Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.1
Report Generated On: Sat, 12 Apr 2025 20:51:36 GMT
Dependencies Scanned: 18 (17 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-04-12T20:49:40Z
NVD API Last Modified: 2025-04-12T17:15:15Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
apiguardian-api-1.1.2.jar		pkg:maven/org.apiguardian/apiguardian-api@1.1.2		40
assertj-core-3.27.3.jar		pkg:maven/org.assertj/assertj-core@3.27.3		67
byte-buddy-1.15.11.jar		pkg:maven/net.bytebuddy/byte-buddy@1.15.11		29
checker-qual-3.49.2.jar		pkg:maven/org.checkerframework/checker-qual@3.49.2		44
error_prone_annotations-2.37.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0		29
hamcrest-3.0.jar	cpe:2.3:a:steve_project:steve:3.0:::::::*	pkg:maven/org.hamcrest/hamcrest@3.0	Low	39
hamcrest-core-1.3.jar		pkg:maven/org.hamcrest/hamcrest-core@1.3		24
j2objc-annotations-3.0.0.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0		33
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
junit-4.13.2.jar	cpe:2.3:a:junit:junit4:4.13.2:::::::*	pkg:maven/junit/junit@4.13.2	Low	53
junit-platform-engine-1.12.2.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.12.2:::::::*	pkg:maven/org.junit.platform/junit-platform-engine@1.12.2	Low	76
junit-vintage-engine-5.12.2.jar		pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2		78
lombok-1.18.38.jar		pkg:maven/org.projectlombok/lombok@1.18.38		36
lombok-1.18.38.jar: mavenEcjBootstrapAgent.jar				7
modernizer-maven-annotations-3.1.0.jar		pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0		19
opentest4j-1.3.0.jar		pkg:maven/org.opentest4j/opentest4j@1.3.0		60
spotbugs-annotations-4.9.3.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3		53

Dependencies (vulnerable)

apiguardian-api-1.1.2.jar

Description:

@API Guardian

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256:b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	apiguardian-api	High
Vendor	jar	package name	api	Highest
Vendor	jar	package name	apiguardian	Highest
Vendor	Manifest	build-date	2021-06-27	Low
Vendor	Manifest	build-revision	aa952a1b9d5b4e9cc0af853e2c140c2455b397be	Low
Vendor	Manifest	build-time	14:53:10.089+0200	Low
Vendor	Manifest	bundle-docurl	https://github.com/apiguardian-team/apiguardian	Low
Vendor	Manifest	bundle-symbolicname	org.apiguardian.api	Medium
Vendor	Manifest	Implementation-Vendor	apiguardian.org	High
Vendor	Manifest	specification-vendor	apiguardian.org	Low
Vendor	pom	artifactid	apiguardian-api	Highest
Vendor	pom	artifactid	apiguardian-api	Low
Vendor	pom	developer email	team@apiguardian.org	Low
Vendor	pom	developer id	apiguardian	Medium
Vendor	pom	developer name	@API Guardian Team	Medium
Vendor	pom	groupid	org.apiguardian	Highest
Vendor	pom	name	org.apiguardian:apiguardian-api	High
Vendor	pom	url	apiguardian-team/apiguardian	Highest
Product	file	name	apiguardian-api	High
Product	jar	package name	api	Highest
Product	jar	package name	apiguardian	Highest
Product	Manifest	build-date	2021-06-27	Low
Product	Manifest	build-revision	aa952a1b9d5b4e9cc0af853e2c140c2455b397be	Low
Product	Manifest	build-time	14:53:10.089+0200	Low
Product	Manifest	bundle-docurl	https://github.com/apiguardian-team/apiguardian	Low
Product	Manifest	Bundle-Name	apiguardian-api	Medium
Product	Manifest	bundle-symbolicname	org.apiguardian.api	Medium
Product	Manifest	Implementation-Title	apiguardian-api	High
Product	Manifest	specification-title	apiguardian-api	Medium
Product	pom	artifactid	apiguardian-api	Highest
Product	pom	developer email	team@apiguardian.org	Low
Product	pom	developer id	apiguardian	Low
Product	pom	developer name	@API Guardian Team	Low
Product	pom	groupid	org.apiguardian	Highest
Product	pom	name	org.apiguardian:apiguardian-api	High
Product	pom	url	apiguardian-team/apiguardian	High
Version	file	version	1.1.2	High
Version	Manifest	Bundle-Version	1.1.2	High
Version	Manifest	Implementation-Version	1.1.2	High
Version	pom	version	1.1.2	Highest

Identifiers

pkg:maven/org.apiguardian/apiguardian-api@1.1.2 (Confidence:High)

assertj-core-3.27.3.jar

Description:

Rich and fluent assertions for testing in Java

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/assertj/assertj-core/3.27.3/assertj-core-3.27.3.jar
MD5: 558d69eb2645d350a8ed4eba546c3a84
SHA1: 31f5d58a202bd5df4993fb10fa2cffd610c20d6f
SHA256:5b8a26205f6d5ea60ad9ce65ce4a40a2afe4c48abeec61bd0740a088c24e89f5
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	assertj-core	High
Vendor	jar	package name	assertions	Highest
Vendor	jar	package name	assertj	Highest
Vendor	jar	package name	core	Highest
Vendor	Manifest	bundle-developers	joel-costigliola;email="joel.costigliola at gmail.com";name="Joel Costigliola";roles="Owner,Developer",scordio;name="Stefano Cordio";roles=Developer,PascalSchumacher;name="Pascal Schumacher";roles=Developer,epeee;name="Erhard Pointl";roles=Developer,croesch;name="Christian Rösch";roles=Developer,VanRoy;name="Julien Roy";roles=Developer,regis1512;name="Régis Pouiller";roles=Developer,fbiville;name="Florent Biville";roles=Developer,Patouche;name="Patrick Allain";roles=Developer	Low
Vendor	Manifest	bundle-docurl	https://assertj.github.io/doc/#assertj-core	Low
Vendor	Manifest	bundle-symbolicname	assertj-core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	assertj-core	Highest
Vendor	pom	artifactid	assertj-core	Low
Vendor	pom	developer email	joel.costigliola at gmail.com	Low
Vendor	pom	developer id	croesch	Medium
Vendor	pom	developer id	epeee	Medium
Vendor	pom	developer id	fbiville	Medium
Vendor	pom	developer id	joel-costigliola	Medium
Vendor	pom	developer id	PascalSchumacher	Medium
Vendor	pom	developer id	Patouche	Medium
Vendor	pom	developer id	regis1512	Medium
Vendor	pom	developer id	scordio	Medium
Vendor	pom	developer id	VanRoy	Medium
Vendor	pom	developer name	Christian Rösch	Medium
Vendor	pom	developer name	Erhard Pointl	Medium
Vendor	pom	developer name	Florent Biville	Medium
Vendor	pom	developer name	Joel Costigliola	Medium
Vendor	pom	developer name	Julien Roy	Medium
Vendor	pom	developer name	Pascal Schumacher	Medium
Vendor	pom	developer name	Patrick Allain	Medium
Vendor	pom	developer name	Régis Pouiller	Medium
Vendor	pom	developer name	Stefano Cordio	Medium
Vendor	pom	groupid	org.assertj	Highest
Vendor	pom	name	AssertJ Core	High
Vendor	pom	url	https://assertj.github.io/doc/#assertj-core	Highest
Product	file	name	assertj-core	High
Product	jar	package name	assertions	Highest
Product	jar	package name	assertj	Highest
Product	jar	package name	core	Highest
Product	Manifest	bundle-developers	joel-costigliola;email="joel.costigliola at gmail.com";name="Joel Costigliola";roles="Owner,Developer",scordio;name="Stefano Cordio";roles=Developer,PascalSchumacher;name="Pascal Schumacher";roles=Developer,epeee;name="Erhard Pointl";roles=Developer,croesch;name="Christian Rösch";roles=Developer,VanRoy;name="Julien Roy";roles=Developer,regis1512;name="Régis Pouiller";roles=Developer,fbiville;name="Florent Biville";roles=Developer,Patouche;name="Patrick Allain";roles=Developer	Low
Product	Manifest	bundle-docurl	https://assertj.github.io/doc/#assertj-core	Low
Product	Manifest	Bundle-Name	AssertJ Core	Medium
Product	Manifest	bundle-symbolicname	assertj-core	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	assertj-core	Highest
Product	pom	developer email	joel.costigliola at gmail.com	Low
Product	pom	developer id	croesch	Low
Product	pom	developer id	epeee	Low
Product	pom	developer id	fbiville	Low
Product	pom	developer id	joel-costigliola	Low
Product	pom	developer id	PascalSchumacher	Low
Product	pom	developer id	Patouche	Low
Product	pom	developer id	regis1512	Low
Product	pom	developer id	scordio	Low
Product	pom	developer id	VanRoy	Low
Product	pom	developer name	Christian Rösch	Low
Product	pom	developer name	Erhard Pointl	Low
Product	pom	developer name	Florent Biville	Low
Product	pom	developer name	Joel Costigliola	Low
Product	pom	developer name	Julien Roy	Low
Product	pom	developer name	Pascal Schumacher	Low
Product	pom	developer name	Patrick Allain	Low
Product	pom	developer name	Régis Pouiller	Low
Product	pom	developer name	Stefano Cordio	Low
Product	pom	groupid	org.assertj	Highest
Product	pom	name	AssertJ Core	High
Product	pom	url	https://assertj.github.io/doc/#assertj-core	Medium
Version	file	version	3.27.3	High
Version	Manifest	Bundle-Version	3.27.3	High
Version	pom	version	3.27.3	Highest

Identifiers

pkg:maven/org.assertj/assertj-core@3.27.3 (Confidence:High)

byte-buddy-1.15.11.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.15.11/byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256:fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/org.assertj/assertj-core@3.27.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	build	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy	High
Product	jar	package name	asm	Highest
Product	jar	package name	build	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.15.11	High
Version	Manifest	Bundle-Version	1.15.11	High
Version	pom	version	1.15.11	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.15.11 (Confidence:High)

checker-qual-3.49.2.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.49.2/checker-qual-3.49.2.jar
MD5: 41c09e58f686fc6d4e194aa37a1125b0
SHA1: 98ac669ccce59dba8ca360d3e07891d62b6b946a
SHA256:33b1d8b2c4b00f7d4f4b4931424274f3f729474ce3a87cea09a879976a1dcaeb
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org/	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org/	Medium
Version	file	version	3.49.2	High
Version	Manifest	Bundle-Version	3.49.2	High
Version	Manifest	Implementation-Version	3.49.2	High
Version	pom	version	3.49.2	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.49.2 (Confidence:High)

error_prone_annotations-2.37.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.37.0/error_prone_annotations-2.37.0.jar
MD5: dce0a1c83d3dc06c2715c96e11d2c429
SHA1: 8512660d1269d166fad497f51de35da61447f063
SHA256:d29a6263b48d46d4c7c28b64717a6d105b3e2a3e64256092f845e8e774fca6ba
Referenced In Project/Scope: catch-throwable:provided
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.37.0	High
Version	Manifest	Bundle-Version	2.37.0	High
Version	pom	version	2.37.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0 (Confidence:High)

hamcrest-3.0.jar

Description:

Core API and libraries of hamcrest matcher framework.

License:

BSD-3-Clause: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE

File Path: /home/runner/.m2/repository/org/hamcrest/hamcrest/3.0/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hamcrest	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	hamcrest	Highest
Vendor	jar	package name	matcher	Highest
Vendor	Manifest	automatic-module-name	org.hamcrest	Medium
Vendor	Manifest	bundle-symbolicname	org.hamcrest	Medium
Vendor	Manifest	Implementation-Vendor	hamcrest.org	High
Vendor	pom	artifactid	hamcrest	Highest
Vendor	pom	artifactid	hamcrest	Low
Vendor	pom	developer id	joewalnes	Medium
Vendor	pom	developer id	npryce	Medium
Vendor	pom	developer id	sf105	Medium
Vendor	pom	developer name	Joe Walnes	Medium
Vendor	pom	developer name	Nat Pryce	Medium
Vendor	pom	developer name	Steve Freeman	Medium
Vendor	pom	groupid	org.hamcrest	Highest
Vendor	pom	name	Hamcrest	High
Vendor	pom	url	http://hamcrest.org/JavaHamcrest/	Highest
Product	file	name	hamcrest	High
Product	jar	package name	core	Highest
Product	jar	package name	hamcrest	Highest
Product	jar	package name	matcher	Highest
Product	Manifest	automatic-module-name	org.hamcrest	Medium
Product	Manifest	Bundle-Name	org.hamcrest	Medium
Product	Manifest	bundle-symbolicname	org.hamcrest	Medium
Product	Manifest	Implementation-Title	hamcrest	High
Product	pom	artifactid	hamcrest	Highest
Product	pom	developer id	joewalnes	Low
Product	pom	developer id	npryce	Low
Product	pom	developer id	sf105	Low
Product	pom	developer name	Joe Walnes	Low
Product	pom	developer name	Nat Pryce	Low
Product	pom	developer name	Steve Freeman	Low
Product	pom	groupid	org.hamcrest	Highest
Product	pom	name	Hamcrest	High
Product	pom	url	http://hamcrest.org/JavaHamcrest/	Medium
Version	file	version	3.0	High
Version	Manifest	Implementation-Version	3.0	High
Version	pom	version	3.0	Highest

Identifiers

pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:High)
cpe:2.3:a:steve_project:steve:3.0:*:*:*:*:*:*:* (Confidence:Low)

hamcrest-core-1.3.jar

Description:

    This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.

File Path: /home/runner/.m2/repository/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar
MD5: 6393363b47ddcbba82321110c3e07519
SHA1: 42a25dc3219429f0e5d060061f71acb49bf010a0
SHA256:66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9
Referenced In Project/Scope: catch-throwable:compile
hamcrest-core-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hamcrest-core	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	hamcrest	Highest
Vendor	jar	package name	matcher	Highest
Vendor	Manifest	built-date	2012-07-09 19:49:34	Low
Vendor	Manifest	Implementation-Vendor	hamcrest.org	High
Vendor	pom	artifactid	hamcrest-core	Highest
Vendor	pom	artifactid	hamcrest-core	Low
Vendor	pom	groupid	org.hamcrest	Highest
Vendor	pom	name	Hamcrest Core	High
Vendor	pom	parent-artifactid	hamcrest-parent	Low
Product	file	name	hamcrest-core	High
Product	jar	package name	core	Highest
Product	jar	package name	hamcrest	Highest
Product	jar	package name	matcher	Highest
Product	Manifest	built-date	2012-07-09 19:49:34	Low
Product	Manifest	Implementation-Title	hamcrest-core	High
Product	pom	artifactid	hamcrest-core	Highest
Product	pom	groupid	org.hamcrest	Highest
Product	pom	name	Hamcrest Core	High
Product	pom	parent-artifactid	hamcrest-parent	Medium
Version	file	version	1.3	High
Version	Manifest	Implementation-Version	1.3	High
Version	pom	version	1.3	Highest

Identifiers

pkg:maven/org.hamcrest/hamcrest-core@1.3 (Confidence:High)

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: catch-throwable:provided
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: catch-throwable:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

junit-4.13.2.jar

Description:

JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /home/runner/.m2/repository/junit/junit/4.13.2/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit	High
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	junit	Highest
Vendor	Manifest	automatic-module-name	junit	Medium
Vendor	Manifest	implementation-url	http://junit.org	Low
Vendor	Manifest	Implementation-Vendor	JUnit	High
Vendor	Manifest	Implementation-Vendor-Id	junit	Medium
Vendor	pom	artifactid	junit	Highest
Vendor	pom	artifactid	junit	Low
Vendor	pom	developer email	david@saff.net	Low
Vendor	pom	developer email	kcooney@google.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	mail@stefan-birkner.de	Low
Vendor	pom	developer id	dsaff	Medium
Vendor	pom	developer id	kcooney	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	stefanbirkner	Medium
Vendor	pom	developer name	David Saff	Medium
Vendor	pom	developer name	Kevin Cooney	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Stefan Birkner	Medium
Vendor	pom	groupid	junit	Highest
Vendor	pom	name	JUnit	High
Vendor	pom	organization name	JUnit	High
Vendor	pom	organization url	http://www.junit.org	Medium
Vendor	pom	url	http://junit.org	Highest
Product	file	name	junit	High
Product	jar	package name	framework	Highest
Product	jar	package name	junit	Highest
Product	Manifest	automatic-module-name	junit	Medium
Product	Manifest	Implementation-Title	JUnit	High
Product	Manifest	implementation-url	http://junit.org	Low
Product	pom	artifactid	junit	Highest
Product	pom	developer email	david@saff.net	Low
Product	pom	developer email	kcooney@google.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	mail@stefan-birkner.de	Low
Product	pom	developer id	dsaff	Low
Product	pom	developer id	kcooney	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	stefanbirkner	Low
Product	pom	developer name	David Saff	Low
Product	pom	developer name	Kevin Cooney	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Stefan Birkner	Low
Product	pom	groupid	junit	Highest
Product	pom	name	JUnit	High
Product	pom	organization name	JUnit	Low
Product	pom	organization url	http://www.junit.org	Low
Product	pom	url	http://junit.org	Medium
Version	file	version	4.13.2	High
Version	Manifest	Implementation-Version	4.13.2	High
Version	pom	version	4.13.2	Highest

Identifiers

pkg:maven/junit/junit@4.13.2 (Confidence:High)
cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-engine-1.12.2.jar

Description:

Module "junit-platform-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/runner/.m2/repository/org/junit/platform/junit-platform-engine/1.12.2/junit-platform-engine-1.12.2.jar
MD5: a28e43677b7d9519f5e87490356994f8
SHA1: 8519ece93f91b8115705d36be2c36d49808935cd
SHA256:cef0efcb5bd2e05e2b808d38bab5c655089c0c3001527376e74cb606a7911ec8
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-engine	High
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	platform	Highest
Vendor	Manifest	build-date	2025-04-11	Low
Vendor	Manifest	build-revision	0a446598f2b90bb0f52f1945f08755b430ec474b	Low
Vendor	Manifest	build-time	16:09:45.376+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-engine	Highest
Vendor	pom	artifactid	junit-platform-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Engine API	High
Vendor	pom	url	https://junit.org/junit5/	Highest
Product	file	name	junit-platform-engine	High
Product	jar	package name	engine	Highest
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	Manifest	build-date	2025-04-11	Low
Product	Manifest	build-revision	0a446598f2b90bb0f52f1945f08755b430ec474b	Low
Product	Manifest	build-time	16:09:45.376+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Engine API	Medium
Product	Manifest	bundle-symbolicname	junit-platform-engine	Medium
Product	Manifest	Implementation-Title	junit-platform-engine	High
Product	Manifest	specification-title	junit-platform-engine	Medium
Product	pom	artifactid	junit-platform-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Engine API	High
Product	pom	url	https://junit.org/junit5/	Medium
Version	file	version	1.12.2	High
Version	Manifest	Bundle-Version	1.12.2	High
Version	Manifest	Implementation-Version	1.12.2	High
Version	pom	version	1.12.2	Highest

Related Dependencies

Identifiers

pkg:maven/org.junit.platform/junit-platform-engine@1.12.2 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.12.2:*:*:*:*:*:*:* (Confidence:Low)

junit-vintage-engine-5.12.2.jar

Description:

Module "junit-vintage-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/runner/.m2/repository/org/junit/vintage/junit-vintage-engine/5.12.2/junit-vintage-engine-5.12.2.jar
MD5: bf375206bf039c84bac81f81655f5a09
SHA1: 4596ac784cd3ea72057092bc1e535c74a8facc31
SHA256:bb88528a3c4af920db540cdbac2050b83f68078ab28583e6dbf9457522dee4eb
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-vintage-engine	High
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	vintage	Highest
Vendor	Manifest	build-date	2025-04-11	Low
Vendor	Manifest	build-revision	0a446598f2b90bb0f52f1945f08755b430ec474b	Low
Vendor	Manifest	build-time	16:09:45.376+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-vintage-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.12.2"	Low
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-vintage-engine	Highest
Vendor	pom	artifactid	junit-vintage-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.vintage	Highest
Vendor	pom	name	JUnit Vintage Engine	High
Vendor	pom	url	https://junit.org/junit5/	Highest
Product	file	name	junit-vintage-engine	High
Product	jar	package name	engine	Highest
Product	jar	package name	junit	Highest
Product	jar	package name	vintage	Highest
Product	Manifest	build-date	2025-04-11	Low
Product	Manifest	build-revision	0a446598f2b90bb0f52f1945f08755b430ec474b	Low
Product	Manifest	build-time	16:09:45.376+0200	Low
Product	Manifest	Bundle-Name	JUnit Vintage Engine	Medium
Product	Manifest	bundle-symbolicname	junit-vintage-engine	Medium
Product	Manifest	Implementation-Title	junit-vintage-engine	High
Product	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.12.2"	Low
Product	Manifest	specification-title	junit-vintage-engine	Medium
Product	pom	artifactid	junit-vintage-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.vintage	Highest
Product	pom	name	JUnit Vintage Engine	High
Product	pom	url	https://junit.org/junit5/	Medium
Version	file	version	5.12.2	High
Version	Manifest	Bundle-Version	5.12.2	High
Version	Manifest	Implementation-Version	5.12.2	High
Version	pom	version	5.12.2	Highest

Identifiers

pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2 (Confidence:High)

lombok-1.18.38.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.38/lombok-1.18.38.jar
MD5: 789cacd8d3969e9d23e6e6baec747f70
SHA1: 57f8f5e02e92a30fd21b80cbd426a4172b5f8e29
SHA256:1e1e427c36ff63c44fd30ef292d9e773ea3154460ab6265d3fed7e6f5bc50fb9
Referenced In Project/Scope: catch-throwable:provided
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.38	High
Version	Manifest	lombok-version	1.18.38	Medium
Version	pom	version	1.18.38	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.38 (Confidence:High)

lombok-1.18.38.jar: mavenEcjBootstrapAgent.jar

File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.38/lombok-1.18.38.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Project/Scope: catch-throwable:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

modernizer-maven-annotations-3.1.0.jar

File Path: /home/runner/.m2/repository/org/gaul/modernizer-maven-annotations/3.1.0/modernizer-maven-annotations-3.1.0.jar
MD5: b188aef3e94d39c7e7a8ebb6b740559f
SHA1: 06eeda8c72054cfccf610ae772f606dbd13acf32
SHA256:1b4e8adc970715721846afeb632edd1c9dc9c07dc052b691c0c8d899c9b9f017
Referenced In Project/Scope: catch-throwable:provided
modernizer-maven-annotations-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	modernizer-maven-annotations	High
Vendor	jar	package name	gaul	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	modernizer-maven-annotations	Highest
Vendor	pom	artifactid	modernizer-maven-annotations	Low
Vendor	pom	groupid	org.gaul	Highest
Vendor	pom	name	Modernizer Maven Plugin annotations	High
Vendor	pom	parent-artifactid	modernizer-maven-parent	Low
Product	file	name	modernizer-maven-annotations	High
Product	jar	package name	gaul	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	modernizer-maven-annotations	Highest
Product	pom	groupid	org.gaul	Highest
Product	pom	name	Modernizer Maven Plugin annotations	High
Product	pom	parent-artifactid	modernizer-maven-parent	Medium
Version	file	version	3.1.0	High
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0 (Confidence:High)

opentest4j-1.3.0.jar

Description:

Open Test Alliance for the JVM

License:

The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/opentest4j/opentest4j/1.3.0/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: catch-throwable:compile
pkg:maven/org.junit.vintage/junit-vintage-engine@5.12.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	opentest4j	High
Vendor	jar	package name	opentest4j	Highest
Vendor	Manifest	build-date	2023-07-06	Low
Vendor	Manifest	build-revision	214973bfa4e7e9be7d04e623202cc4147c7036d2	Low
Vendor	Manifest	build-time	14:25:06.116+0200	Low
Vendor	Manifest	bundle-symbolicname	org.opentest4j	Medium
Vendor	Manifest	Implementation-Vendor	opentest4j.org	High
Vendor	Manifest	specification-vendor	opentest4j.org	Low
Vendor	pom	artifactid	opentest4j	Highest
Vendor	pom	artifactid	opentest4j	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.opentest4j	Highest
Vendor	pom	name	org.opentest4j:opentest4j	High
Vendor	pom	url	ota4j-team/opentest4j	Highest
Product	file	name	opentest4j	High
Product	jar	package name	opentest4j	Highest
Product	Manifest	build-date	2023-07-06	Low
Product	Manifest	build-revision	214973bfa4e7e9be7d04e623202cc4147c7036d2	Low
Product	Manifest	build-time	14:25:06.116+0200	Low
Product	Manifest	Bundle-Name	opentest4j	Medium
Product	Manifest	bundle-symbolicname	org.opentest4j	Medium
Product	Manifest	Implementation-Title	opentest4j	High
Product	Manifest	specification-title	opentest4j	Medium
Product	pom	artifactid	opentest4j	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.opentest4j	Highest
Product	pom	name	org.opentest4j:opentest4j	High
Product	pom	url	ota4j-team/opentest4j	High
Version	file	version	1.3.0	High
Version	Manifest	Bundle-Version	1.3.0	High
Version	Manifest	Implementation-Version	1.3.0	High
Version	pom	version	1.3.0	Highest

Identifiers

pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:High)

spotbugs-annotations-4.9.3.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.3/spotbugs-annotations-4.9.3.jar
MD5: 6149845e438bd5a34ebaf81f8bc9e243
SHA1: 4d362bffcfdfd734999e94d7d98fde678aae71cf
SHA256:13532bfe2f45fcd491432221df72d9cd0efb8f987c9245e12befa192c8925ce3
Referenced In Project/Scope: catch-throwable:provided
pkg:maven/com.github.hazendaz.catch-exception/catch-throwable@2.3.4-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-11	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-11	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.9.3	High
Version	Manifest	Bundle-Version	4.9.3	High
Version	pom	version	4.9.3	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: catch-throwable

com.github.hazendaz.catch-exception:catch-throwable:2.3.4-SNAPSHOT

Summary

Dependencies (vulnerable)

apiguardian-api-1.1.2.jar

Evidence

Identifiers

assertj-core-3.27.3.jar

Evidence

Identifiers

byte-buddy-1.15.11.jar

Evidence

Identifiers

checker-qual-3.49.2.jar

Evidence

Identifiers

error_prone_annotations-2.37.0.jar

Evidence

Identifiers

hamcrest-3.0.jar

Evidence

Identifiers

hamcrest-core-1.3.jar

Evidence

Identifiers

j2objc-annotations-3.0.0.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

junit-4.13.2.jar

Evidence

Identifiers

junit-platform-engine-1.12.2.jar

Evidence

Related Dependencies

Identifiers

junit-vintage-engine-5.12.2.jar

Evidence

Identifiers

lombok-1.18.38.jar

Evidence

Identifiers

lombok-1.18.38.jar: mavenEcjBootstrapAgent.jar

Evidence

Identifiers

modernizer-maven-annotations-3.1.0.jar

Evidence

Identifiers

opentest4j-1.3.0.jar

Evidence

Identifiers

spotbugs-annotations-4.9.3.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor