Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 9.0.7
Report Generated On: Sun, 3 Mar 2024 17:31:01 -0500
Dependencies Scanned: 28 (28 unique)
Vulnerable Dependencies: 3
Vulnerabilities Found: 6
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2024-03-03T17:03:15-05
NVD API Last Modified: 2024-03-03T21:15:49Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
args4j-2.33.jar		pkg:maven/args4j/args4j@2.33		0		22
checker-qual-3.42.0.jar		pkg:maven/org.checkerframework/checker-qual@3.42.0		0		46
commons-io-2.15.1.jar	cpe:2.3:a:apache:commons_io:2.15.1:::::::*	pkg:maven/commons-io/commons-io@2.15.1		0	Highest	125
commons-lang3-3.12.0.jar		pkg:maven/org.apache.commons/commons-lang3@3.12.0		0		139
commons-math3-3.6.1.jar		pkg:maven/org.apache.commons/commons-math3@3.6.1		0		134
error_prone_annotations-2.24.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0		0		29
failureaccess-1.0.2.jar		pkg:maven/com.google.guava/failureaccess@1.0.2		0		32
guava-33.0.0-jre.jar	cpe:2.3:a:google:guava:33.0.0:::::::*	pkg:maven/com.google.guava/guava@33.0.0-jre		0	Highest	27
hibernate-validator-annotation-processor-6.2.5.Final.jar	cpe:2.3:a:redhat:hibernate_validator:6.2.5:::::::*	pkg:maven/org.hibernate.validator/hibernate-validator-annotation-processor@6.2.5.Final		0	Highest	29
j2objc-annotations-2.8.jar		pkg:maven/com.google.j2objc/j2objc-annotations@2.8		0		24
javax.annotation-api-1.2.jar		pkg:maven/javax.annotation/javax.annotation-api@1.2		0		46
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		0		17
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar		pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava		0		13
lombok-1.18.30.jar: mavenEcjBootstrapAgent.jar				0		7
lombok-1.18.30.jar		pkg:maven/org.projectlombok/lombok@1.18.30		0		36
maven-artifact-3.9.6.jar		pkg:maven/org.apache.maven/maven-artifact@3.9.6		0		26
maven-model-3.9.6.jar		pkg:maven/org.apache.maven/maven-model@3.9.6		0		26
maven-plugin-annotations-3.11.0.jar		pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.11.0		0		26
maven-plugin-api-3.9.6.jar		pkg:maven/org.apache.maven/maven-plugin-api@3.9.6		0		26
modernizer-maven-annotations-2.7.0.jar		pkg:maven/org.gaul/modernizer-maven-annotations@2.7.0		0		19
org.eclipse.sisu.inject-0.9.0.M2.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2		0		32
org.eclipse.sisu.plexus-0.9.0.M2.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2		0		29
plexus-classworlds-2.7.0.jar	cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:2.7.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0	HIGH	2	Highest	28
plexus-component-annotations-2.1.0.jar	cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:2.1.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0	HIGH	2	Highest	27
plexus-utils-4.0.0.jar	cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:4.0.0:::::::* cpe:2.3:a:plexus-utils_project:plexus-utils:4.0.0:::::::* cpe:2.3:a:utils_project:utils:4.0.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0		0	Highest	24
plexus-xml-3.0.0.jar	cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:3.0.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0	HIGH	2	Highest	24
smartsprites-0.3.0.jar		pkg:maven/com.github.hazendaz/smartsprites@0.3.0		0		53
spotbugs-annotations-4.8.3.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3		0		53

Dependencies (vulnerable)

args4j-2.33.jar

Description:

args4j : Java command line arguments parser

License:

http://www.opensource.org/licenses/mit-license.php

File Path: C:\Users\Jeremy\.m2\repository\args4j\args4j\2.33\args4j-2.33.jar
MD5: 0a6d515f76b15d29e3cd529de9319739
SHA1: bd87a75374a6d6523de82fef51fc3cfe9baf9fc9
SHA256:91ddeaba0b24adce72291c618c00bbdce1c884755f6c4dba9c5c46e871c69ed6
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	args4j	High
Vendor	jar	package name	args4j	Highest
Vendor	jar	package name	kohsuke	Highest
Vendor	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Vendor	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Vendor	pom	artifactid	args4j	Highest
Vendor	pom	artifactid	args4j	Low
Vendor	pom	groupid	args4j	Highest
Vendor	pom	name	args4j	High
Vendor	pom	parent-artifactid	args4j-site	Low
Product	file	name	args4j	High
Product	jar	package name	args4j	Highest
Product	jar	package name	kohsuke	Highest
Product	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Product	Manifest	Bundle-Name	args4j	Medium
Product	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Product	pom	artifactid	args4j	Highest
Product	pom	groupid	args4j	Highest
Product	pom	name	args4j	High
Product	pom	parent-artifactid	args4j-site	Medium
Version	file	version	2.33	High
Version	pom	version	2.33	Highest

Identifiers

pkg:maven/args4j/args4j@2.33 (Confidence:High)

checker-qual-3.42.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.42.0\checker-qual-3.42.0.jar
MD5: 4c55448dcbfe9c3702f7758fc8fe0086
SHA1: 638ec33f363a94d41a4f03c3e7d3dcfba64e402d
SHA256:ccaedd33af0b7894d9f2f3b644f4d19e43928e32902e61ac4d10777830f5aac7
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org/	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org/	Medium
Version	file	version	3.42.0	High
Version	Manifest	Bundle-Version	3.42.0	High
Version	Manifest	Implementation-Version	3.42.0	High
Version	pom	version	3.42.0	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.42.0 (Confidence:High)

commons-io-2.15.1.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.15.1\commons-io-2.15.1.jar
MD5: 84351f7991a0e6722f00e96a4ccc376f
SHA1: f11560da189ab563a5c8e351941415430e9304ea
SHA256:a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-io	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	file	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-io	Highest
Vendor	pom	artifactid	commons-io	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	dion@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jeremias@apache.org	Low
Vendor	pom	developer email	jochen.wiedmann@gmail.com	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	martinc@apache.org	Low
Vendor	pom	developer email	matth@apache.org	Low
Vendor	pom	developer email	nicolaken@apache.org	Low
Vendor	pom	developer email	roxspring@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	dion	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jochen	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	martinc	Medium
Vendor	pom	developer id	matth	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	nicolaken	Medium
Vendor	pom	developer id	roxspring	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	dIon Gillard	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Jochen Wiedmann	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Martin Cooper	Medium
Vendor	pom	developer name	Matthew Hawthorne	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Nicola Ken Barozzi	Medium
Vendor	pom	developer name	Rob Oxspring	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-io	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-io/	Highest
Product	file	name	commons-io	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	file	Highest
Product	jar	package name	io	Highest
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	artifactid	commons-io	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	dion@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jeremias@apache.org	Low
Product	pom	developer email	jochen.wiedmann@gmail.com	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	martinc@apache.org	Low
Product	pom	developer email	matth@apache.org	Low
Product	pom	developer email	nicolaken@apache.org	Low
Product	pom	developer email	roxspring@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	dion	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jochen	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	martinc	Low
Product	pom	developer id	matth	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	nicolaken	Low
Product	pom	developer id	roxspring	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	dIon Gillard	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Jochen Wiedmann	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Martin Cooper	Low
Product	pom	developer name	Matthew Hawthorne	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Nicola Ken Barozzi	Low
Product	pom	developer name	Rob Oxspring	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-io	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-io/	Medium
Version	file	version	2.15.1	High
Version	Manifest	Bundle-Version	2.15.1	High
Version	Manifest	Implementation-Version	2.15.1	High
Version	pom	parent-version	2.15.1	Low
Version	pom	version	2.15.1	Highest

Identifiers

pkg:maven/commons-io/commons-io@2.15.1 (Confidence:High)
cpe:2.3:a:apache:commons_io:2.15.1:*:*:*:*:*:*:* (Confidence:Highest)

commons-lang3-3.12.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar
MD5: 19fe50567358922bdad277959ea69545
SHA1: c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e
SHA256:d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-lang3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	lang3	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-lang3	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	britter@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	djones@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory@apache.org	Low
Vendor	pom	developer email	jcarman@apache.org	Low
Vendor	pom	developer email	joerg.schaible@gmx.de	Low
Vendor	pom	developer email	lguibert@apache.org	Low
Vendor	pom	developer email	oheger@apache.org	Low
Vendor	pom	developer email	pbenedict@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	scolebourne@joda.org	Low
Vendor	pom	developer email	stevencaswell@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	britter	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	djones	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	fredrik	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jcarman	Medium
Vendor	pom	developer id	joehni	Medium
Vendor	pom	developer id	lguibert	Medium
Vendor	pom	developer id	mbenson	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	oheger	Medium
Vendor	pom	developer id	pbenedict	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	scaswell	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	Benedikt Ritter	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	Duncan Jones	Medium
Vendor	pom	developer name	Fredrik Westermarck	Medium
Vendor	pom	developer name	Gary D. Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	James Carman	Medium
Vendor	pom	developer name	Joerg Schaible	Medium
Vendor	pom	developer name	Loic Guibert	Medium
Vendor	pom	developer name	Matt Benson	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Oliver Heger	Medium
Vendor	pom	developer name	Paul Benedict	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer name	Steven Caswell	Medium
Vendor	pom	developer org	Carman Consulting, Inc.	Medium
Vendor	pom	developer org	CollabNet, Inc.	Medium
Vendor	pom	developer org	SITA ATS Ltd	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Lang	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Product	file	name	commons-lang3	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	lang3	Highest
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	pom	artifactid	commons-lang3	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	britter@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	djones@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory@apache.org	Low
Product	pom	developer email	jcarman@apache.org	Low
Product	pom	developer email	joerg.schaible@gmx.de	Low
Product	pom	developer email	lguibert@apache.org	Low
Product	pom	developer email	oheger@apache.org	Low
Product	pom	developer email	pbenedict@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	scolebourne@joda.org	Low
Product	pom	developer email	stevencaswell@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	britter	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	djones	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	fredrik	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jcarman	Low
Product	pom	developer id	joehni	Low
Product	pom	developer id	lguibert	Low
Product	pom	developer id	mbenson	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	oheger	Low
Product	pom	developer id	pbenedict	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	scaswell	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	Benedikt Ritter	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	Duncan Jones	Low
Product	pom	developer name	Fredrik Westermarck	Low
Product	pom	developer name	Gary D. Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	James Carman	Low
Product	pom	developer name	Joerg Schaible	Low
Product	pom	developer name	Loic Guibert	Low
Product	pom	developer name	Matt Benson	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Oliver Heger	Low
Product	pom	developer name	Paul Benedict	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer name	Steven Caswell	Low
Product	pom	developer org	Carman Consulting, Inc.	Low
Product	pom	developer org	CollabNet, Inc.	Low
Product	pom	developer org	SITA ATS Ltd	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Lang	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.12.0	High
Version	Manifest	Bundle-Version	3.12.0	High
Version	Manifest	Implementation-Version	3.12.0	High
Version	pom	parent-version	3.12.0	Low
Version	pom	version	3.12.0	Highest

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.12.0 (Confidence:High)

commons-math3-3.6.1.jar

Description:

The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-math3\3.6.1\commons-math3-3.6.1.jar
MD5: 5b730d97e4e6368069de1983937c508e
SHA1: e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf
SHA256:1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-math3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	math3	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-math/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.math3	Medium
Vendor	Manifest	implementation-build	16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-math/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-math3	Highest
Vendor	pom	artifactid	commons-math3	Low
Vendor	pom	developer email	achou at apache dot org	Low
Vendor	pom	developer email	billbarker at apache dot org	Low
Vendor	pom	developer email	brentworden at apache dot org	Low
Vendor	pom	developer email	celestin at apache dot org	Low
Vendor	pom	developer email	dimpbx at apache dot org	Low
Vendor	pom	developer email	erans at apache dot org	Low
Vendor	pom	developer email	evanward at apache dot org	Low
Vendor	pom	developer email	gregs at apache dot org	Low
Vendor	pom	developer email	j3322ptm at yahoo dot de	Low
Vendor	pom	developer email	luc at apache dot org	Low
Vendor	pom	developer email	mdiggory at apache dot org	Low
Vendor	pom	developer email	mikl at apache dot org	Low
Vendor	pom	developer email	oertl at apache dot org	Low
Vendor	pom	developer email	rdonkin at apache dot org	Low
Vendor	pom	developer email	tn at apache dot org	Low
Vendor	pom	developer email	tobrien at apache dot org	Low
Vendor	pom	developer id	achou	Medium
Vendor	pom	developer id	billbarker	Medium
Vendor	pom	developer id	brentworden	Medium
Vendor	pom	developer id	celestin	Medium
Vendor	pom	developer id	dimpbx	Medium
Vendor	pom	developer id	erans	Medium
Vendor	pom	developer id	evanward	Medium
Vendor	pom	developer id	gregs	Medium
Vendor	pom	developer id	luc	Medium
Vendor	pom	developer id	mdiggory	Medium
Vendor	pom	developer id	mikl	Medium
Vendor	pom	developer id	oertl	Medium
Vendor	pom	developer id	pietsch	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer id	tobrien	Medium
Vendor	pom	developer name	Albert Davidson Chou	Medium
Vendor	pom	developer name	Bill Barker	Medium
Vendor	pom	developer name	Brent Worden	Medium
Vendor	pom	developer name	Dimitri Pourbaix	Medium
Vendor	pom	developer name	Evan Ward	Medium
Vendor	pom	developer name	Gilles Sadowski	Medium
Vendor	pom	developer name	Greg Sterijevski	Medium
Vendor	pom	developer name	J. Pietschmann	Medium
Vendor	pom	developer name	Luc Maisonobe	Medium
Vendor	pom	developer name	Mark Diggory	Medium
Vendor	pom	developer name	Mikkel Meyer Andersen	Medium
Vendor	pom	developer name	Otmar Ertl	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Sébastien Brisard	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer name	Tim O'Brien	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Math	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	http://commons.apache.org/proper/commons-math/	Highest
Product	file	name	commons-math3	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	math3	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-math/	Low
Product	Manifest	Bundle-Name	Apache Commons Math	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.math3	Medium
Product	Manifest	implementation-build	16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400	Low
Product	Manifest	Implementation-Title	Apache Commons Math	High
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-math/	Low
Product	Manifest	specification-title	Apache Commons Math	Medium
Product	pom	artifactid	commons-math3	Highest
Product	pom	developer email	achou at apache dot org	Low
Product	pom	developer email	billbarker at apache dot org	Low
Product	pom	developer email	brentworden at apache dot org	Low
Product	pom	developer email	celestin at apache dot org	Low
Product	pom	developer email	dimpbx at apache dot org	Low
Product	pom	developer email	erans at apache dot org	Low
Product	pom	developer email	evanward at apache dot org	Low
Product	pom	developer email	gregs at apache dot org	Low
Product	pom	developer email	j3322ptm at yahoo dot de	Low
Product	pom	developer email	luc at apache dot org	Low
Product	pom	developer email	mdiggory at apache dot org	Low
Product	pom	developer email	mikl at apache dot org	Low
Product	pom	developer email	oertl at apache dot org	Low
Product	pom	developer email	rdonkin at apache dot org	Low
Product	pom	developer email	tn at apache dot org	Low
Product	pom	developer email	tobrien at apache dot org	Low
Product	pom	developer id	achou	Low
Product	pom	developer id	billbarker	Low
Product	pom	developer id	brentworden	Low
Product	pom	developer id	celestin	Low
Product	pom	developer id	dimpbx	Low
Product	pom	developer id	erans	Low
Product	pom	developer id	evanward	Low
Product	pom	developer id	gregs	Low
Product	pom	developer id	luc	Low
Product	pom	developer id	mdiggory	Low
Product	pom	developer id	mikl	Low
Product	pom	developer id	oertl	Low
Product	pom	developer id	pietsch	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	tn	Low
Product	pom	developer id	tobrien	Low
Product	pom	developer name	Albert Davidson Chou	Low
Product	pom	developer name	Bill Barker	Low
Product	pom	developer name	Brent Worden	Low
Product	pom	developer name	Dimitri Pourbaix	Low
Product	pom	developer name	Evan Ward	Low
Product	pom	developer name	Gilles Sadowski	Low
Product	pom	developer name	Greg Sterijevski	Low
Product	pom	developer name	J. Pietschmann	Low
Product	pom	developer name	Luc Maisonobe	Low
Product	pom	developer name	Mark Diggory	Low
Product	pom	developer name	Mikkel Meyer Andersen	Low
Product	pom	developer name	Otmar Ertl	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Sébastien Brisard	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer name	Tim O'Brien	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Math	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	http://commons.apache.org/proper/commons-math/	Medium
Version	file	version	3.6.1	High
Version	Manifest	Bundle-Version	3.6.1	High
Version	Manifest	Implementation-Version	3.6.1	High
Version	pom	parent-version	3.6.1	Low
Version	pom	version	3.6.1	Highest

Identifiers

pkg:maven/org.apache.commons/commons-math3@3.6.1 (Confidence:High)

error_prone_annotations-2.24.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.24.0\error_prone_annotations-2.24.0.jar
MD5: f816bc67aa465617b44aa5cf3fbc0820
SHA1: 29dca9118b577ad24533e563438feb8fad51427e
SHA256:a88bd88124c8d4c9851ab823adc3a8f04b0a13af15c9d80b5ecf49f5a7a321d2
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.24.0	High
Version	Manifest	Bundle-Version	2.24.0	High
Version	pom	version	2.24.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.24.0 (Confidence:High)

failureaccess-1.0.2.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\failureaccess\1.0.2\failureaccess-1.0.2.jar
MD5: 3f75955b49b6758fd6d1e1bd9bf777b3
SHA1: c4a06a64e650562f30b7bf9aaec1bfed43aca12b
SHA256:8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	automatic-module-name	com.google.common.util.concurrent.internal	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	automatic-module-name	com.google.common.util.concurrent.internal	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.2	High
Version	Manifest	Bundle-Version	1.0.2	High
Version	pom	parent-version	1.0.2	Low
Version	pom	version	1.0.2	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.2 (Confidence:High)

guava-33.0.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\33.0.0-jre\guava-33.0.0-jre.jar
MD5: 5d8aefac09131c3a74d6dab4b01bcff6
SHA1: 161ba27964a62f241533807a46b8711b13c1d94b
SHA256:f4d85c3e4d411694337cb873abea09b242b664bb013320be6105327c45991537
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.common	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	common	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.common	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.0.0-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.0.0-jre (Confidence:High)
cpe:2.3:a:google:guava:33.0.0:*:*:*:*:*:*:* (Confidence:Highest)

hibernate-validator-annotation-processor-6.2.5.Final.jar

File Path: C:\Users\Jeremy\.m2\repository\org\hibernate\validator\hibernate-validator-annotation-processor\6.2.5.Final\hibernate-validator-annotation-processor-6.2.5.Final.jar
MD5: 9f2a3168a0e9da5c6b0fc6fa5a29525a
SHA1: 845f834671380ef9c4c93e3f638bd88f6a4abba7
SHA256:6ad006443f769860af1886cc805d28c3d75c6253a2817f175c6bc7e2b359f55c
Referenced In Project/Scope: smartsprites-maven-plugin:provided
hibernate-validator-annotation-processor-6.2.5.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hibernate-validator-annotation-processor	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	hibernate	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	validator	Highest
Vendor	Manifest	automatic-module-name	org.hibernate.validator.annotationprocessor	Medium
Vendor	Manifest	implementation-url	http://hibernate.org/validator/	Low
Vendor	Manifest	Implementation-Vendor	org.hibernate.validator	High
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate.validator	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	hibernate-validator-annotation-processor	Highest
Vendor	pom	artifactid	hibernate-validator-annotation-processor	Low
Vendor	pom	groupid	org.hibernate.validator	Highest
Vendor	pom	name	Hibernate Validator Annotation Processor	High
Vendor	pom	parent-artifactid	hibernate-validator-parent	Low
Product	file	name	hibernate-validator-annotation-processor	High
Product	jar	package name	hibernate	Highest
Product	jar	package name	org	Highest
Product	jar	package name	validator	Highest
Product	Manifest	automatic-module-name	org.hibernate.validator.annotationprocessor	Medium
Product	Manifest	Implementation-Title	hibernate-validator-annotation-processor	High
Product	Manifest	implementation-url	http://hibernate.org/validator/	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	hibernate-validator-annotation-processor	Highest
Product	pom	groupid	org.hibernate.validator	Highest
Product	pom	name	Hibernate Validator Annotation Processor	High
Product	pom	parent-artifactid	hibernate-validator-parent	Medium
Version	Manifest	Implementation-Version	6.2.5.Final	High
Version	pom	version	6.2.5.Final	Highest

Identifiers

pkg:maven/org.hibernate.validator/hibernate-validator-annotation-processor@6.2.5.Final (Confidence:High)
cpe:2.3:a:redhat:hibernate_validator:6.2.5:*:*:*:*:*:*:* (Confidence:Highest)

j2objc-annotations-2.8.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\2.8\j2objc-annotations-2.8.jar
MD5: c50af69b704dc91050efb98e0dff66d1
SHA1: c85270e307e7b822f1086b93689124b89768e273
SHA256:f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	google	Highest
Vendor	jar	package name	google	Low
Vendor	jar	package name	j2objc	Highest
Vendor	jar	package name	j2objc	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	jar	package name	j2objc	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	2.8	High
Version	pom	version	2.8	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@2.8 (Confidence:High)

javax.annotation-api-1.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html

File Path: C:\Users\Jeremy\.m2\repository\javax\annotation\javax.annotation-api\1.2\javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256:5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.annotation-api	High
Vendor	jar	package name	annotation	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	bundle-docurl	https://glassfish.java.net	Low
Vendor	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Vendor	Manifest	extension-name	javax.annotation	Medium
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	javax.annotation-api	Highest
Vendor	pom	artifactid	javax.annotation-api	Low
Vendor	pom	developer id	mode	Medium
Vendor	pom	developer name	Rajiv Mordani	Medium
Vendor	pom	developer org	Oracle, Inc.	Medium
Vendor	pom	groupid	javax.annotation	Highest
Vendor	pom	name	API	High
Vendor	pom	name	${extension.name} API	High
Vendor	pom	organization name	GlassFish Community	High
Vendor	pom	organization url	https://glassfish.java.net	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	url	http://jcp.org/en/jsr/detail?id=250	Highest
Product	file	name	javax.annotation-api	High
Product	jar	package name	annotation	Highest
Product	jar	package name	javax	Highest
Product	Manifest	bundle-docurl	https://glassfish.java.net	Low
Product	Manifest	Bundle-Name	javax.annotation API	Medium
Product	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Product	Manifest	extension-name	javax.annotation	Medium
Product	pom	artifactid	javax.annotation-api	Highest
Product	pom	developer id	mode	Low
Product	pom	developer name	Rajiv Mordani	Low
Product	pom	developer org	Oracle, Inc.	Low
Product	pom	groupid	javax.annotation	Highest
Product	pom	name	API	High
Product	pom	name	${extension.name} API	High
Product	pom	organization name	GlassFish Community	Low
Product	pom	organization url	https://glassfish.java.net	Low
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	url	http://jcp.org/en/jsr/detail?id=250	Medium
Version	file	version	1.2	High
Version	Manifest	Bundle-Version	1.2	High
Version	Manifest	Implementation-Version	1.2	High
Version	pom	parent-version	1.2	Low
Version	pom	version	1.2	Highest

Identifiers

pkg:maven/javax.annotation/javax.annotation-api@1.2 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\listenablefuture\9999.0-empty-to-avoid-conflict-with-guava\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: smartsprites-maven-plugin:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/smartsprites@0.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	listenablefuture	High
Vendor	pom	artifactid	listenablefuture	Highest
Vendor	pom	artifactid	listenablefuture	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava ListenableFuture only	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	listenablefuture	High
Product	pom	artifactid	listenablefuture	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava ListenableFuture only	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	pom	parent-version	9999.0-empty-to-avoid-conflict-with-guava	Low
Version	pom	version	9999.0-empty-to-avoid-conflict-with-guava	Highest

Identifiers

pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava (Confidence:High)

lombok-1.18.30.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.30\lombok-1.18.30.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 2bc7812d729aa7f761f721c6f0620848
SHA1: e67209a53266080be85e8848c01fd15af98700c7
SHA256:63da6c6457ba6bfb61867cf644542464783adc57bbf36a7f0843c2822c288169
Referenced In Project/Scope: smartsprites-maven-plugin:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

lombok-1.18.30.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.30\lombok-1.18.30.jar
MD5: 14e90bb14cac804c1a6e2024e78f436d
SHA1: f195ee86e6c896ea47a1d39defbe20eb59cd149d
SHA256:14151b47582d570b4de16a147ece3bdbd19ace4aee5bde3a5578c87db9ecb998
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.30	High
Version	Manifest	lombok-version	1.18.30	Medium
Version	pom	version	1.18.30	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.30 (Confidence:High)

maven-artifact-3.9.6.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.9.6\maven-artifact-3.9.6.jar
MD5: 96a7982d9a46c5c19696b4558be1bbd2
SHA1: fb0979832c10c1a25d038a33ca862bef055fcdc8
SHA256:ad7a0fb408f8e47585ccc0d0011e0b501d93bfc9888d369bbd4a043d19475073
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-artifact-3.9.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-artifact	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-artifact	Highest
Vendor	pom	artifactid	maven-artifact	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-artifact	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Artifact	High
Product	Manifest	specification-title	Maven Artifact	Medium
Product	pom	artifactid	maven-artifact	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.6	High
Version	Manifest	Implementation-Version	3.9.6	High
Version	pom	version	3.9.6	Highest

Identifiers

pkg:maven/org.apache.maven/maven-artifact@3.9.6 (Confidence:High)

maven-model-3.9.6.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.9.6\maven-model-3.9.6.jar
MD5: ac8747986567850914e2c7f0e85599b3
SHA1: ac9a1c8a8cfa36f3a5489837e653ec0cd530d576
SHA256:4f8f07fdb6b8701fa89a23a2edf830808fd65892d90cce40c0e6df7c8f2fcb62
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-model-3.9.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model	Highest
Vendor	pom	artifactid	maven-model	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Model	High
Product	Manifest	specification-title	Maven Model	Medium
Product	pom	artifactid	maven-model	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.6	High
Version	Manifest	Implementation-Version	3.9.6	High
Version	pom	version	3.9.6	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model@3.9.6 (Confidence:High)

maven-plugin-annotations-3.11.0.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.11.0\maven-plugin-annotations-3.11.0.jar
MD5: 8182135d00fb5f440608fe17a88489f1
SHA1: b38718cb50fa187f4b168034c120704be7e1c3a3
SHA256:ec1f1741f529b289090cd34799e69be43b6cc37e26a69b5db70789f10af7b7b0
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-plugin-annotations-3.11.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-annotations	Highest
Vendor	pom	artifactid	maven-plugin-annotations	Low
Vendor	pom	groupid	org.apache.maven.plugin-tools	Highest
Vendor	pom	name	Maven Plugin Tools Java Annotations	High
Vendor	pom	parent-artifactid	maven-plugin-tools	Low
Product	file	name	maven-plugin-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Maven Plugin Tools Java Annotations	High
Product	Manifest	specification-title	Maven Plugin Tools Java Annotations	Medium
Product	pom	artifactid	maven-plugin-annotations	Highest
Product	pom	groupid	org.apache.maven.plugin-tools	Highest
Product	pom	name	Maven Plugin Tools Java Annotations	High
Product	pom	parent-artifactid	maven-plugin-tools	Medium
Version	file	version	3.11.0	High
Version	Manifest	Implementation-Version	3.11.0	High
Version	pom	version	3.11.0	Highest

Identifiers

pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.11.0 (Confidence:High)

maven-plugin-api-3.9.6.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.9.6\maven-plugin-api-3.9.6.jar
MD5: d554ff9d1f948ef4ad67dd590e0eb299
SHA1: 64c127e31d9329928c72c403408a01f1871b6733
SHA256:3fd664f7e511463561bc343822347618b8ca0952db85da785809166f0a762411
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-plugin-api-3.9.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugin	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-api	Highest
Vendor	pom	artifactid	maven-plugin-api	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Plugin API	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-plugin-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugin	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Plugin API	High
Product	Manifest	specification-title	Maven Plugin API	Medium
Product	pom	artifactid	maven-plugin-api	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Plugin API	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.6	High
Version	Manifest	Implementation-Version	3.9.6	High
Version	pom	version	3.9.6	Highest

Identifiers

pkg:maven/org.apache.maven/maven-plugin-api@3.9.6 (Confidence:High)

modernizer-maven-annotations-2.7.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\2.7.0\modernizer-maven-annotations-2.7.0.jar
MD5: 0af0d3c9187c7dc13fcbcb7257c0fd5b
SHA1: 25fb27f1a54d193b52b5baa7dee26ef0ba6c03fe
SHA256:9e8340d07c2226e28a8f5d115418b2e2ab02139f2f3966dcd9163fa5902e267f
Referenced In Project/Scope: smartsprites-maven-plugin:provided
modernizer-maven-annotations-2.7.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	modernizer-maven-annotations	High
Vendor	jar	package name	gaul	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	modernizer-maven-annotations	Highest
Vendor	pom	artifactid	modernizer-maven-annotations	Low
Vendor	pom	groupid	org.gaul	Highest
Vendor	pom	name	Modernizer Maven Plugin annotations	High
Vendor	pom	parent-artifactid	modernizer-maven-parent	Low
Product	file	name	modernizer-maven-annotations	High
Product	jar	package name	gaul	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	modernizer-maven-annotations	Highest
Product	pom	groupid	org.gaul	Highest
Product	pom	name	Modernizer Maven Plugin annotations	High
Product	pom	parent-artifactid	modernizer-maven-parent	Medium
Version	file	version	2.7.0	High
Version	pom	version	2.7.0	Highest

Identifiers

pkg:maven/org.gaul/modernizer-maven-annotations@2.7.0 (Confidence:High)

org.eclipse.sisu.inject-0.9.0.M2.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

"Eclipse Public License, Version 1.0";link="http://www.eclipse.org/legal/epl-v10.html"

File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.inject\0.9.0.M2\org.eclipse.sisu.inject-0.9.0.M2.jar
MD5: eb805c5b2e22c8002877f0caadc6a87c
SHA1: 5ace70e1ea696d156f5034a42a615df13a52003a
SHA256:9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.inject	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	sisu	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.inject	Low
Vendor	pom	artifactid	org.eclipse.sisu.inject	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.inject	High
Product	jar	package name	dynamic	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	inject	Highest
Product	jar	package name	sisu	Highest
Product	jar	package name	sonatype	Highest
Product	jar	package name	wiring	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Inject (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.inject	Highest
Product	pom	artifactid	org.eclipse.sisu.inject	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	parent-artifactid	sisu-inject	Medium
Version	Manifest	Bundle-Version	0.9.0.M2	High
Version	pom	version	0.9.0.M2	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2 (Confidence:High)

org.eclipse.sisu.plexus-0.9.0.M2.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

"Eclipse Public License, Version 1.0";link="http://www.eclipse.org/legal/epl-v10.html"

File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\0.9.0.M2\org.eclipse.sisu.plexus-0.9.0.M2.jar
MD5: 98e320df2caac742b2ae33d938c69df8
SHA1: 31456dd2293197bb282c03168f6767acca3dec96
SHA256:9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.plexus	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sisu	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.plexus	Low
Vendor	pom	artifactid	org.eclipse.sisu.plexus	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	parent-artifactid	sisu-plexus	Low
Product	file	name	org.eclipse.sisu.plexus	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	sisu	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Plexus (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.plexus	Highest
Product	pom	artifactid	org.eclipse.sisu.plexus	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	parent-artifactid	sisu-plexus	Medium
Version	Manifest	Bundle-Version	0.9.0.M2	High
Version	pom	version	0.9.0.M2	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2 (Confidence:High)

plexus-classworlds-2.7.0.jar

Description:

A class loader framework

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.7.0\plexus-classworlds-2.7.0.jar
MD5: 6ed852b1a004288c44438381e6aaee1e
SHA1: fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d
SHA256:c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-classworlds	High
Vendor	jar	package name	classworlds	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Vendor	pom	artifactid	plexus-classworlds	Highest
Vendor	pom	artifactid	plexus-classworlds	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Classworlds	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-classworlds	High
Product	jar	package name	classworlds	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Classworlds	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Product	pom	artifactid	plexus-classworlds	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Classworlds	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	2.7.0	High
Version	Manifest	Bundle-Version	2.7.0	High
Version	pom	parent-version	2.7.0	Low
Version	pom	version	2.7.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:2.7.0:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)

CVSSv3:

Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

plexus-component-annotations-2.1.0.jar

Description:

    Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.1.0\plexus-component-annotations-2.1.0.jar
MD5: 141fd7a2ae613cb17d25ecd54b43eb3f
SHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9
SHA256:bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac
Referenced In Project/Scope: smartsprites-maven-plugin:provided
plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-component-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	codehaus	Low
Vendor	jar	package name	component	Highest
Vendor	jar	package name	component	Low
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	plexus	Low
Vendor	pom	artifactid	plexus-component-annotations	Highest
Vendor	pom	artifactid	plexus-component-annotations	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus :: Component Annotations	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	file	name	plexus-component-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	codehaus	Highest
Product	jar	package name	component	Highest
Product	jar	package name	component	Low
Product	jar	package name	plexus	Highest
Product	jar	package name	plexus	Low
Product	pom	artifactid	plexus-component-annotations	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus :: Component Annotations	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	file	version	2.1.0	High
Version	pom	version	2.1.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:2.1.0:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)

CVSSv3:

Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

plexus-utils-4.0.0.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\4.0.0\plexus-utils-4.0.0.jar
MD5: 16481d9d3af602d73a6355e79d2de889
SHA1: ff00a04ba971655ed10e9fb93bce0ed3014e9477
SHA256:270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b
Referenced In Project/Scope: smartsprites-maven-plugin:compile
plexus-utils-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-utils	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	plexus-utils	Highest
Vendor	pom	artifactid	plexus-utils	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-utils	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	org	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	plexus-utils	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Common Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	4.0.0	High
Version	pom	parent-version	4.0.0	Low
Version	pom	version	4.0.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:4.0.0:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:plexus-utils_project:plexus-utils:4.0.0:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:4.0.0:*:*:*:*:*:*:* (Confidence:Highest)

plexus-xml-3.0.0.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-xml\3.0.0\plexus-xml-3.0.0.jar
MD5: cccca4a03a8367cd20e4efaead5fba0b
SHA1: d16b91678bc3734276886132923d6919c935c9f7
SHA256:d2622dc9339b16f5b8c9cad2add440e965831d0e16f19ae1de24e1202b0de536
Referenced In Project/Scope: smartsprites-maven-plugin:compile
plexus-xml-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-xml	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	artifactid	plexus-xml	Highest
Vendor	pom	artifactid	plexus-xml	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus XML Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Highest
Product	file	name	plexus-xml	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	pom	artifactid	plexus-xml	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus XML Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Medium
Version	file	version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus_project:codehaus-plexus:3.0.0:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)

CVSSv3:

Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A

References:

secalert@redhat.com - Issue Tracking
secalert@redhat.com - Third Party Advisory
secalert@redhat.com - Third Party Advisory

Vulnerable Software & Versions: (show all)

smartsprites-0.3.0.jar

Description:

CSS Sprites Generator Done Right. SmartSprites maintains CSS sprites in your designs,
    fully automatically. No tedious copying and pasting to your CSS when adding or changing
    sprited images.

License:

BSD license: https://opensource.org/license/bsd-2-clause

File Path: C:\Users\Jeremy\.m2\repository\com\github\hazendaz\smartsprites\0.3.0\smartsprites-0.3.0.jar
MD5: 1ffde68e79f5095acedf2316fd21151d
SHA1: 91aaf926db5b75956222412b8626cd7397b1bb8d
SHA256:cac0629bed15bfd6f2fababdde9e925120edddad7f92d750ec30da197b2d7f19
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	smartsprites	High
Vendor	jar	package name	carrot2	Highest
Vendor	jar	package name	css	Highest
Vendor	jar	package name	labs	Highest
Vendor	jar	package name	smartsprites	Highest
Vendor	Manifest	automatic-module-name	org.carrot2.labs.smartsprites	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	copyright	2023	Low
Vendor	Manifest	git-revision	7e451462468e3be3888b36f179f6f5961c54118f	Low
Vendor	Manifest	Implementation-Vendor	Carrot Search s.c.	High
Vendor	Manifest	specification-vendor	Carrot Search s.c.	Low
Vendor	pom	artifactid	smartsprites	Highest
Vendor	pom	artifactid	smartsprites	Low
Vendor	pom	developer email	dawid.weiss@carrotsearch.com	Low
Vendor	pom	developer email	stanislaw.osinski@carrotsearch.com	Low
Vendor	pom	developer id	dawid.weiss	Medium
Vendor	pom	developer id	stanislaw.osinski	Medium
Vendor	pom	developer name	Dawid Weiss	Medium
Vendor	pom	developer name	Stanisław Osiński	Medium
Vendor	pom	groupid	com.github.hazendaz	Highest
Vendor	pom	name	SmartSprites	High
Vendor	pom	organization name	Carrot Search s.c.	High
Vendor	pom	organization url	https://www.carrotsearch.com/	Medium
Vendor	pom	parent-artifactid	base-parent	Low
Vendor	pom	url	carrotsearch/smartsprites/wiki/Documentation	Highest
Product	file	name	smartsprites	High
Product	jar	package name	carrot2	Highest
Product	jar	package name	css	Highest
Product	jar	package name	labs	Highest
Product	jar	package name	smartsprites	Highest
Product	Manifest	automatic-module-name	org.carrot2.labs.smartsprites	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	copyright	2023	Low
Product	Manifest	git-revision	7e451462468e3be3888b36f179f6f5961c54118f	Low
Product	Manifest	Implementation-Title	SmartSprites	High
Product	Manifest	specification-title	SmartSprites	Medium
Product	pom	artifactid	smartsprites	Highest
Product	pom	developer email	dawid.weiss@carrotsearch.com	Low
Product	pom	developer email	stanislaw.osinski@carrotsearch.com	Low
Product	pom	developer id	dawid.weiss	Low
Product	pom	developer id	stanislaw.osinski	Low
Product	pom	developer name	Dawid Weiss	Low
Product	pom	developer name	Stanisław Osiński	Low
Product	pom	groupid	com.github.hazendaz	Highest
Product	pom	name	SmartSprites	High
Product	pom	organization name	Carrot Search s.c.	Low
Product	pom	organization url	https://www.carrotsearch.com/	Low
Product	pom	parent-artifactid	base-parent	Medium
Product	pom	url	carrotsearch/smartsprites/wiki/Documentation	High
Version	file	version	0.3.0	High
Version	Manifest	Implementation-Version	0.3.0	High
Version	pom	parent-version	0.3.0	Low
Version	pom	version	0.3.0	Highest

Identifiers

pkg:maven/com.github.hazendaz/smartsprites@0.3.0 (Confidence:High)

spotbugs-annotations-4.8.3.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.8.3\spotbugs-annotations-4.8.3.jar
MD5: cd5917b77643c3a7ba5420aea78f940c
SHA1: 05d2dc4ca5b632976371155252499819aea372ed
SHA256:e5d4f60be8e57595766ba7f1d4535dc46aebf98dae05e16372a4d4120d3ebb6b
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.8.3	High
Version	Manifest	Bundle-Version	4.8.3	High
Version	pom	version	4.8.3	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: smartsprites-maven-plugin

com.github.hazendaz.maven:smartsprites-maven-plugin:2.2.0

Summary

Dependencies (vulnerable)

args4j-2.33.jar

Evidence

Identifiers

checker-qual-3.42.0.jar

Evidence

Identifiers

commons-io-2.15.1.jar

Evidence

Identifiers

commons-lang3-3.12.0.jar

Evidence

Identifiers

commons-math3-3.6.1.jar

Evidence

Identifiers

error_prone_annotations-2.24.0.jar

Evidence

Identifiers

failureaccess-1.0.2.jar

Evidence

Identifiers

guava-33.0.0-jre.jar

Evidence

Identifiers

hibernate-validator-annotation-processor-6.2.5.Final.jar

Evidence

Identifiers

j2objc-annotations-2.8.jar

Evidence

Identifiers

javax.annotation-api-1.2.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Evidence

Identifiers

lombok-1.18.30.jar: mavenEcjBootstrapAgent.jar

Evidence

Identifiers

lombok-1.18.30.jar

Evidence

Identifiers

maven-artifact-3.9.6.jar

Evidence

Identifiers

maven-model-3.9.6.jar

Evidence

Identifiers

maven-plugin-annotations-3.11.0.jar

Evidence

Identifiers

maven-plugin-api-3.9.6.jar

Evidence

Identifiers

modernizer-maven-annotations-2.7.0.jar

Evidence

Identifiers

org.eclipse.sisu.inject-0.9.0.M2.jar

Evidence

Identifiers

org.eclipse.sisu.plexus-0.9.0.M2.jar

Evidence

Identifiers

plexus-classworlds-2.7.0.jar

Evidence

Identifiers

Published Vulnerabilities

plexus-component-annotations-2.1.0.jar

Evidence

Identifiers

Published Vulnerabilities

plexus-utils-4.0.0.jar

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor