Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.2.2
Report Generated On: Sat, 13 Jun 2026 15:56:29 -0400
Dependencies Scanned: 45 (30 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2026-06-13T15:22:03-04
NVD API Last Modified: 2026-06-13T18:16:22Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
args4j-2.37.jar	cpe:2.3:a:jsite:jsite:2.37:::::::*	pkg:maven/args4j/args4j@2.37	Low	26
batik-css-1.19.jar	cpe:2.3:a:apache:batik:1.19:::::::* cpe:2.3:a:apache:xml_graphics_batik:1.19:::::::*	pkg:maven/org.apache.xmlgraphics/batik-css@1.19	Highest	23
batik-i18n-1.19.jar		pkg:maven/org.apache.xmlgraphics/batik-i18n@1.19		21
checker-qual-4.2.0.jar		pkg:maven/org.checkerframework/checker-qual@4.2.0		44
commons-io-2.22.0.jar	cpe:2.3:a:apache:commons_io:2.22.0:::::::*	pkg:maven/commons-io/commons-io@2.22.0	Highest	127
commons-math3-3.6.1.jar		pkg:maven/org.apache.commons/commons-math3@3.6.1		134
error_prone_annotations-2.49.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0		29
failureaccess-1.0.3.jar		pkg:maven/com.google.guava/failureaccess@1.0.3		32
guava-33.6.0-jre.jar	cpe:2.3:a:google:guava:33.6.0:::::::*	pkg:maven/com.google.guava/guava@33.6.0-jre	Highest	25
j2objc-annotations-3.1.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.1		33
jspecify-1.0.0.jar		pkg:maven/org.jspecify/jspecify@1.0.0		32
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar		pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava		13
lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar				7
lombok-1.18.46.jar		pkg:maven/org.projectlombok/lombok@1.18.46		36
maven-artifact-3.9.16.jar		pkg:maven/org.apache.maven/maven-artifact@3.9.16		26
maven-model-3.9.16.jar		pkg:maven/org.apache.maven/maven-model@3.9.16		26
maven-plugin-annotations-3.15.2.jar		pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2		26
maven-plugin-api-3.9.16.jar		pkg:maven/org.apache.maven/maven-plugin-api@3.9.16		26
modernizer-maven-annotations-3.4.0.jar		pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0		19
org.eclipse.sisu.plexus-1.0.0.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0		32
plexus-classworlds-2.11.0.jar		pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0		37
plexus-component-annotations-2.2.0.jar		pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0		23
plexus-utils-4.0.3.jar	cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.3:::::::* cpe:2.3:a:utils_project:utils:4.0.3:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@4.0.3	Highest	35
plexus-xml-3.0.2.jar		pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2		29
smartsprites-0.5.0.jar		pkg:maven/com.github.hazendaz/smartsprites@0.5.0		53
spotbugs-annotations-4.9.8.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8		53
xml-apis-1.4.01.jar		pkg:maven/xml-apis/xml-apis@1.4.01		87
xml-apis-ext-1.3.04.jar	cpe:2.3:a:apache:commons_lang:1.3.04:::::::*	pkg:maven/xml-apis/xml-apis-ext@1.3.04	Low	35
xmlgraphics-commons-2.11.jar	cpe:2.3:a:apache:xmlgraphics_commons:2.11:::::::*	pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11	Highest	28

Dependencies (vulnerable)

args4j-2.37.jar

Description:

args4j : Java command line arguments parser

License:

http://www.opensource.org/licenses/mit-license.php

File Path: C:\Users\Jeremy\.m2\repository\args4j\args4j\2.37\args4j-2.37.jar
MD5: f58e89e55a715448f1eac17edaf4b511
SHA1: 244f60c057d72a785227c0562d3560f42a7ea54b
SHA256:5a13b0f7ff519183e55b8f453b8faaa23b92ccf0443f1fac515fedf2246bdc18
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	args4j	High
Vendor	jar	package name	args4j	Highest
Vendor	jar	package name	kohsuke	Highest
Vendor	Manifest	automatic-module-name	args4j	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Vendor	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Vendor	pom	artifactid	args4j	Highest
Vendor	pom	artifactid	args4j	Low
Vendor	pom	groupid	args4j	Highest
Vendor	pom	name	args4j	High
Vendor	pom	parent-artifactid	args4j-site	Low
Product	file	name	args4j	High
Product	jar	package name	args4j	Highest
Product	jar	package name	kohsuke	Highest
Product	Manifest	automatic-module-name	args4j	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Product	Manifest	Bundle-Name	args4j	Medium
Product	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Product	pom	artifactid	args4j	Highest
Product	pom	groupid	args4j	Highest
Product	pom	name	args4j	High
Product	pom	parent-artifactid	args4j-site	Medium
Version	file	version	2.37	High
Version	pom	version	2.37	Highest

Identifiers

pkg:maven/args4j/args4j@2.37 (Confidence:High)
cpe:2.3:a:jsite:jsite:2.37:*:*:*:*:*:*:* (Confidence:Low)

batik-css-1.19.jar

Description:

Batik CSS engine

File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-css\1.19\batik-css-1.19.jar
MD5: 87bbcb48331c213e654fbfcb1e010cee
SHA1: 5fd19312a31e1b61c5d9595d65a085b81af30e6b
SHA256:c66afd6ac61d630e62e859db03670fa7a4f7241daaee29b531614e6900b9c6a9
Referenced In Project/Scope: smartsprites-maven-plugin:compile
batik-css-1.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	batik-css	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	batik	Highest
Vendor	jar	package name	css	Highest
Vendor	jar	package name	engine	Highest
Vendor	Manifest	automatic-module-name	org.apache.xmlgraphics.batik.css	Medium
Vendor	pom	artifactid	batik-css	Highest
Vendor	pom	artifactid	batik-css	Low
Vendor	pom	groupid	org.apache.xmlgraphics	Highest
Vendor	pom	name	:	High
Vendor	pom	parent-artifactid	batik	Low
Product	file	name	batik-css	High
Product	jar	package name	apache	Highest
Product	jar	package name	batik	Highest
Product	jar	package name	css	Highest
Product	jar	package name	engine	Highest
Product	Manifest	automatic-module-name	org.apache.xmlgraphics.batik.css	Medium
Product	pom	artifactid	batik-css	Highest
Product	pom	groupid	org.apache.xmlgraphics	Highest
Product	pom	name	:	High
Product	pom	parent-artifactid	batik	Medium
Version	file	version	1.19	High
Version	pom	version	1.19	Highest

Related Dependencies

batik-anim-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-anim\1.19\batik-anim-1.19.jar
- MD5: 9c5ca16b8310539b1a1dd63bdf88fcb8
- SHA1: bb8f0cdbe47ff94afeab7b6e569d7dab11928ddb
- SHA256: 9b3f6f8c84c0efd88174012a8fbac4427697e5854aef194d57c5f0910c15280a
- pkg:maven/org.apache.xmlgraphics/batik-anim@1.19
batik-awt-util-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-awt-util\1.19\batik-awt-util-1.19.jar
- MD5: 574294aeb9a9973cf5383e9b6d2f05db
- SHA1: 858ea4772e2299af37cb2753202307a5c089602c
- SHA256: c9ac9ed24e0b20984e7c65ce2fbe4915003c67f9ae96177bc32bef901b557a9a
- pkg:maven/org.apache.xmlgraphics/batik-awt-util@1.19
batik-bridge-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-bridge\1.19\batik-bridge-1.19.jar
- MD5: c84127e23c3fcd543e1d841f1a62f2cd
- SHA1: 9b32c6c36a6c104e6b8611b09df07ed875e58eb8
- SHA256: 9ae79c592efbab0804923de85363d524a2cb36ebdc1f27faeec10c1907427e26
- pkg:maven/org.apache.xmlgraphics/batik-bridge@1.19
batik-constants-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-constants\1.19\batik-constants-1.19.jar
- MD5: 4c945d0ce1bbf25ae44306271228c0c3
- SHA1: 00aef5a746a204f8597a3f7c0c5e28a0192c1f3e
- SHA256: e1d42c4da56dd8b7a3a794285fe3ed05f932d0a2b5ce3face198f02cc501331f
- pkg:maven/org.apache.xmlgraphics/batik-constants@1.19
batik-dom-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-dom\1.19\batik-dom-1.19.jar
- MD5: b6448b3cb7da750bd92dac850c498c2b
- SHA1: 46dae3cde886b023d92b18e7237d7bb37360b206
- SHA256: 1dabf83687b2ec5a4ccd4a55e3520f7cd8863a4c23ba7f5e54ef3f882819997a
- pkg:maven/org.apache.xmlgraphics/batik-dom@1.19
batik-ext-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-ext\1.19\batik-ext-1.19.jar
- MD5: d84e93dc8f1f86ce9566fdfbd5a6d070
- SHA1: 7e73d5c6378a53b53fa9421ae9fd75916a6c2979
- SHA256: e6264faa65d00d187eed932dff96e40da80e17fea66a1d92af4776ddb7811256
- pkg:maven/org.apache.xmlgraphics/batik-ext@1.19
batik-gvt-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-gvt\1.19\batik-gvt-1.19.jar
- MD5: 6ae96f1c52eff42ae801126bc645c0c9
- SHA1: 19b27455ef1e23c79fce748be07a84c70dc5db8a
- SHA256: c8b1ea700d1c26dffe3a08a543efcaadc5fb77d5949e6a9a300c5e35c289c915
- pkg:maven/org.apache.xmlgraphics/batik-gvt@1.19
batik-parser-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-parser\1.19\batik-parser-1.19.jar
- MD5: a881f20655403ea2de58851fdc1829e1
- SHA1: 4f5f83767ab48fb5aa92c794f7eb3531cc946715
- SHA256: 602e331c1c79de4a04525d75266dadbaf969524841155105d31ad54a7731de20
- pkg:maven/org.apache.xmlgraphics/batik-parser@1.19
batik-script-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-script\1.19\batik-script-1.19.jar
- MD5: 89762a4aade14871ee3cb2c947fca75f
- SHA1: ef523f9c7399b75cf94dcb3828d60124a8f09a85
- SHA256: 1aacf6445f85d1e029c5691d55505ca1ba140414cba2c9620d7f82fc6aee55f3
- pkg:maven/org.apache.xmlgraphics/batik-script@1.19
batik-shared-resources-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-shared-resources\1.19\batik-shared-resources-1.19.jar
- MD5: 4636f1106af5cc9cafe69fea61a9888d
- SHA1: db8a1ad3a24f747f5170f623ccd785a95145b724
- SHA256: e2dad47cfeff5c7d686e97787996accf85a5b19f602acb30b83fce9c247deecd
- pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.19
batik-svg-dom-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-svg-dom\1.19\batik-svg-dom-1.19.jar
- MD5: 51cf0e3b0f85c0c5cfc42e8c892d9882
- SHA1: 7958ef79eecf535061c48caabc49b0425945d7e7
- SHA256: f5cc6730ce1b6c552e9ccc0c41b4e4c233cc6260b6c3a10038ad41ea21364c2a
- pkg:maven/org.apache.xmlgraphics/batik-svg-dom@1.19
batik-svggen-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-svggen\1.19\batik-svggen-1.19.jar
- MD5: 661a6194f64cfb8053ee092d6b39c58d
- SHA1: 9f27bd3f13be9cf0c7a15ed449a84201e709c23d
- SHA256: 6bf89ede81483da574b25d8645e512e030965e8fbe5605e2938bccaa87ebb6a6
- pkg:maven/org.apache.xmlgraphics/batik-svggen@1.19
batik-transcoder-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-transcoder\1.19\batik-transcoder-1.19.jar
- MD5: a86b4f183c1c7812647dc7015b9aaeaf
- SHA1: 5af06d38710d1ec1b8da3e0e76e3a45fcdb083da
- SHA256: 12045f8e21d6c7fd2a729f42317207233f8e3446f3a2f6ea1171000864972274
- pkg:maven/org.apache.xmlgraphics/batik-transcoder@1.19
batik-util-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-util\1.19\batik-util-1.19.jar
- MD5: 5f16461ba3616ae928c73849850b6808
- SHA1: 0f246bb0e8b645a552697a7a507e24536af764fc
- SHA256: 3f1389bbdbed3c4659a58a50ce12166fd31e3d066994dd63b5144d9245fd3db6
- pkg:maven/org.apache.xmlgraphics/batik-util@1.19
batik-xml-1.19.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-xml\1.19\batik-xml-1.19.jar
- MD5: a19f14fecfa7522fb7610be5d64f8837
- SHA1: bf37203619e48844d4d25e336b745501b50cbd76
- SHA256: 9b9364f7dec75c41c4a611596bd4dcbf08b51b753b6726573b542998addec6a5
- pkg:maven/org.apache.xmlgraphics/batik-xml@1.19

Identifiers

pkg:maven/org.apache.xmlgraphics/batik-css@1.19 (Confidence:High)
cpe:2.3:a:apache:batik:1.19:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache:xml_graphics_batik:1.19:*:*:*:*:*:*:* (Confidence:Highest)

batik-i18n-1.19.jar

Description:

Batik i18n library

File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\batik-i18n\1.19\batik-i18n-1.19.jar
MD5: 0d42916c958b0cd7c36a51bba5d6e101
SHA1: 9df77dbefde9120a1c0c4edaa287fa7fe2263cd6
SHA256:eb95e07c29feb276cf91aca9cf5362b43fe17601395aab5d8a6147a6d0859716
Referenced In Project/Scope: smartsprites-maven-plugin:compile
batik-i18n-1.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	batik-i18n	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	batik	Highest
Vendor	jar	package name	i18n	Highest
Vendor	Manifest	automatic-module-name	org.apache.xmlgraphics.batik.i18n	Medium
Vendor	pom	artifactid	batik-i18n	Highest
Vendor	pom	artifactid	batik-i18n	Low
Vendor	pom	groupid	org.apache.xmlgraphics	Highest
Vendor	pom	name	:	High
Vendor	pom	parent-artifactid	batik	Low
Product	file	name	batik-i18n	High
Product	jar	package name	apache	Highest
Product	jar	package name	batik	Highest
Product	jar	package name	i18n	Highest
Product	Manifest	automatic-module-name	org.apache.xmlgraphics.batik.i18n	Medium
Product	pom	artifactid	batik-i18n	Highest
Product	pom	groupid	org.apache.xmlgraphics	Highest
Product	pom	name	:	High
Product	pom	parent-artifactid	batik	Medium
Version	file	version	1.19	High
Version	pom	version	1.19	Highest

Identifiers

pkg:maven/org.apache.xmlgraphics/batik-i18n@1.19 (Confidence:High)

checker-qual-4.2.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: https://opensource.org/licenses/MIT

File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\4.2.0\checker-qual-4.2.0.jar
MD5: 91875f065ec9f5bb8bb31a70f10416aa
SHA1: b4bda44e50dc5b020e6bdf0054ecf1f2329eafd5
SHA256:30bb4494b13f41cbd1502b094caafeb2b1d1f347311c72e7c74f83160acbdf0e
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org/	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org/	Medium
Version	file	version	4.2.0	High
Version	Manifest	Bundle-Version	4.2.0	High
Version	Manifest	Implementation-Version	4.2.0	High
Version	pom	version	4.2.0	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@4.2.0 (Confidence:High)

commons-io-2.22.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.22.0\commons-io-2.22.0.jar
MD5: f91d54bd47c42456b4a5ae62eed85565
SHA1: 5b1e18bc0ad651ed878029d83f88d9c8189fd51e
SHA256:2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-io	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	file	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Vendor	Manifest	enabledynamicagentloading	-XX:+EnableDynamicAgentLoading	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-io	Highest
Vendor	pom	artifactid	commons-io	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	dion@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jeremias@apache.org	Low
Vendor	pom	developer email	jochen.wiedmann@gmail.com	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	martinc@apache.org	Low
Vendor	pom	developer email	matth@apache.org	Low
Vendor	pom	developer email	nicolaken@apache.org	Low
Vendor	pom	developer email	roxspring@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	dion	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jochen	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	martinc	Medium
Vendor	pom	developer id	matth	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	nicolaken	Medium
Vendor	pom	developer id	roxspring	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	dIon Gillard	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Jochen Wiedmann	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Martin Cooper	Medium
Vendor	pom	developer name	Matthew Hawthorne	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Nicola Ken Barozzi	Medium
Vendor	pom	developer name	Rob Oxspring	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-io	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-io/	Highest
Product	file	name	commons-io	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	file	Highest
Product	jar	package name	io	Highest
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Product	Manifest	enabledynamicagentloading	-XX:+EnableDynamicAgentLoading	Low
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	artifactid	commons-io	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	dion@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jeremias@apache.org	Low
Product	pom	developer email	jochen.wiedmann@gmail.com	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	martinc@apache.org	Low
Product	pom	developer email	matth@apache.org	Low
Product	pom	developer email	nicolaken@apache.org	Low
Product	pom	developer email	roxspring@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	dion	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jochen	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	martinc	Low
Product	pom	developer id	matth	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	nicolaken	Low
Product	pom	developer id	roxspring	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	dIon Gillard	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Jochen Wiedmann	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Martin Cooper	Low
Product	pom	developer name	Matthew Hawthorne	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Nicola Ken Barozzi	Low
Product	pom	developer name	Rob Oxspring	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-io	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-io/	Medium
Version	file	version	2.22.0	High
Version	Manifest	Bundle-Version	2.22.0	High
Version	Manifest	Implementation-Version	2.22.0	High
Version	pom	parent-version	2.22.0	Low
Version	pom	version	2.22.0	Highest

Identifiers

pkg:maven/commons-io/commons-io@2.22.0 (Confidence:High)
cpe:2.3:a:apache:commons_io:2.22.0:*:*:*:*:*:*:* (Confidence:Highest)

commons-math3-3.6.1.jar

Description:

The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-math3\3.6.1\commons-math3-3.6.1.jar
MD5: 5b730d97e4e6368069de1983937c508e
SHA1: e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf
SHA256:1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-math3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	math3	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-math/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.math3	Medium
Vendor	Manifest	implementation-build	16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-math/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-math3	Highest
Vendor	pom	artifactid	commons-math3	Low
Vendor	pom	developer email	achou at apache dot org	Low
Vendor	pom	developer email	billbarker at apache dot org	Low
Vendor	pom	developer email	brentworden at apache dot org	Low
Vendor	pom	developer email	celestin at apache dot org	Low
Vendor	pom	developer email	dimpbx at apache dot org	Low
Vendor	pom	developer email	erans at apache dot org	Low
Vendor	pom	developer email	evanward at apache dot org	Low
Vendor	pom	developer email	gregs at apache dot org	Low
Vendor	pom	developer email	j3322ptm at yahoo dot de	Low
Vendor	pom	developer email	luc at apache dot org	Low
Vendor	pom	developer email	mdiggory at apache dot org	Low
Vendor	pom	developer email	mikl at apache dot org	Low
Vendor	pom	developer email	oertl at apache dot org	Low
Vendor	pom	developer email	rdonkin at apache dot org	Low
Vendor	pom	developer email	tn at apache dot org	Low
Vendor	pom	developer email	tobrien at apache dot org	Low
Vendor	pom	developer id	achou	Medium
Vendor	pom	developer id	billbarker	Medium
Vendor	pom	developer id	brentworden	Medium
Vendor	pom	developer id	celestin	Medium
Vendor	pom	developer id	dimpbx	Medium
Vendor	pom	developer id	erans	Medium
Vendor	pom	developer id	evanward	Medium
Vendor	pom	developer id	gregs	Medium
Vendor	pom	developer id	luc	Medium
Vendor	pom	developer id	mdiggory	Medium
Vendor	pom	developer id	mikl	Medium
Vendor	pom	developer id	oertl	Medium
Vendor	pom	developer id	pietsch	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer id	tobrien	Medium
Vendor	pom	developer name	Albert Davidson Chou	Medium
Vendor	pom	developer name	Bill Barker	Medium
Vendor	pom	developer name	Brent Worden	Medium
Vendor	pom	developer name	Dimitri Pourbaix	Medium
Vendor	pom	developer name	Evan Ward	Medium
Vendor	pom	developer name	Gilles Sadowski	Medium
Vendor	pom	developer name	Greg Sterijevski	Medium
Vendor	pom	developer name	J. Pietschmann	Medium
Vendor	pom	developer name	Luc Maisonobe	Medium
Vendor	pom	developer name	Mark Diggory	Medium
Vendor	pom	developer name	Mikkel Meyer Andersen	Medium
Vendor	pom	developer name	Otmar Ertl	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Sébastien Brisard	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer name	Tim O'Brien	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Math	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	http://commons.apache.org/proper/commons-math/	Highest
Product	file	name	commons-math3	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	math3	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-math/	Low
Product	Manifest	Bundle-Name	Apache Commons Math	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.math3	Medium
Product	Manifest	implementation-build	16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400	Low
Product	Manifest	Implementation-Title	Apache Commons Math	High
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-math/	Low
Product	Manifest	specification-title	Apache Commons Math	Medium
Product	pom	artifactid	commons-math3	Highest
Product	pom	developer email	achou at apache dot org	Low
Product	pom	developer email	billbarker at apache dot org	Low
Product	pom	developer email	brentworden at apache dot org	Low
Product	pom	developer email	celestin at apache dot org	Low
Product	pom	developer email	dimpbx at apache dot org	Low
Product	pom	developer email	erans at apache dot org	Low
Product	pom	developer email	evanward at apache dot org	Low
Product	pom	developer email	gregs at apache dot org	Low
Product	pom	developer email	j3322ptm at yahoo dot de	Low
Product	pom	developer email	luc at apache dot org	Low
Product	pom	developer email	mdiggory at apache dot org	Low
Product	pom	developer email	mikl at apache dot org	Low
Product	pom	developer email	oertl at apache dot org	Low
Product	pom	developer email	rdonkin at apache dot org	Low
Product	pom	developer email	tn at apache dot org	Low
Product	pom	developer email	tobrien at apache dot org	Low
Product	pom	developer id	achou	Low
Product	pom	developer id	billbarker	Low
Product	pom	developer id	brentworden	Low
Product	pom	developer id	celestin	Low
Product	pom	developer id	dimpbx	Low
Product	pom	developer id	erans	Low
Product	pom	developer id	evanward	Low
Product	pom	developer id	gregs	Low
Product	pom	developer id	luc	Low
Product	pom	developer id	mdiggory	Low
Product	pom	developer id	mikl	Low
Product	pom	developer id	oertl	Low
Product	pom	developer id	pietsch	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	tn	Low
Product	pom	developer id	tobrien	Low
Product	pom	developer name	Albert Davidson Chou	Low
Product	pom	developer name	Bill Barker	Low
Product	pom	developer name	Brent Worden	Low
Product	pom	developer name	Dimitri Pourbaix	Low
Product	pom	developer name	Evan Ward	Low
Product	pom	developer name	Gilles Sadowski	Low
Product	pom	developer name	Greg Sterijevski	Low
Product	pom	developer name	J. Pietschmann	Low
Product	pom	developer name	Luc Maisonobe	Low
Product	pom	developer name	Mark Diggory	Low
Product	pom	developer name	Mikkel Meyer Andersen	Low
Product	pom	developer name	Otmar Ertl	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Sébastien Brisard	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer name	Tim O'Brien	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Math	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	http://commons.apache.org/proper/commons-math/	Medium
Version	file	version	3.6.1	High
Version	Manifest	Bundle-Version	3.6.1	High
Version	Manifest	Implementation-Version	3.6.1	High
Version	pom	parent-version	3.6.1	Low
Version	pom	version	3.6.1	Highest

Identifiers

pkg:maven/org.apache.commons/commons-math3@3.6.1 (Confidence:High)

error_prone_annotations-2.49.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.49.0\error_prone_annotations-2.49.0.jar
MD5: f15f20dc5df752e2c0f8e37f7cdd9b1d
SHA1: 8b42a2e3865f6e0576da3fad51dbb96732ff0f14
SHA256:3b1003e51b8ae56fdbd7c71073e81d1683b97e6c4dff5a9151164d59b769d13c
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.49.0	High
Version	Manifest	Bundle-Version	2.49.0	High
Version	pom	version	2.49.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0 (Confidence:High)

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\failureaccess\1.0.3\failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/org.apache.maven/maven-core@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.3	High
Version	Manifest	Bundle-Version	1.0.3	High
Version	pom	parent-version	1.0.3	Low
Version	pom	version	1.0.3	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.3 (Confidence:High)

guava-33.6.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\33.6.0-jre\guava-33.6.0-jre.jar
MD5: 34a4f258ed23d2e876a6e4666bb3b1c5
SHA1: c376b13067cc99a5774403530953f7b05a91e218
SHA256:dc573e1fca4fd5454f4a5fd3d7da2df03002876a4175bafc14a95980dd7713b3
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.6.0-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.6.0-jre (Confidence:High)
cpe:2.3:a:google:guava:33.6.0:*:*:*:*:*:*:* (Confidence:Highest)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.1	High
Version	pom	version	3.1	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.1 (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jspecify	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	jspecify	Highest
Vendor	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Vendor	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	jspecify	Highest
Vendor	pom	artifactid	jspecify	Low
Vendor	pom	developer email	kevinb9n@gmail.com	Low
Vendor	pom	developer id	kevinb9n	Medium
Vendor	pom	developer name	Kevin Bourrillion	Medium
Vendor	pom	groupid	org.jspecify	Highest
Vendor	pom	name	JSpecify annotations	High
Vendor	pom	url	http://jspecify.org/	Highest
Product	file	name	jspecify	High
Product	jar	package name	annotations	Highest
Product	jar	package name	jspecify	Highest
Product	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Product	Manifest	Bundle-Name	JSpecify annotations	Medium
Product	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	jspecify	Highest
Product	pom	developer email	kevinb9n@gmail.com	Low
Product	pom	developer id	kevinb9n	Low
Product	pom	developer name	Kevin Bourrillion	Low
Product	pom	groupid	org.jspecify	Highest
Product	pom	name	JSpecify annotations	High
Product	pom	url	http://jspecify.org/	Medium
Version	file	version	1.0.0	High
Version	Manifest	Bundle-Version	1.0.0	High
Version	Manifest	Implementation-Version	1.0.0	High
Version	pom	version	1.0.0	Highest

Identifiers

pkg:maven/org.jspecify/jspecify@1.0.0 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\listenablefuture\9999.0-empty-to-avoid-conflict-with-guava\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: smartsprites-maven-plugin:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	listenablefuture	High
Vendor	pom	artifactid	listenablefuture	Highest
Vendor	pom	artifactid	listenablefuture	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava ListenableFuture only	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	listenablefuture	High
Product	pom	artifactid	listenablefuture	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava ListenableFuture only	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	pom	parent-version	9999.0-empty-to-avoid-conflict-with-guava	Low
Version	pom	version	9999.0-empty-to-avoid-conflict-with-guava	Highest

Identifiers

pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava (Confidence:High)

lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 8b80305e4846088e139701372844e637
SHA1: 4b03ce7b33d535b42e4a84e106c3647760eb8769
SHA256:639da94437813649eac5af6d8154d736355f27199fc8aaeda85904fce947ee4f
Referenced In Project/Scope: smartsprites-maven-plugin:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

lombok-1.18.46.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar
MD5: e02f419a66b86c594ffcafc862778723
SHA1: a5cfe99fdf320e84955ef653f2ce1bf789d11385
SHA256:01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.46	High
Version	Manifest	lombok-version	1.18.46	Medium
Version	pom	version	1.18.46	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.46 (Confidence:High)

maven-artifact-3.9.16.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.9.16\maven-artifact-3.9.16.jar
MD5: 6005ab2198a19a41cd3cf59618f9abc1
SHA1: 1176c6579a8a68508c3479ef72d514e71c98ddca
SHA256:54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-artifact-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-artifact	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-artifact	Highest
Vendor	pom	artifactid	maven-artifact	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-artifact	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	Implementation-Title	Maven Artifact	High
Product	Manifest	specification-title	Maven Artifact	Medium
Product	pom	artifactid	maven-artifact	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.16	High
Version	Manifest	Implementation-Version	3.9.16	High
Version	pom	version	3.9.16	Highest

Identifiers

pkg:maven/org.apache.maven/maven-artifact@3.9.16 (Confidence:High)

maven-model-3.9.16.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.9.16\maven-model-3.9.16.jar
MD5: 15ea34610d5c8d1944fc4ba317c6b4cd
SHA1: 6f93dbc874ef321b0c3734dee41a6d17e18ceebd
SHA256:f59d86a507c241bf17bbf050050d1b8b9c0d34d5010a7e2386c3cab7c83b93de
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-model-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model	Highest
Vendor	pom	artifactid	maven-model	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	Implementation-Title	Maven Model	High
Product	Manifest	specification-title	Maven Model	Medium
Product	pom	artifactid	maven-model	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.16	High
Version	Manifest	Implementation-Version	3.9.16	High
Version	pom	version	3.9.16	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model@3.9.16 (Confidence:High)

maven-plugin-annotations-3.15.2.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.15.2\maven-plugin-annotations-3.15.2.jar
MD5: 6b86f30960ce2f9eac20c6657db588a2
SHA1: dfc79f3b5b0c3afd01f55b8b01310f457568d2a4
SHA256:979d3cf8f4ac804cc27d2f8a6db07f2149d58ccd59bb3d589cc46bb9a44c0b4b
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-plugin-annotations-3.15.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-annotations	Highest
Vendor	pom	artifactid	maven-plugin-annotations	Low
Vendor	pom	groupid	org.apache.maven.plugin-tools	Highest
Vendor	pom	name	Maven Plugin Tools Java Annotations	High
Vendor	pom	parent-artifactid	maven-plugin-tools	Low
Product	file	name	maven-plugin-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Plugin Tools Java Annotations	High
Product	Manifest	specification-title	Maven Plugin Tools Java Annotations	Medium
Product	pom	artifactid	maven-plugin-annotations	Highest
Product	pom	groupid	org.apache.maven.plugin-tools	Highest
Product	pom	name	Maven Plugin Tools Java Annotations	High
Product	pom	parent-artifactid	maven-plugin-tools	Medium
Version	file	version	3.15.2	High
Version	Manifest	Implementation-Version	3.15.2	High
Version	pom	version	3.15.2	Highest

Identifiers

pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2 (Confidence:High)

maven-plugin-api-3.9.16.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.9.16\maven-plugin-api-3.9.16.jar
MD5: bcb853f9daa463ff30dcf96d96bcbb06
SHA1: 4509ebc6c30856368a5786859342eef9b43ab27a
SHA256:37cb5e483e23327cf4ba18f920b45e000d20eec0428a086a5c1bd6bbdecf088c
Referenced In Project/Scope: smartsprites-maven-plugin:provided
maven-plugin-api-3.9.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugin	Highest
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-api	Highest
Vendor	pom	artifactid	maven-plugin-api	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Plugin API	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-plugin-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugin	Highest
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	Implementation-Title	Maven Plugin API	High
Product	Manifest	specification-title	Maven Plugin API	Medium
Product	pom	artifactid	maven-plugin-api	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Plugin API	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.16	High
Version	Manifest	Implementation-Version	3.9.16	High
Version	pom	version	3.9.16	Highest

Identifiers

pkg:maven/org.apache.maven/maven-plugin-api@3.9.16 (Confidence:High)

modernizer-maven-annotations-3.4.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.4.0\modernizer-maven-annotations-3.4.0.jar
MD5: f46f4c747b5ab932252fea7d0733cc04
SHA1: 9deb15aa2a3a725be971c8bbb4b560d0d096fca9
SHA256:c3ca20a7ccb295f528642532fc7644b4e822a45746fe8bf1683227ca1d0ddfa9
Referenced In Project/Scope: smartsprites-maven-plugin:provided
modernizer-maven-annotations-3.4.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	modernizer-maven-annotations	High
Vendor	jar	package name	gaul	Highest
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	modernizer-maven-annotations	Highest
Vendor	pom	artifactid	modernizer-maven-annotations	Low
Vendor	pom	groupid	org.gaul	Highest
Vendor	pom	name	Modernizer Maven Plugin annotations	High
Vendor	pom	parent-artifactid	modernizer-maven-parent	Low
Product	file	name	modernizer-maven-annotations	High
Product	jar	package name	gaul	Highest
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	modernizer-maven-annotations	Highest
Product	pom	groupid	org.gaul	Highest
Product	pom	name	Modernizer Maven Plugin annotations	High
Product	pom	parent-artifactid	modernizer-maven-parent	Medium
Version	file	version	3.4.0	High
Version	pom	version	3.4.0	Highest

Identifiers

pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0 (Confidence:High)

org.eclipse.sisu.plexus-1.0.0.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

Eclipse Public License, Version 2.0;link="https://www.eclipse.org/legal/epl-v20.html"

File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\1.0.0\org.eclipse.sisu.plexus-1.0.0.jar
MD5: fb07aece41f034fea46b022e2756cd7c
SHA1: 873767e95597c9e31749123a408bd4949c29a46c
SHA256:865b5300034fc08c790215d7d97f141914c932191bef9338a7dcef589f7536e9
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.plexus	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sisu	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.plexus	Low
Vendor	pom	artifactid	org.eclipse.sisu.plexus	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	name	:	High
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.plexus	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	sisu	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Plexus	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.plexus	Highest
Product	pom	artifactid	org.eclipse.sisu.plexus	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	name	:	High
Product	pom	parent-artifactid	sisu-inject	Medium
Version	file	version	1.0.0	High
Version	Manifest	Bundle-Version	1.0.0	High
Version	pom	version	1.0.0	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@1.0.0 (Confidence:High)

plexus-classworlds-2.11.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.11.0\plexus-classworlds-2.11.0.jar
MD5: 54d5f4e0835c5e53f08a494f08d2a75d
SHA1: 6586ba9f3137d7ac7b9789f1fcf7c4e192482905
SHA256:8971f135490070bc5fde7413fcc8db7c997fda4bebfb5c31185900d66edcbbb2
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-classworlds	High
Vendor	jar	package name	classworlds	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	automatic-module-name	org.codehaus.plexus.classworlds	Medium
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-classworlds	Highest
Vendor	pom	artifactid	plexus-classworlds	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Classworlds	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Highest
Product	file	name	plexus-classworlds	High
Product	jar	package name	classworlds	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	automatic-module-name	org.codehaus.plexus.classworlds	Medium
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Classworlds	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Product	Manifest	Implementation-Title	Plexus Classworlds	High
Product	Manifest	specification-title	Plexus Classworlds	Medium
Product	pom	artifactid	plexus-classworlds	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Classworlds	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Medium
Version	file	version	2.11.0	High
Version	Manifest	Bundle-Version	2.11.0	High
Version	Manifest	Implementation-Version	2.11.0	High
Version	pom	parent-version	2.11.0	Low
Version	pom	version	2.11.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-classworlds@2.11.0 (Confidence:High)

plexus-component-annotations-2.2.0.jar

Description:

Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.2.0\plexus-component-annotations-2.2.0.jar
MD5: a2397189a5ce25e7d2d44effa9f5176c
SHA1: a506f84636ea7ae370d04167dd155c103e616f68
SHA256:50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf
Referenced In Project/Scope: smartsprites-maven-plugin:provided
plexus-component-annotations-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-component-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	component	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	pom	artifactid	plexus-component-annotations	Highest
Vendor	pom	artifactid	plexus-component-annotations	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus :: Component Annotations (deprecated)	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	file	name	plexus-component-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	component	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	pom	artifactid	plexus-component-annotations	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus :: Component Annotations (deprecated)	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	file	version	2.2.0	High
Version	pom	version	2.2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0 (Confidence:High)

plexus-utils-4.0.3.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\4.0.3\plexus-utils-4.0.3.jar
MD5: a8848eea66d01d0279b26871dbc2cf1b
SHA1: c097bf60a8a7aaf37dfb8f2c933a21e784035976
SHA256:421ff6ed146c53a9d4eaade8f629b52b12af7187101f1bd06c2c64e904019f3c
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-utils	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	automatic-module-name	org.codehaus.plexus.util	Medium
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-utils	Highest
Vendor	pom	artifactid	plexus-utils	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Highest
Product	file	name	plexus-utils	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	org	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	util	Highest
Product	Manifest	automatic-module-name	org.codehaus.plexus.util	Medium
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	Implementation-Title	Plexus Common Utilities	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Plexus Common Utilities	Medium
Product	pom	artifactid	plexus-utils	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Common Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Medium
Version	file	version	4.0.3	High
Version	Manifest	Implementation-Version	4.0.3	High
Version	pom	parent-version	4.0.3	Low
Version	pom	version	4.0.3	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@4.0.3 (Confidence:High)
cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:4.0.3:*:*:*:*:*:*:* (Confidence:Highest)

plexus-xml-3.0.2.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-xml\3.0.2\plexus-xml-3.0.2.jar
MD5: e2feab7a114ac4a144632670734db7e4
SHA1: 70c207ae478a5011a14dcefe56f4bbda16e3bc87
SHA256:6a49fe0c49a06b5bcd6073ff16580fcb0dd87c50295e97a9fa9f95619b69921c
Referenced In Project/Scope: smartsprites-maven-plugin:compile
plexus-xml-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-xml	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	24	Low
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-xml	Highest
Vendor	pom	artifactid	plexus-xml	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus XML Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Highest
Product	file	name	plexus-xml	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	24	Low
Product	Manifest	Implementation-Title	Plexus XML Utilities	High
Product	Manifest	specification-title	Plexus XML Utilities	Medium
Product	pom	artifactid	plexus-xml	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus XML Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Implementation-Version	3.0.2	High
Version	pom	parent-version	3.0.2	Low
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2 (Confidence:High)

smartsprites-0.5.0.jar

Description:

CSS Sprites Generator Done Right. SmartSprites maintains CSS sprites in your designs,
    fully automatically. No tedious copying and pasting to your CSS when adding or changing
    sprited images.

License:

BSD 3-Clause License: https://opensource.org/licenses/BSD-3-Clause

File Path: C:\Users\Jeremy\.m2\repository\com\github\hazendaz\smartsprites\0.5.0\smartsprites-0.5.0.jar
MD5: 0c6827204597ecafc3ecabb98d65697c
SHA1: 93c2aac0473e4bb479ae71e2bc0febb69c25c448
SHA256:4695fc3aac64e9e34a2287ca0d44e077c976433fbd7eb6d9b2b46462c5386307
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	smartsprites	High
Vendor	jar	package name	carrot2	Highest
Vendor	jar	package name	css	Highest
Vendor	jar	package name	labs	Highest
Vendor	jar	package name	smartsprites	Highest
Vendor	Manifest	automatic-module-name	org.carrot2.labs.smartsprites	Medium
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	copyright	2026	Low
Vendor	Manifest	git-revision	23d1ac781ce9d2c05779004df7bfc983fa4af797	Low
Vendor	Manifest	Implementation-Vendor	Carrot Search s.c.	High
Vendor	Manifest	specification-vendor	Carrot Search s.c.	Low
Vendor	pom	artifactid	smartsprites	Highest
Vendor	pom	artifactid	smartsprites	Low
Vendor	pom	developer email	dawid.weiss@carrotsearch.com	Low
Vendor	pom	developer email	stanislaw.osinski@carrotsearch.com	Low
Vendor	pom	developer id	dawid.weiss	Medium
Vendor	pom	developer id	stanislaw.osinski	Medium
Vendor	pom	developer name	Dawid Weiss	Medium
Vendor	pom	developer name	Stanisław Osiński	Medium
Vendor	pom	groupid	com.github.hazendaz	Highest
Vendor	pom	name	smartsprites	High
Vendor	pom	organization name	Carrot Search s.c.	High
Vendor	pom	organization url	https://www.carrotsearch.com/	Medium
Vendor	pom	parent-artifactid	base-parent	Low
Vendor	pom	url	carrotsearch/smartsprites/wiki/Documentation	Highest
Product	file	name	smartsprites	High
Product	jar	package name	carrot2	Highest
Product	jar	package name	css	Highest
Product	jar	package name	labs	Highest
Product	jar	package name	smartsprites	Highest
Product	Manifest	automatic-module-name	org.carrot2.labs.smartsprites	Medium
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	copyright	2026	Low
Product	Manifest	git-revision	23d1ac781ce9d2c05779004df7bfc983fa4af797	Low
Product	Manifest	Implementation-Title	smartsprites	High
Product	Manifest	specification-title	smartsprites	Medium
Product	pom	artifactid	smartsprites	Highest
Product	pom	developer email	dawid.weiss@carrotsearch.com	Low
Product	pom	developer email	stanislaw.osinski@carrotsearch.com	Low
Product	pom	developer id	dawid.weiss	Low
Product	pom	developer id	stanislaw.osinski	Low
Product	pom	developer name	Dawid Weiss	Low
Product	pom	developer name	Stanisław Osiński	Low
Product	pom	groupid	com.github.hazendaz	Highest
Product	pom	name	smartsprites	High
Product	pom	organization name	Carrot Search s.c.	Low
Product	pom	organization url	https://www.carrotsearch.com/	Low
Product	pom	parent-artifactid	base-parent	Medium
Product	pom	url	carrotsearch/smartsprites/wiki/Documentation	High
Version	file	version	0.5.0	High
Version	Manifest	Implementation-Version	0.5.0	High
Version	pom	parent-version	0.5.0	Low
Version	pom	version	0.5.0	Highest

Identifiers

pkg:maven/com.github.hazendaz/smartsprites@0.5.0 (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.9.8\spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: smartsprites-maven-plugin:provided
pkg:maven/com.github.hazendaz.maven/smartsprites-maven-plugin@2.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.9.8	High
Version	Manifest	Bundle-Version	4.9.8	High
Version	pom	version	4.9.8	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8 (Confidence:High)

xml-apis-1.4.01.jar

Description:

xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The SAX License: http://www.saxproject.org/copying.html
The W3C License: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip

File Path: C:\Users\Jeremy\.m2\repository\xml-apis\xml-apis\1.4.01\xml-apis-1.4.01.jar
MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d
SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3
SHA256:a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xml-apis	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	dom	Highest
Vendor	jar	package name	sax	Highest
Vendor	jar	package name	version	Highest
Vendor	jar	package name	w3c	Highest
Vendor	jar	package name	xml	Highest
Vendor	manifest: javax/xml/datatype/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/namespace/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/parsers/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/stream/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/transform/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/validation/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/xml/xpath/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: org/apache/xmlcommons/Version	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: org/w3c/dom/	Implementation-Vendor	World Wide Web Consortium	Medium
Vendor	manifest: org/w3c/dom/ls/	Implementation-Vendor	World Wide Web Consortium	Medium
Vendor	manifest: org/xml/sax/	Implementation-Vendor	David Megginson	Medium
Vendor	pom	artifactid	xml-apis	Highest
Vendor	pom	artifactid	xml-apis	Low
Vendor	pom	developer email	commons-dev@xml.apache.org	Low
Vendor	pom	developer id	xml-apis	Medium
Vendor	pom	developer name	Apache Software Foundation	Medium
Vendor	pom	developer org	Apache Software Foundation	Medium
Vendor	pom	developer org URL	http://www.apache.org	Medium
Vendor	pom	groupid	xml-apis	Highest
Vendor	pom	name	XML Commons External Components XML APIs	High
Vendor	pom	url	http://xml.apache.org/commons/components/external/	Highest
Product	file	name	xml-apis	High
Product	jar	package name	apache	Highest
Product	jar	package name	datatype	Highest
Product	jar	package name	document	Highest
Product	jar	package name	dom	Highest
Product	jar	package name	javax	Highest
Product	jar	package name	ls	Highest
Product	jar	package name	namespace	Highest
Product	jar	package name	parsers	Highest
Product	jar	package name	sax	Highest
Product	jar	package name	stax	Highest
Product	jar	package name	stream	Highest
Product	jar	package name	transform	Highest
Product	jar	package name	validation	Highest
Product	jar	package name	version	Highest
Product	jar	package name	w3c	Highest
Product	jar	package name	xml	Highest
Product	jar	package name	xmlcommons	Highest
Product	jar	package name	xpath	Highest
Product	manifest: javax/xml/datatype/	Implementation-Title	javax.xml.datatype	Medium
Product	manifest: javax/xml/datatype/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: javax/xml/namespace/	Implementation-Title	javax.xml.namespace	Medium
Product	manifest: javax/xml/namespace/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: javax/xml/parsers/	Implementation-Title	javax.xml.parsers	Medium
Product	manifest: javax/xml/parsers/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: javax/xml/stream/	Implementation-Title	javax.xml.stream	Medium
Product	manifest: javax/xml/stream/	Specification-Title	Streaming API for XML (StAX) 1.0	Medium
Product	manifest: javax/xml/transform/	Implementation-Title	javax.xml.transform	Medium
Product	manifest: javax/xml/transform/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: javax/xml/validation/	Implementation-Title	javax.xml.validation	Medium
Product	manifest: javax/xml/validation/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: javax/xml/xpath/	Implementation-Title	javax.xml.xpath	Medium
Product	manifest: javax/xml/xpath/	Specification-Title	Java API for XML Processing (JAXP) 1.4	Medium
Product	manifest: org/apache/xmlcommons/Version	Implementation-Title	org.apache.xmlcommons.Version	Medium
Product	manifest: org/w3c/dom/	Implementation-Title	org.w3c.dom	Medium
Product	manifest: org/w3c/dom/	Specification-Title	Document Object Model (DOM) Level 3 Core	Medium
Product	manifest: org/w3c/dom/ls/	Implementation-Title	org.w3c.dom.ls	Medium
Product	manifest: org/w3c/dom/ls/	Specification-Title	Document Object Model (DOM) Level 3 Load and Save	Medium
Product	manifest: org/xml/sax/	Implementation-Title	org.xml.sax	Medium
Product	manifest: org/xml/sax/	Specification-Title	Simple API for XML	Medium
Product	pom	artifactid	xml-apis	Highest
Product	pom	developer email	commons-dev@xml.apache.org	Low
Product	pom	developer id	xml-apis	Low
Product	pom	developer name	Apache Software Foundation	Low
Product	pom	developer org	Apache Software Foundation	Low
Product	pom	developer org URL	http://www.apache.org	Low
Product	pom	groupid	xml-apis	Highest
Product	pom	name	XML Commons External Components XML APIs	High
Product	pom	url	http://xml.apache.org/commons/components/external/	Medium
Version	file	version	1.4.01	High
Version	manifest: javax/xml/datatype/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/namespace/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/parsers/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/stream/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/transform/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/validation/	Implementation-Version	1.4.01	Medium
Version	manifest: javax/xml/xpath/	Implementation-Version	1.4.01	Medium
Version	manifest: org/apache/xmlcommons/Version	Implementation-Version	1.4.01	Medium
Version	pom	version	1.4.01	Highest

Identifiers

pkg:maven/xml-apis/xml-apis@1.4.01 (Confidence:High)

xml-apis-ext-1.3.04.jar

Description:

xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.

File Path: C:\Users\Jeremy\.m2\repository\xml-apis\xml-apis-ext\1.3.04\xml-apis-ext-1.3.04.jar
MD5: bcb07d3b8d2397db7a3013b6465d347b
SHA1: 41a8b86b358e87f3f13cf46069721719105aff66
SHA256:d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646
Referenced In Project/Scope: smartsprites-maven-plugin:compile
xml-apis-ext-1.3.04.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xml-apis-ext	High
Vendor	jar	package name	dom	Highest
Vendor	jar	package name	w3c	Highest
Vendor	manifest: org/w3c/css/sac/	Implementation-Vendor	World Wide Web Consortium	Medium
Vendor	manifest: org/w3c/dom/smil/	Implementation-Vendor	World Wide Web Consortium	Medium
Vendor	manifest: org/w3c/dom/svg/	Implementation-Vendor	World Wide Web Consortium	Medium
Vendor	pom	artifactid	xml-apis-ext	Highest
Vendor	pom	artifactid	xml-apis-ext	Low
Vendor	pom	groupid	xml-apis	Highest
Vendor	pom	name	XML Commons External Components XML APIs Extensions	High
Vendor	pom	parent-artifactid	apache	Low
Vendor	pom	parent-groupid	org.apache	Medium
Vendor	pom	url	http://xml.apache.org/commons/components/external/	Highest
Product	file	name	xml-apis-ext	High
Product	jar	package name	css	Highest
Product	jar	package name	dom	Highest
Product	jar	package name	sac	Highest
Product	jar	package name	smil	Highest
Product	jar	package name	svg	Highest
Product	jar	package name	w3c	Highest
Product	manifest: org/w3c/css/sac/	Implementation-Title	org.w3c.css.sac	Medium
Product	manifest: org/w3c/css/sac/	Specification-Title	Simple API for CSS	Medium
Product	manifest: org/w3c/dom/smil/	Implementation-Title	org.w3c.dom.smil	Medium
Product	manifest: org/w3c/dom/smil/	Specification-Title	Document Object Model (DOM) for Synchronized Multimedia Integration Language (SMIL)	Medium
Product	manifest: org/w3c/dom/svg/	Implementation-Title	org.w3c.dom.svg	Medium
Product	manifest: org/w3c/dom/svg/	Specification-Title	Document Object Model (DOM) for Scalable Vector Graphics (SVG)	Medium
Product	pom	artifactid	xml-apis-ext	Highest
Product	pom	groupid	xml-apis	Highest
Product	pom	name	XML Commons External Components XML APIs Extensions	High
Product	pom	parent-artifactid	apache	Medium
Product	pom	parent-groupid	org.apache	Medium
Product	pom	url	http://xml.apache.org/commons/components/external/	Medium
Version	file	version	1.3.04	High
Version	pom	parent-version	1.3.04	Low
Version	pom	version	1.3.04	Highest

Identifiers

pkg:maven/xml-apis/xml-apis-ext@1.3.04 (Confidence:High)
cpe:2.3:a:apache:commons_lang:1.3.04:*:*:*:*:*:*:* (Confidence:Low)

xmlgraphics-commons-2.11.jar

Description:

XML Graphics Common Support

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\org\apache\xmlgraphics\xmlgraphics-commons\2.11\xmlgraphics-commons-2.11.jar
MD5: 3de3b70187202c0a2812e93c0fa81a9b
SHA1: 4adc636cc7051d40f859f53287ae268684ab6a80
SHA256:1a37948ebfedab0cd292cfc5007e65c2fa16a701b94c206152720d3a738561bc
Referenced In Project/Scope: smartsprites-maven-plugin:compile
pkg:maven/com.github.hazendaz/smartsprites@0.5.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xmlgraphics-commons	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	xmlgraphics	Highest
Vendor	Manifest	automatic-module-name	org.apache.xmlgraphics.commons	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	artifactid	xmlgraphics-commons	Highest
Vendor	pom	artifactid	xmlgraphics-commons	Low
Vendor	pom	groupid	org.apache.xmlgraphics	Highest
Vendor	pom	name	Apache XML Graphics Commons	High
Vendor	pom	organization name	Apache Software Foundation	High
Vendor	pom	organization url	http://www.apache.org/	Medium
Vendor	pom	url	http://xmlgraphics.apache.org/commons/	Highest
Product	file	name	xmlgraphics-commons	High
Product	jar	package name	apache	Highest
Product	jar	package name	xmlgraphics	Highest
Product	Manifest	automatic-module-name	org.apache.xmlgraphics.commons	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache XML Graphics Commons	High
Product	pom	artifactid	xmlgraphics-commons	Highest
Product	pom	groupid	org.apache.xmlgraphics	Highest
Product	pom	name	Apache XML Graphics Commons	High
Product	pom	organization name	Apache Software Foundation	Low
Product	pom	organization url	http://www.apache.org/	Low
Product	pom	url	http://xmlgraphics.apache.org/commons/	Medium
Version	file	version	2.11	High
Version	Manifest	Implementation-Version	2.11	High
Version	pom	version	2.11	Highest

Identifiers

pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11 (Confidence:High)
cpe:2.3:a:apache:xmlgraphics_commons:2.11:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: smartsprites-maven-plugin

com.github.hazendaz.maven:smartsprites-maven-plugin:2.5.0

Summary

Dependencies (vulnerable)

args4j-2.37.jar

Evidence

Identifiers

batik-css-1.19.jar

Evidence

Related Dependencies

Identifiers

batik-i18n-1.19.jar

Evidence

Identifiers

checker-qual-4.2.0.jar

Evidence

Identifiers

commons-io-2.22.0.jar

Evidence

Identifiers

commons-math3-3.6.1.jar

Evidence

Identifiers

error_prone_annotations-2.49.0.jar

Evidence

Identifiers

failureaccess-1.0.3.jar

Evidence

Identifiers

guava-33.6.0-jre.jar

Evidence

Identifiers

j2objc-annotations-3.1.jar

Evidence

Identifiers

jspecify-1.0.0.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Evidence

Identifiers

lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar

Evidence

Identifiers

lombok-1.18.46.jar

Evidence

Identifiers

maven-artifact-3.9.16.jar

Evidence

Identifiers

maven-model-3.9.16.jar

Evidence

Identifiers

maven-plugin-annotations-3.15.2.jar

Evidence

Identifiers

maven-plugin-api-3.9.16.jar

Evidence

Identifiers

modernizer-maven-annotations-3.4.0.jar

Evidence

Identifiers

org.eclipse.sisu.plexus-1.0.0.jar

Evidence

Identifiers

plexus-classworlds-2.11.0.jar

Evidence

Identifiers

plexus-component-annotations-2.2.0.jar

Evidence

Identifiers

plexus-utils-4.0.3.jar

Evidence

Identifiers

plexus-xml-3.0.2.jar

Evidence