Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: spotbugs-maven-plugin

com.github.spotbugs:spotbugs-maven-plugin:4.10.2.0

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
Saxon-HE-12.9.jar pkg:maven/net.sf.saxon/Saxon-HE@12.9   0 58
ant-1.10.17.jar cpe:2.3:a:apache:ant:1.10.17:*:*:*:*:*:*:* pkg:maven/org.apache.ant/ant@1.10.17   0 Highest 24
aopalliance-1.0.jar pkg:maven/aopalliance/aopalliance@1.0   0 20
asm-9.10.1.jar pkg:maven/org.ow2.asm/asm@9.10.1   0 54
asm-analysis-9.10.1.jar pkg:maven/org.ow2.asm/asm-analysis@9.10.1   0 60
asm-commons-9.10.1.jar pkg:maven/org.ow2.asm/asm-commons@9.10.1   0 58
asm-tree-9.10.1.jar pkg:maven/org.ow2.asm/asm-tree@9.10.1   0 58
asm-util-9.10.1.jar pkg:maven/org.ow2.asm/asm-util@9.10.1   0 58
bcel-6.12.0.jar cpe:2.3:a:apache:commons_bcel:6.12.0:*:*:*:*:*:*:* pkg:maven/org.apache.bcel/bcel@6.12.0   0 Low 77
checker-qual-4.1.0.jar pkg:maven/org.checkerframework/checker-qual@4.1.0   0 44
commons-beanutils-1.11.0.jar cpe:2.3:a:apache:commons_beanutils:1.11.0:*:*:*:*:*:*:* pkg:maven/commons-beanutils/commons-beanutils@1.11.0   0 Highest 170
commons-codec-1.22.0.jar pkg:maven/commons-codec/commons-codec@1.22.0   0 121
commons-collections-3.2.2.jar cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* pkg:maven/commons-collections/commons-collections@3.2.2   0 Highest 84
commons-compress-1.26.1.jar cpe:2.3:a:apache:commons_compress:1.26.1:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-compress@1.26.1   0 Highest 109
commons-digester3-3.2.jar pkg:maven/org.apache.commons/commons-digester3@3.2   0 105
commons-io-2.22.0.jar cpe:2.3:a:apache:commons_io:2.22.0:*:*:*:*:*:*:* pkg:maven/commons-io/commons-io@2.22.0   0 Highest 127
commons-lang3-3.20.0.jar cpe:2.3:a:apache:commons_lang:3.20.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-lang3@3.20.0   0 Highest 145
commons-logging-1.3.6.jar pkg:maven/commons-logging/commons-logging@1.3.6   0 129
commons-text-1.15.0.jar cpe:2.3:a:apache:commons_text:1.15.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-text@1.15.0   0 Highest 73
dom4j-2.2.0.jar cpe:2.3:a:dom4j_project:dom4j:2.2.0:*:*:*:*:*:*:* pkg:maven/org.dom4j/dom4j@2.2.0   0 Highest 21
doxia-core-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   0 26
doxia-integration-tools-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.1.0   0 28
doxia-module-apt-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   0 28
doxia-module-xdoc-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   0 28
doxia-module-xhtml5-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.1.0   0 28
doxia-sink-api-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   0 28
doxia-site-model-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-model@2.1.0   0 28
doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.min.js   0 0
doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.tiny.min.js   0 0
doxia-site-renderer-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.1.0   0 26
doxia-skin-model-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.1.0   0 26
error_prone_annotations-2.49.0.jar pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0   0 29
failureaccess-1.0.3.jar pkg:maven/com.google.guava/failureaccess@1.0.3   0 32
groovy-5.0.6.jar cpe:2.3:a:apache:groovy:5.0.6:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy@5.0.6   0 Highest 287
groovy-ant-5.0.6.jar cpe:2.3:a:apache:ant:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:groovy:5.0.6:*:*:*:*:*:*:* 		pkg:maven/org.apache.groovy/groovy-ant@5.0.6   0 Highest 284
groovy-json-5.0.6.jar cpe:2.3:a:google:gmail:5.0.6:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy-json@5.0.6   0 Low 289
gson-2.14.0.jar cpe:2.3:a:google:gson:2.14.0:*:*:*:*:*:*:* pkg:maven/com.google.code.gson/gson@2.14.0   0 Highest 31
guava-33.6.0-jre.jar cpe:2.3:a:google:guava:33.6.0:*:*:*:*:*:*:* pkg:maven/com.google.guava/guava@33.6.0-jre   0 Highest 25
guice-5.1.0-classes.jar pkg:maven/com.google.inject/guice@5.1.0   0 32
j2objc-annotations-3.1.jar pkg:maven/com.google.j2objc/j2objc-annotations@3.1   0 33
javaparser-core-3.28.2.jar pkg:maven/com.github.javaparser/javaparser-core@3.28.2   0 31
javax.inject-1.jar pkg:maven/javax.inject/javax.inject@1   0 20
jaxen-2.0.6.jar pkg:maven/jaxen/jaxen@2.0.6   0 29
jcip-annotations-1.0-1.jar pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   0 25
json-simple-3.0.2.jar pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   0 33
jspecify-1.0.0.jar pkg:maven/org.jspecify/jspecify@1.0.0   0 32
jsr305-3.0.2.jar pkg:maven/com.google.code.findbugs/jsr305@3.0.2   0 17
log4j-api-2.26.0.jar cpe:2.3:a:apache:log4j:2.26.0:*:*:*:*:*:*:* pkg:maven/org.apache.logging.log4j/log4j-api@2.26.0   0 Highest 43
lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar   0 7
lombok-1.18.46.jar pkg:maven/org.projectlombok/lombok@1.18.46   0 36
maven-archiver-3.6.2.jar pkg:maven/org.apache.maven/maven-archiver@3.6.2   0 29
maven-artifact-3.9.16.jar pkg:maven/org.apache.maven/maven-artifact@3.9.16   0 26
maven-builder-support-3.9.16.jar pkg:maven/org.apache.maven/maven-builder-support@3.9.16   0 24
maven-core-3.9.16.jar cpe:2.3:a:apache:maven:3.9.16:*:*:*:*:*:*:* pkg:maven/org.apache.maven/maven-core@3.9.16   0 Highest 24
maven-model-3.9.16.jar pkg:maven/org.apache.maven/maven-model@3.9.16   0 26
maven-model-builder-3.9.16.jar pkg:maven/org.apache.maven/maven-model-builder@3.9.16   0 32
maven-plugin-annotations-3.15.2.jar pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2   0 26
maven-plugin-api-3.9.16.jar pkg:maven/org.apache.maven/maven-plugin-api@3.9.16   0 26
maven-reporting-api-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   0 29
maven-reporting-impl-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   0 29
maven-repository-metadata-3.9.16.jar pkg:maven/org.apache.maven/maven-repository-metadata@3.9.16   0 26
maven-resolver-api-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   0 34
maven-resolver-impl-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.27   0 32
maven-resolver-named-locks-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.27   0 33
maven-resolver-provider-3.9.16.jar pkg:maven/org.apache.maven/maven-resolver-provider@3.9.16   0 26
maven-resolver-spi-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.27   0 32
maven-resolver-util-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.27   0 36
maven-settings-3.9.16.jar pkg:maven/org.apache.maven/maven-settings@3.9.16   0 26
maven-settings-builder-3.9.16.jar pkg:maven/org.apache.maven/maven-settings-builder@3.9.16   0 26
maven-shared-utils-3.4.2.jar cpe:2.3:a:apache:maven_shared_utils:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:3.4.2:*:*:*:*:*:*:* 		pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2   0 Highest 29
modernizer-maven-annotations-3.4.0.jar pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0   0 19
org.eclipse.sisu.inject-1.0.0.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.0.0   0 37
org.eclipse.sisu.plexus-1.0.0.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0   0 32
plexus-archiver-4.9.2.jar cpe:2.3:a:codehaus-plexus:plexus-archiver:4.9.2:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2   0 Highest 29
plexus-cipher-2.0.jar pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   0 20
plexus-classworlds-2.11.0.jar pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0   0 37
plexus-component-annotations-2.2.0.jar pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   0 23
plexus-i18n-1.1.0.jar pkg:maven/org.codehaus.plexus/plexus-i18n@1.1.0   0 27
plexus-interpolation-1.29.jar pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29   0 34
plexus-io-3.4.2.jar pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   0 24
plexus-resources-1.3.1.jar pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1   0 27
plexus-sec-dispatcher-2.0.jar cpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0   0 Highest 20
plexus-utils-4.0.3.jar cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:4.0.3:*:*:*:*:*:*:* 		pkg:maven/org.codehaus.plexus/plexus-utils@4.0.3   0 Highest 35
plexus-velocity-2.3.0.jar pkg:maven/org.codehaus.plexus/plexus-velocity@2.3.0   0 29
plexus-xml-3.0.2.jar pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2   0 29
qdox-2.2.0.jar pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   0 47
slf4j-api-2.0.18.jar pkg:maven/org.slf4j/slf4j-api@2.0.18   0 29
slf4j-simple-2.0.18.jar pkg:maven/org.slf4j/slf4j-simple@2.0.18   0 37
snappy-0.4.jar cpe:2.3:a:dain:snappy:0.4:*:*:*:*:*:*:* pkg:maven/org.iq80.snappy/snappy@0.4 MEDIUM 1 Highest 32
spotbugs-4.10.2.jar pkg:maven/com.github.spotbugs/spotbugs@4.10.2   0 48
spotbugs-annotations-4.10.2.jar pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.2   0 53
velocity-engine-core-2.4.1.jar cpe:2.3:a:apache:velocity_engine:2.4.1:*:*:*:*:*:*:* pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1   0 Highest 31
velocity-tools-generic-3.1.jar cpe:2.3:a:apache:velocity_tools:3.1:*:*:*:*:*:*:* pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1   0 Highest 28
xmlresolver-5.3.3-data.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 12
xmlresolver-5.3.3.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 26
xz-1.9.jar pkg:maven/org.tukaani/xz@1.9   0 33
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar pkg:maven/com.github.luben/zstd-jni@1.5.5-11   0 43

Dependencies (vulnerable)

Saxon-HE-12.9.jar

Description:

The XSLT and XQuery Processor

License:

Mozilla Public License Version 2.0: http://www.mozilla.org/MPL/2.0/
File Path: C:\Users\Jeremy\.m2\repository\net\sf\saxon\Saxon-HE\12.9\Saxon-HE-12.9.jar
MD5: 0da2a0f62cf07d1ae5f76d65569cd3f2
SHA1: 1397a02bd22c63db3e902b28b23c59009fa3b5c4
SHA256:8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
Saxon-HE-12.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/net.sf.saxon/Saxon-HE@12.9   (Confidence:High)

ant-1.10.17.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\ant\ant\1.10.17\ant-1.10.17.jar
MD5: 7deb57aad47476c63e707ea57533e43b
SHA1: fa8a13422ac460563171d10a37c3f28340a953f6
SHA256:8be692e02837f41a47a3d21cde6655792142fdf42fe23bcb16d7129cad9b2284
Referenced In Project/Scope: spotbugs-maven-plugin:compile
ant-1.10.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.groovy/groovy-ant@5.0.6

Identifiers

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: spotbugs-maven-plugin:provided
aopalliance-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/aopalliance/aopalliance@1.0   (Confidence:High)

asm-9.10.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar
MD5: 9cb72080438acf27f2607002e1444a7b
SHA1: ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236
SHA256:ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-9.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.10.1   (Confidence:High)

asm-analysis-9.10.1.jar

Description:

Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-analysis\9.10.1\asm-analysis-9.10.1.jar
MD5: 6dd9011ec87f65e4b2e14e938c4118e4
SHA1: 8d49f14d51f632cb1d87c88d1ceaf50db0d8af1b
SHA256:dede75a21306b65974ecd8f87114ff6970f09fb794157a4ca09ab25c888c2bfc
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-analysis-9.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.ow2.asm/asm-analysis@9.10.1   (Confidence:High)

asm-commons-9.10.1.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar
MD5: 8eee0b1bdd046baf472eb83dd5e6bb44
SHA1: 4229e4c55fd8e01c23f9fe9884075cc628aacc50
SHA256:6d0abefb7cbf972ea16edb37ec14835372505063a45f976ab7ea889ed9497895
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-commons-9.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.ow2.asm/asm-commons@9.10.1   (Confidence:High)

asm-tree-9.10.1.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-tree\9.10.1\asm-tree-9.10.1.jar
MD5: 62541e1dc62331408ef31317555bf4fa
SHA1: e244332a17564c1d1572449399a842de35881be2
SHA256:3dfb0d5b6a106cd40b5b250e39935fbf2f927f4477546a5369a3ac609cf0506b
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-tree-9.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.ow2.asm/asm-tree@9.10.1   (Confidence:High)

asm-util-9.10.1.jar

Description:

Utilities for ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-util\9.10.1\asm-util-9.10.1.jar
MD5: d0892ecb209867805e7d2418e5dc6c42
SHA1: 7bb9d450e8d4cbf9f9e04096c44bbfe7fba80b15
SHA256:1bb99d091fba2597dc6d51193e9bbcf0d8447e7ed96bd8f0198b18152f09655c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-util-9.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.ow2.asm/asm-util@9.10.1   (Confidence:High)

bcel-6.12.0.jar

Description:

The Commons Byte Code Engineering Library (BCEL) is designed to provide users with a convenient way to analyze, create, and manipulate compiled .class files.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\bcel\bcel\6.12.0\bcel-6.12.0.jar
MD5: f7db448193f858a275e57d050a125937
SHA1: a1dfc639fd6914d187b16a92ee00e84adc22a9a3
SHA256:012639e3d2a3079f4c9c1350f18202cea83a7112ef210e50c93b0b771ad5d3af
Referenced In Project/Scope: spotbugs-maven-plugin:compile
bcel-6.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.apache.bcel/bcel@6.12.0   (Confidence:High)
  • cpe:2.3:a:apache:commons_bcel:6.12.0:*:*:*:*:*:*:*   (Confidence:Low)   

checker-qual-4.1.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: https://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\4.1.0\checker-qual-4.1.0.jar
MD5: 915efc242a44466cf82281e2229aaeb9
SHA1: 127f572d0f7e9dfb205bc4667dc361056e536c88
SHA256:a7e08a5400f6e1d97818ed01a8624473fee90b0ded941a44d190f1210c081790
Referenced In Project/Scope: spotbugs-maven-plugin:compile
checker-qual-4.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@4.1.0   (Confidence:High)

commons-beanutils-1.11.0.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-beanutils\commons-beanutils\1.11.0\commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256:9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-codec-1.22.0.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-codec\commons-codec\1.22.0\commons-codec-1.22.0.jar
MD5: f14b9146cd553f4e8c5c3f5c9e2be611
SHA1: 6b3eb4beb7058c2a638f5f17bcb388649fd339dd
SHA256:d164fe79f262c32d9b18a0b5b2d317d1c27653d5e98fd2b998c24bf901c72ce4
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-codec-1.22.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-codec/commons-codec@1.22.0   (Confidence:High)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-collections\commons-collections\3.2.2\commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-compress-1.26.1.jar

Description:

Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-compress\1.26.1\commons-compress-1.26.1.jar
MD5: 7af7d22a7280508327d809b183114a92
SHA1: 44331c1130c370e726a2e1a3e6fba6d2558ef04a
SHA256:27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-compress-1.26.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-digester3-3.2.jar

Description:

    The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-digester3\3.2\commons-digester3-3.2.jar
MD5: 41d2c62c7aedafa7a3627794abc83f71
SHA1: c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79
SHA256:1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-digester3-3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.commons/commons-digester3@3.2   (Confidence:High)

commons-io-2.22.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.22.0\commons-io-2.22.0.jar
MD5: f91d54bd47c42456b4a5ae62eed85565
SHA1: 5b1e18bc0ad651ed878029d83f88d9c8189fd51e
SHA256:2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-io-2.22.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

commons-lang3-3.20.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.20.0\commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256:69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

commons-logging-1.3.6.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-logging\commons-logging\1.3.6\commons-logging-1.3.6.jar
MD5: fe0ccbe8971fed954a0ad6528fe3ef24
SHA1: 63e78ca6cd446c0ad166d14f03ed99e7efb3896d
SHA256:f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-logging-1.3.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-logging/commons-logging@1.3.6   (Confidence:High)

commons-text-1.15.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-text\1.15.0\commons-text-1.15.0.jar
MD5: 756b7c5438d89a0c311d811c1a06d19a
SHA1: 9899093aa40f0199d6c39b131b8f087cdb37e399
SHA256:58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-text-1.15.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

dom4j-2.2.0.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\dom4j\dom4j\2.2.0\dom4j-2.2.0.jar
MD5: 6e7161d8e8f5fd0055554374f469abd3
SHA1: 52368b1da663abd44a866c4fe4f62c8d8695204a
SHA256:3fae79e081096e1410645eb3557c63b79ca266d510ab479889511109becd1690
Referenced In Project/Scope: spotbugs-maven-plugin:compile
dom4j-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

doxia-core-2.1.0.jar

Description:

Doxia core classes and interfaces.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-core\2.1.0\doxia-core-2.1.0.jar
MD5: 7bfd7d6148dc6bd81fc2f009c786ca47
SHA1: ce027bd5b8610ff383c25e23f4815793f6bca096
SHA256:2a439e0f4672b69ae623ea992149e0da52eb0fa3bebfbdc4c829585d7d3358c7
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-core-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   (Confidence:High)

doxia-integration-tools-2.1.0.jar

Description:

A collection of tools to help the integration of Doxia Sitetools in Maven plugins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-integration-tools\2.1.0\doxia-integration-tools-2.1.0.jar
MD5: 5000e4900f261cacca5eb1bc1886b47b
SHA1: c1fd8a357e0880ef6613927d05c7dc2b1eed3b30
SHA256:05c5d3b498e94a4107f5851c87aebde155e7dea24c1dd4edf983bae3d11727b2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-integration-tools-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.1.0   (Confidence:High)

doxia-module-apt-2.0.0.jar

Description:

A Doxia module for Almost Plain Text source documents.
    APT format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-apt\2.0.0\doxia-module-apt-2.0.0.jar
MD5: f6613830c1f558b909b32d3e3e271911
SHA1: 0505b4e8d57eb3f8c3d66adcca85ce09311742ba
SHA256:f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-apt-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   (Confidence:High)

doxia-module-xdoc-2.0.0.jar

Description:

A Doxia module for Xdoc source documents.
    Xdoc format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xdoc\2.0.0\doxia-module-xdoc-2.0.0.jar
MD5: dd12065dc641017da7006cb39f0490e5
SHA1: fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c
SHA256:7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-xdoc-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   (Confidence:High)

doxia-module-xhtml5-2.1.0.jar

Description:

A Doxia module for Xhtml5 source documents.
    Xhtml5 format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xhtml5\2.1.0\doxia-module-xhtml5-2.1.0.jar
MD5: df787c4128fd9a000556cc63cdc6bf0b
SHA1: c3cf3b3a6781c31f3c2ffac6b12fa364f08543f8
SHA256:7046028cc59f088f61daeea3edc71f198f19ccf937768599f92e5b39da58552c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-module-xhtml5-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.1.0   (Confidence:High)

doxia-sink-api-2.1.0.jar

Description:

Doxia Sink API.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-sink-api\2.1.0\doxia-sink-api-2.1.0.jar
MD5: 87a07d1cbbede4fa5ff79e94a4c77907
SHA1: 079edb7ed839b2dc5c7d4e4fc452e3d24e3dceda
SHA256:b465db838dd482a994d32a088bea4bcbaa62cfb8b2853511a9f8c3e769402c74
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-sink-api-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   (Confidence:High)

doxia-site-model-2.1.0.jar

Description:

The Site Model handles the descriptor for sites, also known as site.xml.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-model\2.1.0\doxia-site-model-2.1.0.jar
MD5: 0fdb03070b40bb548e1eacd940101580
SHA1: 00afb3d6ae1d8a9e07fdaa17f50d9c7036c6937c
SHA256:11eeeb79433fec1a36f5ad33305b010f4b0933afb70ba6f1285dbfecedb90d89
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-model-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-model@2.1.0   (Confidence:High)

doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.min.js

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar\js\mermaid-11.13.0.min.js
MD5: dea6a27074615535e25724f772acd9b1
SHA1: c63f3e1eb4941fc68c8b2b7893a86123b2cc6509
SHA256:07056f2ec1fe7f7da4531755726ae93f13cc260a543c8d706c0b29e8999f05bb
Referenced In Project/Scope: spotbugs-maven-plugin:compile

Identifiers

  • None

doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.tiny.min.js

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar\js\mermaid-11.13.0.tiny.min.js
MD5: 6a553790010de730d0de646e8f9a74a8
SHA1: 555e6e99f3f3ebf2ddf525c47bf6c6d4cea48a78
SHA256:b08451436a5517d5056e682d4d1bde96672eefad2b6f8a1b02169be56f1265fd
Referenced In Project/Scope: spotbugs-maven-plugin:compile

Identifiers

  • None

doxia-site-renderer-2.1.0.jar

Description:

The Site Renderer handles the rendering of sites, merging site model with document content.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar
MD5: 9eff1a7d5481d132fe8666795c01ebbf
SHA1: 4ec5d426db6f9acec40e8dca17243a7a4a44d45f
SHA256:dcff71b635559695643d8a7ecec3c22d8437ab5a46db54dbcd28b9585b8668b0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-renderer-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.1.0   (Confidence:High)

doxia-skin-model-2.1.0.jar

Description:

The Skin Model defines metadata for Doxia Sitetools skins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-skin-model\2.1.0\doxia-skin-model-2.1.0.jar
MD5: e3c8d59206e1fc837827d59c0b57cb2b
SHA1: c20661035bdd2c63515cc9ad99d47e3ab62c5207
SHA256:6ec34a33e393592f6d22cc39b7eab38fac4b5d8941c60187a299696a5b7c8e00
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-skin-model-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.1.0   (Confidence:High)

error_prone_annotations-2.49.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.49.0\error_prone_annotations-2.49.0.jar
MD5: f15f20dc5df752e2c0f8e37f7cdd9b1d
SHA1: 8b42a2e3865f6e0576da3fad51dbb96732ff0f14
SHA256:3b1003e51b8ae56fdbd7c71073e81d1683b97e6c4dff5a9151164d59b769d13c
Referenced In Project/Scope: spotbugs-maven-plugin:provided
error_prone_annotations-2.49.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0   (Confidence:High)

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\failureaccess\1.0.3\failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
failureaccess-1.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/com.google.guava/failureaccess@1.0.3   (Confidence:High)

groovy-5.0.6.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy\5.0.6\groovy-5.0.6.jar
MD5: d88bbd13a5565684436df3e4d73adaa9
SHA1: 61f54ac4cac5d7099798578a32344f78111b932c
SHA256:32338cdd9f6d842a534ea086242bf874385ee5be6973dc3de72f7605bf600394
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-5.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

groovy-ant-5.0.6.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-ant\5.0.6\groovy-ant-5.0.6.jar
MD5: 87544c0efd112e83bff45c375cbcc94d
SHA1: efba602b5eb5920b1eced6e6cfa0773147d90c7a
SHA256:327ca3dd81e729742752b497528eb09aa040339be9b194ac569600cd60d07510
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-ant-5.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

groovy-json-5.0.6.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-json\5.0.6\groovy-json-5.0.6.jar
MD5: 58d857b0b1015f44d1b15d90ab02f68f
SHA1: 12cb65e5fb22294e02ca0817003f386288987424
SHA256:537027dfe64b2439ccf85ab37d01d47fa1a73d6efe30eb1ad680914a9e2a95da
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-json-5.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.groovy/groovy-json@5.0.6   (Confidence:High)
  • cpe:2.3:a:google:gmail:5.0.6:*:*:*:*:*:*:*   (Confidence:Low)   

gson-2.14.0.jar

Description:

Gson JSON library

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\gson\gson\2.14.0\gson-2.14.0.jar
MD5: 43b20830936ec97d8df6b174e3509d9e
SHA1: efc0e34ede4e3204eaefb84a00e55e8c86634382
SHA256:2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f
Referenced In Project/Scope: spotbugs-maven-plugin:compile
gson-2.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

guava-33.6.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\33.6.0-jre\guava-33.6.0-jre.jar
MD5: 34a4f258ed23d2e876a6e4666bb3b1c5
SHA1: c376b13067cc99a5774403530953f7b05a91e218
SHA256:dc573e1fca4fd5454f4a5fd3d7da2df03002876a4175bafc14a95980dd7713b3
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guava-33.6.0-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

guice-5.1.0-classes.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\inject\guice\5.1.0\guice-5.1.0-classes.jar
MD5: d4d4d9bf878b98862116e8ccc0a5c34e
SHA1: e7ba4c25bec3761840f67c73f166c0d509d01d1d
SHA256:142ad4475e19524d2fe3ac995b3f7cbc962fc726f2edb9dbdccc61feab9b2bf9
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guice-5.1.0-classes.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/com.google.inject/guice@5.1.0   (Confidence:Highest)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1   (Confidence:High)

javaparser-core-3.28.2.jar

Description:

The core parser functionality. This may be all you need.

License:

GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\javaparser\javaparser-core\3.28.2\javaparser-core-3.28.2.jar
MD5: ed0802294dbb571f2193546258040190
SHA1: 0f585a590072b20c6b4be3c35291b6e66a88b995
SHA256:b5499a3b1c40b16c0671fabe478c9aafeab38160c6fde74a6c13f42d86716ecd
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javaparser-core-3.28.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/com.github.javaparser/javaparser-core@3.28.2   (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\javax\inject\javax.inject\1\javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/javax.inject/javax.inject@1   (Confidence:High)

jaxen-2.0.6.jar

Description:

Jaxen is a universal XPath engine for Java.

License:

https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt
File Path: C:\Users\Jeremy\.m2\repository\jaxen\jaxen\2.0.6\jaxen-2.0.6.jar
MD5: ad503c85bc791f01d5b8f2f6d9a63bbd
SHA1: 64a435da64c31e6e38cdcb38c3ee14b61c156729
SHA256:3e2a755b283fd492fa4be204294c7abb7cd63ac94fb366baab9c7bb9afb00b6d
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
jaxen-2.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/jaxen/jaxen@2.0.6   (Confidence:High)

jcip-annotations-1.0-1.jar

Description:

    A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\stephenc\jcip\jcip-annotations\1.0-1\jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: spotbugs-maven-plugin:compile
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   (Confidence:High)

json-simple-3.0.2.jar

Description:

Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\cliftonlabs\json-simple\3.0.2\json-simple-3.0.2.jar
MD5: 148c0d1bdc1bcb24394627d6930ee9ad
SHA1: 2337afdb06134a12fc0239299c3ceb2e9c209516
SHA256:fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295
Referenced In Project/Scope: spotbugs-maven-plugin:compile
json-simple-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: spotbugs-maven-plugin:provided
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0   (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.2

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2   (Confidence:High)

log4j-api-2.26.0.jar

Description:

The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-api\2.26.0\log4j-api-2.26.0.jar
MD5: 564bc06e0f03e37193227b698acaa257
SHA1: ad52af0ecf054a7e3f275a2e180ee06d9c490951
SHA256:820de7bbaf430eaf2e3e5ccb92f23e2085797c5ac4d4f7fc6c8b660fbefa1dbc
Referenced In Project/Scope: spotbugs-maven-plugin:compile
log4j-api-2.26.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.26.0

Identifiers

lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 8b80305e4846088e139701372844e637
SHA1: 4b03ce7b33d535b42e4a84e106c3647760eb8769
SHA256:639da94437813649eac5af6d8154d736355f27199fc8aaeda85904fce947ee4f
Referenced In Project/Scope: spotbugs-maven-plugin:provided

Identifiers

  • None

lombok-1.18.46.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar
MD5: e02f419a66b86c594ffcafc862778723
SHA1: a5cfe99fdf320e84955ef653f2ce1bf789d11385
SHA256:01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126
Referenced In Project/Scope: spotbugs-maven-plugin:provided
lombok-1.18.46.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.46   (Confidence:High)

maven-archiver-3.6.2.jar

Description:

Provides utility methods for creating JARs and other archive files from a Maven project.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-archiver\3.6.2\maven-archiver-3.6.2.jar
MD5: 742b3136d8ff1fcb66f5fd7f3c267c8d
SHA1: a2d949d87fed6db197cc3cceec93012dd2317ca0
SHA256:1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-archiver-3.6.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven/maven-archiver@3.6.2   (Confidence:High)

maven-artifact-3.9.16.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.9.16\maven-artifact-3.9.16.jar
MD5: 6005ab2198a19a41cd3cf59618f9abc1
SHA1: 1176c6579a8a68508c3479ef72d514e71c98ddca
SHA256:54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-artifact-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven/maven-artifact@3.9.16   (Confidence:High)

maven-builder-support-3.9.16.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-builder-support\3.9.16\maven-builder-support-3.9.16.jar
MD5: 63d5dfe8e9a09ac68ad382ee8af116ab
SHA1: d23ad247143e3b0fb6de5b61c56d46bba6513f9b
SHA256:02972384eae3495801565fd27abb84cfd75a8e6d2cbb1ae0c556752ebc2b1cde
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-builder-support-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-builder-support@3.9.16   (Confidence:High)

maven-core-3.9.16.jar

Description:

Maven Core classes.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-core\3.9.16\maven-core-3.9.16.jar
MD5: 045855e32be6ef1727118a7dcb9af9fe
SHA1: 1f2b4176f1395310a9bce323919189cec51f7115
SHA256:5d45c72e3dbfab8b68d15ad4f12777b7d9b5fe4d4adc99c3bd51fb9641fab009
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-core-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

maven-model-3.9.16.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.9.16\maven-model-3.9.16.jar
MD5: 15ea34610d5c8d1944fc4ba317c6b4cd
SHA1: 6f93dbc874ef321b0c3734dee41a6d17e18ceebd
SHA256:f59d86a507c241bf17bbf050050d1b8b9c0d34d5010a7e2386c3cab7c83b93de
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven/maven-model@3.9.16   (Confidence:High)

maven-model-builder-3.9.16.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model-builder\3.9.16\maven-model-builder-3.9.16.jar
MD5: 114db488c69246d1b371b4c203801b3a
SHA1: eb7a9ca8cc2d61d7c6430dd2ee16f71628b2046d
SHA256:002be86d1f53b36f559a0786034a17598d71087f1935f205a1f9e51d4dd124b3
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-builder-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-model-builder@3.9.16   (Confidence:High)

maven-plugin-annotations-3.15.2.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.15.2\maven-plugin-annotations-3.15.2.jar
MD5: 6b86f30960ce2f9eac20c6657db588a2
SHA1: dfc79f3b5b0c3afd01f55b8b01310f457568d2a4
SHA256:979d3cf8f4ac804cc27d2f8a6db07f2149d58ccd59bb3d589cc46bb9a44c0b4b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-annotations-3.15.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2   (Confidence:High)

maven-plugin-api-3.9.16.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.9.16\maven-plugin-api-3.9.16.jar
MD5: bcb853f9daa463ff30dcf96d96bcbb06
SHA1: 4509ebc6c30856368a5786859342eef9b43ab27a
SHA256:37cb5e483e23327cf4ba18f920b45e000d20eec0428a086a5c1bd6bbdecf088c
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-api-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven/maven-plugin-api@3.9.16   (Confidence:High)

maven-reporting-api-4.0.0.jar

Description:

API to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-api\4.0.0\maven-reporting-api-4.0.0.jar
MD5: 9c49fcb81d69bb5ec513d624c181fc05
SHA1: d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb
SHA256:cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   (Confidence:High)

maven-reporting-impl-4.0.0.jar

Description:

Abstract classes to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-impl\4.0.0\maven-reporting-impl-4.0.0.jar
MD5: 302ed7d914dc813380d361d1acb83c2f
SHA1: d3753b5c13a873a5ddb71f404c6fe1179a4688c2
SHA256:e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-impl-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   (Confidence:High)

maven-repository-metadata-3.9.16.jar

Description:

Per-directory local and remote repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-repository-metadata\3.9.16\maven-repository-metadata-3.9.16.jar
MD5: df9e6c18b95541ac7585f7d213d459af
SHA1: d2013b76825de9d844d5894e17fb4a894e8e8ae1
SHA256:bc3dd413b89a16b695f35a5d0496b58ea2787c30b7b6062c130d24d6d764720f
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-repository-metadata-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-repository-metadata@3.9.16   (Confidence:High)

maven-resolver-api-1.9.27.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-api\1.9.27\maven-resolver-api-1.9.27.jar
MD5: c7bd6f04c52f098ba934742bb204cb5e
SHA1: 2fe7e86e3c193121789470507cf4fadd5bd7ad59
SHA256:a895d222283666a7320ddc76615e2e93a41fabd93ce9a6bf9ddee39272bb87b4
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-api-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   (Confidence:High)

maven-resolver-impl-1.9.27.jar

Description:

An implementation of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-impl\1.9.27\maven-resolver-impl-1.9.27.jar
MD5: 37de3b6f62504d03fb281c533de98d4a
SHA1: 876fc89223d9572cade60a1b8158846724548d07
SHA256:295d48ea2a8bb3aef51888967f105fb6251997d111f13c32d28919fd9b1c951e
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-impl-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.27   (Confidence:High)

maven-resolver-named-locks-1.9.27.jar

Description:

A synchronization utility implementation using Named locks.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-named-locks\1.9.27\maven-resolver-named-locks-1.9.27.jar
MD5: 7bbb9ba859aa1ac04280422f0520b9eb
SHA1: 72c89ad87be374309a7308ee144949360ed482e8
SHA256:b39ecd4da98fdac5068e6f5d16910a71f4e4d48e95e17d107f6603e18f2b3fdf
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-named-locks-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.27   (Confidence:High)

maven-resolver-provider-3.9.16.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-resolver-provider\3.9.16\maven-resolver-provider-3.9.16.jar
MD5: 476c028745a99d6492386f7e6d7d4471
SHA1: 92faacf3d46fe4b971689b4839b0d9aaf438ce48
SHA256:72a2d6aad3708e2c708b659b292ae9587a4d170ec88f48466290318730221118
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-provider-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-resolver-provider@3.9.16   (Confidence:High)

maven-resolver-spi-1.9.27.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-spi\1.9.27\maven-resolver-spi-1.9.27.jar
MD5: ef88eaf44762342c8322924955e3c333
SHA1: fb64e47acdc73f938b4d5b6464ef7a6351f983d5
SHA256:1cab02f45bc58d5f4d8e084eaf032f13ea1a5fc9021d8bd74f8360ebb6593e5a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-spi-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.27   (Confidence:High)

maven-resolver-util-1.9.27.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-util\1.9.27\maven-resolver-util-1.9.27.jar
MD5: 0d792ab540b382fc240c3529d5b6e88e
SHA1: 7ee4446af6aab27475765ec9c9dc1fb2b082af2b
SHA256:74a12548f0d6aad13c728666288c1e81201c24bd05bb4e4ec8c1558517b379a7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-util-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.27   (Confidence:High)

maven-settings-3.9.16.jar

Description:

Maven Settings model.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings\3.9.16\maven-settings-3.9.16.jar
MD5: 46ffb3627f87c3b798829a41960f9fe9
SHA1: ab466fe1cb5b80d1b5e6f6b5ba3f87dfc56f75b6
SHA256:322ae5b23f4b7b6ce7896bd33a793143dbbbbcc16c4475e2d7eebbd8f755da92
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-settings@3.9.16   (Confidence:High)

maven-settings-builder-3.9.16.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings-builder\3.9.16\maven-settings-builder-3.9.16.jar
MD5: bd711f14681dc719b1ca8c883912014b
SHA1: 31321459aee3dd0a12d72a9fb71bfac31b0fb529
SHA256:226f1cbb0b4d414eff773fb151a8977837c98073e14d5963794e6cf464e6adbb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-builder-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.apache.maven/maven-settings-builder@3.9.16   (Confidence:High)

maven-shared-utils-3.4.2.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-shared-utils\3.4.2\maven-shared-utils-3.4.2.jar
MD5: 53a038f77a81cb5816ad2b1c7daa8711
SHA1: bfa28296272a5915b08de9f11f34a94b0a818fd0
SHA256:b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-shared-utils-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

modernizer-maven-annotations-3.4.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.4.0\modernizer-maven-annotations-3.4.0.jar
MD5: f46f4c747b5ab932252fea7d0733cc04
SHA1: 9deb15aa2a3a725be971c8bbb4b560d0d096fca9
SHA256:c3ca20a7ccb295f528642532fc7644b4e822a45746fe8bf1683227ca1d0ddfa9
Referenced In Project/Scope: spotbugs-maven-plugin:provided
modernizer-maven-annotations-3.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0   (Confidence:High)

org.eclipse.sisu.inject-1.0.0.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.inject\1.0.0\org.eclipse.sisu.inject-1.0.0.jar
MD5: 9d66e7450d82f2070a1422de1ebd4c81
SHA1: d9c2d6ff4b461ab9492edb1cd9d8239cfb41f4ca
SHA256:3ab8d7bfe68f3b6ec95c1a0a47e628edbc9d76e90634cb0a0ba121fbb11b8e42
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.inject-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.0.0   (Confidence:High)

org.eclipse.sisu.plexus-1.0.0.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\1.0.0\org.eclipse.sisu.plexus-1.0.0.jar
MD5: fb07aece41f034fea46b022e2756cd7c
SHA1: 873767e95597c9e31749123a408bd4949c29a46c
SHA256:865b5300034fc08c790215d7d97f141914c932191bef9338a7dcef589f7536e9
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.plexus-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0   (Confidence:High)

plexus-archiver-4.9.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-archiver\4.9.2\plexus-archiver-4.9.2.jar
MD5: 408c466d4a20a02f4a2428a4f003ca13
SHA1: a03ed402ef8468c1d1bda368d7213cad67f16a71
SHA256:a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-archiver-4.9.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-cipher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-cipher\2.0\plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   (Confidence:High)

plexus-classworlds-2.11.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.11.0\plexus-classworlds-2.11.0.jar
MD5: 54d5f4e0835c5e53f08a494f08d2a75d
SHA1: 6586ba9f3137d7ac7b9789f1fcf7c4e192482905
SHA256:8971f135490070bc5fde7413fcc8db7c997fda4bebfb5c31185900d66edcbbb2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-classworlds-2.11.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.16

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0   (Confidence:High)

plexus-component-annotations-2.2.0.jar

Description:

Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.2.0\plexus-component-annotations-2.2.0.jar
MD5: a2397189a5ce25e7d2d44effa9f5176c
SHA1: a506f84636ea7ae370d04167dd155c103e616f68
SHA256:50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-component-annotations-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   (Confidence:High)

plexus-i18n-1.1.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-i18n\1.1.0\plexus-i18n-1.1.0.jar
MD5: 2d36d7df65cddbbea3997ddf1afb310a
SHA1: 93f0046c9625734fb4e796afba1af6f54ef6c307
SHA256:995c0792669a031c94d91960a5beb60e1516abcec17a104f9f47470b36e56e27
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-i18n-1.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-i18n@1.1.0   (Confidence:High)

plexus-interpolation-1.29.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-interpolation\1.29\plexus-interpolation-1.29.jar
MD5: b1489e6968b874cecfe24cadb62b77db
SHA1: 5dd1b1fbaca263ad5baa169fbd8e804c789c9db5
SHA256:088d444dbcedfb384630d8686697ece3c401d6f33c8f8b3aa7259ea1c6996878
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-interpolation-1.29.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29   (Confidence:High)

plexus-io-3.4.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-io\3.4.2\plexus-io-3.4.2.jar
MD5: 77515ce571e8169c13220c506ad177a4
SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942d
SHA256:6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   (Confidence:High)

plexus-resources-1.3.1.jar

Description:

A component to transparently retrieve resources from the filesystem, classpath or internet.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-resources\1.3.1\plexus-resources-1.3.1.jar
MD5: 077efa77691dac1edc837447989ec6e7
SHA1: 0eedcf8d17e63b0acefe17c1a742c9d1fe70a3d8
SHA256:41deb2adc7b19ff4bfd7db30347223718229ce0ae196862acdfb90bf1afc6ccb
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-resources-1.3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1   (Confidence:High)

plexus-sec-dispatcher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-sec-dispatcher\2.0\plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Identifiers

plexus-utils-4.0.3.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\4.0.3\plexus-utils-4.0.3.jar
MD5: a8848eea66d01d0279b26871dbc2cf1b
SHA1: c097bf60a8a7aaf37dfb8f2c933a21e784035976
SHA256:421ff6ed146c53a9d4eaade8f629b52b12af7187101f1bd06c2c64e904019f3c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-utils-4.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-velocity-2.3.0.jar

Description:

A component which provides Apache Velocity templating engine integration

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-velocity\2.3.0\plexus-velocity-2.3.0.jar
MD5: bc626afb8d6a74fc481642f1ab40367f
SHA1: f820d406b683c92ad05589b80b43974dbf6051fd
SHA256:6c9078006d851125b487d31cc3d81ec9e3208b43a9c7a7e2cae5e713ddc654f4
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-velocity-2.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-velocity@2.3.0   (Confidence:High)

plexus-xml-3.0.2.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-xml\3.0.2\plexus-xml-3.0.2.jar
MD5: e2feab7a114ac4a144632670734db7e4
SHA1: 70c207ae478a5011a14dcefe56f4bbda16e3bc87
SHA256:6a49fe0c49a06b5bcd6073ff16580fcb0dd87c50295e97a9fa9f95619b69921c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-xml-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2   (Confidence:High)

qdox-2.2.0.jar

Description:

    QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\thoughtworks\qdox\qdox\2.2.0\qdox-2.2.0.jar
MD5: 1585e7fc441f9d256cdd965718836152
SHA1: 39651eb3ce73d6e506490ea352e1e13eab6b55e8
SHA256:c260c3230b2340af97d54bf01f7f67ebc57c901922736c881bb11cb981302be2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
qdox-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.groovy/groovy-docgenerator@5.0.6

Identifiers

  • pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   (Confidence:High)

slf4j-api-2.0.18.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.18\slf4j-api-2.0.18.jar
MD5: fe2837bd49bfb76657419002fed20ca9
SHA1: 78a9e7a37cd6360e0b818e86341b24123d28d4df
SHA256:44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-api-2.0.18.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.18   (Confidence:High)

slf4j-simple-2.0.18.jar

Description:

SLF4J Simple Provider

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-simple\2.0.18\slf4j-simple-2.0.18.jar
MD5: a1d9f79c740050ad4597e456b2088775
SHA1: 503354e24cb3a2c61f808a83934b76c2dc4ec4d8
SHA256:8268bd018a5709b07209e0d8ca6221a37584ba1bc12ba985b8335a82c648bdd0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-simple-2.0.18.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/org.slf4j/slf4j-simple@2.0.18   (Confidence:High)

snappy-0.4.jar

Description:

Port of Snappy to Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: C:\Users\Jeremy\.m2\repository\org\iq80\snappy\snappy\0.4\snappy-0.4.jar
MD5: f0792d1dbe7f90d8b34c7c19961e0073
SHA1: a42b2d92a89efd35bb14738000dabcac6bd07a8d
SHA256:46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9
Referenced In Project/Scope: spotbugs-maven-plugin:compile
snappy-0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

CVE-2024-36124  

iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. iq80 Snappy is not actively maintained anymore. As quick fix users can upgrade to version 0.5.
CWE-125 Out-of-bounds Read

CVSSv3:
  • Base Score: MEDIUM (5.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RC:R/MAV:A

References:

Vulnerable Software & Versions:

spotbugs-4.10.2.jar

Description:

SpotBugs: Because it is easy!

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs\4.10.2\spotbugs-4.10.2.jar
MD5: 6605058bb309b22d32da2492873eae19
SHA1: 58f176483ca305ecb02bbdf748f7a10ce75520bc
SHA256:46f5c9524c08d027cf96cda2704e5d8ded633626b94a19dc9ced3ae67595d80b
Referenced In Project/Scope: spotbugs-maven-plugin:compile
spotbugs-4.10.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs@4.10.2   (Confidence:High)

spotbugs-annotations-4.10.2.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.10.2\spotbugs-annotations-4.10.2.jar
MD5: a6d1c0f0ee39dcba6841ba2c8059f213
SHA1: 13f9ddf33804e6f69e7aa37b0bfd071b1bf397da
SHA256:5335e5107c74cdd62ef96a7908066c51abb3de63b1ebf99dc953c2c7d0747678
Referenced In Project/Scope: spotbugs-maven-plugin:provided
spotbugs-annotations-4.10.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.2.0

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.2   (Confidence:High)

velocity-engine-core-2.4.1.jar

Description:

Apache Velocity is a general purpose template engine.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\velocity-engine-core\2.4.1\velocity-engine-core-2.4.1.jar
MD5: 41a3757dc9d701590be703d1f2bd2462
SHA1: 0b662837e8006d5c383bd128503ea86ef5b4d361
SHA256:1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-engine-core-2.4.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

velocity-tools-generic-3.1.jar

Description:

Generic tools that can be used in any context.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\tools\velocity-tools-generic\3.1\velocity-tools-generic-3.1.jar
MD5: 76f13879ead8693fd4d5751a8a236089
SHA1: 07aaa49086a64cd9dab967a8437cc03abbfad655
SHA256:8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-tools-generic-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

xmlresolver-5.3.3-data.jar

File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3-data.jar
MD5: 59c51b08ba448bc9473d92e68bf84873
SHA1: e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3
SHA256:b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3-data.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:Highest)

xmlresolver-5.3.3.jar

Description:

An XML entity/uri resolver

License:

Apache License version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3.jar
MD5: e883f28e14ce902f66941bd8bc25233a
SHA1: 1b838b0d69eef8d46c813d88a604e3cb4c6035fe
SHA256:1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.2

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:High)

xz-1.9.jar

Description:

XZ data compression

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\org\tukaani\xz\1.9\xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xz-1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.tukaani/xz@1.9   (Confidence:High)

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\aarch64\libzstd-jni-1.5.5-11.dll
MD5: 3c42e914725869f2ad90eb3ddb418524
SHA1: fdd7d968eb3a348f6bf562b298b3a165e0e73e4e
SHA256:c368030edfc9f9caf92b89b832e65c84d29757a35df4641decd907e4f0229a59
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\amd64\libzstd-jni-1.5.5-11.dll
MD5: 1521a503cd2ed6d7547e6c7e6abb229c
SHA1: 9330785beba7881cc72c7f68cc87537a9a11cfc9
SHA256:8f753fa694b1c60651e79cedd916268e6c4034e921a61633a8f2ad934817edd2
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\x86\libzstd-jni-1.5.5-11.dll
MD5: f73208a58a031c84e5dee99a15f865ff
SHA1: 8e91341f71ee4a73e1c94b80ae1c846a663e0d61
SHA256:8173736b15a732f2be19137fe0ff2336d416c8c60b914e9600f3a5012584f9d1
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar
MD5: 00977099d76d2c01a7b19263375ee42e
SHA1: ca6ab366315e179dd80645aad4a60bab959c6523
SHA256:d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
zstd-jni-1.5.5-11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.luben/zstd-jni@1.5.5-11   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype Guide OSS Index API.