Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all):
- dependency-check version: 12.1.9
- Report Generated On: Sat, 20 Dec 2025 12:05:33 GMT
- Dependencies Scanned: 27 (23 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 0
- ...
- NVD API Last Checked: 2025-12-20T11:51:11Z
- NVD API Last Modified: 2025-12-20T09:15:55Z
Summary
Summary of Vulnerable Dependencies (click to show all)
annotations-26.0.2-1.jar
Description:
A set of annotations used for code inspection support and code documentation.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jetbrains/annotations/26.0.2-1/annotations-26.0.2-1.jar
MD5: ef0e782af9ee48fac1156485366d7cc9
SHA1: c7ce3cdeda3d18909368dfe5977332dfad326c6d
SHA256:2037be378980d3ba9333e97955f3b2cde392aa124d04ca73ce2eee6657199297
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
annotations-26.0.2-1.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | annotations | High |
| Vendor | jar | package name | annotations | Highest |
| Vendor | jar | package name | jetbrains | Highest |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | annotations | Highest |
| Vendor | pom | artifactid | annotations | Low |
| Vendor | pom | developer id | JetBrains | Medium |
| Vendor | pom | developer name | JetBrains Team | Medium |
| Vendor | pom | developer org | JetBrains | Medium |
| Vendor | pom | developer org URL | https://www.jetbrains.com | Medium |
| Vendor | pom | groupid | org.jetbrains | Highest |
| Vendor | pom | name | JetBrains Java Annotations | High |
| Vendor | pom | url | JetBrains/java-annotations | Highest |
| Product | file | name | annotations | High |
| Product | jar | package name | annotations | Highest |
| Product | jar | package name | jetbrains | Highest |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | annotations | Highest |
| Product | pom | developer id | JetBrains | Low |
| Product | pom | developer name | JetBrains Team | Low |
| Product | pom | developer org | JetBrains | Low |
| Product | pom | developer org URL | https://www.jetbrains.com | Low |
| Product | pom | groupid | org.jetbrains | Highest |
| Product | pom | name | JetBrains Java Annotations | High |
| Product | pom | url | JetBrains/java-annotations | High |
| Version | pom | version | 26.0.2-1 | Highest |
aopalliance-repackaged-4.0.0-M3.jar
Description:
Dependency Injection Kernel
License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/hk2/external/aopalliance-repackaged/4.0.0-M3/aopalliance-repackaged-4.0.0-M3.jar
MD5: 265ded5507ff1db7cd2184d4846fc85b
SHA1: 71779579326f1648524a86fdee77bdf1d2d45336
SHA256:65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
aopalliance-repackaged-4.0.0-M3.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | aopalliance-repackaged | High |
| Vendor | jar | package name | aopalliance | Highest |
| Vendor | Manifest | automatic-module-name | org.aopalliance | Medium |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.hk2.external.aopalliance-repackaged | Medium |
| Vendor | pom | artifactid | aopalliance-repackaged | Highest |
| Vendor | pom | artifactid | aopalliance-repackaged | Low |
| Vendor | pom | groupid | org.glassfish.hk2.external | Highest |
| Vendor | pom | name | aopalliance version repackaged as a module | High |
| Vendor | pom | name | aopalliance version ${aopalliance.version} repackaged as a module | High |
| Vendor | pom | parent-artifactid | external | Low |
| Vendor | pom | parent-groupid | org.glassfish.hk2 | Medium |
| Product | file | name | aopalliance-repackaged | High |
| Product | jar | package name | aopalliance | Highest |
| Product | Manifest | automatic-module-name | org.aopalliance | Medium |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Product | Manifest | Bundle-Name | aopalliance version 1.0 repackaged as a module | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.hk2.external.aopalliance-repackaged | Medium |
| Product | pom | artifactid | aopalliance-repackaged | Highest |
| Product | pom | groupid | org.glassfish.hk2.external | Highest |
| Product | pom | name | aopalliance version repackaged as a module | High |
| Product | pom | name | aopalliance version ${aopalliance.version} repackaged as a module | High |
| Product | pom | parent-artifactid | external | Medium |
| Product | pom | parent-groupid | org.glassfish.hk2 | Medium |
| Version | pom | version | 4.0.0-M3 | Highest |
hk2-api-4.0.0-M3.jar
Description:
${project.name}License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-api/4.0.0-M3/hk2-api-4.0.0-M3.jar
MD5: 4a7799f8b0c76121478fdbfd3fa481cb
SHA1: 4b9520d9c4ecdc8b688a50968c19b54b55fc1274
SHA256:66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
hk2-api-4.0.0-M3.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | hk2-api | High |
| Vendor | jar | package name | api | Highest |
| Vendor | jar | package name | glassfish | Highest |
| Vendor | jar | package name | hk2 | Highest |
| Vendor | Manifest | automatic-module-name | org.glassfish.hk2.api | Medium |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.hk2.api | Medium |
| Vendor | pom | artifactid | hk2-api | Highest |
| Vendor | pom | artifactid | hk2-api | Low |
| Vendor | pom | groupid | org.glassfish.hk2 | Highest |
| Vendor | pom | name | HK2 API module | High |
| Vendor | pom | parent-artifactid | hk2-parent | Low |
| Product | file | name | hk2-api | High |
| Product | jar | package name | api | Highest |
| Product | jar | package name | glassfish | Highest |
| Product | jar | package name | hk2 | Highest |
| Product | Manifest | automatic-module-name | org.glassfish.hk2.api | Medium |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Product | Manifest | Bundle-Name | HK2 API module | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.hk2.api | Medium |
| Product | pom | artifactid | hk2-api | Highest |
| Product | pom | groupid | org.glassfish.hk2 | Highest |
| Product | pom | name | HK2 API module | High |
| Product | pom | parent-artifactid | hk2-parent | Medium |
| Version | pom | version | 4.0.0-M3 | Highest |
hk2-locator-4.0.0-M3.jar
Description:
${project.name}License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-locator/4.0.0-M3/hk2-locator-4.0.0-M3.jar
MD5: b4208d604d4c23e3acae9f6300aafd4c
SHA1: 64a198be0ce5a86c6e6e439188fc4e7187416588
SHA256:290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
hk2-locator-4.0.0-M3.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | hk2-locator | High |
| Vendor | jar | package name | hk2 | Highest |
| Vendor | Manifest | automatic-module-name | org.glassfish.hk2.locator | Medium |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.hk2.locator | Medium |
| Vendor | pom | artifactid | hk2-locator | Highest |
| Vendor | pom | artifactid | hk2-locator | Low |
| Vendor | pom | groupid | org.glassfish.hk2 | Highest |
| Vendor | pom | name | ServiceLocator Default Implementation | High |
| Vendor | pom | parent-artifactid | hk2-parent | Low |
| Product | file | name | hk2-locator | High |
| Product | jar | package name | hk2 | Highest |
| Product | Manifest | automatic-module-name | org.glassfish.hk2.locator | Medium |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Product | Manifest | Bundle-Name | ServiceLocator Default Implementation | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.hk2.locator | Medium |
| Product | pom | artifactid | hk2-locator | Highest |
| Product | pom | groupid | org.glassfish.hk2 | Highest |
| Product | pom | name | ServiceLocator Default Implementation | High |
| Product | pom | parent-artifactid | hk2-parent | Medium |
| Version | pom | version | 4.0.0-M3 | Highest |
hk2-utils-4.0.0-M3.jar
Description:
${project.name}License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-utils/4.0.0-M3/hk2-utils-4.0.0-M3.jar
MD5: 8bc6984bd681f30286f4d95ee8795b61
SHA1: d0017a4fffdb8184582d579c15e4d90765e4d11b
SHA256:ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
hk2-utils-4.0.0-M3.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | hk2-utils | High |
| Vendor | jar | package name | glassfish | Highest |
| Vendor | jar | package name | hk2 | Highest |
| Vendor | jar | package name | utilities | Highest |
| Vendor | Manifest | automatic-module-name | org.glassfish.hk2.utilities | Medium |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.hk2.utils | Medium |
| Vendor | Manifest | service | foo | Low |
| Vendor | pom | artifactid | hk2-utils | Highest |
| Vendor | pom | artifactid | hk2-utils | Low |
| Vendor | pom | groupid | org.glassfish.hk2 | Highest |
| Vendor | pom | name | HK2 Implementation Utilities | High |
| Vendor | pom | parent-artifactid | hk2-parent | Low |
| Product | file | name | hk2-utils | High |
| Product | jar | package name | glassfish | Highest |
| Product | jar | package name | hk2 | Highest |
| Product | jar | package name | utilities | Highest |
| Product | Manifest | automatic-module-name | org.glassfish.hk2.utilities | Medium |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-docurl | http://www.oracle.com | Low |
| Product | Manifest | Bundle-Name | HK2 Implementation Utilities | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.hk2.utils | Medium |
| Product | Manifest | service | foo | Low |
| Product | pom | artifactid | hk2-utils | Highest |
| Product | pom | groupid | org.glassfish.hk2 | Highest |
| Product | pom | name | HK2 Implementation Utilities | High |
| Product | pom | parent-artifactid | hk2-parent | Medium |
| Version | pom | version | 4.0.0-M3 | Highest |
jakarta.activation-api-2.1.3.jar
Description:
Specification
License:
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.activation-api | High |
| Vendor | jar | package name | activation | Highest |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.activation-api | Medium |
| Vendor | Manifest | extension-name | jakarta.activation | Medium |
| Vendor | Manifest | implementation-build-id | 7f7d358 | Low |
| Vendor | Manifest | Implementation-Vendor | Eclipse Foundation | High |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.activation-api | Highest |
| Vendor | pom | artifactid | jakarta.activation-api | Low |
| Vendor | pom | developer email | bill.shannon@oracle.com | Low |
| Vendor | pom | developer id | shannon | Medium |
| Vendor | pom | developer name | Bill Shannon | Medium |
| Vendor | pom | developer org | Oracle | Medium |
| Vendor | pom | groupid | jakarta.activation | Highest |
| Vendor | pom | name | Jakarta Activation API | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | jakartaee/jaf-api | Highest |
| Vendor | pom (hint) | developer org | sun | Medium |
| Product | file | name | jakarta.activation-api | High |
| Product | jar | package name | activation | Highest |
| Product | jar | package name | jakarta | Highest |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Activation API | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.activation-api | Medium |
| Product | Manifest | extension-name | jakarta.activation | Medium |
| Product | Manifest | implementation-build-id | 7f7d358 | Low |
| Product | Manifest | Implementation-Title | Jakarta Activation API | High |
| Product | Manifest | specification-title | Jakarta Activation Specification | Medium |
| Product | pom | artifactid | jakarta.activation-api | Highest |
| Product | pom | developer email | bill.shannon@oracle.com | Low |
| Product | pom | developer id | shannon | Low |
| Product | pom | developer name | Bill Shannon | Low |
| Product | pom | developer org | Oracle | Low |
| Product | pom | groupid | jakarta.activation | Highest |
| Product | pom | name | Jakarta Activation API | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | jakartaee/jaf-api | High |
| Version | file | version | 2.1.3 | High |
| Version | Manifest | Bundle-Version | 2.1.3 | High |
| Version | pom | parent-version | 2.1.3 | Low |
| Version | pom | version | 2.1.3 | Highest |
jakarta.annotation-api-3.0.0.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.annotation-api | High |
| Vendor | jar | package name | annotation | Highest |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | Manifest | build-jdk-spec | 18 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.annotation-api | Medium |
| Vendor | Manifest | extension-name | jakarta.annotation | Medium |
| Vendor | Manifest | Implementation-Vendor | Eclipse Foundation | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.glassfish | Medium |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.annotation-api | Highest |
| Vendor | pom | artifactid | jakarta.annotation-api | Low |
| Vendor | pom | developer name | Dmitry Kornilov | Medium |
| Vendor | pom | developer name | Linda De Michiel | Medium |
| Vendor | pom | developer org | Oracle Corp. | Medium |
| Vendor | pom | groupid | jakarta.annotation | Highest |
| Vendor | pom | name | Jakarta Annotations API | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | https://projects.eclipse.org/projects/ee4j.ca | Highest |
| Product | file | name | jakarta.annotation-api | High |
| Product | jar | package name | annotation | Highest |
| Product | jar | package name | jakarta | Highest |
| Product | Manifest | build-jdk-spec | 18 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Annotations API | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.annotation-api | Medium |
| Product | Manifest | extension-name | jakarta.annotation | Medium |
| Product | pom | artifactid | jakarta.annotation-api | Highest |
| Product | pom | developer name | Dmitry Kornilov | Low |
| Product | pom | developer name | Linda De Michiel | Low |
| Product | pom | developer org | Oracle Corp. | Low |
| Product | pom | groupid | jakarta.annotation | Highest |
| Product | pom | name | Jakarta Annotations API | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | https://projects.eclipse.org/projects/ee4j.ca | Medium |
| Version | file | version | 3.0.0 | High |
| Version | Manifest | Bundle-Version | 3.0.0 | High |
| Version | Manifest | Implementation-Version | 3.0.0 | High |
| Version | pom | parent-version | 3.0.0 | Low |
| Version | pom | version | 3.0.0 | Highest |
jakarta.inject-api-2.0.1.jar
Description:
Jakarta Dependency Injection
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256:f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.inject-api | High |
| Vendor | jar | package name | inject | Highest |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.inject.jakarta.inject-api | Medium |
| Vendor | pom | artifactid | jakarta.inject-api | Highest |
| Vendor | pom | artifactid | jakarta.inject-api | Low |
| Vendor | pom | developer email | asd[at]redhat[dot]com | Low |
| Vendor | pom | developer email | manovotn[at]redhat[dot]com | Low |
| Vendor | pom | developer email | mkouba[at]redhat[dot]com | Low |
| Vendor | pom | developer email | tremes[at]redhat[dot]com | Low |
| Vendor | pom | developer id | asabotdu | Medium |
| Vendor | pom | developer id | manovotn | Medium |
| Vendor | pom | developer id | mkouba | Medium |
| Vendor | pom | developer id | tremes | Medium |
| Vendor | pom | developer name | Antoine Sabot-Durand | Medium |
| Vendor | pom | developer name | Martin Kouba | Medium |
| Vendor | pom | developer name | Matej Novotny | Medium |
| Vendor | pom | developer name | Tomas Remes | Medium |
| Vendor | pom | developer org | Red Hat Inc. | Medium |
| Vendor | pom | groupid | jakarta.inject | Highest |
| Vendor | pom | name | Jakarta Dependency Injection | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | eclipse-ee4j/injection-api | Highest |
| Product | file | name | jakarta.inject-api | High |
| Product | jar | package name | inject | Highest |
| Product | jar | package name | jakarta | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Dependency Injection | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.inject.jakarta.inject-api | Medium |
| Product | pom | artifactid | jakarta.inject-api | Highest |
| Product | pom | developer email | asd[at]redhat[dot]com | Low |
| Product | pom | developer email | manovotn[at]redhat[dot]com | Low |
| Product | pom | developer email | mkouba[at]redhat[dot]com | Low |
| Product | pom | developer email | tremes[at]redhat[dot]com | Low |
| Product | pom | developer id | asabotdu | Low |
| Product | pom | developer id | manovotn | Low |
| Product | pom | developer id | mkouba | Low |
| Product | pom | developer id | tremes | Low |
| Product | pom | developer name | Antoine Sabot-Durand | Low |
| Product | pom | developer name | Martin Kouba | Low |
| Product | pom | developer name | Matej Novotny | Low |
| Product | pom | developer name | Tomas Remes | Low |
| Product | pom | developer org | Red Hat Inc. | Low |
| Product | pom | groupid | jakarta.inject | Highest |
| Product | pom | name | Jakarta Dependency Injection | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | eclipse-ee4j/injection-api | High |
| Version | file | version | 2.0.1 | High |
| Version | Manifest | Bundle-Version | 2.0.1 | High |
| Version | pom | parent-version | 2.0.1 | Low |
| Version | pom | version | 2.0.1 | Highest |
jakarta.servlet-api-6.1.0.jar
Description:
Jakarta Servlet 6.1
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.1.0/jakarta.servlet-api-6.1.0.jar
MD5: 314c930b3e40ac1abc3529c7c9942f09
SHA1: 1169a246913fe3823782af7943e7a103634867c5
SHA256:8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
jakarta.servlet-api-6.1.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.servlet-api | High |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | jar | package name | servlet | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.servlet-api | Medium |
| Vendor | Manifest | extension-name | jakarta.servlet | Medium |
| Vendor | Manifest | Implementation-Vendor | Eclipse Foundation | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.eclipse | Medium |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.servlet-api | Highest |
| Vendor | pom | artifactid | jakarta.servlet-api | Low |
| Vendor | pom | developer id | yaminikb | Medium |
| Vendor | pom | developer name | Yamini K B | Medium |
| Vendor | pom | developer org | Oracle Corporation | Medium |
| Vendor | pom | developer org URL | http://www.oracle.com/ | Medium |
| Vendor | pom | groupid | jakarta.servlet | Highest |
| Vendor | pom | name | Jakarta Servlet | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | https://projects.eclipse.org/projects/ee4j.servlet | Highest |
| Product | file | name | jakarta.servlet-api | High |
| Product | jar | package name | jakarta | Highest |
| Product | jar | package name | servlet | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Servlet | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.servlet-api | Medium |
| Product | Manifest | extension-name | jakarta.servlet | Medium |
| Product | pom | artifactid | jakarta.servlet-api | Highest |
| Product | pom | developer id | yaminikb | Low |
| Product | pom | developer name | Yamini K B | Low |
| Product | pom | developer org | Oracle Corporation | Low |
| Product | pom | developer org URL | http://www.oracle.com/ | Low |
| Product | pom | groupid | jakarta.servlet | Highest |
| Product | pom | name | Jakarta Servlet | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | https://projects.eclipse.org/projects/ee4j.servlet | Medium |
| Version | file | version | 6.1.0 | High |
| Version | Manifest | Bundle-Version | 6.1.0 | High |
| Version | Manifest | Implementation-Version | 6.1.0 | High |
| Version | pom | parent-version | 6.1.0 | Low |
| Version | pom | version | 6.1.0 | Highest |
jakarta.validation-api-3.1.0.jar
Description:
Jakarta Validation API
License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/validation/jakarta.validation-api/3.1.0/jakarta.validation-api-3.1.0.jar
MD5: 7de160f58f128c0ecb3cfa4d5593c5c6
SHA1: 846b536eff8a32c1b91fdeb3c9c5b6c39916767d
SHA256:1a18593d8ba9b48215ca4993e51a4451c804a82f89e8d0d4a31a5e6b8731d4a7
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.validation-api-3.1.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.validation-api | High |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | jar | package name | validation | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.validation.jakarta.validation-api | Medium |
| Vendor | pom | artifactid | jakarta.validation-api | Highest |
| Vendor | pom | artifactid | jakarta.validation-api | Low |
| Vendor | pom | developer email | emmanuel@hibernate.org | Low |
| Vendor | pom | developer email | guillaume.smet@hibernate.org | Low |
| Vendor | pom | developer email | gunnar@hibernate.org | Low |
| Vendor | pom | developer email | hferents@redhat.com | Low |
| Vendor | pom | developer id | emmanuelbernard | Medium |
| Vendor | pom | developer id | epbernard | Medium |
| Vendor | pom | developer id | guillaume.smet | Medium |
| Vendor | pom | developer id | gunnar.morling | Medium |
| Vendor | pom | developer id | hardy.ferentschik | Medium |
| Vendor | pom | developer name | Emmanuel Bernard | Medium |
| Vendor | pom | developer name | Guillaume Smet | Medium |
| Vendor | pom | developer name | Gunnar Morling | Medium |
| Vendor | pom | developer name | Hardy Ferentschik | Medium |
| Vendor | pom | developer org | Red Hat, Inc. | Medium |
| Vendor | pom | groupid | jakarta.validation | Highest |
| Vendor | pom | name | Jakarta Validation API | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | https://beanvalidation.org | Highest |
| Product | file | name | jakarta.validation-api | High |
| Product | jar | package name | jakarta | Highest |
| Product | jar | package name | validation | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Validation API | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.validation.jakarta.validation-api | Medium |
| Product | pom | artifactid | jakarta.validation-api | Highest |
| Product | pom | developer email | emmanuel@hibernate.org | Low |
| Product | pom | developer email | guillaume.smet@hibernate.org | Low |
| Product | pom | developer email | gunnar@hibernate.org | Low |
| Product | pom | developer email | hferents@redhat.com | Low |
| Product | pom | developer id | emmanuelbernard | Low |
| Product | pom | developer id | epbernard | Low |
| Product | pom | developer id | guillaume.smet | Low |
| Product | pom | developer id | gunnar.morling | Low |
| Product | pom | developer id | hardy.ferentschik | Low |
| Product | pom | developer name | Emmanuel Bernard | Low |
| Product | pom | developer name | Guillaume Smet | Low |
| Product | pom | developer name | Gunnar Morling | Low |
| Product | pom | developer name | Hardy Ferentschik | Low |
| Product | pom | developer org | Red Hat, Inc. | Low |
| Product | pom | groupid | jakarta.validation | Highest |
| Product | pom | name | Jakarta Validation API | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | https://beanvalidation.org | Medium |
| Version | file | version | 3.1.0 | High |
| Version | Manifest | Bundle-Version | 3.1.0 | High |
| Version | pom | parent-version | 3.1.0 | Low |
| Version | pom | version | 3.1.0 | Highest |
jakarta.ws.rs-api-4.0.0.jar
Description:
Jakarta RESTful Web Services
License:
https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/4.0.0/jakarta.ws.rs-api-4.0.0.jar
MD5: 9b7cc90c000f193157d60d95caf45972
SHA1: c27a67f84ca491efcb3fa68f4df926e8a110069e
SHA256:6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.ws.rs-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.ws.rs-api | High |
| Vendor | hint analyzer | vendor | web services | Medium |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | jar | package name | rs | Highest |
| Vendor | jar | package name | ws | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org/org/foundation/ | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.ws.rs-api | Medium |
| Vendor | Manifest | extension-name | jakarta.ws.rs | Medium |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.ws.rs-api | Highest |
| Vendor | pom | artifactid | jakarta.ws.rs-api | Low |
| Vendor | pom | groupid | jakarta.ws.rs | Highest |
| Vendor | pom | name | Jakarta RESTful WS API | High |
| Vendor | pom | parent-artifactid | all | Low |
| Product | file | name | jakarta.ws.rs-api | High |
| Product | hint analyzer | product | web services | Medium |
| Product | jar | package name | jakarta | Highest |
| Product | jar | package name | rs | Highest |
| Product | jar | package name | ws | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org/org/foundation/ | Low |
| Product | Manifest | Bundle-Name | Jakarta RESTful WS API | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.ws.rs-api | Medium |
| Product | Manifest | extension-name | jakarta.ws.rs | Medium |
| Product | pom | artifactid | jakarta.ws.rs-api | Highest |
| Product | pom | groupid | jakarta.ws.rs | Highest |
| Product | pom | name | Jakarta RESTful WS API | High |
| Product | pom | parent-artifactid | all | Medium |
| Version | file | version | 4.0.0 | High |
| Version | Manifest | Bundle-Version | 4.0.0 | High |
| Version | Manifest | Implementation-Version | 4.0.0 | High |
| Version | pom | version | 4.0.0 | Highest |
jakarta.xml.bind-api-4.0.2.jar
Description:
Jakarta XML Binding API 4.0 Design Specification
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar
MD5: 0c8f9991081def819435c3ff36e4d93f
SHA1: 6cd5a999b834b63238005b7144136379dc36cad2
SHA256:0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jakarta.xml.bind-api-4.0.2.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.xml.bind-api | High |
| Vendor | jar | package name | bind | Highest |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | jar | package name | xml | Highest |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.xml.bind-api | Medium |
| Vendor | Manifest | extension-name | jakarta.xml.bind | Medium |
| Vendor | Manifest | implementation-build-id | ca43d8b | Low |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.xml.bind-api | Highest |
| Vendor | pom | artifactid | jakarta.xml.bind-api | Low |
| Vendor | pom | groupid | jakarta.xml.bind | Highest |
| Vendor | pom | name | Jakarta XML Binding API | High |
| Vendor | pom | parent-artifactid | jakarta.xml.bind-api-parent | Low |
| Product | file | name | jakarta.xml.bind-api | High |
| Product | jar | package name | bind | Highest |
| Product | jar | package name | jakarta | Highest |
| Product | jar | package name | xml | Highest |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta XML Binding API | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.xml.bind-api | Medium |
| Product | Manifest | extension-name | jakarta.xml.bind | Medium |
| Product | Manifest | implementation-build-id | ca43d8b | Low |
| Product | pom | artifactid | jakarta.xml.bind-api | Highest |
| Product | pom | groupid | jakarta.xml.bind | Highest |
| Product | pom | name | Jakarta XML Binding API | High |
| Product | pom | parent-artifactid | jakarta.xml.bind-api-parent | Medium |
| Version | file | version | 4.0.2 | High |
| Version | Manifest | Bundle-Version | 4.0.2 | High |
| Version | Manifest | Implementation-Version | 4.0.2 | High |
| Version | pom | version | 4.0.2 | Highest |
java-parent-test-3.0.34.jar
Description:
Test for Java Parent
License:
Apache License (ASL), Version 2.0 (Apache-2.0): https://raw.githubusercontent.com/spdx/license-list-data/main/text/Apache-2.0.txt
File Path: /home/runner/work/general-parent/general-parent/target/checkout/build-parent/java-parent/java-parent-test/target/java-parent-test-3.0.34.jar
MD5: 2c2413f7b20dd1fe91ad9b0e47e4a13b
SHA1: b27cb467f009d46716cfb8dd46a4848767feeed5
SHA256:223fac0e9db71613b524ba9bc5fb193fd8af89f8c21797b59780791b6a9982a0
Referenced In Project/Scope: Web App Test:compile
java-parent-test-3.0.34.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | java-parent-test | High |
| Vendor | jar | package name | me | Highest |
| Vendor | jar | package name | test | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | pom | artifactid | java-parent-test | Highest |
| Vendor | pom | artifactid | java-parent-test | Low |
| Vendor | pom | developer email | contact@ChrissW-R1.me | Low |
| Vendor | pom | developer id | ChrissW-R1 | Medium |
| Vendor | pom | developer name | ChrissW-R1 | Medium |
| Vendor | pom | groupid | me.chrissw-r1 | Highest |
| Vendor | pom | name | Java Test | High |
| Vendor | pom | parent-artifactid | java-parent | Low |
| Vendor | pom | url | https://docs.urelion.world/me.chrissw-r1/general-parent/3.0.34 | Highest |
| Product | file | name | java-parent-test | High |
| Product | jar | package name | me | Highest |
| Product | jar | package name | test | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | pom | artifactid | java-parent-test | Highest |
| Product | pom | developer email | contact@ChrissW-R1.me | Low |
| Product | pom | developer id | ChrissW-R1 | Low |
| Product | pom | developer name | ChrissW-R1 | Low |
| Product | pom | groupid | me.chrissw-r1 | Highest |
| Product | pom | name | Java Test | High |
| Product | pom | parent-artifactid | java-parent | Medium |
| Product | pom | url | https://docs.urelion.world/me.chrissw-r1/general-parent/3.0.34 | Medium |
| Version | file | version | 3.0.34 | High |
| Version | pom | version | 3.0.34 | Highest |
javassist-3.30.2-GA.jar
Description:
Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
simple. It is a class library for editing bytecodes in Java.
License:
MPL 1.1: https://www.mozilla.org/en-US/MPL/1.1/
LGPL 2.1: https://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar
MD5: f5b827b8ddec0629cc7a6d7dafc45999
SHA1: 284580b5e42dfa1b8267058566435d9e93fae7f7
SHA256:eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
javassist-3.30.2-GA.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | javassist | High |
| Vendor | jar | package name | bytecode | Highest |
| Vendor | jar | package name | javassist | Highest |
| Vendor | Manifest | automatic-module-name | org.javassist | Medium |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-symbolicname | javassist | Medium |
| Vendor | Manifest | specification-vendor | Shigeru Chiba, www.javassist.org | Low |
| Vendor | pom | artifactid | javassist | Highest |
| Vendor | pom | artifactid | javassist | Low |
| Vendor | pom | developer email | adinn@redhat.com | Low |
| Vendor | pom | developer email | chiba@javassist.org | Low |
| Vendor | pom | developer email | kabir.khan@jboss.com | Low |
| Vendor | pom | developer email | smarlow@redhat.com | Low |
| Vendor | pom | developer id | adinn | Medium |
| Vendor | pom | developer id | chiba | Medium |
| Vendor | pom | developer id | kabir.khan@jboss.com | Medium |
| Vendor | pom | developer id | scottmarlow | Medium |
| Vendor | pom | developer name | Andrew Dinn | Medium |
| Vendor | pom | developer name | Kabir Khan | Medium |
| Vendor | pom | developer name | Scott Marlow | Medium |
| Vendor | pom | developer name | Shigeru Chiba | Medium |
| Vendor | pom | developer org | JBoss | Medium |
| Vendor | pom | developer org | The Javassist Project | Medium |
| Vendor | pom | developer org URL | https://www.javassist.org/ | Medium |
| Vendor | pom | developer org URL | https://www.jboss.org/ | Medium |
| Vendor | pom | groupid | org.javassist | Highest |
| Vendor | pom | name | Javassist | High |
| Vendor | pom | organization name | Shigeru Chiba, www.javassist.org | High |
| Vendor | pom | url | https://www.javassist.org/ | Highest |
| Product | file | name | javassist | High |
| Product | jar | package name | bytecode | Highest |
| Product | jar | package name | javassist | Highest |
| Product | Manifest | automatic-module-name | org.javassist | Medium |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | Bundle-Name | Javassist | Medium |
| Product | Manifest | bundle-symbolicname | javassist | Medium |
| Product | Manifest | specification-title | Javassist | Medium |
| Product | pom | artifactid | javassist | Highest |
| Product | pom | developer email | adinn@redhat.com | Low |
| Product | pom | developer email | chiba@javassist.org | Low |
| Product | pom | developer email | kabir.khan@jboss.com | Low |
| Product | pom | developer email | smarlow@redhat.com | Low |
| Product | pom | developer id | adinn | Low |
| Product | pom | developer id | chiba | Low |
| Product | pom | developer id | kabir.khan@jboss.com | Low |
| Product | pom | developer id | scottmarlow | Low |
| Product | pom | developer name | Andrew Dinn | Low |
| Product | pom | developer name | Kabir Khan | Low |
| Product | pom | developer name | Scott Marlow | Low |
| Product | pom | developer name | Shigeru Chiba | Low |
| Product | pom | developer org | JBoss | Low |
| Product | pom | developer org | The Javassist Project | Low |
| Product | pom | developer org URL | https://www.javassist.org/ | Low |
| Product | pom | developer org URL | https://www.jboss.org/ | Low |
| Product | pom | groupid | org.javassist | Highest |
| Product | pom | name | Javassist | High |
| Product | pom | organization name | Shigeru Chiba, www.javassist.org | Low |
| Product | pom | url | https://www.javassist.org/ | Medium |
| Version | pom | version | 3.30.2-GA | Highest |
jcip-annotations-1.0-1.jar
Description:
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jcip-annotations | High |
| Vendor | jar | package name | annotations | Highest |
| Vendor | jar | package name | annotations | Low |
| Vendor | jar | package name | jcip | Highest |
| Vendor | jar | package name | jcip | Low |
| Vendor | jar | package name | net | Low |
| Vendor | pom | artifactid | jcip-annotations | Highest |
| Vendor | pom | artifactid | jcip-annotations | Low |
| Vendor | pom | developer id | stephenc | Medium |
| Vendor | pom | developer name | Stephen Connolly | Medium |
| Vendor | pom | groupid | com.github.stephenc.jcip | Highest |
| Vendor | pom | name | JCIP Annotations under Apache License | High |
| Vendor | pom | url | http://stephenc.github.com/jcip-annotations | Highest |
| Product | file | name | jcip-annotations | High |
| Product | jar | package name | annotations | Highest |
| Product | jar | package name | annotations | Low |
| Product | jar | package name | jcip | Highest |
| Product | jar | package name | jcip | Low |
| Product | pom | artifactid | jcip-annotations | Highest |
| Product | pom | developer id | stephenc | Low |
| Product | pom | developer name | Stephen Connolly | Low |
| Product | pom | groupid | com.github.stephenc.jcip | Highest |
| Product | pom | name | JCIP Annotations under Apache License | High |
| Product | pom | url | http://stephenc.github.com/jcip-annotations | Medium |
| Version | pom | version | 1.0-1 | Highest |
jersey-server-4.0.0.jar
Description:
Jersey core server implementation
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
The GNU General Public License (GPL), Version 2, With Classpath Exception: https://www.gnu.org/software/classpath/license.html
Apache License, 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
Modified BSD: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-server/4.0.0/jersey-server-4.0.0.jar
MD5: d56524a3cdd76f5cf73fbb55a6f673ed
SHA1: 23f2b6c14a62d033ece905faa569ef319b9b3ccb
SHA256:64f4202866317bec580c2b65e42e7f2371c10bf7085af613c30c8b41023401b8
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
jersey-server-4.0.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jersey-server | High |
| Vendor | jar | package name | glassfish | Highest |
| Vendor | jar | package name | jersey | Highest |
| Vendor | jar | package name | org | Highest |
| Vendor | jar | package name | server | Highest |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org/org/foundation/ | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.jersey.core.jersey-server | Medium |
| Vendor | pom | artifactid | jersey-server | Highest |
| Vendor | pom | artifactid | jersey-server | Low |
| Vendor | pom | groupid | org.glassfish.jersey.core | Highest |
| Vendor | pom | name | jersey-core-server | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.glassfish.jersey | Medium |
| Product | file | name | jersey-server | High |
| Product | jar | package name | glassfish | Highest |
| Product | jar | package name | jersey | Highest |
| Product | jar | package name | org | Highest |
| Product | jar | package name | server | Highest |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org/org/foundation/ | Low |
| Product | Manifest | Bundle-Name | jersey-core-server | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.jersey.core.jersey-server | Medium |
| Product | pom | artifactid | jersey-server | Highest |
| Product | pom | groupid | org.glassfish.jersey.core | Highest |
| Product | pom | name | jersey-core-server | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.glassfish.jersey | Medium |
| Version | file | version | 4.0.0 | High |
| Version | Manifest | Bundle-Version | 4.0.0 | High |
| Version | pom | version | 4.0.0 | Highest |
Related Dependencies
- jersey-client-4.0.0.jar
- File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-client/4.0.0/jersey-client-4.0.0.jar
- MD5: c9189f093f3120a68ad4fd55403a8d23
- SHA1: 2d8f212cc356fc138d3e405af0b945550f957581
- SHA256: 9e0dc50386dc63f8ea68d916dce55ea204a64809785bf935769dfc130f6669a3
- pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.0
- jersey-common-4.0.0.jar
- File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-common/4.0.0/jersey-common-4.0.0.jar
- MD5: ea1596f30095b03dfdd07c09cb1fd3c5
- SHA1: 8c9723b3f948c62e872e73160b77f85eaf276dac
- SHA256: 1f9fc44b66dab2ff8291f4c7092aa7e0b39bb3efe1bbf50ce69a32fa09796616
- pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.0
- jersey-container-servlet-4.0.0.jar
- File Path: /home/runner/.m2/repository/org/glassfish/jersey/containers/jersey-container-servlet/4.0.0/jersey-container-servlet-4.0.0.jar
- MD5: e7cd772162d62a268ddf4b4c21578113
- SHA1: 549076bfb1861633ac69a83c1d3cfda0d3546fe7
- SHA256: 7247d8dfb0d4950991690580606c5ad933b917c6a7fe85b5256f23f287824c0f
- pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.0
- jersey-hk2-4.0.0.jar
- File Path: /home/runner/.m2/repository/org/glassfish/jersey/inject/jersey-hk2/4.0.0/jersey-hk2-4.0.0.jar
- MD5: db70df826f882fc59d59b2f1f5b12e41
- SHA1: 808e44dd7232a1474d4832b8843f2ecf82c79cb0
- SHA256: 71975191676bbe389c9ba114ae1946c9714198cac99cbdef56adbeb3d622a741
- pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
jsr305-3.0.2.jar
Description:
JSR305 Annotations for Findbugs
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
- pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jsr305 | High |
| Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium |
| Vendor | pom | artifactid | jsr305 | Highest |
| Vendor | pom | artifactid | jsr305 | Low |
| Vendor | pom | groupid | com.google.code.findbugs | Highest |
| Vendor | pom | name | FindBugs-jsr305 | High |
| Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest |
| Product | file | name | jsr305 | High |
| Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium |
| Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium |
| Product | pom | artifactid | jsr305 | Highest |
| Product | pom | groupid | com.google.code.findbugs | Highest |
| Product | pom | name | FindBugs-jsr305 | High |
| Product | pom | url | http://findbugs.sourceforge.net/ | Medium |
| Version | file | version | 3.0.2 | High |
| Version | Manifest | Bundle-Version | 3.0.2 | High |
| Version | pom | version | 3.0.2 | Highest |
lombok-1.18.42.jar
Description:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSE
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.42/lombok-1.18.42.jar
MD5: f29149836e0187fb9fd95d82dc718d36
SHA1: 8365263844ebb62398e0dc33057ba10ba472d3b8
SHA256:3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
lombok-1.18.42.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | lombok | High |
| Vendor | jar | package name | java | Highest |
| Vendor | jar | package name | lombok | Highest |
| Vendor | jar | package name | tostring | Highest |
| Vendor | Manifest | automatic-module-name | lombok | Medium |
| Vendor | Manifest | can-redefine-classes | true | Low |
| Vendor | pom | artifactid | lombok | Highest |
| Vendor | pom | artifactid | lombok | Low |
| Vendor | pom | developer email | reinier@projectlombok.org | Low |
| Vendor | pom | developer email | roel@projectlombok.org | Low |
| Vendor | pom | developer id | rspilker | Medium |
| Vendor | pom | developer id | rzwitserloot | Medium |
| Vendor | pom | developer name | Reinier Zwitserloot | Medium |
| Vendor | pom | developer name | Roel Spilker | Medium |
| Vendor | pom | groupid | org.projectlombok | Highest |
| Vendor | pom | name | Project Lombok | High |
| Vendor | pom | url | https://projectlombok.org | Highest |
| Product | file | name | lombok | High |
| Product | jar | package name | java | Highest |
| Product | jar | package name | lombok | Highest |
| Product | jar | package name | tostring | Highest |
| Product | Manifest | automatic-module-name | lombok | Medium |
| Product | Manifest | can-redefine-classes | true | Low |
| Product | pom | artifactid | lombok | Highest |
| Product | pom | developer email | reinier@projectlombok.org | Low |
| Product | pom | developer email | roel@projectlombok.org | Low |
| Product | pom | developer id | rspilker | Low |
| Product | pom | developer id | rzwitserloot | Low |
| Product | pom | developer name | Reinier Zwitserloot | Low |
| Product | pom | developer name | Roel Spilker | Low |
| Product | pom | groupid | org.projectlombok | Highest |
| Product | pom | name | Project Lombok | High |
| Product | pom | url | https://projectlombok.org | Medium |
| Version | file | version | 1.18.42 | High |
| Version | Manifest | lombok-version | 1.18.42 | Medium |
| Version | pom | version | 1.18.42 | Highest |
lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.42/lombok-1.18.42.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Projects/Scopes:
- Web App Test:provided
- Web App Parent:provided
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | mavenEcjBootstrapAgent | High |
| Vendor | jar | package name | launch | Low |
| Vendor | jar | package name | lombok | Low |
| Vendor | Manifest | can-redefine-classes | true | Low |
| Product | file | name | mavenEcjBootstrapAgent | High |
| Product | jar | package name | launch | Low |
| Product | Manifest | can-redefine-classes | true | Low |
osgi-resource-locator-3.0.0.jar
Description:
Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.
License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/hk2/osgi-resource-locator/3.0.0/osgi-resource-locator-3.0.0.jar
MD5: de9e96f2606a6f86def8659e9762c163
SHA1: 5483c94aa9a7e16319abaec0a6c74c999678feac
SHA256:a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
osgi-resource-locator-3.0.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
- pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | osgi-resource-locator | High |
| Vendor | jar | package name | glassfish | Highest |
| Vendor | jar | package name | hk2 | Highest |
| Vendor | Manifest | build-jdk-spec | 17 | Low |
| Vendor | Manifest | bundle-activationpolicy | lazy | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | org.glassfish.hk2.osgi-resource-locator | Medium |
| Vendor | pom | artifactid | osgi-resource-locator | Highest |
| Vendor | pom | artifactid | osgi-resource-locator | Low |
| Vendor | pom | developer id | ss141213 | Medium |
| Vendor | pom | developer name | Sahoo | Medium |
| Vendor | pom | developer org | Oracle Corporation | Medium |
| Vendor | pom | groupid | org.glassfish.hk2 | Highest |
| Vendor | pom | name | HK2 OSGi resource locator | High |
| Vendor | pom | parent-artifactid | hk2-extra-parent | Low |
| Product | file | name | osgi-resource-locator | High |
| Product | jar | package name | glassfish | Highest |
| Product | jar | package name | hk2 | Highest |
| Product | Manifest | build-jdk-spec | 17 | Low |
| Product | Manifest | bundle-activationpolicy | lazy | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | HK2 OSGi resource locator | Medium |
| Product | Manifest | bundle-symbolicname | org.glassfish.hk2.osgi-resource-locator | Medium |
| Product | pom | artifactid | osgi-resource-locator | Highest |
| Product | pom | developer id | ss141213 | Low |
| Product | pom | developer name | Sahoo | Low |
| Product | pom | developer org | Oracle Corporation | Low |
| Product | pom | groupid | org.glassfish.hk2 | Highest |
| Product | pom | name | HK2 OSGi resource locator | High |
| Product | pom | parent-artifactid | hk2-extra-parent | Medium |
| Version | file | version | 3.0.0 | High |
| Version | Manifest | Bundle-Version | 3.0.0 | High |
| Version | pom | version | 3.0.0 | Highest |
proguard-annotations-7.8.2.jar
Description:
Java annotations to configure ProGuard, the free shrinker, optimizer, obfuscator, and preverifier for Java bytecode
License:
GNU General Public License, Version 2: https://www.gnu.org/licenses/gpl-2.0.txt
File Path: /home/runner/.m2/repository/com/guardsquare/proguard-annotations/7.8.2/proguard-annotations-7.8.2.jar
MD5: d14549b6031f5a0560f15034bfcd5927
SHA1: 938db20b9393793410777f51d7745b74fc7d39d7
SHA256:b5764e56e338468ebd94b7f8e6cbc65a94b3f997cc42d9429143aad8a5498220
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
proguard-annotations-7.8.2.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | proguard-annotations | High |
| Vendor | jar | package name | annotation | Low |
| Vendor | jar | package name | proguard | Highest |
| Vendor | jar | package name | proguard | Low |
| Vendor | pom | artifactid | proguard-annotations | Highest |
| Vendor | pom | artifactid | proguard-annotations | Low |
| Vendor | pom | developer id | lafortune | Medium |
| Vendor | pom | developer name | Eric Lafortune | Medium |
| Vendor | pom | developer org | Guardsquare | Medium |
| Vendor | pom | developer org URL | https://www.guardsquare.com/ | Medium |
| Vendor | pom | groupid | com.guardsquare | Highest |
| Vendor | pom | name | com.guardsquare:proguard-annotations | High |
| Vendor | pom | url | https://www.guardsquare.com/proguard | Highest |
| Product | file | name | proguard-annotations | High |
| Product | jar | package name | annotation | Low |
| Product | jar | package name | proguard | Highest |
| Product | pom | artifactid | proguard-annotations | Highest |
| Product | pom | developer id | lafortune | Low |
| Product | pom | developer name | Eric Lafortune | Low |
| Product | pom | developer org | Guardsquare | Low |
| Product | pom | developer org URL | https://www.guardsquare.com/ | Low |
| Product | pom | groupid | com.guardsquare | Highest |
| Product | pom | name | com.guardsquare:proguard-annotations | High |
| Product | pom | url | https://www.guardsquare.com/proguard | Medium |
| Version | file | version | 7.8.2 | High |
| Version | pom | version | 7.8.2 | Highest |
slf4j-api-2.0.17.jar
Description:
The slf4j API
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Projects/Scopes:- Web App Parent:compile
- Web App Test:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | slf4j-api | High |
| Vendor | jar | package name | slf4j | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | slf4j-api | Highest |
| Vendor | pom | artifactid | slf4j-api | Low |
| Vendor | pom | groupid | org.slf4j | Highest |
| Vendor | pom | name | SLF4J API Module | High |
| Vendor | pom | parent-artifactid | slf4j-parent | Low |
| Vendor | pom | url | http://www.slf4j.org | Highest |
| Product | file | name | slf4j-api | High |
| Product | jar | package name | slf4j | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Product | Manifest | Bundle-Name | SLF4J API Module | Medium |
| Product | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Product | Manifest | Implementation-Title | slf4j-api | High |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | slf4j-api | Highest |
| Product | pom | groupid | org.slf4j | Highest |
| Product | pom | name | SLF4J API Module | High |
| Product | pom | parent-artifactid | slf4j-parent | Medium |
| Product | pom | url | http://www.slf4j.org | Medium |
| Version | file | version | 2.0.17 | High |
| Version | Manifest | Bundle-Version | 2.0.17 | High |
| Version | Manifest | Implementation-Version | 2.0.17 | High |
| Version | pom | version | 2.0.17 | Highest |
spotbugs-annotations-4.9.8.jar
Description:
Annotations the SpotBugs tool supports
License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Projects/Scopes:- Web App Test:provided
- Web App Parent:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
- pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | spotbugs-annotations | High |
| Vendor | Manifest | automatic-module-name | com.github.spotbugs.annotations | Medium |
| Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low |
| Vendor | Manifest | bundle-symbolicname | spotbugs-annotations | Medium |
| Vendor | pom | artifactid | spotbugs-annotations | Highest |
| Vendor | pom | artifactid | spotbugs-annotations | Low |
| Vendor | pom | developer email | andreas.sewe@codetrails.com | Low |
| Vendor | pom | developer email | dbrosius@mebigfatguy.com | Low |
| Vendor | pom | developer email | loskutov@gmx.de | Low |
| Vendor | pom | developer email | skypencil@gmail.com | Low |
| Vendor | pom | developer id | henrik242 | Medium |
| Vendor | pom | developer id | iloveeclipse | Medium |
| Vendor | pom | developer id | jsotuyod | Medium |
| Vendor | pom | developer id | KengoTODA | Medium |
| Vendor | pom | developer id | mebigfatguy | Medium |
| Vendor | pom | developer id | sewe | Medium |
| Vendor | pom | developer id | ThrawnCA | Medium |
| Vendor | pom | developer name | Andreas Sewe | Medium |
| Vendor | pom | developer name | Andrey Loskutov | Medium |
| Vendor | pom | developer name | Dave Brosius | Medium |
| Vendor | pom | developer name | Juan Martín Sotuyo Dodero | Medium |
| Vendor | pom | developer name | Kengo TODA | Medium |
| Vendor | pom | groupid | com.github.spotbugs | Highest |
| Vendor | pom | name | SpotBugs Annotations | High |
| Vendor | pom | url | https://spotbugs.github.io/ | Highest |
| Product | file | name | spotbugs-annotations | High |
| Product | Manifest | automatic-module-name | com.github.spotbugs.annotations | Medium |
| Product | Manifest | Bundle-Name | spotbugs-annotations | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low |
| Product | Manifest | bundle-symbolicname | spotbugs-annotations | Medium |
| Product | pom | artifactid | spotbugs-annotations | Highest |
| Product | pom | developer email | andreas.sewe@codetrails.com | Low |
| Product | pom | developer email | dbrosius@mebigfatguy.com | Low |
| Product | pom | developer email | loskutov@gmx.de | Low |
| Product | pom | developer email | skypencil@gmail.com | Low |
| Product | pom | developer id | henrik242 | Low |
| Product | pom | developer id | iloveeclipse | Low |
| Product | pom | developer id | jsotuyod | Low |
| Product | pom | developer id | KengoTODA | Low |
| Product | pom | developer id | mebigfatguy | Low |
| Product | pom | developer id | sewe | Low |
| Product | pom | developer id | ThrawnCA | Low |
| Product | pom | developer name | Andreas Sewe | Low |
| Product | pom | developer name | Andrey Loskutov | Low |
| Product | pom | developer name | Dave Brosius | Low |
| Product | pom | developer name | Juan Martín Sotuyo Dodero | Low |
| Product | pom | developer name | Kengo TODA | Low |
| Product | pom | groupid | com.github.spotbugs | Highest |
| Product | pom | name | SpotBugs Annotations | High |
| Product | pom | url | https://spotbugs.github.io/ | Medium |
| Version | file | version | 4.9.8 | High |
| Version | Manifest | Bundle-Version | 4.9.8 | High |
| Version | pom | version | 4.9.8 | Highest |