration@20.11.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2904c2a4228c3d44f409c8ae8e2370eb21a26f7ac2ec5446df141dde3452042</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/isoduration/#isoduration-20.11.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ac2f9015137935279eac671f94f89eb00584f940f5dc49462a0c4ee692ba1bd9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonpointer@2.4">
+      <name>jsonpointer</name>
+      <version>2.4</version>
+      <description>Identify specific nodes in a JSON document (RFC 6901)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonpointer@2.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">15d51bba20eea3165644553647711d150376234112651b4f1811022aecad7d7a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonpointer/#jsonpointer-2.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">585cee82b70211fa9e6043b7bb89db6e1aa49524340dde8ad6b63206ea689d88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="jsonschema@4.19.2">
+      <name>jsonschema</name>
+      <version>4.19.2</version>
+      <description>An implementation of JSON Schema validation for Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema@4.19.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eee9e502c788e89cb166d4d37f43084e3b64ab405c795c03d343a4dbc2c810fc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema/#jsonschema-4.19.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c9ff4d7447eed9592c23a12ccee508baf0dd0d59650615e847feb6cdca74f392</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+      <properties>
+        <property name="cdx:python:package:required-extra">format</property>
+      </properties>
+    </component>
+    <component type="library" bom-ref="jsonschema-specifications@2023.7.1">
+      <name>jsonschema-specifications</name>
+      <version>2023.7.1</version>
+      <description>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/jsonschema-specifications@2023.7.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05adf340b659828a004220a9613be00fa3f223f2b82002e273dee62fd50524b1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/jsonschema-specifications/#jsonschema_specifications-2023.7.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c91a50404e88a1f6ba40636778e2ee08f6e24c5613fe4c53ac24578a5a7f72bb</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="license-expression@30.1.1">
+      <name>license-expression</name>
+      <version>30.1.1</version>
+      <description>license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/license-expression@30.1.1</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license-expression-30.1.1.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42375df653ad85e6f5b4b0385138b2dbea1f5d66360783d8625c3e4f97f11f0c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/license-expression/#license_expression-30.1.1-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e5e2de0d04fc104a4f952c440e8f08a5ba63480a0dad015b294770b7e58ec</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="lxml@4.9.3">
+      <name>lxml</name>
+      <version>4.9.3</version>
+      <description>Powerful and Pythonic XML processing library combining libxml2/libxslt with the ElementTree API.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/lxml@4.9.3</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b0a545b46b526d418eb91754565ba5b63b1c0b12f9bd2f808c852d9b4b2f9b5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">075b731ddd9e7f68ad24c635374211376aa05a281673ede86cbe1d1b3455279d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e224d5755dba2f4a9498e150c43792392ac9b5380aa1b845f98a1618c94eeef</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2c74524e179f2ad6d2a4f7caf70e2d96639c0954c943ad601a9e146c76408ed7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f1026bc732b6a7f96369f7bfe1a4f2290fb34dce00d8644bc3036fb351a4ca1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c0781a98ff5e6586926293e59480b64ddd46282953203c76ae15dbbbf302e8bb</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp27-cp27mu-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cef2502e7e8a96fe5ad686d60b49e1ab03e438bd9123987994528febd569868e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b86164d2cff4d3aaa1f04a14685cbc072efd0b4f99ca5708b2ad1b9b5988a991</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">42871176e7896d5d45138f6d28751053c711ed4d48d8e30b498da155af39aebd</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ae8b9c6deb1e634ba4f1930eb67ef6e6bf6a44b6eb5ad605642b2d6d5ed9ce3c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">411007c0d88188d9f621b11d252cce90c4a2d1a49db6c068e3c16422f306eab8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd47b4a0d41d2afa3e58e5bf1f62069255aa2fd6ff5ee41604418ca925911d76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e2cb47860da1f7e9a5256254b74ae331687b9672dfa780eed355c4c9c3dbd23</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1247694b26342a7bf47c02e513d32225ededd18045264d40758abeb3c838a51f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cdb650fc86227eba20de1a29d4b2c1bfe139dc75a0669270033cb2ea3d391b85</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp310-cp310-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">97047f0d25cd4bcae81f9ec9dc290ca3e15927c192df17331b53bebe0e3ff96d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f447ea5429b54f9582d4b955f5f1985f278ce5cf169f72eea8afd9502973dd5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57d6ba0ca2b0c462f339640d22882acc711de224d769edf29962b09f77129cbf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9767e79108424fb6c3edf8f81e6730666a50feb01a328f4a016464a5893f835a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71c52db65e4b56b8ddc5bb89fb2e66c558ed9d1a74a45ceb7dcb20c191c3df2f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d73d8ecf8ecf10a3bd007f2192725a34bd62898e8da27eb9d32a58084f93962b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a3d3487f07c1d7f150894c238299934a2a074ef590b583103a45002035be120</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9e28c51fa0ce5674be9f560c6761c1b441631901993f76700b1b30ca6c8378d6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bfd0767c5c1de2551a120673b72e5d4b628737cb05414f03c3277bf9bed3305</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp311-cp311-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25f32acefac14ef7bd53e4218fe93b804ef6f6b92ffdb4322bb6d49d94cad2bc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-macosx_11_0_universal2.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3ff32724f98fbbbfa9f49d82852b159e9784d6094983d9a8b7f2ddaebb063d4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48d6ed886b343d11493129e019da91d4039826794a3e3027321c56d9e71505be</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9a92d3faef50658dd2c5470af249985782bf754c4e18e15afb67d3ab06233f13</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b4e4bc18382088514ebde9328da057775055940a1f2e18f6ad2d78aa0f3ec5b9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fc9b106a1bf918db68619fdcd6d5ad4f972fdd19c01d19bdb6bf63f3589a9ec5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp312-cp312-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d37017287a7adb6ab77e1c5bee9bcf9660f90ff445042b790402a654d2ad81d8</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dc1f1ebccc656d1b3ed288f11e27172a01503fc016bcabdcbc0978b19352b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">578695735c5a3f51569810dfebd05dd6f888147a34f0f98d4bb27e92b76e05c2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">704f61ba8c1283c71b16135caf697557f5ecf3e74d9e453233e4771d68a1f42d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp35-cp35m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c41bfca0bd3532d53d16fd34d20806d5c2b1ace22a2f2e4c0008570bf2c58833</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">64f479d719dc9f4c813ad9bb6b28f8390360660b73b2e4beb4cb0ae7104f1c12</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dd708cf4ee4408cf46a48b108fb9427bfa00b9b85812a9262b5c668af2533ea5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c31c7462abdf8f2ac0577d9f05279727e698f97ecbb02f17939ea99ae8daa98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e3cd95e10c2610c360154afdc2f1480aea394f4a4f1ea0a5eacce49640c9b190</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4930be26af26ac545c3dffb662521d4e6268352866956672231887d18f0eaab2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4aec80cde9197340bc353d2768e2a75f5f60bacda2bab72ab1dc499589b3878c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">14e019fd83b831b2e61baed40cab76222139926b1fb5ed0e79225bc0cae14584</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c0850c8b02c298d3c7006b23e98249515ac57430e16a166873fc47a5d549287</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aca086dc5f9ef98c512bac8efea4483eb84abbf926eaeedf7b91479feb092458</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50baa9c1c47efcaef189f31e3d00d697c6d4afda5c3cde0302d063492ff9b477</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp36-cp36m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bef4e656f7d98aaa3486d2627e7d2df1157d7e88e7efd43a65aa5dd4714916cf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">46f409a2d60f634fe550f7133ed30ad5321ae2e6630f13657fb9479506b00601</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4c28a9144688aef80d6ea666c809b4b0e50010a2aca784c97f5e6bf143d9f129</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">141f1d1a9b663c679dc524af3ea1773e618907e96075262726c7612c02b149a4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">53ace1c1fd5a74ef662f844a0413446c0629d151055340e9893da958a374f70d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">17a753023436a18e27dd7769e798ce302963c236bc4114ceee5b25c18c52c693</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7d298a1bd60c067ea75d9f684f5f3992c9d6766fadbc0bcedd39750bf344c2f4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">081d32421db5df44c41b7f08a334a090a545c54ba977e47fd7cc2deece78809a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">23eed6d7b1a3336ad92d8e39d4bfe09073c31bfe502f20ca5116b2a334f8ec02</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1509dd12b773c02acd154582088820893109f6ca27ef7291b003d0e81666109f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp37-cp37m-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">120fa9349a24c7043854c53cae8cec227e1f79195a7493e09e0c12e29f918e52</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d2d1edbca80b510443f51afd8496be95529db04a509bc8faee49c7b0fb6d2cc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.manylinux_2_24_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8d7e43bd40f65f7d97ad8ef5c9b1778943d02f04febef12def25f7583d19baac</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">71d66ee82e7417828af6ecd7db817913cb0cf9d4e61aa0ac1fde0583d84358db</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6fc3c450eaa0b56f815c7b62f2b7fba7266c4779adcf1cece9e6deb1de7305ce</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">65299ea57d82fb91c7f019300d24050c4ddeb7c5a190e076b5f48a2b43d19c42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eadfbbbfb41b44034a4c757fd5d70baccd43296fb894dba0295606a7cf3124aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3e9bdd30efde2b9ccfa9cb5768ba04fe71b018a25ea093379c857c9dad262c40</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fcdd00edfd0a3001e0181eab3e63bd5c74ad3e67152c84f93f13769a40e073a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57aba1bbdf450b726d58b2aea5fe47c7875f5afb2c4a23784ed78f19a0462574</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp38-cp38-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">92af161ecbdb2883c4593d5ed4815ea71b31fafd7fd05789b23100d081ecac96</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bb6ad405121241e99a86efff22d3ef469024ce22875a7ae045896ad23ba2340</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8ed74706b26ad100433da4b9d807eae371efaa266ffc3e9191ea436087a9d6a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fbf521479bcac1e25a663df882c46a641a9bff6b56dc8b0fafaebd2f66fb231b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">303bf1edce6ced16bf67a18a1cf8339d0db79577eec5d9a6d4a80f0fb10aa2da</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5515edd2a6d1a5a70bfcdee23b42ec33425e405c5b351478ab7dc9347228f96e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">690dafd0b187ed38583a648076865d8c229661ed20e48f2335d68e2cf7dc829d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6420a005548ad52154c8ceab4a1290ff78d757f9e5cbc68f8c77089acd3c432</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bb3bb49c7a6ad9d981d734ef7c7193bc349ac338776a0360cc671eaee89bcf69</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-musllinux_1_1_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d27be7405547d1f958b60837dc4c1007da90b8b23f54ba1f8b728c78fdb19d50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8df133a2ea5e74eef5e8fc6f19b9e085f758768a16e9877a60aec455ed2609b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-cp39-cp39-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4dd9a263e845a72eacb60d12401e37c616438ea2e5442885f65082c276dfb2b2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6689a3d7fd13dc687e9102a27e98ef33730ac4fe37795d5036d18b4d527abd35</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f6bdac493b949141b733c5345b6ba8f87a226029cbabc7e9e121a413e49441e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05186a0f1346ae12553d66df1cfce6f251589fea3ad3da4f3ef4e34b2d58c6a3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp37-pypy37_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c2006f5c8d28dee289f7020f721354362fa304acbaaf9745751ac4006650254b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5c245b783db29c4e4fbbbfc9c5a78be496c9fea25517f90606aa1f6b2b3d5f7b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4fb960a632a49f2f089d522f70496640fdf1218f1243889da3822e0a9f5f3ba7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">50670615eaf97227d5dc60de2dc99fb134a7130d310d783314e7724bf163f75d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9719fe17307a9e814580af1f5c6e05ca593b12fb7e44fe62450a5384dbf61b4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp38-pypy38_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3331bece23c9ee066e0fb3f96c61322b9e0f54d775fccefff4c38ca488de283a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-macosx_11_0_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ed667f49b11360951e201453fc3967344d0d0263aa415e1619e85ae7fd17b4e0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_12_i686.manylinux2010_i686.manylinux_2_24_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8b77946fd508cbf0fccd8e400a7f71d4ac0e1595812e66025bac475a8e811694</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.manylinux_2_24_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e4da8ca0c0c0aea88fd46be8e44bd49716772358d648cce45fe387f7b92374a7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fe4bda6bd4340caa6e5cf95e73f8fea5c4bfc55763dd42f1b50a94c1b4a2fbd4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3-pp39-pypy39_pp73-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f3df3db1d336b9356dd3112eae5f5c2b8b377f3bc826848567f10bfddfee77e9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/lxml/#lxml-4.9.3.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48628bd53a426c9eb9bc066a923acaa0878d1e86129fd5359aee99285f4eed9c</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="packageurl-python@0.11.2">
+      <name>packageurl-python</name>
+      <version>0.11.2</version>
+      <description>A purl aka. Package URL parser and builder</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/packageurl-python@0.11.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl-python-0.11.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">01fbf74a41ef85cf413f1ede529a1411f658bda66ed22d45d27280ad9ceba471</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/packageurl-python/#packageurl_python-0.11.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">799acfe8d9e6e3534bbc19660be97d5b66754bc033e62c39f1e2f16323fcfa84</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkgutil-resolve-name@1.3.10">
+      <name>pkgutil-resolve-name</name>
+      <version>1.3.10</version>
+      <description>Resolve a name to an object.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/pkgutil-resolve-name@1.3.10</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ca27cc078d25c5ad71a9de0a7a330146c4e014c2462d9af19c6b828280649c5e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/pkgutil-resolve-name/#pkgutil_resolve_name-1.3.10.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">357d6c9e6a755653cfd78893817c0853af365dd51ec97f3d358a819373bbd174</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="py-serializable@0.15.0">
+      <name>py-serializable</name>
+      <version>0.15.0</version>
+      <description>Library for serializing and deserializing Python Objects to and from JSON and XML.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/py-serializable@0.15.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py-serializable-0.15.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8fc41457d8ee5f5c5a12f41fd87bf1a4f2ecf9da39fee92059b728e78f320771</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/py-serializable/#py_serializable-0.15.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3f1201b33420c481aa83f7860c7bf2c2f036ba3ea82b6e15a96696457c36cd2</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="python-dateutil@2.8.2">
+      <name>python-dateutil</name>
+      <version>2.8.2</version>
+      <description>Extensions to the standard Python datetime module</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/python-dateutil@2.8.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python-dateutil-2.8.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0123cacc1627ae19ddf3c27a5de5bd67ee4586fbdd6440d9748f8abb483d3e86</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/python-dateutil/#python_dateutil-2.8.2-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">961d03dc3453ebbc59dbdea9e4e11c5651520a876d0f4db161e8674aae935da9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="referencing@0.30.2">
+      <name>referencing</name>
+      <version>0.30.2</version>
+      <description>JSON Referencing + Python</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/referencing@0.30.2</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">449b6669b6121a9e96a7f9e410b245d471e8d48964c67113ce9afe50c8dd7bdf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/referencing/#referencing-0.30.2.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">794ad8003c65938edcdbc027f1933215e0d0ccc0291e3ce20a4d87432b59efc0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3339-validator@0.1.4">
+      <name>rfc3339-validator</name>
+      <version>0.1.4</version>
+      <description>A pure python RFC3339 validator</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3339-validator@0.1.4</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">24f6ec1eda14ef823da9e36ec7113124b39c04d50a4d3d3a3c2859577e7791fa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3339-validator/#rfc3339_validator-0.1.4.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">138a2abdf93304ad60530167e51d2dfb9549521a836871b88d7f4695d0022f6b</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rfc3987@1.3.8">
+      <name>rfc3987</name>
+      <version>1.3.8</version>
+      <description>Parsing and validation of URIs (RFC 3986) and IRIs (RFC 3987)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rfc3987@1.3.8</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">10702b1e51e5658843460b189b185c0366d2cf4cff716f13111b0ea9fd2dce53</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rfc3987/#rfc3987-1.3.8.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d3c4d257a560d544e9826b38bc81db676890c79ab9d7ac92b39c7a253d5ca733</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="rpds-py@0.12.0">
+      <name>rpds-py</name>
+      <version>0.12.0</version>
+      <description>Python bindings to Rust's persistent data structures (rpds)</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/rpds-py@0.12.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c694bee70ece3b232df4678448fdda245fd3b1bb4ba481fb6cd20e13bb784c46</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">30e5ce9f501fb1f970e4a59098028cf20676dee64fc496d55c33e04bbbee097d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d72a4315514e5a0b9837a086cb433b004eea630afb0cc129de76d77654a9606f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">eebaf8c76c39604d52852366249ab807fe6f7a3ffb0dd5484b9944917244cdbe</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a239303acb0315091d54c7ff36712dba24554993b9a93941cf301391d8a997ee</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">ced40cdbb6dd47a032725a038896cceae9ce267d340f59508b23537f05455431</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3c8c0226c71bd0ce9892eaf6afa77ae8f43a3d9313124a03df0b389c01f832de</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b8e11715178f3608874508f08e990d3771e0b8c66c73eb4e183038d600a9b274</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5210a0018c7e09c75fa788648617ebba861ae242944111d3079034e14498223f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">171d9a159f1b2f42a42a64a985e4ba46fc7268c78299272ceba970743a67ee50</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-cp310-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">57ec6baec231bb19bb5fd5fc7bae21231860a1605174b11585660236627e390e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7188ddc1a8887194f984fa4110d5a3d5b9b5cd35f6bafdff1b649049cbc0ce29</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp310-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e04581c6117ad9479b6cfae313e212fe0dfa226ac727755f0d539cd54792963</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0a38612d07a36138507d69646c470aedbfe2b75b43a4643f7bd8e51e52779624</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f12d69d568f5647ec503b64932874dade5a20255736c89936bf690951a5e79f5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4f8a1d990dc198a6c68ec3d9a637ba1ce489b38cbfb65440a27901afbc5df575</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8c567c664fc2f44130a20edac73e0a867f8e012bf7370276f15c6adc3586c37c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e9e976e0dbed4f51c56db10831c9623d0fd67aac02853fe5476262e5a22acb7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efddca2d02254a52078c35cadad34762adbae3ff01c6b0c7787b59d038b63e0d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d9e7f29c00577aff6b318681e730a519b235af292732a149337f6aaa4d1c5e31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">389c0e38358fdc4e38e9995e7291269a3aead7acfcf8942010ee7bc5baee091c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">33ab498f9ac30598b6406e2be1b45fd231195b83d948ebd4bd77f337cb6a2bff</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d56b1cd606ba4cedd64bb43479d56580e147c6ef3f5d1c5e64203a1adab784a2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-cp311-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1fa73ed22c40a1bec98d7c93b5659cd35abcfa5a0a95ce876b91adbda170537c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">dbc25baa6abb205766fb8606f8263b02c3503a55957fcb4576a6bb0a59d37d10</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp311-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c6b52b7028b547866c2413f614ee306c2d4eafdd444b1ff656bf3295bf1484aa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9620650c364c01ed5b497dcae7c3d4b948daeae6e1883ae185fef1c927b6b534</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2124f9e645a94ab7c853bc0a3644e0ca8ffbe5bb2d72db49aef8f9ec1c285733</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">281c8b219d4f4b3581b918b816764098d04964915b2f272d1476654143801aa2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">27ccc93c7457ef890b0dd31564d2a05e1aca330623c942b7e818e9e7c2669ee4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d1c562a9bb72244fa767d1c1ab55ca1d92dd5f7c4d77878fee5483a22ffac808</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e57919c32ee295a2fca458bb73e4b20b05c115627f96f95a10f9f5acbd61172d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">fa35ad36440aaf1ac8332b4a4a433d4acd28f1613f0d480995f5cfd3580e90b7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e6aea5c0eb5b0faf52c7b5c4a47c8bb64437173be97227c819ffa31801fa4e34</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81cf9d306c04df1b45971c13167dc3bad625808aa01281d55f3cf852dde0e206</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">08e6e7ff286254016b945e1ab632ee843e43d45e40683b66dd12b73791366dd1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-cp312-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4d0a675a7acbbc16179188d8c6d0afb8628604fc1241faf41007255957335a0b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b2287c09482949e0ca0c0eb68b2aca6cf57f8af8c6dfd29dcd3bc45f17b57978</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp312-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8015835494b21aa7abd3b43fdea0614ee35ef6b03db7ecba9beb58eadf01c24f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6174d6ad6b58a6bcf67afbbf1723420a53d06c4b89f4c50763d6fa0a6ac9afd2</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a689e1ded7137552bea36305a7a16ad2b40be511740b80748d3140614993db98</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f45321224144c25a62052035ce96cbcf264667bcb0d81823b1bbc22c4addd194</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">aa32205358a76bf578854bf31698a86dc8b2cb591fd1d79a833283f4a403f04b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">91bd2b7cf0f4d252eec8b7046fa6a43cee17e8acdfc00eaa8b3dbf2f9a59d061</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3acadbab8b59f63b87b518e09c4c64b142e7286b9ca7a208107d6f9f4c393c5c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">429349a510da82c85431f0f3e66212d83efe9fd2850f50f339341b6532c62fe4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">05942656cb2cb4989cd50ced52df16be94d344eae5097e8583966a1d27da73a5</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0c5441b7626c29dbd54a3f6f3713ec8e956b009f419ffdaaa3c80eaf98ddb523</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b6b0e17d39d21698185097652c611f9cf30f7c56ccec189789920e3e7f1cee56</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-cp38-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">3b7a64d43e2a1fa2dd46b678e00cabd9a49ebb123b339ce799204c44a593ae1c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e5bbe011a2cea9060fef1bb3d668a2fd8432b8888e6d92e74c9c794d3c101595</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp38-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">bec29b801b4adbf388314c0d050e851d53762ab424af22657021ce4b6eb41543</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1096ca0bf2d3426cbe79d4ccc91dc5aaa73629b08ea2d8467375fad8447ce11a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">48aa98987d54a46e13e6954880056c204700c65616af4395d1f0639eba11764b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7979d90ee2190d000129598c2b0c82f13053dba432b94e45e68253b09bb1f0f6</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">88857060b690a57d2ea8569bca58758143c8faa4639fb17d745ce60ff84c867e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4eb74d44776b0fb0782560ea84d986dffec8ddd94947f383eba2284b0f32e35e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f62581d7e884dd01ee1707b7c21148f61f2febb7de092ae2f108743fcbef5985</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f5dcb658d597410bb7c967c1d24eaf9377b0d621358cbe9d2ff804e5dd12e81</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9bf9acce44e967a5103fcd820fc7580c7b0ab8583eec4e2051aec560f7b31a63</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">240687b5be0f91fbde4936a329c9b7589d9259742766f74de575e1b2046575e4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25740fb56e8bd37692ed380e15ec734be44d7c71974d8993f452b4527814601e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-cp39-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a54917b7e9cd3a67e429a630e237a90b096e0ba18897bfb99ee8bd1068a5fea0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win32.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b92aafcfab3d41580d54aca35a8057341f1cfc7c9af9e8bdfc652f83a20ced31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-cp39-none-win_amd64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cd316dbcc74c76266ba94eb021b0cc090b97cca122f50bd7a845f587ff4bf03f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0853da3d5e9bc6a07b2486054a410b7b03f34046c123c6561b535bb48cc509e1</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">cb41ad20064e18a900dd427d7cf41cfaec83bcd1184001f3d91a1f76b3fcea4e</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">b710bf7e7ae61957d5c4026b486be593ed3ec3dca3e5be15e0f6d8cf5d0a4990</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a952ae3eb460c6712388ac2ec706d24b0e651b9396d90c9a9e0a69eb27737fdc</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0bedd91ae1dd142a4dc15970ed2c729ff6c73f33a40fa84ed0cdbf55de87c777</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">761531076df51309075133a6bc1db02d98ec7f66e22b064b1d513bc909f29743</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a2baa6be130e8a00b6cbb9f18a33611ec150b4537f8563bddadb54c1b74b8193</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f05450fa1cd7c525c0b9d1a7916e595d3041ac0afbed2ff6926e5afb6a781b7f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">81c4d1a3a564775c44732b94135d06e33417e829ff25226c164664f4a1046213</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">e888be685fa42d8b8a3d3911d5604d14db87538aa7d0b29b1a7ea80d354c732d</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp310-pypy310_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6f8d7fe73d1816eeb5378409adc658f9525ecbfaf9e1ede1e2d67a338b0c7348</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0831d3ecdea22e4559cc1793f22e77067c9d8c451d55ae6a75bf1d116a8e7f42</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">513ccbf7420c30e283c25c82d5a8f439d625a838d3ba69e79a110c260c46813f</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">301bd744a1adaa2f6a5e06c98f1ac2b6f8dc31a5c23b838f862d65e32fca0d4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f8832a4f83d4782a8f5a7b831c47e8ffe164e43c2c148c8160ed9a6d630bc02a</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">4b2416ed743ec5debcf61e1242e012652a4348de14ecc7df3512da072b074440</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">35585a8cb5917161f42c2104567bb83a1d96194095fc54a543113ed5df9fa436</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">d389ff1e95b6e46ebedccf7fd1fadd10559add595ac6a7c2ea730268325f832c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">9b007c2444705a2dc4a525964fd4dd28c3320b19b3410da6517cab28716f27d3</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">188912b22b6c8225f4c4ffa020a2baa6ad8fabb3c141a12dbe6edbb34e7f1425</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1b4cf9ab9a0ae0cb122685209806d3f1dcb63b9fccdf1424fb42a129dc8c2faa</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp38-pypy38_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">2d34a5450a402b00d20aeb7632489ffa2556ca7b26f4a63c35f6fccae1977427</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_10_7_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">466030a42724780794dea71eb32db83cc51214d66ab3fb3156edd88b9c8f0d78</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">68172622a5a57deb079a2c78511c40f91193548e8ab342c31e8cb0764d362459</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">54cdfcda59251b9c2f87a05d038c2ae02121219a04d4a1e6fc345794295bdc07</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_armv7l.manylinux2014_armv7l.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6b75b912a0baa033350367a8a07a8b2d44fd5b90c890bfbd063a8a5f945f644b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">47aeceb4363851d17f63069318ba5721ae695d9da55d599b4d6fb31508595278</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_s390x.manylinux2014_s390x.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0525847f83f506aa1e28eb2057b696fe38217e12931c8b1b02198cfe6975e142</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">efbe0b5e0fd078ed7b005faa0170da4f72666360f66f0bb2d7f73526ecfd99f9</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0fadfdda275c838cba5102c7f90a20f2abd7727bf8f4a2b654a5b617529c5c18</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_aarch64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">56dd500411d03c5e9927a1eb55621e906837a83b02350a9dc401247d0353717c</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_i686.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">6915fc9fa6b3ec3569566832e1bb03bd801c12cea030200e68663b9a87974e76</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0-pp39-pypy39_pp73-musllinux_1_2_x86_64.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">5f1519b080d8ce0a814f17ad9fb49fb3a1d4d7ce5891f5c85fc38631ca3a8dc4</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/rpds-py/#rpds_py-0.12.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">7036316cc26b93e401cedd781a579be606dad174829e6ad9e9c5a0da6e036f80</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="six@1.16.0">
+      <name>six</name>
+      <version>1.16.0</version>
+      <description>Python 2 and 3 compatibility utilities</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/six@1.16.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/six/#six-1.16.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="sortedcontainers@2.4.0">
+      <name>sortedcontainers</name>
+      <version>2.4.0</version>
+      <description>Sorted Containers -- Sorted List, Sorted Dict, Sorted Set</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/sortedcontainers@2.4.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0-py2.py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a163dcaede0f1c021485e957a39245190e74249897e2ae4b2aa38595db237ee0</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/sortedcontainers/#sortedcontainers-2.4.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">25caa5a06cc30b6b83d11423433f65d1f9d76c4c6a0c90e3379eaa43b9bfdb88</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="types-python-dateutil@2.8.19.14">
+      <name>types-python-dateutil</name>
+      <version>2.8.19.14</version>
+      <description>Typing stubs for python-dateutil</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/types-python-dateutil@2.8.19.14</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types-python-dateutil-2.8.19.14.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">1f4f10ac98bb8b16ade9dbee3518d9ace017821d94b057a425b069f834737f4b</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/types-python-dateutil/#types_python_dateutil-2.8.19.14-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">f977b8de27787639986b4e28963263fd0e5158942b3ecef91b9335c130cb1ce9</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="uri-template@1.3.0">
+      <name>uri-template</name>
+      <version>1.3.0</version>
+      <description>RFC 6570 URI Template Processor</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/uri-template@1.3.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri-template-1.3.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e00f8eb65e18c7de20d595a14336e9f337ead580c70934141624b6d1ffdacc7</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/uri-template/#uri_template-1.3.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">a44a133ea12d44a0c0f06d7d42a52d71282e77e2f937d8abd5655b8d56fc1363</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="webcolors@1.13">
+      <name>webcolors</name>
+      <version>1.13</version>
+      <description>A library for working with the color formats defined by HTML and CSS.</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/webcolors@1.13</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">29bc7e8752c0a1bd4a1f03c14d6e6a72e93d82193738fa860cbff59d0fcc11bf</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/webcolors/#webcolors-1.13.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">c225b674c83fa923be93d235330ce0300373d02885cef23238813b0d5668304a</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="zipp@3.17.0">
+      <name>zipp</name>
+      <version>3.17.0</version>
+      <description>Backport of pathlib-compatible object wrapper for zip files</description>
+      <scope>optional</scope>
+      <purl>pkg:pypi/zipp@3.17.0</purl>
+      <externalReferences>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0-py3-none-any.whl</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">0e923e726174922dce09c53c59ad483ff7bbb8e572e00c7f7c46b88556409f31</hash>
+          </hashes>
+        </reference>
+        <reference type="distribution">
+          <url>https://pypi.org/simple/zipp/#zipp-3.17.0.tar.gz</url>
+          <comment>from legacy-api</comment>
+          <hashes>
+            <hash alg="SHA-256">84e64a1c28cf7e91ed2078bb8cc8c259cb19b76942096c8d7b84947690cabaf0</hash>
+          </hashes>
+        </reference>
+      </externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="arrow@1.3.0">
+      <dependency ref="python-dateutil@2.8.2"/>
+      <dependency ref="types-python-dateutil@2.8.19.14"/>
+    </dependency>
+    <dependency ref="attrs@23.1.0"/>
+    <dependency ref="boolean-py@4.0"/>
+    <dependency ref="cyclonedx-python-lib@5.1.1">
+      <dependency ref="jsonschema@4.19.2"/>
+      <dependency ref="license-expression@30.1.1"/>
+      <dependency ref="lxml@4.9.3"/>
+      <dependency ref="packageurl-python@0.11.2"/>
+      <dependency ref="py-serializable@0.15.0"/>
+      <dependency ref="sortedcontainers@2.4.0"/>
+    </dependency>
+    <dependency ref="defusedxml@0.7.1"/>
+    <dependency ref="fqdn@1.5.1"/>
+    <dependency ref="idna@3.4"/>
+    <dependency ref="importlib-resources@6.1.1">
+      <dependency ref="zipp@3.17.0"/>
+    </dependency>
+    <dependency ref="isoduration@20.11.0">
+      <dependency ref="arrow@1.3.0"/>
+    </dependency>
+    <dependency ref="jsonpointer@2.4"/>
+    <dependency ref="jsonschema-specifications@2023.7.1">
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="referencing@0.30.2"/>
+    </dependency>
+    <dependency ref="jsonschema@4.19.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="fqdn@1.5.1"/>
+      <dependency ref="idna@3.4"/>
+      <dependency ref="importlib-resources@6.1.1"/>
+      <dependency ref="isoduration@20.11.0"/>
+      <dependency ref="jsonpointer@2.4"/>
+      <dependency ref="jsonschema-specifications@2023.7.1"/>
+      <dependency ref="pkgutil-resolve-name@1.3.10"/>
+      <dependency ref="referencing@0.30.2"/>
+      <dependency ref="rfc3339-validator@0.1.4"/>
+      <dependency ref="rfc3987@1.3.8"/>
+      <dependency ref="rpds-py@0.12.0"/>
+      <dependency ref="uri-template@1.3.0"/>
+      <dependency ref="webcolors@1.13"/>
+    </dependency>
+    <dependency ref="license-expression@30.1.1">
+      <dependency ref="boolean-py@4.0"/>
+    </dependency>
+    <dependency ref="lxml@4.9.3"/>
+    <dependency ref="packageurl-python@0.11.2"/>
+    <dependency ref="pkgutil-resolve-name@1.3.10"/>
+    <dependency ref="py-serializable@0.15.0">
+      <dependency ref="defusedxml@0.7.1"/>
+    </dependency>
+    <dependency ref="python-dateutil@2.8.2">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="referencing@0.30.2">
+      <dependency ref="attrs@23.1.0"/>
+      <dependency ref="rpds-py@0.12.0"/>
+    </dependency>
+    <dependency ref="rfc3339-validator@0.1.4">
+      <dependency ref="six@1.16.0"/>
+    </dependency>
+    <dependency ref="rfc3987@1.3.8"/>
+    <dependency ref="rpds-py@0.12.0"/>
+    <dependency ref="six@1.16.0"/>
+    <dependency ref="sortedcontainers@2.4.0"/>
+    <dependency ref="types-python-dateutil@2.8.19.14"/>
+    <dependency ref="uri-template@1.3.0"/>
+    <dependency ref="webcolors@1.13"/>
+    <dependency ref="with-extras">
+      <dependency ref="cyclonedx-python-lib@5.1.1"/>
+    </dependency>
+    <dependency ref="zipp@3.17.0"/>
+  </dependencies>
+</bom>
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.0.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.0.xml.bin
index 1f0fb594..9782e63d 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.0.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.0.xml.bin
@@ -4,7 +4,7 @@
     <component type="library">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <modified>false</modified>
     </component>
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.1.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.1.xml.bin
index 8bb743d6..06770853 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.1.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.1.xml.bin
@@ -1,10 +1,10 @@
 <?xml version="1.0" ?>
 <bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1">
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.2.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.2.json.bin
index 7dcde577..7b791519 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.2.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.2.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -18,7 +18,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     },
     {
       "ref": "root-component"
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.2.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.2.xml.bin
index 1eb84df9..108bd9d7 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.2.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.2.xml.bin
@@ -49,10 +49,10 @@
     </component>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -63,7 +63,7 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
     <dependency ref="root-component"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
index 52d42e29..216334a3 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.3.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     },
     {
       "ref": "root-component"
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
index 041cc4bf..ca47babd 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.3.xml.bin
@@ -52,10 +52,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -70,7 +70,7 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
     <dependency ref="root-component"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
index 99134644..33b7e4ed 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.4.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     },
     {
       "ref": "root-component"
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
index c044f19e..8a119a1c 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.4.xml.bin
@@ -79,10 +79,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -97,7 +97,7 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
     <dependency ref="root-component"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin b/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
index 816a9804..3046311b 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.5.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     },
     {
       "ref": "root-component"
diff --git a/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin b/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
index 4282f650..eb734cc8 100644
--- a/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/file_with-extras_1.5.xml.bin
@@ -79,10 +79,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -97,7 +97,7 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
     <dependency ref="root-component"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.0.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.0.xml.bin
index 1f0fb594..9782e63d 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.0.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.0.xml.bin
@@ -4,7 +4,7 @@
     <component type="library">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <modified>false</modified>
     </component>
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.1.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.1.xml.bin
index 8bb743d6..06770853 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.1.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.1.xml.bin
@@ -1,10 +1,10 @@
 <?xml version="1.0" ?>
 <bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1">
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.2.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.2.json.bin
index 7c6c6183..fe5778ee 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.2.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.2.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -18,7 +18,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     }
   ],
   "metadata": {
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.2.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.2.xml.bin
index 83835cb1..e623ad21 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.2.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.2.xml.bin
@@ -15,10 +15,10 @@
     </tools>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -29,6 +29,6 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
index b4cf779a..482afc8f 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.3.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     }
   ],
   "metadata": {
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
index b29201bb..1787c2f3 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.3.xml.bin
@@ -18,10 +18,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -36,6 +36,6 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
index f0cfb8fa..4c50f4c8 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.4.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     }
   ],
   "metadata": {
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
index 2af63a2d..596a61dd 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.4.xml.bin
@@ -45,10 +45,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -63,6 +63,6 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
   </dependencies>
 </bom>
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
index 325e006a..e51f1805 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.5.json.bin
@@ -1,8 +1,8 @@
 {
   "components": [
     {
-      "bom-ref": "requirements-L3",
-      "description": "requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1",
+      "bom-ref": "requirements-L4",
+      "description": "requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -28,7 +28,7 @@
   ],
   "dependencies": [
     {
-      "ref": "requirements-L3"
+      "ref": "requirements-L4"
     }
   ],
   "metadata": {
diff --git a/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin b/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
index de11e710..35533c2f 100644
--- a/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
+++ b/tests/_data/snapshots/requirements/stream_with-extras_1.5.xml.bin
@@ -45,10 +45,10 @@
     </properties>
   </metadata>
   <components>
-    <component type="library" bom-ref="requirements-L3">
+    <component type="library" bom-ref="requirements-L4">
       <name>cyclonedx-python-lib</name>
       <version>5.1.1</version>
-      <description>requirements line 3: cyclonedx-python-lib[json-validation,xml-validation] == 5.1.1</description>
+      <description>requirements line 4: cyclonedx-python-lib[JSON-validation,xml-Validation] == 5.1.1</description>
       <purl>pkg:pypi/cyclonedx-python-lib@5.1.1</purl>
       <externalReferences>
         <reference type="distribution">
@@ -63,6 +63,6 @@
     </component>
   </components>
   <dependencies>
-    <dependency ref="requirements-L3"/>
+    <dependency ref="requirements-L4"/>
   </dependencies>
 </bom>
diff --git a/tests/integration/test_cli_poetry.py b/tests/integration/test_cli_poetry.py
index a413a4a8..8286b4e8 100644
--- a/tests/integration/test_cli_poetry.py
+++ b/tests/integration/test_cli_poetry.py
@@ -111,9 +111,10 @@ def test_fails_with_extras_not_found(self) -> None:
             out = out.getvalue()
         self.assertNotEqual(0, res, err)
         self.assertIn('Extra(s) ['
-                      'MNE-extra-A,'
-                      'MNE-extra-B,'
-                      'MNE-extra-C'
+                      # extra names were normalized!
+                      'mne-extra-a,'
+                      'mne-extra-b,'
+                      'mne-extra-c'
                       '] not specified', err)
 
     @named_data(*test_data)
@@ -206,7 +207,7 @@ def test_with_extras_as_expected(self, projectdir: str, sv: SchemaVersion, of: O
                 res = run_cli(argv=[
                     'poetry',
                     '-vvv',
-                    '-E', 'my-extra',
+                    '-E', 'my_Extra',  # expected to be normalized
                     '--sv', sv.to_version(),
                     '--of', of.name,
                     '--output-reproducible',
@@ -217,6 +218,26 @@ def test_with_extras_as_expected(self, projectdir: str, sv: SchemaVersion, of: O
         self.assertEqual(0, res, err)
         self.assertEqualSnapshot(out, 'some-extras', projectdir, sv, of)
 
+    @named_data(*test_data_file_filter('with-extras'))
+    def test_with_all_extras_as_expected(self, projectdir: str, sv: SchemaVersion, of: OutputFormat) -> None:
+        with StringIO() as err, StringIO() as out:
+            err.name = '<fakeerr>'
+            out.name = '<fakeout>'
+            with redirect_stderr(err), redirect_stdout(out):
+                res = run_cli(argv=[
+                    'poetry',
+                    '-vvv',
+                    '--all-extras',
+                    '--sv', sv.to_version(),
+                    '--of', of.name,
+                    '--output-reproducible',
+                    '--outfile=-',
+                    projectdir])
+            err = err.getvalue()
+            out = out.getvalue()
+        self.assertEqual(0, res, err)
+        self.assertEqualSnapshot(out, 'all-extras', projectdir, sv, of)
+
     def assertEqualSnapshot(self, actual: str,  # noqa:N802
                             purpose: str,
                             projectdir: str,