Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: spotbugs-maven-plugin

com.github.spotbugs:spotbugs-maven-plugin:4.10.5.0

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
Saxon-HE-12.10.jar pkg:maven/net.sf.saxon/Saxon-HE@12.10   0 58
aopalliance-1.0.jar pkg:maven/aopalliance/aopalliance@1.0   0 20
asm-9.11.jar pkg:maven/org.ow2.asm/asm@9.11   0 54
asm-analysis-9.11.jar pkg:maven/org.ow2.asm/asm-analysis@9.11   0 60
asm-commons-9.11.jar pkg:maven/org.ow2.asm/asm-commons@9.11   0 58
asm-tree-9.11.jar pkg:maven/org.ow2.asm/asm-tree@9.11   0 58
asm-util-9.11.jar pkg:maven/org.ow2.asm/asm-util@9.11   0 58
bcel-6.13.0.jar cpe:2.3:a:apache:commons_bcel:6.13.0:*:*:*:*:*:*:* pkg:maven/org.apache.bcel/bcel@6.13.0   0 Low 77
checker-qual-4.2.3.jar pkg:maven/org.checkerframework/checker-qual@4.2.3   0 44
commons-beanutils-1.11.0.jar cpe:2.3:a:apache:commons_beanutils:1.11.0:*:*:*:*:*:*:* pkg:maven/commons-beanutils/commons-beanutils@1.11.0   0 Highest 170
commons-codec-1.22.1.jar pkg:maven/commons-codec/commons-codec@1.22.1   0 121
commons-collections-3.2.2.jar cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* pkg:maven/commons-collections/commons-collections@3.2.2   0 Highest 84
commons-compress-1.26.1.jar cpe:2.3:a:apache:commons_compress:1.26.1:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-compress@1.26.1   0 Highest 109
commons-digester3-3.2.jar pkg:maven/org.apache.commons/commons-digester3@3.2   0 105
commons-io-2.22.0.jar cpe:2.3:a:apache:commons_io:2.22.0:*:*:*:*:*:*:* pkg:maven/commons-io/commons-io@2.22.0   0 Highest 127
commons-lang3-3.21.0.jar cpe:2.3:a:apache:commons_lang:3.21.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-lang3@3.21.0   0 Highest 147
commons-logging-1.4.0.jar pkg:maven/commons-logging/commons-logging@1.4.0   0 129
commons-text-1.15.0.jar cpe:2.3:a:apache:commons_text:1.15.0:*:*:*:*:*:*:* pkg:maven/org.apache.commons/commons-text@1.15.0   0 Highest 73
dom4j-2.2.0.jar cpe:2.3:a:dom4j_project:dom4j:2.2.0:*:*:*:*:*:*:* pkg:maven/org.dom4j/dom4j@2.2.0   0 Highest 21
doxia-core-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   0 26
doxia-integration-tools-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.1.0   0 28
doxia-module-apt-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   0 28
doxia-module-xdoc-2.0.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   0 28
doxia-module-xhtml5-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.1.0   0 28
doxia-sink-api-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   0 28
doxia-site-model-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-model@2.1.0   0 28
doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.min.js   0 0
doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.tiny.min.js   0 0
doxia-site-renderer-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.1.0   0 26
doxia-skin-model-2.1.0.jar pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.1.0   0 26
error_prone_annotations-2.50.0.jar pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0   0 29
failureaccess-1.0.3.jar pkg:maven/com.google.guava/failureaccess@1.0.3   0 32
groovy-5.1.3.jar cpe:2.3:a:apache:groovy:5.1.3:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy@5.1.3   0 Highest 287
groovy-json-5.1.3.jar cpe:2.3:a:google:gmail:5.1.3:*:*:*:*:*:*:* pkg:maven/org.apache.groovy/groovy-json@5.1.3   0 Low 289
gson-2.14.0.jar cpe:2.3:a:google:gson:2.14.0:*:*:*:*:*:*:* pkg:maven/com.google.code.gson/gson@2.14.0   0 Highest 31
guava-33.7.1-jre.jar cpe:2.3:a:google:guava:33.7.1:*:*:*:*:*:*:* pkg:maven/com.google.guava/guava@33.7.1-jre   0 Highest 23
guice-5.1.0-classes.jar pkg:maven/com.google.inject/guice@5.1.0   0 32
httpclient-4.5.14.jar cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:* pkg:maven/org.apache.httpcomponents/httpclient@4.5.14   0 Highest 32
httpcore-4.4.16.jar cpe:2.3:a:apache:httpcomponents_core:4.4.16:*:*:*:*:*:*:* pkg:maven/org.apache.httpcomponents/httpcore@4.4.16   0 Highest 32
j2objc-annotations-3.1.jar pkg:maven/com.google.j2objc/j2objc-annotations@3.1   0 33
javaparser-core-3.28.2.jar pkg:maven/com.github.javaparser/javaparser-core@3.28.2   0 31
javax.inject-1.jar pkg:maven/javax.inject/javax.inject@1   0 20
jaxen-2.0.6.jar pkg:maven/jaxen/jaxen@2.0.6   0 29
jcip-annotations-1.0-1.jar pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   0 25
json-simple-3.0.2.jar pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   0 33
jspecify-1.0.1.jar cpe:2.3:a:google:gmail:1.0.1:*:*:*:*:*:*:* pkg:maven/org.jspecify/jspecify@1.0.1   0 Low 44
jsr305-3.0.2.jar pkg:maven/com.google.code.findbugs/jsr305@3.0.2   0 17
log4j-api-2.26.1.jar cpe:2.3:a:apache:log4j:2.26.1:*:*:*:*:*:*:* pkg:maven/org.apache.logging.log4j/log4j-api@2.26.1   0 Highest 43
lombok-1.18.48.jar: mavenEcjBootstrapAgent.jar   0 7
lombok-1.18.48.jar pkg:maven/org.projectlombok/lombok@1.18.48   0 36
maven-archiver-3.6.2.jar pkg:maven/org.apache.maven/maven-archiver@3.6.2   0 29
maven-artifact-3.10.0.jar pkg:maven/org.apache.maven/maven-artifact@3.10.0   0 28
maven-builder-support-3.10.0.jar pkg:maven/org.apache.maven/maven-builder-support@3.10.0   0 26
maven-core-3.10.0.jar cpe:2.3:a:apache:maven:3.10.0:*:*:*:*:*:*:* pkg:maven/org.apache.maven/maven-core@3.10.0   0 Highest 26
maven-model-3.10.0.jar pkg:maven/org.apache.maven/maven-model@3.10.0   0 28
maven-model-builder-3.10.0.jar pkg:maven/org.apache.maven/maven-model-builder@3.10.0   0 34
maven-plugin-annotations-3.16.0.jar pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.16.0   0 26
maven-plugin-api-3.10.0.jar pkg:maven/org.apache.maven/maven-plugin-api@3.10.0   0 28
maven-reporting-api-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   0 29
maven-reporting-impl-4.0.0.jar pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   0 29
maven-repository-metadata-3.10.0.jar pkg:maven/org.apache.maven/maven-repository-metadata@3.10.0   0 28
maven-resolver-api-1.9.27.jar pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   0 34
maven-resolver-connector-basic-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.24   0 34
maven-resolver-impl-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.24   0 32
maven-resolver-named-locks-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.24   0 33
maven-resolver-provider-3.10.0.jar pkg:maven/org.apache.maven/maven-resolver-provider@3.10.0   0 28
maven-resolver-spi-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.24   0 32
maven-resolver-transport-apache-2.0.24.jar cpe:2.3:a:apache-ssl:apache-ssl:2.0.24:*:*:*:*:*:*:* pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.24   0 Low 34
maven-resolver-transport-file-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.24   0 34
maven-resolver-util-2.0.24.jar pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.24   0 34
maven-settings-3.10.0.jar pkg:maven/org.apache.maven/maven-settings@3.10.0   0 28
maven-settings-builder-3.10.0.jar pkg:maven/org.apache.maven/maven-settings-builder@3.10.0   0 28
maven-shared-utils-3.5.0.jar cpe:2.3:a:apache:maven_shared_utils:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:3.5.0:*:*:*:*:*:*:* 		pkg:maven/org.apache.maven.shared/maven-shared-utils@3.5.0   0 Highest 29
modernizer-maven-annotations-3.5.0.jar pkg:maven/org.gaul/modernizer-maven-annotations@3.5.0   0 19
org.eclipse.sisu.inject-1.1.0.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.1.0   0 39
org.eclipse.sisu.plexus-1.1.0.jar pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.1.0   0 34
plexus-archiver-4.9.2.jar cpe:2.3:a:codehaus-plexus:plexus-archiver:4.9.2:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2   0 Highest 29
plexus-cipher-2.0.jar pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   0 20
plexus-classworlds-2.12.1.jar pkg:maven/org.codehaus.plexus/plexus-classworlds@2.12.1   0 37
plexus-component-annotations-2.2.0.jar pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   0 23
plexus-i18n-1.1.0.jar pkg:maven/org.codehaus.plexus/plexus-i18n@1.1.0   0 27
plexus-interpolation-1.30.0.jar pkg:maven/org.codehaus.plexus/plexus-interpolation@1.30.0   0 35
plexus-io-3.4.2.jar pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   0 24
plexus-resources-1.4.0.jar pkg:maven/org.codehaus.plexus/plexus-resources@1.4.0   0 29
plexus-sec-dispatcher-2.0.jar cpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:* pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0   0 Highest 20
plexus-utils-4.1.0.jar cpe:2.3:a:codehaus-plexus:plexus-utils:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:4.1.0:*:*:*:*:*:*:* 		pkg:maven/org.codehaus.plexus/plexus-utils@4.1.0   0 Highest 35
plexus-velocity-2.4.0.jar pkg:maven/org.codehaus.plexus/plexus-velocity@2.4.0   0 31
plexus-xml-3.1.0.jar pkg:maven/org.codehaus.plexus/plexus-xml@3.1.0   0 33
qdox-2.2.0.jar pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   0 47
slf4j-api-2.0.20.jar pkg:maven/org.slf4j/slf4j-api@2.0.20   0 29
slf4j-simple-2.0.20.jar pkg:maven/org.slf4j/slf4j-simple@2.0.20   0 37
snappy-0.4.jar cpe:2.3:a:dain:snappy:0.4:*:*:*:*:*:*:* pkg:maven/org.iq80.snappy/snappy@0.4 MEDIUM 1 Highest 32
spotbugs-4.10.5.jar pkg:maven/com.github.spotbugs/spotbugs@4.10.5   0 48
spotbugs-annotations-4.10.5.jar pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5   0 53
velocity-engine-core-2.4.1.jar cpe:2.3:a:apache:velocity_engine:2.4.1:*:*:*:*:*:*:* pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1   0 Highest 31
velocity-tools-generic-3.1.jar cpe:2.3:a:apache:velocity_tools:3.1:*:*:*:*:*:*:* pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1   0 Highest 28
xmlresolver-5.3.3-data.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 12
xmlresolver-5.3.3.jar pkg:maven/org.xmlresolver/xmlresolver@5.3.3   0 26
xz-1.9.jar pkg:maven/org.tukaani/xz@1.9   0 33
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll   0 4
zstd-jni-1.5.5-11.jar pkg:maven/com.github.luben/zstd-jni@1.5.5-11   0 43

Dependencies (vulnerable)

Saxon-HE-12.10.jar

Description:

The XSLT and XQuery Processor

License:

Mozilla Public License Version 2.0: http://www.mozilla.org/MPL/2.0/
File Path: C:\Users\Jeremy\.m2\repository\net\sf\saxon\Saxon-HE\12.10\Saxon-HE-12.10.jar
MD5: 3c64925cf126ec45d2c924cfb41cf41a
SHA1: 1d6492dbfa32ddb2cd432fa3fbb940bf8137a5d2
SHA256:b571af282f25d7301059f788b9a149aab8b5cdc14ef3d212dc5425d3dcbb9a97
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
Saxon-HE-12.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/net.sf.saxon/Saxon-HE@12.10   (Confidence:High)

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: spotbugs-maven-plugin:provided
aopalliance-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/aopalliance/aopalliance@1.0   (Confidence:High)

asm-9.11.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm\9.11\asm-9.11.jar
MD5: 67fe79a0c88ca77bf89ad0897cd0ffbc
SHA1: 2a2c870691d2220eb93492c88fdcd3711ab0fadb
SHA256:5fe3b469b8646e5bc53a897840952d63b712d4923d2a7a26aebc585f1fec7676
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-9.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.11   (Confidence:High)

asm-analysis-9.11.jar

Description:

Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-analysis\9.11\asm-analysis-9.11.jar
MD5: 1f0307062449c4990dd8f772f6fb452e
SHA1: f35f7706e93e0de19c256b3e7e7f43e792a8d571
SHA256:a1421c20978ca0a330f241b17923a751a23fb1c9423fda1aba7591bb086b01d8
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-analysis-9.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.ow2.asm/asm-analysis@9.11   (Confidence:High)

asm-commons-9.11.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-commons\9.11\asm-commons-9.11.jar
MD5: 2771e9f87a5c9caf6abab10c3e995ea8
SHA1: 07ddfa7d6cee28f627af0bd246ef046e24e1b02a
SHA256:fcff37e6a0227a9f5ee81a7c07f51249307fa15889b56a359ae6f773c164c22b
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-commons-9.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.ow2.asm/asm-commons@9.11   (Confidence:High)

asm-tree-9.11.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-tree\9.11\asm-tree-9.11.jar
MD5: 20ed5cf0fd4b739262b2c62303ebf32f
SHA1: 2e0298e7c0986f94e161de26d108c78d20547935
SHA256:da8ad24d0bf7efb0674a906f59a7d441692b641718371f3bce6762b191a169fd
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-tree-9.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.ow2.asm/asm-tree@9.11   (Confidence:High)

asm-util-9.11.jar

Description:

Utilities for ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-util\9.11\asm-util-9.11.jar
MD5: 4e6556015e270658fc05bc2823f2da08
SHA1: 1d4e8839681014f2530b85a1969eb5b0d8af3dd7
SHA256:d5a23a677f31b8a7d2419895906e1fcbd9ac995beffb20944c8610c1bc377609
Referenced In Project/Scope: spotbugs-maven-plugin:compile
asm-util-9.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.ow2.asm/asm-util@9.11   (Confidence:High)

bcel-6.13.0.jar

Description:

The Commons Byte Code Engineering Library (BCEL) is designed to provide users with a convenient way to analyze, create, and manipulate compiled .class files.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\bcel\bcel\6.13.0\bcel-6.13.0.jar
MD5: afbbc617d53ae6131383f6de193a3a2d
SHA1: 02b0382e079601248854074de4ba5f1f72822872
SHA256:a37a65752e861c07d313ca47bef0eb75bf7643152c82ca54c4f42d036850b4fb
Referenced In Project/Scope: spotbugs-maven-plugin:compile
bcel-6.13.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.apache.bcel/bcel@6.13.0   (Confidence:High)
  • cpe:2.3:a:apache:commons_bcel:6.13.0:*:*:*:*:*:*:*   (Confidence:Low)   

checker-qual-4.2.3.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: https://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\4.2.3\checker-qual-4.2.3.jar
MD5: d9e63a451931be32bd29cfc3ac5674c1
SHA1: d2a10af5c8574adfe24f5e35ff56cca92af2e916
SHA256:f868f731f6e37db3e1c2140d06016477989959a2d13fc5bed9c46760cffd5ba0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
checker-qual-4.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@4.2.3   (Confidence:High)

commons-beanutils-1.11.0.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-beanutils\commons-beanutils\1.11.0\commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256:9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-codec-1.22.1.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-codec\commons-codec\1.22.1\commons-codec-1.22.1.jar
MD5: 7bfd10447817907ffd7f14fbc6493940
SHA1: da09bcdb330deef7cfee70f30c6889fda70d5ebf
SHA256:78a5d732fbd715e2d10bd7150d2f8030bae57267f8aacc5c88f642cb6c2e5d3f
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-codec-1.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-codec/commons-codec@1.22.1   (Confidence:High)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-collections\commons-collections\3.2.2\commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-compress-1.26.1.jar

Description:

Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-compress\1.26.1\commons-compress-1.26.1.jar
MD5: 7af7d22a7280508327d809b183114a92
SHA1: 44331c1130c370e726a2e1a3e6fba6d2558ef04a
SHA256:27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-compress-1.26.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

commons-digester3-3.2.jar

Description:

    The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-digester3\3.2\commons-digester3-3.2.jar
MD5: 41d2c62c7aedafa7a3627794abc83f71
SHA1: c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79
SHA256:1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-digester3-3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.commons/commons-digester3@3.2   (Confidence:High)

commons-io-2.22.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.22.0\commons-io-2.22.0.jar
MD5: f91d54bd47c42456b4a5ae62eed85565
SHA1: 5b1e18bc0ad651ed878029d83f88d9c8189fd51e
SHA256:2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-io-2.22.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

commons-lang3-3.21.0.jar

Description:

  Apache Commons Lang is a package of Java utility classes for the Java lang packages,
  classes that could be considered standard to justify their existence in java.lang.

  The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21, and 25.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml

  Please ensure your build environment is up-to-date and kindly report any build issues.

  Starting with Commons Lang 3.9, we target Java 8 and use those features.

  For advice on upgrading from 2.x to 3.x, see https://commons.apache.org/lang/article3_0.html

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.21.0\commons-lang3-3.21.0.jar
MD5: 74a94a62f74cf1566767a085b3b9c758
SHA1: 7bad013a5acee0a078d75fc352a906baa57acb74
SHA256:a2af247ec4db6eb8947e18e23e0433e4871a7c5d0a40e1f92e46ede54ae1defe
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-lang3-3.21.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

commons-logging-1.4.0.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-logging\commons-logging\1.4.0\commons-logging-1.4.0.jar
MD5: 954e27d33e55e587a4694d5952a0c5c6
SHA1: e8f6313365dfa0580e49c58837afc8caa9b4ce05
SHA256:d175dbd751dd782a63bde28c7a039520e971f25e84b79c19b8435edc3603e0dc
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-logging-1.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/commons-logging/commons-logging@1.4.0   (Confidence:High)

commons-text-1.15.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-text\1.15.0\commons-text-1.15.0.jar
MD5: 756b7c5438d89a0c311d811c1a06d19a
SHA1: 9899093aa40f0199d6c39b131b8f087cdb37e399
SHA256:58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6
Referenced In Project/Scope: spotbugs-maven-plugin:compile
commons-text-1.15.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

dom4j-2.2.0.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\dom4j\dom4j\2.2.0\dom4j-2.2.0.jar
MD5: 6e7161d8e8f5fd0055554374f469abd3
SHA1: 52368b1da663abd44a866c4fe4f62c8d8695204a
SHA256:3fae79e081096e1410645eb3557c63b79ca266d510ab479889511109becd1690
Referenced In Project/Scope: spotbugs-maven-plugin:compile
dom4j-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

doxia-core-2.1.0.jar

Description:

Doxia core classes and interfaces.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-core\2.1.0\doxia-core-2.1.0.jar
MD5: 7bfd7d6148dc6bd81fc2f009c786ca47
SHA1: ce027bd5b8610ff383c25e23f4815793f6bca096
SHA256:2a439e0f4672b69ae623ea992149e0da52eb0fa3bebfbdc4c829585d7d3358c7
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-core-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0   (Confidence:High)

doxia-integration-tools-2.1.0.jar

Description:

A collection of tools to help the integration of Doxia Sitetools in Maven plugins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-integration-tools\2.1.0\doxia-integration-tools-2.1.0.jar
MD5: 5000e4900f261cacca5eb1bc1886b47b
SHA1: c1fd8a357e0880ef6613927d05c7dc2b1eed3b30
SHA256:05c5d3b498e94a4107f5851c87aebde155e7dea24c1dd4edf983bae3d11727b2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-integration-tools-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.1.0   (Confidence:High)

doxia-module-apt-2.0.0.jar

Description:

A Doxia module for Almost Plain Text source documents.
    APT format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-apt\2.0.0\doxia-module-apt-2.0.0.jar
MD5: f6613830c1f558b909b32d3e3e271911
SHA1: 0505b4e8d57eb3f8c3d66adcca85ce09311742ba
SHA256:f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-apt-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0   (Confidence:High)

doxia-module-xdoc-2.0.0.jar

Description:

A Doxia module for Xdoc source documents.
    Xdoc format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xdoc\2.0.0\doxia-module-xdoc-2.0.0.jar
MD5: dd12065dc641017da7006cb39f0490e5
SHA1: fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c
SHA256:7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
doxia-module-xdoc-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0   (Confidence:High)

doxia-module-xhtml5-2.1.0.jar

Description:

A Doxia module for Xhtml5 source documents.
    Xhtml5 format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xhtml5\2.1.0\doxia-module-xhtml5-2.1.0.jar
MD5: df787c4128fd9a000556cc63cdc6bf0b
SHA1: c3cf3b3a6781c31f3c2ffac6b12fa364f08543f8
SHA256:7046028cc59f088f61daeea3edc71f198f19ccf937768599f92e5b39da58552c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-module-xhtml5-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.1.0   (Confidence:High)

doxia-sink-api-2.1.0.jar

Description:

Doxia Sink API.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-sink-api\2.1.0\doxia-sink-api-2.1.0.jar
MD5: 87a07d1cbbede4fa5ff79e94a4c77907
SHA1: 079edb7ed839b2dc5c7d4e4fc452e3d24e3dceda
SHA256:b465db838dd482a994d32a088bea4bcbaa62cfb8b2853511a9f8c3e769402c74
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-sink-api-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.1.0   (Confidence:High)

doxia-site-model-2.1.0.jar

Description:

The Site Model handles the descriptor for sites, also known as site.xml.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-model\2.1.0\doxia-site-model-2.1.0.jar
MD5: 0fdb03070b40bb548e1eacd940101580
SHA1: 00afb3d6ae1d8a9e07fdaa17f50d9c7036c6937c
SHA256:11eeeb79433fec1a36f5ad33305b010f4b0933afb70ba6f1285dbfecedb90d89
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-model-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-model@2.1.0   (Confidence:High)

doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.min.js

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar\js\mermaid-11.13.0.min.js
MD5: dea6a27074615535e25724f772acd9b1
SHA1: c63f3e1eb4941fc68c8b2b7893a86123b2cc6509
SHA256:07056f2ec1fe7f7da4531755726ae93f13cc260a543c8d706c0b29e8999f05bb
Referenced In Project/Scope: spotbugs-maven-plugin:compile

Identifiers

  • None

doxia-site-renderer-2.1.0.jar: mermaid-11.13.0.tiny.min.js

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar\js\mermaid-11.13.0.tiny.min.js
MD5: 6a553790010de730d0de646e8f9a74a8
SHA1: 555e6e99f3f3ebf2ddf525c47bf6c6d4cea48a78
SHA256:b08451436a5517d5056e682d4d1bde96672eefad2b6f8a1b02169be56f1265fd
Referenced In Project/Scope: spotbugs-maven-plugin:compile

Identifiers

  • None

doxia-site-renderer-2.1.0.jar

Description:

The Site Renderer handles the rendering of sites, merging site model with document content.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\2.1.0\doxia-site-renderer-2.1.0.jar
MD5: 9eff1a7d5481d132fe8666795c01ebbf
SHA1: 4ec5d426db6f9acec40e8dca17243a7a4a44d45f
SHA256:dcff71b635559695643d8a7ecec3c22d8437ab5a46db54dbcd28b9585b8668b0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-site-renderer-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.1.0   (Confidence:High)

doxia-skin-model-2.1.0.jar

Description:

The Skin Model defines metadata for Doxia Sitetools skins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-skin-model\2.1.0\doxia-skin-model-2.1.0.jar
MD5: e3c8d59206e1fc837827d59c0b57cb2b
SHA1: c20661035bdd2c63515cc9ad99d47e3ab62c5207
SHA256:6ec34a33e393592f6d22cc39b7eab38fac4b5d8941c60187a299696a5b7c8e00
Referenced In Project/Scope: spotbugs-maven-plugin:compile
doxia-skin-model-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.1.0   (Confidence:High)

error_prone_annotations-2.50.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.50.0\error_prone_annotations-2.50.0.jar
MD5: 1ded1848cfd4f5167e00824faf9c4d3b
SHA1: 74ba43e49ab1184d41634af2ef0047e82c4064b0
SHA256:4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
error_prone_annotations-2.50.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0   (Confidence:High)

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\failureaccess\1.0.3\failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
failureaccess-1.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/com.google.guava/failureaccess@1.0.3   (Confidence:High)

groovy-5.1.3.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy\5.1.3\groovy-5.1.3.jar
MD5: 538cf7001fdcb6fd004de7bc1b68084f
SHA1: f47a3f8947155984c8f4000d619ac9b81e03ed49
SHA256:705346207f0736f3419826bbe6c7cf77baaad13d9c14b29c916e75bc43dd9210
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-5.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

groovy-json-5.1.3.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-json\5.1.3\groovy-json-5.1.3.jar
MD5: d635d163942122f86bafe05bfba3a486
SHA1: fd1ddecc011cbb9102c1a944bf9c99f8189ed551
SHA256:e0eee09d5916f2512d78184ef418abc26fa42988867afaee68d096a04a0cbbe6
Referenced In Project/Scope: spotbugs-maven-plugin:compile
groovy-json-5.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.groovy/groovy-json@5.1.3   (Confidence:High)
  • cpe:2.3:a:google:gmail:5.1.3:*:*:*:*:*:*:*   (Confidence:Low)   

gson-2.14.0.jar

Description:

Gson JSON library

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\gson\gson\2.14.0\gson-2.14.0.jar
MD5: 43b20830936ec97d8df6b174e3509d9e
SHA1: efc0e34ede4e3204eaefb84a00e55e8c86634382
SHA256:2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f
Referenced In Project/Scope: spotbugs-maven-plugin:compile
gson-2.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

guava-33.7.1-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\33.7.1-jre\guava-33.7.1-jre.jar
MD5: 1a86f411821e4ba79f2747f301b7e2ba
SHA1: 77e37866fb969b4ff6710faaefd3a86067730ada
SHA256:796d8e28ac64e83a47c4c5935a8fecc4682650a04bbdead738ef0f5a3a0e6c46
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guava-33.7.1-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

guice-5.1.0-classes.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\inject\guice\5.1.0\guice-5.1.0-classes.jar
MD5: d4d4d9bf878b98862116e8ccc0a5c34e
SHA1: e7ba4c25bec3761840f67c73f166c0d509d01d1d
SHA256:142ad4475e19524d2fe3ac995b3f7cbc962fc726f2edb9dbdccc61feab9b2bf9
Referenced In Project/Scope: spotbugs-maven-plugin:provided
guice-5.1.0-classes.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/com.google.inject/guice@5.1.0   (Confidence:Highest)

httpclient-4.5.14.jar

Description:

   Apache HttpComponents Client

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\httpclient\4.5.14\httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Project/Scope: spotbugs-maven-plugin:provided
httpclient-4.5.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

httpcore-4.4.16.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\httpcore\4.4.16\httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Project/Scope: spotbugs-maven-plugin:provided
httpcore-4.4.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1   (Confidence:High)

javaparser-core-3.28.2.jar

Description:

The core parser functionality. This may be all you need.

License:

GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\javaparser\javaparser-core\3.28.2\javaparser-core-3.28.2.jar
MD5: ed0802294dbb571f2193546258040190
SHA1: 0f585a590072b20c6b4be3c35291b6e66a88b995
SHA256:b5499a3b1c40b16c0671fabe478c9aafeab38160c6fde74a6c13f42d86716ecd
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javaparser-core-3.28.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/com.github.javaparser/javaparser-core@3.28.2   (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\javax\inject\javax.inject\1\javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: spotbugs-maven-plugin:compile
javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/javax.inject/javax.inject@1   (Confidence:High)

jaxen-2.0.6.jar

Description:

Jaxen is a universal XPath engine for Java.

License:

https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt
File Path: C:\Users\Jeremy\.m2\repository\jaxen\jaxen\2.0.6\jaxen-2.0.6.jar
MD5: ad503c85bc791f01d5b8f2f6d9a63bbd
SHA1: 64a435da64c31e6e38cdcb38c3ee14b61c156729
SHA256:3e2a755b283fd492fa4be204294c7abb7cd63ac94fb366baab9c7bb9afb00b6d
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
jaxen-2.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/jaxen/jaxen@2.0.6   (Confidence:High)

jcip-annotations-1.0-1.jar

Description:

    A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\stephenc\jcip\jcip-annotations\1.0-1\jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: spotbugs-maven-plugin:compile
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1   (Confidence:High)

json-simple-3.0.2.jar

Description:

Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\cliftonlabs\json-simple\3.0.2\json-simple-3.0.2.jar
MD5: 148c0d1bdc1bcb24394627d6930ee9ad
SHA1: 2337afdb06134a12fc0239299c3ceb2e9c209516
SHA256:fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295
Referenced In Project/Scope: spotbugs-maven-plugin:compile
json-simple-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.cliftonlabs/json-simple@3.0.2   (Confidence:High)

jspecify-1.0.1.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.1\jspecify-1.0.1.jar
MD5: d4fe1ea4d953b66fcb1d6043c22bffcf
SHA1: 3d60fd98eb8ade73004f4195c37b6317e02cf3d7
SHA256:070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66
Referenced In Project/Scope: spotbugs-maven-plugin:compile
jspecify-1.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.1   (Confidence:High)
  • cpe:2.3:a:google:gmail:1.0.1:*:*:*:*:*:*:*   (Confidence:Low)   

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: spotbugs-maven-plugin:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2   (Confidence:High)

log4j-api-2.26.1.jar

Description:

The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-api\2.26.1\log4j-api-2.26.1.jar
MD5: 8ed35fc9ea449bc9e21a8139842d6233
SHA1: b9864ed8d0c01f65f3b0bf70f1447e5cc1b49c24
SHA256:f1810a4704ccce019d02bba029dc02a4f2ac0c997f647b465e7d409c1927f822
Referenced In Project/Scope: spotbugs-maven-plugin:compile
log4j-api-2.26.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.26.1

Identifiers

lombok-1.18.48.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.48\lombok-1.18.48.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 4f7e8f61c3f49e987ea9a9c204b27287
SHA1: 2f16dbf07f3bc5a2febd947e3707c700086b4b96
SHA256:93d29a47bf31f938dd913796791c691abbd194602fd418ee134e3f53b7231d92
Referenced In Project/Scope: spotbugs-maven-plugin:provided

Identifiers

  • None

lombok-1.18.48.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.48\lombok-1.18.48.jar
MD5: 1c6eba25072e06dd6dc539c1db0de929
SHA1: 6858f13541bab505384f07053c5a7b539bbfd3e3
SHA256:85477a4655ebb2c074a9099cfb749be454449fee564d4282610df1b85f7c508b
Referenced In Project/Scope: spotbugs-maven-plugin:provided
lombok-1.18.48.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.48   (Confidence:High)

maven-archiver-3.6.2.jar

Description:

Provides utility methods for creating JARs and other archive files from a Maven project.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-archiver\3.6.2\maven-archiver-3.6.2.jar
MD5: 742b3136d8ff1fcb66f5fd7f3c267c8d
SHA1: a2d949d87fed6db197cc3cceec93012dd2317ca0
SHA256:1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-archiver-3.6.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven/maven-archiver@3.6.2   (Confidence:High)

maven-artifact-3.10.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.10.0\maven-artifact-3.10.0.jar
MD5: 820950ff56838b2bfc1f02d7c4981d0d
SHA1: 27e1f01911be3be075ea108d4fe8fd59ae717c5c
SHA256:5f97d58b507cd49887ce5f50e41832573ea204e9cf6705c9187a51b8ade9b543
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-artifact-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven/maven-artifact@3.10.0   (Confidence:High)

maven-builder-support-3.10.0.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-builder-support\3.10.0\maven-builder-support-3.10.0.jar
MD5: e7f020007fd5664641ca1e0d7c6ade86
SHA1: d2331adcf8b7064901224aafefc9bd9779a1d909
SHA256:ff90d659e923d250464213b89fd452bd3591d5e40c86ad33c389f6894b3796a0
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-builder-support-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-builder-support@3.10.0   (Confidence:High)

maven-core-3.10.0.jar

Description:

Maven Core classes.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-core\3.10.0\maven-core-3.10.0.jar
MD5: ed06d8413d03d1018aac836fe854e0dc
SHA1: 330aca272bc504a1bec3d3ac3949ea8e840191bd
SHA256:7b6277e9d1e23a7ca225c777c8809abd8626eabace926658df0fba3b853868eb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-core-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

maven-model-3.10.0.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.10.0\maven-model-3.10.0.jar
MD5: 4e4a78f6075090d1248a24fc77ab97ef
SHA1: 0f5dacf6efbc0cb13fe68cfa305beb95c6c75091
SHA256:a958d15168ffba8fe3a2e936c1bc43604ccfbc46d117dfc0ead58e724badf08f
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven/maven-model@3.10.0   (Confidence:High)

maven-model-builder-3.10.0.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model-builder\3.10.0\maven-model-builder-3.10.0.jar
MD5: 37c23afdbfc881eee408dba0383270ad
SHA1: c6a1e4079442e498f0183fc376be2cb2e3e75e7a
SHA256:581a3b95631cfd547a0221ee17a94b3d9a478b24a82c042684a1897c1a7f416e
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-model-builder-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-model-builder@3.10.0   (Confidence:High)

maven-plugin-annotations-3.16.0.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.16.0\maven-plugin-annotations-3.16.0.jar
MD5: 68de8173773f8a6db1dab5bcf3ef022d
SHA1: bce1cd371074feda3fd6f2084b1babd254f1e3ef
SHA256:bcd4036f03758dde0937431393e5513d32d34497c19e66d60d78441032041341
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-annotations-3.16.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.16.0   (Confidence:High)

maven-plugin-api-3.10.0.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.10.0\maven-plugin-api-3.10.0.jar
MD5: 41fde44491fb145c36267c99b6d395e2
SHA1: f93f39067e09afab80b2404860aa641465a0f14f
SHA256:2d99e70688295072ab35e719dce28b82b95b591c115ef6052b1aac08b4701dfa
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-plugin-api-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven/maven-plugin-api@3.10.0   (Confidence:High)

maven-reporting-api-4.0.0.jar

Description:

API to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-api\4.0.0\maven-reporting-api-4.0.0.jar
MD5: 9c49fcb81d69bb5ec513d624c181fc05
SHA1: d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb
SHA256:cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0   (Confidence:High)

maven-reporting-impl-4.0.0.jar

Description:

Abstract classes to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-impl\4.0.0\maven-reporting-impl-4.0.0.jar
MD5: 302ed7d914dc813380d361d1acb83c2f
SHA1: d3753b5c13a873a5ddb71f404c6fe1179a4688c2
SHA256:e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-reporting-impl-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0   (Confidence:High)

maven-repository-metadata-3.10.0.jar

Description:

Per-directory local and remote repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-repository-metadata\3.10.0\maven-repository-metadata-3.10.0.jar
MD5: e68503413689794c270c4b3206494b3f
SHA1: 258df38658f65e6e9dea4e7a591f7d2729eb88e3
SHA256:5220a29c803995f5a57d6238184111761ba30d4e5f395ab059c17c708627e4d8
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-repository-metadata-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-repository-metadata@3.10.0   (Confidence:High)

maven-resolver-api-1.9.27.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-api\1.9.27\maven-resolver-api-1.9.27.jar
MD5: c7bd6f04c52f098ba934742bb204cb5e
SHA1: 2fe7e86e3c193121789470507cf4fadd5bd7ad59
SHA256:a895d222283666a7320ddc76615e2e93a41fabd93ce9a6bf9ddee39272bb87b4
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-api-1.9.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.27   (Confidence:High)

maven-resolver-connector-basic-2.0.24.jar

Description:

A repository connector implementation for repositories using URI-based layouts.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-connector-basic\2.0.24\maven-resolver-connector-basic-2.0.24.jar
MD5: 71b4ca2d27e0df98cacd62aa51d258dc
SHA1: d3c56e3d88f32a76ef8a049af344ba0a91f881ea
SHA256:90686efd19999cf9eb6c1dfe06be550d090702c2e47a3ec3a29a876b5b120509
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-connector-basic-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.24   (Confidence:High)

maven-resolver-impl-2.0.24.jar

Description:

An implementation of the repository system.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-impl\2.0.24\maven-resolver-impl-2.0.24.jar
MD5: 8d5fd00768505a2ff7cd84bc9ddbfde1
SHA1: ff1b82108c48eb69aabb4c2ea7b887da69df4cdf
SHA256:1be79f951f68764ecdd46f651c008287e2e925763cd51fa97a33d7d8b9b97bd0
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-impl-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.24   (Confidence:High)

maven-resolver-named-locks-2.0.24.jar

Description:

A synchronization utility implementation using Named locks.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-named-locks\2.0.24\maven-resolver-named-locks-2.0.24.jar
MD5: 5279dddbe47a10e633a701ae2383d215
SHA1: 9d17f451a78f010cb0595fa1f7dfb68b9bed7edd
SHA256:227d2bb177b914c0cedca190ba021b48986dcd66634b3774dfd0656e45e9c4d5
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-named-locks-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.24   (Confidence:High)

maven-resolver-provider-3.10.0.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-resolver-provider\3.10.0\maven-resolver-provider-3.10.0.jar
MD5: ff4616098fe8c1cb69835c7a36755c99
SHA1: 49ef606fd1cf4ff7828f8f3094e4c40b7182efa6
SHA256:93f8d834d24a8866054a9544f9b088b6300e3dd0ee1966dbd28dd122a3d9d4f9
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-provider-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-resolver-provider@3.10.0   (Confidence:High)

maven-resolver-spi-2.0.24.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-spi\2.0.24\maven-resolver-spi-2.0.24.jar
MD5: b9a05e758d0417e43ad690e1596853a7
SHA1: 9738561c983e307b4e0482e0e18691b31507aa81
SHA256:c2e3e1075b49cfa9fcb14f36398ff3d8808b5aba189f4a5bcda1b0fe1aceb11e
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-spi-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.24   (Confidence:High)

maven-resolver-transport-apache-2.0.24.jar

Description:

A transport implementation for repositories using http:// and https:// URLs based on Apache HTTP Client 4.5.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-transport-apache\2.0.24\maven-resolver-transport-apache-2.0.24.jar
MD5: dec8db6e3521b82b15d17da64f235aaa
SHA1: ced2af8126da833a6f1ea493403b16c912a29f25
SHA256:87d5e2321b424bb6b67afa04ffde5297fd3fffb03f23b636fddacad77a6f17b8
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-transport-apache-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.24   (Confidence:High)
  • cpe:2.3:a:apache-ssl:apache-ssl:2.0.24:*:*:*:*:*:*:*   (Confidence:Low)   

maven-resolver-transport-file-2.0.24.jar

Description:

A transport implementation for repositories using file:// URLs.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-transport-file\2.0.24\maven-resolver-transport-file-2.0.24.jar
MD5: b1c6fffd35fadbd38534beab24d0cfee
SHA1: 55f43d4ca3744280a367ea68ffaca5ec2a97edec
SHA256:91121fd03ae8cbd08599aedf6dc2c58119b2d7cc6f3b6f9cdc78562ab6536de3
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-transport-file-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.24   (Confidence:High)

maven-resolver-util-2.0.24.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

Apache-2.0;link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-util\2.0.24\maven-resolver-util-2.0.24.jar
MD5: 8307c4cb8125d38c1190bc2f44f3eefc
SHA1: 1e8d9ff7ef457863a604fd6626637ae11bf61c90
SHA256:3fb490e1799f18aa22a05babdc57a74a3a1020c924890865a4cab7a7a34cd286
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-resolver-util-2.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.24   (Confidence:High)

maven-settings-3.10.0.jar

Description:

Maven Settings model.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings\3.10.0\maven-settings-3.10.0.jar
MD5: 29ee9e839d0235934b4a5e24b16b1039
SHA1: ab7932f9480c2033c63a6f2f9c4c33d682fe7f19
SHA256:3a8a1c8388d0008752220302e898db385eda7a7925ab7f84a173b7feebf758fd
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-settings@3.10.0   (Confidence:High)

maven-settings-builder-3.10.0.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings-builder\3.10.0\maven-settings-builder-3.10.0.jar
MD5: e29e8b5b38392ed35dd7f62d28dc466c
SHA1: 6554e565fa424a1816995958e173c6bced9ea3e6
SHA256:5d7cd94e41a716cd328f04648c57dfa69470572402deae1845247a542dc30c23
Referenced In Project/Scope: spotbugs-maven-plugin:provided
maven-settings-builder-3.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.apache.maven/maven-settings-builder@3.10.0   (Confidence:High)

maven-shared-utils-3.5.0.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-shared-utils\3.5.0\maven-shared-utils-3.5.0.jar
MD5: c0bd6cabb906c4e783e26477407c0f82
SHA1: e38e94ebaa665c409c981a7651feffd625de3112
SHA256:d7beec59f8fbf6e49f88b954c9bda16e15d2a84fb8c93a313fafbc2dd2c7f18a
Referenced In Project/Scope: spotbugs-maven-plugin:compile
maven-shared-utils-3.5.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

modernizer-maven-annotations-3.5.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.5.0\modernizer-maven-annotations-3.5.0.jar
MD5: 3bd3749d84e7bdcc0a731ab0316e8f77
SHA1: 7f7144a4cf519f13cf6a35f1e16852cfeed04b16
SHA256:765e234f875e80f725fb8724a7f7268df426d3fd35368ae5a5fa503e48f9e7f5
Referenced In Project/Scope: spotbugs-maven-plugin:provided
modernizer-maven-annotations-3.5.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.5.0   (Confidence:High)

org.eclipse.sisu.inject-1.1.0.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.inject\1.1.0\org.eclipse.sisu.inject-1.1.0.jar
MD5: 27cdf6355ce241f5e8d69a686625e5aa
SHA1: c758820e578794e36a633403aa8411a48c822bbd
SHA256:f3edea5119c91be496e3ff55948fa16c89cdbacf9c2e74bdc9fafda1a3faba20
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.inject-1.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@1.1.0   (Confidence:High)

org.eclipse.sisu.plexus-1.1.0.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\1.1.0\org.eclipse.sisu.plexus-1.1.0.jar
MD5: 0fa0eeb7c546199dca102530b972cc89
SHA1: 709efbf41d101e71b9c5d7af2b06babe84ab6150
SHA256:7ebc52738567e0450b6857a404a147639533d35c38a5ba42e4c5ab2910c6df94
Referenced In Project/Scope: spotbugs-maven-plugin:compile
org.eclipse.sisu.plexus-1.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.1.0   (Confidence:High)

plexus-archiver-4.9.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-archiver\4.9.2\plexus-archiver-4.9.2.jar
MD5: 408c466d4a20a02f4a2428a4f003ca13
SHA1: a03ed402ef8468c1d1bda368d7213cad67f16a71
SHA256:a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-archiver-4.9.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-cipher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-cipher\2.0\plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-cipher@2.0   (Confidence:High)

plexus-classworlds-2.12.1.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.12.1\plexus-classworlds-2.12.1.jar
MD5: 68565026a6d56205927ba80bbdfad189
SHA1: a050c2d8c80e8cc20c423ccd189c262a5d85a260
SHA256:7f88ef8b83d6f2be46b12f17b982439a5ec83c566f5e2a04dad2d684e73cda94
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-classworlds-2.12.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.10.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-classworlds@2.12.1   (Confidence:High)

plexus-component-annotations-2.2.0.jar

Description:

Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.2.0\plexus-component-annotations-2.2.0.jar
MD5: a2397189a5ce25e7d2d44effa9f5176c
SHA1: a506f84636ea7ae370d04167dd155c103e616f68
SHA256:50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-component-annotations-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0   (Confidence:High)

plexus-i18n-1.1.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-i18n\1.1.0\plexus-i18n-1.1.0.jar
MD5: 2d36d7df65cddbbea3997ddf1afb310a
SHA1: 93f0046c9625734fb4e796afba1af6f54ef6c307
SHA256:995c0792669a031c94d91960a5beb60e1516abcec17a104f9f47470b36e56e27
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-i18n-1.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-i18n@1.1.0   (Confidence:High)

plexus-interpolation-1.30.0.jar

Description:

A component that resolves expressions in strings against stackable value sources, as used for
    POM interpolation.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-interpolation\1.30.0\plexus-interpolation-1.30.0.jar
MD5: 092b0a15f9afa4fde64b10640772be06
SHA1: e48988a88cf1624451648f1c150e88c36aa724de
SHA256:457307267f6d2ea2582f5449df9350b86728f46c23ccd486341087ace473e9a1
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-interpolation-1.30.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-interpolation@1.30.0   (Confidence:High)

plexus-io-3.4.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-io\3.4.2\plexus-io-3.4.2.jar
MD5: 77515ce571e8169c13220c506ad177a4
SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942d
SHA256:6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-io@3.4.2   (Confidence:High)

plexus-resources-1.4.0.jar

Description:

A component to transparently retrieve resources from the filesystem, classpath or internet.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-resources\1.4.0\plexus-resources-1.4.0.jar
MD5: 7124a8d08679f16ef582c4b10cb941ff
SHA1: 4861daf1dc8bea63c094c04bbfa1d70c7ae44d97
SHA256:32e7870a04ec6493c348435350cda357ca2de346e130e4960bc1f69b74a02751
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-resources-1.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-resources@1.4.0   (Confidence:High)

plexus-sec-dispatcher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-sec-dispatcher\2.0\plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: spotbugs-maven-plugin:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.10.0

Identifiers

plexus-utils-4.1.0.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\4.1.0\plexus-utils-4.1.0.jar
MD5: 6c15b0ac02ad8ac87b4b00d3cd597df5
SHA1: ff94fcc9beacd4383781b41a745cc240daab9537
SHA256:6a2fe69e98301882bb2bb05afe36414eb82d6f7c63299cccdb2dc02b4358a968
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-utils-4.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

plexus-velocity-2.4.0.jar

Description:

A component which provides Apache Velocity templating engine integration

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-velocity\2.4.0\plexus-velocity-2.4.0.jar
MD5: 9a7f9a634a5fc0651d10700d1573197d
SHA1: 8f0854b3a075fc8c291c3e8c97039b1504d5b34b
SHA256:820eccf6d66d0acfdfc4ffcfc452a43a23c1d5f375da8d58ae5f17986ce8a817
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-velocity-2.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-velocity@2.4.0   (Confidence:High)

plexus-xml-3.1.0.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-xml\3.1.0\plexus-xml-3.1.0.jar
MD5: 95da2889fcab7dc25a180909f8f768ac
SHA1: 8405d3b97dc6b5c8b5238e625791a815d53e13e6
SHA256:c2bf931dd1512d228dd4cdbe755100df0430c3284e712b4d1d38795dd27629bd
Referenced In Project/Scope: spotbugs-maven-plugin:compile
plexus-xml-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.doxia/doxia-core@2.1.0

Identifiers

  • pkg:maven/org.codehaus.plexus/plexus-xml@3.1.0   (Confidence:High)

qdox-2.2.0.jar

Description:

    QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\thoughtworks\qdox\qdox\2.2.0\qdox-2.2.0.jar
MD5: 1585e7fc441f9d256cdd965718836152
SHA1: 39651eb3ce73d6e506490ea352e1e13eab6b55e8
SHA256:c260c3230b2340af97d54bf01f7f67ebc57c901922736c881bb11cb981302be2
Referenced In Project/Scope: spotbugs-maven-plugin:compile
qdox-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.groovy/groovy-docgenerator@5.1.3

Identifiers

  • pkg:maven/com.thoughtworks.qdox/qdox@2.2.0   (Confidence:High)

slf4j-api-2.0.20.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.20\slf4j-api-2.0.20.jar
MD5: a7a6798aa78b29152479f89565f57446
SHA1: 7fea9d92ba67e9b3c8f03515fb202b86a1fe44f6
SHA256:7e1446499b359675d8aabe6af2de86b85e72ae8a2a932c0b40d0e5ba57097439
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-api-2.0.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.20   (Confidence:High)

slf4j-simple-2.0.20.jar

Description:

SLF4J Simple Provider

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-simple\2.0.20\slf4j-simple-2.0.20.jar
MD5: 58d9ee00c56ab571ba08f68f713e9b2c
SHA1: b08c9c3983e9fa3b37b929251523ae74ab7b680a
SHA256:8e701404786a4f87219d39d4853c86dfe4e86ae99376a39749df6c08e75022e0
Referenced In Project/Scope: spotbugs-maven-plugin:compile
slf4j-simple-2.0.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/org.slf4j/slf4j-simple@2.0.20   (Confidence:High)

snappy-0.4.jar

Description:

Port of Snappy to Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: C:\Users\Jeremy\.m2\repository\org\iq80\snappy\snappy\0.4\snappy-0.4.jar
MD5: f0792d1dbe7f90d8b34c7c19961e0073
SHA1: a42b2d92a89efd35bb14738000dabcac6bd07a8d
SHA256:46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9
Referenced In Project/Scope: spotbugs-maven-plugin:compile
snappy-0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

CVE-2024-36124  

iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. iq80 Snappy is not actively maintained anymore. As quick fix users can upgrade to version 0.5.
CWE-125 Out-of-bounds Read

CVSSv3:
  • Base Score: MEDIUM (5.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RC:R/MAV:A

References:

Vulnerable Software & Versions:

spotbugs-4.10.5.jar

Description:

SpotBugs: Because it is easy!

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs\4.10.5\spotbugs-4.10.5.jar
MD5: e33f303378ff3653d68026861f374f0e
SHA1: 26ad5cb461c7bf744fbcba43885222dce3f48d7a
SHA256:8d0af71a88a5324fbe10909cc2ac4145a358c9af52fd6f796bdc0b0e42c7665f
Referenced In Project/Scope: spotbugs-maven-plugin:compile
spotbugs-4.10.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs@4.10.5   (Confidence:High)

spotbugs-annotations-4.10.5.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.10.5\spotbugs-annotations-4.10.5.jar
MD5: 1252eef45ba52209b89fe0203bf9a633
SHA1: 5cf6042318b3d7c43fa159dd86796fc8cc31bb3c
SHA256:2f28af17ad61a7daad0f3df070198c4a5807d3ffd98a5408f670cd19fc2dce84
Referenced In Project/Scope: spotbugs-maven-plugin:provided
spotbugs-annotations-4.10.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-maven-plugin@4.10.5.0

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.5   (Confidence:High)

velocity-engine-core-2.4.1.jar

Description:

Apache Velocity is a general purpose template engine.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\velocity-engine-core\2.4.1\velocity-engine-core-2.4.1.jar
MD5: 41a3757dc9d701590be703d1f2bd2462
SHA1: 0b662837e8006d5c383bd128503ea86ef5b4d361
SHA256:1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-engine-core-2.4.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

velocity-tools-generic-3.1.jar

Description:

Generic tools that can be used in any context.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\tools\velocity-tools-generic\3.1\velocity-tools-generic-3.1.jar
MD5: 76f13879ead8693fd4d5751a8a236089
SHA1: 07aaa49086a64cd9dab967a8437cc03abbfad655
SHA256:8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5
Referenced In Project/Scope: spotbugs-maven-plugin:compile
velocity-tools-generic-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

xmlresolver-5.3.3-data.jar

File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3-data.jar
MD5: 59c51b08ba448bc9473d92e68bf84873
SHA1: e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3
SHA256:b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3-data.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:Highest)

xmlresolver-5.3.3.jar

Description:

An XML entity/uri resolver

License:

Apache License version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\5.3.3\xmlresolver-5.3.3.jar
MD5: e883f28e14ce902f66941bd8bc25233a
SHA1: 1b838b0d69eef8d46c813d88a604e3cb4c6035fe
SHA256:1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xmlresolver-5.3.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs@4.10.5

Identifiers

  • pkg:maven/org.xmlresolver/xmlresolver@5.3.3   (Confidence:High)

xz-1.9.jar

Description:

XZ data compression

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\org\tukaani\xz\1.9\xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
xz-1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/org.tukaani/xz@1.9   (Confidence:High)

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\aarch64\libzstd-jni-1.5.5-11.dll
MD5: 3c42e914725869f2ad90eb3ddb418524
SHA1: fdd7d968eb3a348f6bf562b298b3a165e0e73e4e
SHA256:c368030edfc9f9caf92b89b832e65c84d29757a35df4641decd907e4f0229a59
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\amd64\libzstd-jni-1.5.5-11.dll
MD5: 1521a503cd2ed6d7547e6c7e6abb229c
SHA1: 9330785beba7881cc72c7f68cc87537a9a11cfc9
SHA256:8f753fa694b1c60651e79cedd916268e6c4034e921a61633a8f2ad934817edd2
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar: libzstd-jni-1.5.5-11.dll

File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar\win\x86\libzstd-jni-1.5.5-11.dll
MD5: f73208a58a031c84e5dee99a15f865ff
SHA1: 8e91341f71ee4a73e1c94b80ae1c846a663e0d61
SHA256:8173736b15a732f2be19137fe0ff2336d416c8c60b914e9600f3a5012584f9d1
Referenced In Project/Scope: spotbugs-maven-plugin:runtime

Identifiers

  • None

zstd-jni-1.5.5-11.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: C:\Users\Jeremy\.m2\repository\com\github\luben\zstd-jni\1.5.5-11\zstd-jni-1.5.5-11.jar
MD5: 00977099d76d2c01a7b19263375ee42e
SHA1: ca6ab366315e179dd80645aad4a60bab959c6523
SHA256:d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a
Referenced In Project/Scope: spotbugs-maven-plugin:runtime
zstd-jni-1.5.5-11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0

Identifiers

  • pkg:maven/com.github.luben/zstd-jni@1.5.5-11   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype Guide OSS Index API.