Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: spotbugs-maven-plugin

com.github.spotbugs:spotbugs-maven-plugin:4.9.8.3

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
Saxon-HE-12.9.jar cpe:2.3:a:kay_framework_project:kay_framework:12.9:*:*:*:*:*:*:* pkg:maven/net.sf.saxon/Saxon-HE@12.9   0 Low 58
ant-1.10.15.jar cpe:2.3:a:apache:ant:1.10.15:*:*:*:*:*:*:* pkg:maven/org.apache.ant/ant@1.10.15   0 Highest 24
aopalliance-1.0.jar pkg:maven/aopalliance/aopalliance@1.0   0 20
asm-9.9.1.jar pkg:maven/org.ow2.asm/asm@9.9.1   0 54
asm-analysis-9.9.1.jar pkg:maven/org.ow2.asm/asm-analysis@9.9.1   0 60
asm-commons-9.9.1.jar pkg:maven/org.ow2.asm/asm-commons@9.9.1   0 58
asm-tree-9.9.1.jar pkg:maven/org.ow2.asm/asm-tree@9.9.1   0 58
asm-util-9.9.1.jar pkg:maven/org.ow2.asm/asm-util@9.9.1   0 58
bcel-6.12.0.jar cpe:2.3:a:apache:commons_bcel:6.12.0:*:*:*:*:*:*:* pkg:maven/org.apache.bcel/bcel@6.12.0   0 Low 77
checker-qual-3.53.0.jar pkg:maven/org.checkerframework/checker-qual@3.53.0   0 44
commons-beanutils-1.11.0.jar cpe:2.3:a:apache:commons_beanutils:1.11.0:*:*:*:*:*:*:* pkg:maven/commons-beanutils/commons-beanutils@1.11.0   0 Highest 170
commons-codec-1.21.0.jar pkg:maven/commons-codec/commons-codec@1.21.0   0 121
commons-collections-3.2.2.jar cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* pkg:maven/commons-collections/commons-collections@3.2.2   0 Highest 84
commons-compress-1.26.1.jar cpe:2.3:a:apache:commons_compress:1.26.1:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-compress@1.26.1   0 Highest 109
commons-digester3-3.2.jar pkg:maven/org.apache.commons/commons-digester3@3.2   0 105
commons-io-2.21.0.jar cpe:2.3:a:apache:commons_io:2.21.0:*:*:*:*:*:*:* pkg:maven/commons-io/commons-io@2.21.0   0 Highest 127
commons-lang3-3.20.0.jar cpe:2.3:a:apache:commons_lang:3.20.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-lang3@3.20.0   0 Highest 145
commons-logging-1.3.6.jar pkg:maven/commons-logging/commons-logging@1.3.6   0 129
commons-text-1.14.0.jar cpe:2.3:a:apache:commons_text:1.14.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-text@1.14.0   0 Highest 73
dom4j-2.2.0.jar cpe:2.3:a:dom4j_project:dom4j:2.2.0:*:*:*:*:*:*:* pkg:maven/org.dom4j/dom4j@2.2.0   0 Highest 21
doxia-core-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   0 26
doxia-integration-tools-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0   0 28
doxia-module-apt-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   0 28
doxia-module-xdoc-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   0 28
doxia-module-xhtml5-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0   0 28
doxia-sink-api-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   0 28
doxia-site-model-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0   0 28
doxia-site-renderer-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0   0 26
doxia-skin-model-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0   0 26
error_prone_annotations-2.46.0.jar pkg:maven/com.google.errorprone/error_prone_annotations@2.46.0   0 29
failureaccess-1.0.3.jar pkg:maven/com.google.guava/failureaccess@1.0.3   0 32
groovy-5.0.4.jar cpe:2.3:a:apache:groovy:5.0.4:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy@5.0.4   0 Highest 287
groovy-ant-5.0.4.jar cpe:2.3:a:apache:ant:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:groovy:5.0.4:*:*:*:*:*:*:* 		pkg:maven/org.apache.groovy/groovy-ant@5.0.4   0 Highest 284
groovy-json-5.0.4.jar cpe:2.3:a:google:gmail:5.0.4:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy-json@5.0.4   0 Low 289
gson-2.13.2.jar cpe:2.3:a:google:gson:2.13.2:*:*:*:*:*:*:* pkg:maven/com.google.code.gson/gson@2.13.2   0 Highest 31
guava-33.5.0-jre.jar cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* pkg:maven/com.google.guava/guava@33.5.0-jre   0 Highest 25
guice-5.1.0-classes.jar pkg:maven/com.google.inject/guice@5.1.0   0 32
j2objc-annotations-3.1.jar pkg:maven/com.google.j2objc/j2objc-annotations@3.1   0 33
javaparser-core-3.28.0.jar pkg:maven/com.github.javaparser/javaparser-core@3.28.0   0 31
javax.inject-1.jar pkg:maven/javax.inject/javax.inject@1   0 20
jaxen-2.0.0.jar pkg:maven/jaxen/jaxen@2.0.0   0 25
jcip-annotations-1.0-1.jar pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   0 25
json-simple-3.0.2.jar pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   0 33
jspecify-1.0.0.jar pkg:maven/org.jspecify/jspecify@1.0.0   0 32
jsr305-3.0.2.jar pkg:maven/com.google.code.findbugs/jsr305@3.0.2   0 17
log4j-api-2.25.4.jar cpe:2.3:a:apache:log4j:2.25.4:*:*:*:*:*:*:* pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4   0 Highest 43
log4j-to-slf4j-2.25.4.jar pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.4   0 39
lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar   0 7
lombok-1.18.42.jar pkg:maven/org.projectlombok/lombok@1.18.42   0 36
maven-archiver-3.6.2.jar pkg:maven/org.apache.maven/maven-archiver@3.6.2   0 29
maven-artifact-3.9.14.jar pkg:maven/org.apache.maven/maven-artifact@3.9.14   0 26
maven-builder-support-3.9.14.jar pkg:maven/org.apache.maven/maven-builder-support@3.9.14   0 24
maven-core-3.9.14.jar cpe:2.3:a:apache:maven:3.9.14:*:*:*:*:*:*:* pkg:maven/org.apache.maven/maven-core@3.9.14   0 Highest 24
maven-model-3.9.14.jar pkg:maven/org.apache.maven/maven-model@3.9.14   0 26
maven-model-builder-3.9.14.jar pkg:maven/org.apache.maven/maven-model-builder@3.9.14   0 32
maven-plugin-annotations-3.15.2.jar pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2   0 26
maven-plugin-api-3.9.14.jar pkg:maven/org.apache.maven/maven-plugin-api@3.9.14   0 26
maven-reporting-api-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   0 29
maven-reporting-impl-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   0 29
maven-repository-metadata-3.9.14.jar pkg:maven/org.apache.maven/maven-repository-metadata@3.9.14   0 26
maven-resolver-api-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   0 34
maven-resolver-impl-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.27   0 32
maven-resolver-named-locks-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.27   0 33
maven-resolver-provider-3.9.14.jar pkg:maven/org.apache.maven/maven-resolver-provider@3.9.14   0 26
maven-resolver-spi-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.27   0 32
maven-resolver-util-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.27   0 36
maven-settings-3.9.14.jar pkg:maven/org.apache.maven/maven-settings@3.9.14   0 26
maven-settings-builder-3.9.14.jar pkg:maven/org.apache.maven/maven-settings-builder@3.9.14   0 26
maven-shared-utils-3.4.2.jar cpe:2.3:a:apache:maven_shared_utils:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:3.4.2:*:*:*:*:*:*:* 		pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2   0 Highest 29
modernizer-maven-annotations-3.2.0.jar pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0   0 19
org.eclipse.sisu.inject-1.0.0.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.0.0   0 37
org.eclipse.sisu.plexus-0.9.0.M3.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3   0 29
plexus-archiver-4.9.2.jar cpe:2.3:a:codehaus-plexus:plexus-archiver:4.9.2:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2   0 Highest 29
plexus-cipher-2.0.jar pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   0 20
plexus-classworlds-2.9.0.jar pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0   0 35
plexus-component-annotations-2.2.0.jar pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   0 23
plexus-i18n-1.0-beta-10.jar pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10   0 24
plexus-interpolation-1.29.jar pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29   0 34
plexus-io-3.4.2.jar pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   0 24
plexus-resources-1.3.1.jar pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1   0 27
plexus-sec-dispatcher-2.0.jar cpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0   0 Highest 20
plexus-utils-4.0.3.jar cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:4.0.3:*:*:*:*:*:*:* 		pkg:maven/org.codehaus.plexus/plexus-utils@4.0.3   0 Highest 35
plexus-velocity-2.3.0.jar pkg:maven/org.codehaus.plexus/plexus-velocity@2.3.0   0 29
plexus-xml-3.0.2.jar pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2   0 29
qdox-2.2.0.jar pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   0 47
slf4j-api-2.0.17.jar pkg:maven/org.slf4j/slf4j-api@2.0.17   0 29
slf4j-simple-2.0.17.jar pkg:maven/org.slf4j/slf4j-simple@2.0.17   0 37
snappy-0.4.jar cpe:2.3:a:dain:snappy:0.4:*:*:*:*:*:*:* pkg:maven/org.iq80.snappy/snappy@0.4 MEDIUM 1 Highest 32
spotbugs-4.9.8.jar pkg:maven/com.github.spotbugs/spotbugs@4.9.8   0 48
spotbugs-annotations-4.9.8.jar pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8   0 53
velocity-engine-core-2.4.jar cpe:2.3:a:apache:velocity_engine:2.4:*:*:*:*:*:*:* pkg:maven/org.apache.velocity/velocity-engine-core@2.4   0 Highest 30
velocity-tools-generic-3.1.jar cpe:2.3:a:apache:velocity_tools:3.1:*:*:*:*:*:*:* pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1   0 Highest 28
xmlresolver-5.3.3-data.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 12
xmlresolver-5.3.3.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 26
xz-1.9.jar pkg:maven/org.tukaani/xz@1.9   0 33
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar pkg:maven/com.github.luben/zstd-jni@1.5.5-11   0 43

Dependencies (vulnerable)

Saxon-HE-12.9.jar

Description:

The XSLT and XQuery Processor

License:

Mozilla Public License Version 2.0: http://www.mozilla.org/MPL/2.0/
File Path: C:\Users\Jeremy\.m2\repository\net\sf\saxon\Saxon-HE\12.9\Saxon-HE-12.9.jar
MD5: 0da2a0f62cf07d1ae5f76d65569cd3f2
SHA1: 1397a02bd22c63db3e902b28b23c59009fa3b5c4
SHA256:8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
Saxon-HE-12.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/net.sf.saxon/Saxon-HE@12.9   (Confidence:High)
  • cpe:2.3:a:kay_framework_project:kay_framework:12.9:*:*:*:*:*:*:*   (Confidence:Low)   

ant-1.10.15.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\ant\ant\1.10.15\ant-1.10.15.jar
MD5: 688b6e5ca5900863c26af4fe4ee7e924
SHA1: da854f5503ee061a5a3b2cfcbe98ee27aa4a5ef9
SHA256:763acda4a69588c9ea8817a952851ff0c2fc4bffa1d081c2565dc407f29d5794
Referenced In Project/Scope: spotbugs-maven-plugin:compile
ant-1.10.15.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.groovy/groovy-ant@5.0.4

Identifiers

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: spotbugs-maven-plugin:provided
aopalliance-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/aopalliance/aopalliance@1.0   (Confidence:High)

asm-9.9.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm\9.9.1\asm-9.9.1.jar
MD5: 1888ad1f49038441bb2d12aa6dffe396
SHA1: 2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab
SHA256:6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-9.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.9.1   (Confidence:High)

asm-analysis-9.9.1.jar

Description:

Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-analysis\9.9.1\asm-analysis-9.9.1.jar
MD5: 68bd4a0266ad181cfca3f1603401ca68
SHA1: 1ab8d9316ef7a67240087919a708246c37ed1660
SHA256:6260bffc8ec008dd1b713702c7994e2c94d188a3da5bef9e87278a16df6a7522
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-analysis-9.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.ow2.asm/asm-analysis@9.9.1   (Confidence:High)

asm-commons-9.9.1.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-commons\9.9.1\asm-commons-9.9.1.jar
MD5: 7e0ef716c43d92d29e666f820df24e2c
SHA1: ab35de4c537184a09339069f1a3b3aacf2289149
SHA256:c2319e014ce7199f2b7f7d56d6bb991863168c3f4b6cd6c9f542a4937ef7ef88
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-commons-9.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.ow2.asm/asm-commons@9.9.1   (Confidence:High)

asm-tree-9.9.1.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-tree\9.9.1\asm-tree-9.9.1.jar
MD5: 7eb17cd0d09b03fbe473e51edfc6e4d2
SHA1: b6b1b3366296163b4b1f540731aad0a2baa484d8
SHA256:0f3555096b720b820bbacab0b515589bee0200bee099bda14c561738ae837ba1
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-tree-9.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.ow2.asm/asm-tree@9.9.1   (Confidence:High)

asm-util-9.9.1.jar

Description:

Utilities for ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-util\9.9.1\asm-util-9.9.1.jar
MD5: fd4d359daf227302ab9cefd36476ca72
SHA1: e51f5b0ae0b0c1960687ae970a2a3434d39d8abb
SHA256:c5ebbbeaf68126af094b42fa4800f59bc4413abd02d95b9aefad722cd257e207
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-util-9.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.ow2.asm/asm-util@9.9.1   (Confidence:High)

bcel-6.12.0.jar

Description:

The Commons Byte Code Engineering Library (BCEL) is designed to provide users with a convenient way to analyze, create, and manipulate compiled .class files.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\bcel\bcel\6.12.0\bcel-6.12.0.jar
MD5: f7db448193f858a275e57d050a125937
SHA1: a1dfc639fd6914d187b16a92ee00e84adc22a9a3
SHA256:012639e3d2a3079f4c9c1350f18202cea83a7112ef210e50c93b0b771ad5d3af
Referenced In Project/Scope: spotbugs-maven-plugin:compile
bcel-6.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.apache.bcel/bcel@6.12.0   (Confidence:High)
  • cpe:2.3:a:apache:commons_bcel:6.12.0:*:*:*:*:*:*:*   (Confidence:Low)   

checker-qual-3.53.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.53.0\checker-qual-3.53.0.jar
MD5: d1ee2a3366a19a8fff01208da2adb48e
SHA1: af1105964a03d7ed8aaf8ea2cb6ec0da7ec6c7a6
SHA256:7ca002815d92fad79e966b375c2ee7b2b4bf953024bc9a5d5e0c59df13ff5af8
Referenced In Project/Scope: spotbugs-maven-plugin:compile
checker-qual-3.53.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@3.53.0   (Confidence:High)

commons-beanutils-1.11.0.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-beanutils\commons-beanutils\1.11.0\commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256:9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-codec-1.21.0.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-codec\commons-codec\1.21.0\commons-codec-1.21.0.jar
MD5: c49977029838babaf8a71485aa9aaef8
SHA1: d95f998db5f89900fe895daf6cd2cddcb2f1d64b
SHA256:4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-codec-1.21.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-codec/commons-codec@1.21.0   (Confidence:High)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-collections\commons-collections\3.2.2\commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-compress-1.26.1.jar

Description:

Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-compress\1.26.1\commons-compress-1.26.1.jar
MD5: 7af7d22a7280508327d809b183114a92
SHA1: 44331c1130c370e726a2e1a3e6fba6d2558ef04a
SHA256:27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-compress-1.26.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-digester3-3.2.jar

Description:

    The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-digester3\3.2\commons-digester3-3.2.jar
MD5: 41d2c62c7aedafa7a3627794abc83f71
SHA1: c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79
SHA256:1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-digester3-3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.commons/commons-digester3@3.2   (Confidence:High)

commons-io-2.21.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.21.0\commons-io-2.21.0.jar
MD5: bc7e020873f086ede85f97bd9f013215
SHA1: 52a6f68fe5afe335cde95461dd5c3412f04996f7
SHA256:7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-io-2.21.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

commons-lang3-3.20.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.20.0\commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256:69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

commons-logging-1.3.6.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-logging\commons-logging\1.3.6\commons-logging-1.3.6.jar
MD5: fe0ccbe8971fed954a0ad6528fe3ef24
SHA1: 63e78ca6cd446c0ad166d14f03ed99e7efb3896d
SHA256:f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-logging-1.3.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-logging/commons-logging@1.3.6   (Confidence:High)

commons-text-1.14.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-text\1.14.0\commons-text-1.14.0.jar
MD5: 54960a12a82d52df3d5548d6934d87b2
SHA1: adcb0d4c67eabc79682604b47eb852aaff21138a
SHA256:121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-text-1.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

dom4j-2.2.0.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\dom4j\dom4j\2.2.0\dom4j-2.2.0.jar
MD5: 6e7161d8e8f5fd0055554374f469abd3
SHA1: 52368b1da663abd44a866c4fe4f62c8d8695204a
SHA256:3fae79e081096e1410645eb3557c63b79ca266d510ab479889511109becd1690
Referenced In Project/Scope: spotbugs-maven-plugin:compile
dom4j-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

doxia-core-2.1.0.jar

Description:

Doxia core classes and interfaces.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-core\2.1.0\doxia-core-2.1.0.jar
MD5: 7bfd7d6148dc6bd81fc2f009c786ca47
SHA1: ce027bd5b8610ff383c25e23f4815793f6bca096
SHA256:2a439e0f4672b69ae623ea992149e0da52eb0fa3bebfbdc4c829585d7d3358c7
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-core-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   (Confidence:High)

doxia-integration-tools-2.0.0.jar

Description:

A collection of tools to help the integration of Doxia Sitetools in Maven plugins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-integration-tools\2.0.0\doxia-integration-tools-2.0.0.jar
MD5: b8e18118b11a20e0ddc66b235989682e
SHA1: ce08d289ed826416983860fb2adced6dd7ade550
SHA256:4aee72f9b30b507964c2f52b63f70e7b41fb9d957359cb5dc13c428abb4b6189
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-integration-tools-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0   (Confidence:High)

doxia-module-apt-2.0.0.jar

Description:

A Doxia module for Almost Plain Text source documents.
    APT format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-apt\2.0.0\doxia-module-apt-2.0.0.jar
MD5: f6613830c1f558b909b32d3e3e271911
SHA1: 0505b4e8d57eb3f8c3d66adcca85ce09311742ba
SHA256:f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-apt-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   (Confidence:High)

doxia-module-xdoc-2.0.0.jar

Description:

A Doxia module for Xdoc source documents.
    Xdoc format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xdoc\2.0.0\doxia-module-xdoc-2.0.0.jar
MD5: dd12065dc641017da7006cb39f0490e5
SHA1: fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c
SHA256:7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-xdoc-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   (Confidence:High)

doxia-module-xhtml5-2.0.0.jar

Description:

A Doxia module for Xhtml5 source documents.
    Xhtml5 format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xhtml5\2.0.0\doxia-module-xhtml5-2.0.0.jar
MD5: 2369dd687d9b13d115157299d09ca7d4
SHA1: 15fbcfe42e0a50eb33adbc061c9b4db84ec0470e
SHA256:c91557679a0eb9fde3175055628ceb7b8fd5ab6d308340770d236fb06265dc26
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-module-xhtml5-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0   (Confidence:High)

doxia-sink-api-2.1.0.jar

Description:

Doxia Sink API.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-sink-api\2.1.0\doxia-sink-api-2.1.0.jar
MD5: 87a07d1cbbede4fa5ff79e94a4c77907
SHA1: 079edb7ed839b2dc5c7d4e4fc452e3d24e3dceda
SHA256:b465db838dd482a994d32a088bea4bcbaa62cfb8b2853511a9f8c3e769402c74
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-sink-api-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   (Confidence:High)

doxia-site-model-2.0.0.jar

Description:

The Site Model handles the descriptor for sites, also known as site.xml.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-model\2.0.0\doxia-site-model-2.0.0.jar
MD5: 4da689094c6e4a2d6457d21ce959ac42
SHA1: 6a43c5b58b9acbf789618efdda23d5cb9fb0981f
SHA256:f6ec9ef75a41d1b826e5ecf02d92c5de90a6bc70ea93d5340988703223bf2205
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-model-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0   (Confidence:High)

doxia-site-renderer-2.0.0.jar

Description:

The Site Renderer handles the rendering of sites, merging site model with document content.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.0.0\doxia-site-renderer-2.0.0.jar
MD5: 0af057ade4d5bc3b41a06cf1100bbd93
SHA1: b68214ec1d3250a4594f598f054977d961e66ac8
SHA256:6cdee370194f4b9f742d12ef46528042f480d9bdf3de832de2792e1ae9ffc68d
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-renderer-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0   (Confidence:High)

doxia-skin-model-2.0.0.jar

Description:

The Skin Model defines metadata for Doxia Sitetools skins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-skin-model\2.0.0\doxia-skin-model-2.0.0.jar
MD5: 9daee5a484a8a9cb32b2fe6cfea42531
SHA1: 86913a4d7f1acbf26d426c97adecb18e21938ebf
SHA256:3ced0d90353f49e8eb1458f54664b93ec117d79b9789a576da41e2f6f99723e0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-skin-model-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0   (Confidence:High)

error_prone_annotations-2.46.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.46.0\error_prone_annotations-2.46.0.jar
MD5: d0dabea249c067d21d7eb997fbdf5c99
SHA1: 4ecb5d2392c38c46e6cb65e1bf60be708d97005d
SHA256:b67be81ff4b956401146e14eaf1526bc435a9480f2546e91eb45b796631a8a99
Referenced In Project/Scope: spotbugs-maven-plugin:provided
error_prone_annotations-2.46.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.46.0   (Confidence:High)

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\failureaccess\1.0.3\failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
failureaccess-1.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/com.google.guava/failureaccess@1.0.3   (Confidence:High)

groovy-5.0.4.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy\5.0.4\groovy-5.0.4.jar
MD5: 85304f9c050c45c392870405d8a1db32
SHA1: 624fd80e3b6234c89730901afffe9225c87f2535
SHA256:35d6e6a658ebf549c736c06fbaf370521a3a72e3a044f6a868b33a0844d40d6c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-5.0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

groovy-ant-5.0.4.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-ant\5.0.4\groovy-ant-5.0.4.jar
MD5: 7ffdd1fa1964ba7a6a2d50b7c8a2ddbe
SHA1: 5b68859017501ba02f2ed6642207a0b730596976
SHA256:334fa7bafc99c3f9b4cea0d28a5e0cdafe69f61c0e8d0c09a8e2d8bd1b8b3f46
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-ant-5.0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

groovy-json-5.0.4.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-json\5.0.4\groovy-json-5.0.4.jar
MD5: 3d9933241877be0181c1d96151c73518
SHA1: bb53f7c741b5271ef5ed50367197b6cbec1ec194
SHA256:b3d576491582f1b8e94ad1baa932aa99c290743a9c0a6b62651580cb73bd2b58
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-json-5.0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.groovy/groovy-json@5.0.4   (Confidence:High)
  • cpe:2.3:a:google:gmail:5.0.4:*:*:*:*:*:*:*   (Confidence:Low)   

gson-2.13.2.jar

Description:

Gson JSON library

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\gson\gson\2.13.2\gson-2.13.2.jar
MD5: a2c47e14ce5e956105458fe455f5d542
SHA1: 48b8230771e573b54ce6e867a9001e75977fe78e
SHA256:dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
gson-2.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

guava-33.5.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\33.5.0-jre\guava-33.5.0-jre.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guava-33.5.0-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

guice-5.1.0-classes.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\inject\guice\5.1.0\guice-5.1.0-classes.jar
MD5: d4d4d9bf878b98862116e8ccc0a5c34e
SHA1: e7ba4c25bec3761840f67c73f166c0d509d01d1d
SHA256:142ad4475e19524d2fe3ac995b3f7cbc962fc726f2edb9dbdccc61feab9b2bf9
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guice-5.1.0-classes.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/com.google.inject/guice@5.1.0   (Confidence:Highest)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1   (Confidence:High)

javaparser-core-3.28.0.jar

Description:

The core parser functionality. This may be all you need.

License:

GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\javaparser\javaparser-core\3.28.0\javaparser-core-3.28.0.jar
MD5: 2c776bbdb368e4ee8bb79ec290a36fbe
SHA1: 59829d055a8327d017e83316fc01b182335da9d6
SHA256:d3852d78461c02602eb9bfc15e9fc21ad7c765e6013a1b6d5809a5d0e7db5309
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javaparser-core-3.28.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/com.github.javaparser/javaparser-core@3.28.0   (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\javax\inject\javax.inject\1\javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/javax.inject/javax.inject@1   (Confidence:High)

jaxen-2.0.0.jar

Description:

Jaxen is a universal XPath engine for Java.

License:

https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt
File Path: C:\Users\Jeremy\.m2\repository\jaxen\jaxen\2.0.0\jaxen-2.0.0.jar
MD5: 674d5bd86b7838fe431b0277856e97ae
SHA1: bd6a33b0fda054a5678010df843cc999f288dc6c
SHA256:9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
jaxen-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/jaxen/jaxen@2.0.0   (Confidence:High)

jcip-annotations-1.0-1.jar

Description:

    A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\stephenc\jcip\jcip-annotations\1.0-1\jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: spotbugs-maven-plugin:compile
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   (Confidence:High)

json-simple-3.0.2.jar

Description:

Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\cliftonlabs\json-simple\3.0.2\json-simple-3.0.2.jar
MD5: 148c0d1bdc1bcb24394627d6930ee9ad
SHA1: 2337afdb06134a12fc0239299c3ceb2e9c209516
SHA256:fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295
Referenced In Project/Scope: spotbugs-maven-plugin:compile
json-simple-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: spotbugs-maven-plugin:provided
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0   (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2   (Confidence:High)

log4j-api-2.25.4.jar

Description:

The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-api\2.25.4\log4j-api-2.25.4.jar
MD5: 5efb17ae45b749c1fbfedb3d93375cfc
SHA1: 89ff2217b193fb187b134aa6ebcbfa8a28b018a9
SHA256:c4b642a7f047275215de117e0e3847eb2c7711d84a0aa7433e7b3c096daf341d
Referenced In Project/Scope: spotbugs-maven-plugin:compile
log4j-api-2.25.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.4

Identifiers

log4j-to-slf4j-2.25.4.jar

Description:

Forwards the Log4j API calls to SLF4J.
    (Refer to the `log4j-slf4j[2]-impl` artifacts for forwarding SLF4J to the Log4j API.)

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-to-slf4j\2.25.4\log4j-to-slf4j-2.25.4.jar
MD5: b3d45f5534aa71da607e403ce1519977
SHA1: 68df56640a5d245192e91bd2ac89e504b477cc10
SHA256:d7b78fc0aaaa5e8ada388b29d718b0ab187e512965bed0b259bb4ab299f13db2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
log4j-to-slf4j-2.25.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.4   (Confidence:High)

lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Project/Scope: spotbugs-maven-plugin:provided

Identifiers

  • None

lombok-1.18.42.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar
MD5: f29149836e0187fb9fd95d82dc718d36
SHA1: 8365263844ebb62398e0dc33057ba10ba472d3b8
SHA256:3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306
Referenced In Project/Scope: spotbugs-maven-plugin:provided
lombok-1.18.42.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.42   (Confidence:High)

maven-archiver-3.6.2.jar

Description:

Provides utility methods for creating JARs and other archive files from a Maven project.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-archiver\3.6.2\maven-archiver-3.6.2.jar
MD5: 742b3136d8ff1fcb66f5fd7f3c267c8d
SHA1: a2d949d87fed6db197cc3cceec93012dd2317ca0
SHA256:1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-archiver-3.6.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven/maven-archiver@3.6.2   (Confidence:High)

maven-artifact-3.9.14.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.9.14\maven-artifact-3.9.14.jar
MD5: 0782702122cfd171170c7e6b9ab9837b
SHA1: 921c4f90ec434e29b399796077a08459571d048a
SHA256:1effa70eacbf0aa4d94ad9c7b225be031ce4317fa07da59e23b02b3e4e1231a3
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-artifact-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven/maven-artifact@3.9.14   (Confidence:High)

maven-builder-support-3.9.14.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-builder-support\3.9.14\maven-builder-support-3.9.14.jar
MD5: 963abb54adeb61e8bfc3ba737054e7f8
SHA1: fd7eff42958f7a6ce02710f02127bc158d710d4e
SHA256:2109ff808046e4f8b356b1064060a3f224b0b0aad07ecceaf7696c3bdc0b2296
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-builder-support-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-builder-support@3.9.14   (Confidence:High)

maven-core-3.9.14.jar

Description:

Maven Core classes.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-core\3.9.14\maven-core-3.9.14.jar
MD5: 6538c37b5355337d131ae31b57ac09be
SHA1: 39808a75b5625ddd0e8bba0bd8f9e953da940add
SHA256:db009d57b90a714efe86c81c7a518febb276d01ba3daf2f301e382f6560e8a58
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-core-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

maven-model-3.9.14.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.9.14\maven-model-3.9.14.jar
MD5: c6f3bb5fdf95487ac8e66cdb7b0d8fb5
SHA1: 623d1a652d2657577be0c8d3c249a4ab2830a843
SHA256:684f573b1b37933c5d62c1c21d5da4335b049fb8b3d9754281597a38dbbc4044
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven/maven-model@3.9.14   (Confidence:High)

maven-model-builder-3.9.14.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model-builder\3.9.14\maven-model-builder-3.9.14.jar
MD5: f7843bebace494ee97509e67401a0993
SHA1: 45299e0bbefb6575ba18214d822753a373d49aa9
SHA256:9a6f4deb11bd6fe3f8b11036ed46f34cded3b00fc638f242327537bfb53c9d3f
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-builder-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-model-builder@3.9.14   (Confidence:High)

maven-plugin-annotations-3.15.2.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.15.2\maven-plugin-annotations-3.15.2.jar
MD5: 6b86f30960ce2f9eac20c6657db588a2
SHA1: dfc79f3b5b0c3afd01f55b8b01310f457568d2a4
SHA256:979d3cf8f4ac804cc27d2f8a6db07f2149d58ccd59bb3d589cc46bb9a44c0b4b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-annotations-3.15.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2   (Confidence:High)

maven-plugin-api-3.9.14.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.9.14\maven-plugin-api-3.9.14.jar
MD5: a8be3ebe58277ded8abdc68925c6f4d5
SHA1: 67a865f97a78cbd97773542ff3cb838d6624b5c1
SHA256:062445ef3ae988e245cca68ccec915de64703ec615badf2d9d61da9ee6f1a245
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-api-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven/maven-plugin-api@3.9.14   (Confidence:High)

maven-reporting-api-4.0.0.jar

Description:

API to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-api\4.0.0\maven-reporting-api-4.0.0.jar
MD5: 9c49fcb81d69bb5ec513d624c181fc05
SHA1: d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb
SHA256:cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   (Confidence:High)

maven-reporting-impl-4.0.0.jar

Description:

Abstract classes to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-impl\4.0.0\maven-reporting-impl-4.0.0.jar
MD5: 302ed7d914dc813380d361d1acb83c2f
SHA1: d3753b5c13a873a5ddb71f404c6fe1179a4688c2
SHA256:e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-impl-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   (Confidence:High)

maven-repository-metadata-3.9.14.jar

Description:

Per-directory local and remote repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-repository-metadata\3.9.14\maven-repository-metadata-3.9.14.jar
MD5: a874e3b9651d80f9199ec855ccbbc4c6
SHA1: 231607afce2005cb03f2f882b347189f7ff27686
SHA256:307e4920b17a8fdd764b556a7569de9bdd384d6b5f3f6a63dfb2ef186f02da2a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-repository-metadata-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-repository-metadata@3.9.14   (Confidence:High)

maven-resolver-api-1.9.27.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-api\1.9.27\maven-resolver-api-1.9.27.jar
MD5: c7bd6f04c52f098ba934742bb204cb5e
SHA1: 2fe7e86e3c193121789470507cf4fadd5bd7ad59
SHA256:a895d222283666a7320ddc76615e2e93a41fabd93ce9a6bf9ddee39272bb87b4
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-api-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   (Confidence:High)

maven-resolver-impl-1.9.27.jar

Description:

An implementation of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-impl\1.9.27\maven-resolver-impl-1.9.27.jar
MD5: 37de3b6f62504d03fb281c533de98d4a
SHA1: 876fc89223d9572cade60a1b8158846724548d07
SHA256:295d48ea2a8bb3aef51888967f105fb6251997d111f13c32d28919fd9b1c951e
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-impl-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.27   (Confidence:High)

maven-resolver-named-locks-1.9.27.jar

Description:

A synchronization utility implementation using Named locks.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-named-locks\1.9.27\maven-resolver-named-locks-1.9.27.jar
MD5: 7bbb9ba859aa1ac04280422f0520b9eb
SHA1: 72c89ad87be374309a7308ee144949360ed482e8
SHA256:b39ecd4da98fdac5068e6f5d16910a71f4e4d48e95e17d107f6603e18f2b3fdf
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-named-locks-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.27   (Confidence:High)

maven-resolver-provider-3.9.14.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-resolver-provider\3.9.14\maven-resolver-provider-3.9.14.jar
MD5: 9026e4ce9aead5a9740f626d49085065
SHA1: 9927e911dfc855a462ee79e3f5bb3fd5effd8b82
SHA256:a5bc340ffe35325c55a01762feee374abb2a9e2b14191ea39c1ef646c2754f65
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-provider-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-resolver-provider@3.9.14   (Confidence:High)

maven-resolver-spi-1.9.27.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-spi\1.9.27\maven-resolver-spi-1.9.27.jar
MD5: ef88eaf44762342c8322924955e3c333
SHA1: fb64e47acdc73f938b4d5b6464ef7a6351f983d5
SHA256:1cab02f45bc58d5f4d8e084eaf032f13ea1a5fc9021d8bd74f8360ebb6593e5a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-spi-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.27   (Confidence:High)

maven-resolver-util-1.9.27.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-util\1.9.27\maven-resolver-util-1.9.27.jar
MD5: 0d792ab540b382fc240c3529d5b6e88e
SHA1: 7ee4446af6aab27475765ec9c9dc1fb2b082af2b
SHA256:74a12548f0d6aad13c728666288c1e81201c24bd05bb4e4ec8c1558517b379a7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-util-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.27   (Confidence:High)

maven-settings-3.9.14.jar

Description:

Maven Settings model.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings\3.9.14\maven-settings-3.9.14.jar
MD5: e77ceedcd1e9587064a5f4ee519077cb
SHA1: b438ff21305253ded45570a74622595963942e65
SHA256:0e5492e07136565b1ef72a981e99797999183e54f589e00aa608cbadc4cb9bda
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-settings@3.9.14   (Confidence:High)

maven-settings-builder-3.9.14.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings-builder\3.9.14\maven-settings-builder-3.9.14.jar
MD5: 5784e2300228329dafcdb01fc18c803a
SHA1: 2b28c76e3c83715179b96404c0c003a91d543aba
SHA256:1d3cf59f9dc6af77f7a1052aea598535b4f59926a9fe92cecce3ecfb5b91ff1f
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-builder-3.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.apache.maven/maven-settings-builder@3.9.14   (Confidence:High)

maven-shared-utils-3.4.2.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-shared-utils\3.4.2\maven-shared-utils-3.4.2.jar
MD5: 53a038f77a81cb5816ad2b1c7daa8711
SHA1: bfa28296272a5915b08de9f11f34a94b0a818fd0
SHA256:b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-shared-utils-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

modernizer-maven-annotations-3.2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.2.0\modernizer-maven-annotations-3.2.0.jar
MD5: 127396b14eb51fd93eb587308f079768
SHA1: 23a99089ff682152e86ab1691a8232db325def09
SHA256:9f9396f361f0d45d435355c1f2b57980307abd81f3131083ec18f54fbbaa5ecb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
modernizer-maven-annotations-3.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0   (Confidence:High)

org.eclipse.sisu.inject-1.0.0.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.inject\1.0.0\org.eclipse.sisu.inject-1.0.0.jar
MD5: 9d66e7450d82f2070a1422de1ebd4c81
SHA1: d9c2d6ff4b461ab9492edb1cd9d8239cfb41f4ca
SHA256:3ab8d7bfe68f3b6ec95c1a0a47e628edbc9d76e90634cb0a0ba121fbb11b8e42
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.inject-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.0.0   (Confidence:High)

org.eclipse.sisu.plexus-0.9.0.M3.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\0.9.0.M3\org.eclipse.sisu.plexus-0.9.0.M3.jar
MD5: 964e7bc9837b270566f18b87af65f5d7
SHA1: b493c7abcc6e04fa0a6a20d489a3db0395c76f70
SHA256:c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.plexus-0.9.0.M3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3   (Confidence:High)

plexus-archiver-4.9.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-archiver\4.9.2\plexus-archiver-4.9.2.jar
MD5: 408c466d4a20a02f4a2428a4f003ca13
SHA1: a03ed402ef8468c1d1bda368d7213cad67f16a71
SHA256:a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-archiver-4.9.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-cipher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-cipher\2.0\plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   (Confidence:High)

plexus-classworlds-2.9.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.9.0\plexus-classworlds-2.9.0.jar
MD5: 64e4ee5a1298f866d00f705e02058200
SHA1: ace0820f34de49f69511f5263bcebb09fac9731a
SHA256:1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-classworlds-2.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.14

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0   (Confidence:High)

plexus-component-annotations-2.2.0.jar

Description:

Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.2.0\plexus-component-annotations-2.2.0.jar
MD5: a2397189a5ce25e7d2d44effa9f5176c
SHA1: a506f84636ea7ae370d04167dd155c103e616f68
SHA256:50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-component-annotations-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   (Confidence:High)

plexus-i18n-1.0-beta-10.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-i18n\1.0-beta-10\plexus-i18n-1.0-beta-10.jar
MD5: 7f36c0459c853750c627f682ec7bcf52
SHA1: 27506f59e54cc80b8c28b977c2bcd0478094e0cc
SHA256:b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-i18n-1.0-beta-10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10   (Confidence:High)

plexus-interpolation-1.29.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-interpolation\1.29\plexus-interpolation-1.29.jar
MD5: b1489e6968b874cecfe24cadb62b77db
SHA1: 5dd1b1fbaca263ad5baa169fbd8e804c789c9db5
SHA256:088d444dbcedfb384630d8686697ece3c401d6f33c8f8b3aa7259ea1c6996878
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-interpolation-1.29.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29   (Confidence:High)

plexus-io-3.4.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-io\3.4.2\plexus-io-3.4.2.jar
MD5: 77515ce571e8169c13220c506ad177a4
SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942d
SHA256:6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   (Confidence:High)

plexus-resources-1.3.1.jar

Description:

A component to transparently retrieve resources from the filesystem, classpath or internet.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-resources\1.3.1\plexus-resources-1.3.1.jar
MD5: 077efa77691dac1edc837447989ec6e7
SHA1: 0eedcf8d17e63b0acefe17c1a742c9d1fe70a3d8
SHA256:41deb2adc7b19ff4bfd7db30347223718229ce0ae196862acdfb90bf1afc6ccb
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-resources-1.3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1   (Confidence:High)

plexus-sec-dispatcher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-sec-dispatcher\2.0\plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.14

Identifiers

plexus-utils-4.0.3.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\4.0.3\plexus-utils-4.0.3.jar
MD5: a8848eea66d01d0279b26871dbc2cf1b
SHA1: c097bf60a8a7aaf37dfb8f2c933a21e784035976
SHA256:421ff6ed146c53a9d4eaade8f629b52b12af7187101f1bd06c2c64e904019f3c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-utils-4.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-velocity-2.3.0.jar

Description:

A component which provides Apache Velocity templating engine integration

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-velocity\2.3.0\plexus-velocity-2.3.0.jar
MD5: bc626afb8d6a74fc481642f1ab40367f
SHA1: f820d406b683c92ad05589b80b43974dbf6051fd
SHA256:6c9078006d851125b487d31cc3d81ec9e3208b43a9c7a7e2cae5e713ddc654f4
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-velocity-2.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-velocity@2.3.0   (Confidence:High)

plexus-xml-3.0.2.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-xml\3.0.2\plexus-xml-3.0.2.jar
MD5: e2feab7a114ac4a144632670734db7e4
SHA1: 70c207ae478a5011a14dcefe56f4bbda16e3bc87
SHA256:6a49fe0c49a06b5bcd6073ff16580fcb0dd87c50295e97a9fa9f95619b69921c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-xml-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2   (Confidence:High)

qdox-2.2.0.jar

Description:

    QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\thoughtworks\qdox\qdox\2.2.0\qdox-2.2.0.jar
MD5: 1585e7fc441f9d256cdd965718836152
SHA1: 39651eb3ce73d6e506490ea352e1e13eab6b55e8
SHA256:c260c3230b2340af97d54bf01f7f67ebc57c901922736c881bb11cb981302be2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
qdox-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.groovy/groovy-docgenerator@5.0.4

Identifiers

  • pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.17\slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.17   (Confidence:High)

slf4j-simple-2.0.17.jar

Description:

SLF4J Simple Provider

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-simple\2.0.17\slf4j-simple-2.0.17.jar
MD5: 47a7060262b6800b3e0e41db00909b81
SHA1: 9872a3fd794ffe7b18d17747926a64d61526ca96
SHA256:ddfea59ac074c6d3e24ac2c38622d2d963895e17f70b38ed4bdae4d780be6964
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-simple-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/org.slf4j/slf4j-simple@2.0.17   (Confidence:High)

snappy-0.4.jar

Description:

Port of Snappy to Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: C:\Users\Jeremy\.m2\repository\org\iq80\snappy\snappy\0.4\snappy-0.4.jar
MD5: f0792d1dbe7f90d8b34c7c19961e0073
SHA1: a42b2d92a89efd35bb14738000dabcac6bd07a8d
SHA256:46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9
Referenced In Project/Scope: spotbugs-maven-plugin:compile
snappy-0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

CVE-2024-36124  

iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. iq80 Snappy is not actively maintained anymore. As quick fix users can upgrade to version 0.5.
CWE-125 Out-of-bounds Read

CVSSv3:
  • Base Score: MEDIUM (5.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions:

spotbugs-4.9.8.jar

Description:

SpotBugs: Because it is easy!

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs\4.9.8\spotbugs-4.9.8.jar
MD5: a137de2cd433fbf0d42205650c7b0eeb
SHA1: 661dba9d1f4d027591b2b4102e0f493bb4c0691b
SHA256:4469bc080afe7cd2290a20bf63e28392b80abcc7c7ace33c8f55da52a17c7ca5
Referenced In Project/Scope: spotbugs-maven-plugin:compile
spotbugs-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs@4.9.8   (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.9.8\spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: spotbugs-maven-plugin:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.9.8.3

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8   (Confidence:High)

velocity-engine-core-2.4.jar

Description:

Apache Velocity is a general purpose template engine.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\velocity-engine-core\2.4\velocity-engine-core-2.4.jar
MD5: 8dc3c7a26823ee88253f7aa9250c094e
SHA1: 55dfc20bbc4968cf70c5ae5165b5b0324e0067d9
SHA256:1bf78c2ade46f209bf93ebe72ed2af5b989ca7a1de0a015fc1b92a62f56b6549
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-engine-core-2.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

velocity-tools-generic-3.1.jar

Description:

Generic tools that can be used in any context.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\tools\velocity-tools-generic\3.1\velocity-tools-generic-3.1.jar
MD5: 76f13879ead8693fd4d5751a8a236089
SHA1: 07aaa49086a64cd9dab967a8437cc03abbfad655
SHA256:8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-tools-generic-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

xmlresolver-5.3.3-data.jar

File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3-data.jar
MD5: 59c51b08ba448bc9473d92e68bf84873
SHA1: e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3
SHA256:b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3-data.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:Highest)

xmlresolver-5.3.3.jar

Description:

An XML entity/uri resolver

License:

Apache License version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3.jar
MD5: e883f28e14ce902f66941bd8bc25233a
SHA1: 1b838b0d69eef8d46c813d88a604e3cb4c6035fe
SHA256:1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.9.8

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:High)

xz-1.9.jar

Description:

XZ data compression

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\org\tukaani\xz\1.9\xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xz-1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.tukaani/xz@1.9   (Confidence:High)

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\aarch64\libzstd-jni-1.5.5-11.dll
MD5: 3c42e914725869f2ad90eb3ddb418524
SHA1: fdd7d968eb3a348f6bf562b298b3a165e0e73e4e
SHA256:c368030edfc9f9caf92b89b832e65c84d29757a35df4641decd907e4f0229a59
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\amd64\libzstd-jni-1.5.5-11.dll
MD5: 1521a503cd2ed6d7547e6c7e6abb229c
SHA1: 9330785beba7881cc72c7f68cc87537a9a11cfc9
SHA256:8f753fa694b1c60651e79cedd916268e6c4034e921a61633a8f2ad934817edd2
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\x86\libzstd-jni-1.5.5-11.dll
MD5: f73208a58a031c84e5dee99a15f865ff
SHA1: 8e91341f71ee4a73e1c94b80ae1c846a663e0d61
SHA256:8173736b15a732f2be19137fe0ff2336d416c8c60b914e9600f3a5012584f9d1
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar
MD5: 00977099d76d2c01a7b19263375ee42e
SHA1: ca6ab366315e179dd80645aad4a60bab959c6523
SHA256:d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
zstd-jni-1.5.5-11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.luben/zstd-jni@1.5.5-11   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.