Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.9
Report Generated On: Sat, 20 Dec 2025 11:58:25 GMT
Dependencies Scanned: 60 (56 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-12-20T11:51:11Z
NVD API Last Modified: 2025-12-20T09:15:55Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
annotations-26.0.2-1.jar		pkg:maven/org.jetbrains/annotations@26.0.2-1		26
aopalliance-1.0.jar		pkg:maven/aopalliance/aopalliance@1.0		20
aopalliance-repackaged-4.0.0-M3.jar		pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3		27
asm-9.9.jar		pkg:maven/org.ow2.asm/asm@9.9		54
eslint.config.js				0
failureaccess-1.0.3.jar		pkg:maven/com.google.guava/failureaccess@1.0.3		32
guava-33.5.0-jre.jar	cpe:2.3:a:google:guava:33.5.0:::::::*	pkg:maven/com.google.guava/guava@33.5.0-jre	Highest	25
guice-5.1.0-classes.jar		pkg:maven/com.google.inject/guice@5.1.0		32
hk2-api-4.0.0-M3.jar		pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3		27
hk2-locator-4.0.0-M3.jar	cpe:2.3:a:service_project:service:4.0.0:m3::::::	pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3	Low	23
hk2-utils-4.0.0-M3.jar	cpe:2.3:a:utils_project:utils:4.0.0:m3::::::	pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3	Highest	29
jakarta.activation-api-2.1.3.jar		pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3		45
jakarta.annotation-api-3.0.0.jar	cpe:2.3:a:oracle:projects:3.0.0:::::::*	pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0	Low	42
jakarta.inject-api-2.0.1.jar		pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1		56
jakarta.servlet-api-6.1.0.jar	cpe:2.3:a:oracle:projects:6.1.0:::::::*	pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0	Low	44
jakarta.validation-api-3.1.0.jar		pkg:maven/jakarta.validation/jakarta.validation-api@3.1.0		58
jakarta.ws.rs-api-4.0.0.jar		pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0		33
jakarta.xml.bind-api-4.0.2.jar		pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2		31
java-parent-test-3.0.34.jar		pkg:maven/me.chrissw-r1/java-parent-test@3.0.34		27
javassist-3.30.2-GA.jar		pkg:maven/org.javassist/javassist@3.30.2-GA		59
javax.inject-1.jar		pkg:maven/javax.inject/javax.inject@1		20
jcip-annotations-1.0-1.jar		pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1		25
jersey-server-4.0.0.jar	cpe:2.3:a:jersey_project:jersey:4.0.0:::::::*	pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0	Highest	31
jspecify-1.0.0.jar		pkg:maven/org.jspecify/jspecify@1.0.0		32
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
lombok-1.18.42.jar		pkg:maven/org.projectlombok/lombok@1.18.42		36
lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar				7
maven-artifact-3.9.12.jar		pkg:maven/org.apache.maven/maven-artifact@3.9.12		26
maven-builder-support-3.9.12.jar		pkg:maven/org.apache.maven/maven-builder-support@3.9.12		24
maven-core-3.9.12.jar	cpe:2.3:a:apache:maven:3.9.12:::::::*	pkg:maven/org.apache.maven/maven-core@3.9.12	Highest	24
maven-model-3.9.12.jar		pkg:maven/org.apache.maven/maven-model@3.9.12		26
maven-model-builder-3.9.12.jar		pkg:maven/org.apache.maven/maven-model-builder@3.9.12		32
maven-plugin-annotations-3.15.2.jar		pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2		26
maven-plugin-api-3.9.12.jar		pkg:maven/org.apache.maven/maven-plugin-api@3.9.12		26
maven-repository-metadata-3.9.12.jar		pkg:maven/org.apache.maven/maven-repository-metadata@3.9.12		26
maven-resolver-api-1.9.25.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.25		34
maven-resolver-impl-1.9.25.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.25		32
maven-resolver-named-locks-1.9.25.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.25		33
maven-resolver-provider-3.9.12.jar		pkg:maven/org.apache.maven/maven-resolver-provider@3.9.12		26
maven-resolver-spi-1.9.25.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.25		32
maven-resolver-util-1.9.25.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.25		36
maven-settings-3.9.12.jar		pkg:maven/org.apache.maven/maven-settings@3.9.12		26
maven-settings-builder-3.9.12.jar		pkg:maven/org.apache.maven/maven-settings-builder@3.9.12		26
maven-shared-utils-3.4.2.jar	cpe:2.3:a:apache:maven_shared_utils:3.4.2:::::::* cpe:2.3:a:utils_project:utils:3.4.2:::::::*	pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2	Highest	29
org.eclipse.sisu.inject-0.9.0.M4.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4		36
org.eclipse.sisu.plexus-0.9.0.M4.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4		31
osgi-resource-locator-3.0.0.jar		pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0		33
plexus-cipher-2.0.jar		pkg:maven/org.codehaus.plexus/plexus-cipher@2.0		20
plexus-classworlds-2.9.0.jar		pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0		35
plexus-component-annotations-2.2.0.jar		pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0		23
plexus-interpolation-1.29.jar		pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29		34
plexus-sec-dispatcher-2.0.jar	cpe:2.3:a:sec_project:sec:2.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0	Highest	20
plexus-utils-3.6.0.jar	cpe:2.3:a:codehaus-plexus:plexus-utils:3.6.0:::::::* cpe:2.3:a:utils_project:utils:3.6.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0	Highest	33
proguard-annotations-7.8.2.jar		pkg:maven/com.guardsquare/proguard-annotations@7.8.2		26
slf4j-api-2.0.17.jar		pkg:maven/org.slf4j/slf4j-api@2.0.17		29
spotbugs-annotations-4.9.8.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8		53

Dependencies (vulnerable)

annotations-26.0.2-1.jar

Description:

A set of annotations used for code inspection support and code documentation.

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/jetbrains/annotations/26.0.2-1/annotations-26.0.2-1.jar
MD5: ef0e782af9ee48fac1156485366d7cc9
SHA1: c7ce3cdeda3d18909368dfe5977332dfad326c6d
SHA256:2037be378980d3ba9333e97955f3b2cde392aa124d04ca73ce2eee6657199297
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34
pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	jetbrains	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	annotations	Highest
Vendor	pom	artifactid	annotations	Low
Vendor	pom	developer id	JetBrains	Medium
Vendor	pom	developer name	JetBrains Team	Medium
Vendor	pom	developer org	JetBrains	Medium
Vendor	pom	developer org URL	https://www.jetbrains.com	Medium
Vendor	pom	groupid	org.jetbrains	Highest
Vendor	pom	name	JetBrains Java Annotations	High
Vendor	pom	url	JetBrains/java-annotations	Highest
Product	file	name	annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	jetbrains	Highest
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	annotations	Highest
Product	pom	developer id	JetBrains	Low
Product	pom	developer name	JetBrains Team	Low
Product	pom	developer org	JetBrains	Low
Product	pom	developer org URL	https://www.jetbrains.com	Low
Product	pom	groupid	org.jetbrains	Highest
Product	pom	name	JetBrains Java Annotations	High
Product	pom	url	JetBrains/java-annotations	High
Version	pom	version	26.0.2-1	Highest

Identifiers

pkg:maven/org.jetbrains/annotations@26.0.2-1 (Confidence:High)

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain

File Path: /home/runner/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aopalliance	High
Vendor	jar	package name	aop	Highest
Vendor	jar	package name	aopalliance	Highest
Vendor	jar	package name	aopalliance	Low
Vendor	jar	package name	intercept	Low
Vendor	pom	artifactid	aopalliance	Highest
Vendor	pom	artifactid	aopalliance	Low
Vendor	pom	groupid	aopalliance	Highest
Vendor	pom	name	AOP alliance	High
Vendor	pom	url	http://aopalliance.sourceforge.net	Highest
Product	file	name	aopalliance	High
Product	jar	package name	aop	Highest
Product	jar	package name	aopalliance	Highest
Product	jar	package name	intercept	Low
Product	pom	artifactid	aopalliance	Highest
Product	pom	groupid	aopalliance	Highest
Product	pom	name	AOP alliance	High
Product	pom	url	http://aopalliance.sourceforge.net	Medium
Version	file	version	1.0	High
Version	pom	version	1.0	Highest

Identifiers

pkg:maven/aopalliance/aopalliance@1.0 (Confidence:High)

aopalliance-repackaged-4.0.0-M3.jar

Description:

Dependency Injection Kernel

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/hk2/external/aopalliance-repackaged/4.0.0-M3/aopalliance-repackaged-4.0.0-M3.jar
MD5: 265ded5507ff1db7cd2184d4846fc85b
SHA1: 71779579326f1648524a86fdee77bdf1d2d45336
SHA256:65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aopalliance-repackaged	High
Vendor	jar	package name	aopalliance	Highest
Vendor	Manifest	automatic-module-name	org.aopalliance	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.hk2.external.aopalliance-repackaged	Medium
Vendor	pom	artifactid	aopalliance-repackaged	Highest
Vendor	pom	artifactid	aopalliance-repackaged	Low
Vendor	pom	groupid	org.glassfish.hk2.external	Highest
Vendor	pom	name	aopalliance version repackaged as a module	High
Vendor	pom	name	aopalliance version ${aopalliance.version} repackaged as a module	High
Vendor	pom	parent-artifactid	external	Low
Vendor	pom	parent-groupid	org.glassfish.hk2	Medium
Product	file	name	aopalliance-repackaged	High
Product	jar	package name	aopalliance	Highest
Product	Manifest	automatic-module-name	org.aopalliance	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	aopalliance version 1.0 repackaged as a module	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.hk2.external.aopalliance-repackaged	Medium
Product	pom	artifactid	aopalliance-repackaged	Highest
Product	pom	groupid	org.glassfish.hk2.external	Highest
Product	pom	name	aopalliance version repackaged as a module	High
Product	pom	name	aopalliance version ${aopalliance.version} repackaged as a module	High
Product	pom	parent-artifactid	external	Medium
Product	pom	parent-groupid	org.glassfish.hk2	Medium
Version	pom	version	4.0.0-M3	Highest

Identifiers

pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3 (Confidence:High)

asm-9.9.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.9/asm-9.9.jar
MD5: 6d1dd0482c03a6dc1807d9d004456021
SHA1: c29635c8a7afa03d74b33c1884df8abb2b3f3dcc
SHA256:03d99a74ad1ee5c71334ef67437f4ef4fe3488caa7c96d8645abc73c8e2017d4
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.9	High
Version	Manifest	Bundle-Version	9.9	High
Version	Manifest	Implementation-Version	9.9	High
Version	pom	parent-version	9.9	Low
Version	pom	version	9.9	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@9.9 (Confidence:High)

eslint.config.js

File Path: /home/runner/work/general-parent/general-parent/target/checkout/general-resources/src/main/resources/eslint.config.js
MD5: ae60e636c8063a968123d0d079cb829f
SHA1: 2e616db04dda8ed70fe4d88ca266831a64eeb4b6
SHA256:d9a91e1aa74b0a44b029a52d0765db5bdd2fe7f3295897226ecb45f8a0ec85ba
Referenced In Project/Scope: General Resources

Evidence

Identifiers

None

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.3	High
Version	Manifest	Bundle-Version	1.0.3	High
Version	pom	parent-version	1.0.3	Low
Version	pom	version	1.0.3	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.3 (Confidence:High)

guava-33.5.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.5.0-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.5.0-jre (Confidence:High)
cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* (Confidence:Highest)

guice-5.1.0-classes.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/inject/guice/5.1.0/guice-5.1.0-classes.jar
MD5: d4d4d9bf878b98862116e8ccc0a5c34e
SHA1: e7ba4c25bec3761840f67c73f166c0d509d01d1d
SHA256:142ad4475e19524d2fe3ac995b3f7cbc962fc726f2edb9dbdccc61feab9b2bf9
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guice	High
Vendor	jar	package name	google	Highest
Vendor	jar	package name	google	Low
Vendor	jar	package name	guice	Highest
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	internal	Low
Vendor	Manifest	automatic-module-name	com.google.guice	Medium
Vendor	Manifest	bundle-copyright	Copyright (C) 2006 Google Inc.	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guice	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	Manifest	bundle-symbolicname	com.google.inject	Medium
Vendor	Manifest	eclipse-extensibleapi	true	Low
Vendor	pom	artifactid	guice	Highest
Vendor	pom	groupid	com.google.inject	Highest
Product	file	name	guice	High
Product	jar	package name	dependency	Highest
Product	jar	package name	google	Highest
Product	jar	package name	guice	Highest
Product	jar	package name	inject	Highest
Product	jar	package name	inject	Low
Product	jar	package name	internal	Low
Product	Manifest	automatic-module-name	com.google.guice	Medium
Product	Manifest	bundle-copyright	Copyright (C) 2006 Google Inc.	Low
Product	Manifest	bundle-docurl	https://github.com/google/guice	Low
Product	Manifest	Bundle-Name	guice	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	Manifest	bundle-symbolicname	com.google.inject	Medium
Product	Manifest	eclipse-extensibleapi	true	Low
Product	pom	artifactid	guice	Highest
Version	file	version	5.1.0	High
Version	pom	version	5.1.0	Highest

Identifiers

pkg:maven/com.google.inject/guice@5.1.0 (Confidence:Highest)

hk2-api-4.0.0-M3.jar

Description:

${project.name}

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-api/4.0.0-M3/hk2-api-4.0.0-M3.jar
MD5: 4a7799f8b0c76121478fdbfd3fa481cb
SHA1: 4b9520d9c4ecdc8b688a50968c19b54b55fc1274
SHA256:66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hk2-api	High
Vendor	jar	package name	api	Highest
Vendor	jar	package name	glassfish	Highest
Vendor	jar	package name	hk2	Highest
Vendor	Manifest	automatic-module-name	org.glassfish.hk2.api	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.hk2.api	Medium
Vendor	pom	artifactid	hk2-api	Highest
Vendor	pom	artifactid	hk2-api	Low
Vendor	pom	groupid	org.glassfish.hk2	Highest
Vendor	pom	name	HK2 API module	High
Vendor	pom	parent-artifactid	hk2-parent	Low
Product	file	name	hk2-api	High
Product	jar	package name	api	Highest
Product	jar	package name	glassfish	Highest
Product	jar	package name	hk2	Highest
Product	Manifest	automatic-module-name	org.glassfish.hk2.api	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	HK2 API module	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.hk2.api	Medium
Product	pom	artifactid	hk2-api	Highest
Product	pom	groupid	org.glassfish.hk2	Highest
Product	pom	name	HK2 API module	High
Product	pom	parent-artifactid	hk2-parent	Medium
Version	pom	version	4.0.0-M3	Highest

Identifiers

pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3 (Confidence:High)

hk2-locator-4.0.0-M3.jar

Description:

${project.name}

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-locator/4.0.0-M3/hk2-locator-4.0.0-M3.jar
MD5: b4208d604d4c23e3acae9f6300aafd4c
SHA1: 64a198be0ce5a86c6e6e439188fc4e7187416588
SHA256:290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hk2-locator	High
Vendor	jar	package name	hk2	Highest
Vendor	Manifest	automatic-module-name	org.glassfish.hk2.locator	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.hk2.locator	Medium
Vendor	pom	artifactid	hk2-locator	Highest
Vendor	pom	artifactid	hk2-locator	Low
Vendor	pom	groupid	org.glassfish.hk2	Highest
Vendor	pom	name	ServiceLocator Default Implementation	High
Vendor	pom	parent-artifactid	hk2-parent	Low
Product	file	name	hk2-locator	High
Product	jar	package name	hk2	Highest
Product	Manifest	automatic-module-name	org.glassfish.hk2.locator	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	ServiceLocator Default Implementation	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.hk2.locator	Medium
Product	pom	artifactid	hk2-locator	Highest
Product	pom	groupid	org.glassfish.hk2	Highest
Product	pom	name	ServiceLocator Default Implementation	High
Product	pom	parent-artifactid	hk2-parent	Medium
Version	pom	version	4.0.0-M3	Highest

Identifiers

pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3 (Confidence:High)
cpe:2.3:a:service_project:service:4.0.0:m3:*:*:*:*:*:* (Confidence:Low)

hk2-utils-4.0.0-M3.jar

Description:

${project.name}

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-utils/4.0.0-M3/hk2-utils-4.0.0-M3.jar
MD5: 8bc6984bd681f30286f4d95ee8795b61
SHA1: d0017a4fffdb8184582d579c15e4d90765e4d11b
SHA256:ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hk2-utils	High
Vendor	jar	package name	glassfish	Highest
Vendor	jar	package name	hk2	Highest
Vendor	jar	package name	utilities	Highest
Vendor	Manifest	automatic-module-name	org.glassfish.hk2.utilities	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.hk2.utils	Medium
Vendor	Manifest	service	foo	Low
Vendor	pom	artifactid	hk2-utils	Highest
Vendor	pom	artifactid	hk2-utils	Low
Vendor	pom	groupid	org.glassfish.hk2	Highest
Vendor	pom	name	HK2 Implementation Utilities	High
Vendor	pom	parent-artifactid	hk2-parent	Low
Product	file	name	hk2-utils	High
Product	jar	package name	glassfish	Highest
Product	jar	package name	hk2	Highest
Product	jar	package name	utilities	Highest
Product	Manifest	automatic-module-name	org.glassfish.hk2.utilities	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	HK2 Implementation Utilities	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.hk2.utils	Medium
Product	Manifest	service	foo	Low
Product	pom	artifactid	hk2-utils	Highest
Product	pom	groupid	org.glassfish.hk2	Highest
Product	pom	name	HK2 Implementation Utilities	High
Product	pom	parent-artifactid	hk2-parent	Medium
Version	pom	version	4.0.0-M3	Highest

Identifiers

pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3 (Confidence:High)
cpe:2.3:a:utils_project:utils:4.0.0:m3:*:*:*:*:*:* (Confidence:Highest)

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	implementation-build-id	7f7d358	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation-api	Highest
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	developer email	bill.shannon@oracle.com	Low
Vendor	pom	developer id	shannon	Medium
Vendor	pom	developer name	Bill Shannon	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	pom	name	Jakarta Activation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	jakartaee/jaf-api	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	jakarta.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	implementation-build-id	7f7d358	Low
Product	Manifest	Implementation-Title	Jakarta Activation API	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Product	pom	developer email	bill.shannon@oracle.com	Low
Product	pom	developer id	shannon	Low
Product	pom	developer name	Bill Shannon	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	jakarta.activation	Highest
Product	pom	name	Jakarta Activation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	jakartaee/jaf-api	High
Version	file	version	2.1.3	High
Version	Manifest	Bundle-Version	2.1.3	High
Version	pom	parent-version	2.1.3	Low
Version	pom	version	2.1.3	Highest

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 (Confidence:High)

jakarta.annotation-api-3.0.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.annotation-api	High
Vendor	jar	package name	annotation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	build-jdk-spec	18	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Vendor	Manifest	extension-name	jakarta.annotation	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.annotation-api	Highest
Vendor	pom	artifactid	jakarta.annotation-api	Low
Vendor	pom	developer name	Dmitry Kornilov	Medium
Vendor	pom	developer name	Linda De Michiel	Medium
Vendor	pom	developer org	Oracle Corp.	Medium
Vendor	pom	groupid	jakarta.annotation	Highest
Vendor	pom	name	Jakarta Annotations API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Highest
Product	file	name	jakarta.annotation-api	High
Product	jar	package name	annotation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	build-jdk-spec	18	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Annotations API	Medium
Product	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Product	Manifest	extension-name	jakarta.annotation	Medium
Product	pom	artifactid	jakarta.annotation-api	Highest
Product	pom	developer name	Dmitry Kornilov	Low
Product	pom	developer name	Linda De Michiel	Low
Product	pom	developer org	Oracle Corp.	Low
Product	pom	groupid	jakarta.annotation	Highest
Product	pom	name	Jakarta Annotations API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Medium
Version	file	version	3.0.0	High
Version	Manifest	Bundle-Version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0 (Confidence:High)
cpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:* (Confidence:Low)

jakarta.inject-api-2.0.1.jar

Description:

Jakarta Dependency Injection

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256:f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.inject-api	High
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.inject.jakarta.inject-api	Medium
Vendor	pom	artifactid	jakarta.inject-api	Highest
Vendor	pom	artifactid	jakarta.inject-api	Low
Vendor	pom	developer email	asd[at]redhat[dot]com	Low
Vendor	pom	developer email	manovotn[at]redhat[dot]com	Low
Vendor	pom	developer email	mkouba[at]redhat[dot]com	Low
Vendor	pom	developer email	tremes[at]redhat[dot]com	Low
Vendor	pom	developer id	asabotdu	Medium
Vendor	pom	developer id	manovotn	Medium
Vendor	pom	developer id	mkouba	Medium
Vendor	pom	developer id	tremes	Medium
Vendor	pom	developer name	Antoine Sabot-Durand	Medium
Vendor	pom	developer name	Martin Kouba	Medium
Vendor	pom	developer name	Matej Novotny	Medium
Vendor	pom	developer name	Tomas Remes	Medium
Vendor	pom	developer org	Red Hat Inc.	Medium
Vendor	pom	groupid	jakarta.inject	Highest
Vendor	pom	name	Jakarta Dependency Injection	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	eclipse-ee4j/injection-api	Highest
Product	file	name	jakarta.inject-api	High
Product	jar	package name	inject	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Dependency Injection	Medium
Product	Manifest	bundle-symbolicname	jakarta.inject.jakarta.inject-api	Medium
Product	pom	artifactid	jakarta.inject-api	Highest
Product	pom	developer email	asd[at]redhat[dot]com	Low
Product	pom	developer email	manovotn[at]redhat[dot]com	Low
Product	pom	developer email	mkouba[at]redhat[dot]com	Low
Product	pom	developer email	tremes[at]redhat[dot]com	Low
Product	pom	developer id	asabotdu	Low
Product	pom	developer id	manovotn	Low
Product	pom	developer id	mkouba	Low
Product	pom	developer id	tremes	Low
Product	pom	developer name	Antoine Sabot-Durand	Low
Product	pom	developer name	Martin Kouba	Low
Product	pom	developer name	Matej Novotny	Low
Product	pom	developer name	Tomas Remes	Low
Product	pom	developer org	Red Hat Inc.	Low
Product	pom	groupid	jakarta.inject	Highest
Product	pom	name	Jakarta Dependency Injection	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	eclipse-ee4j/injection-api	High
Version	file	version	2.0.1	High
Version	Manifest	Bundle-Version	2.0.1	High
Version	pom	parent-version	2.0.1	Low
Version	pom	version	2.0.1	Highest

Identifiers

pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1 (Confidence:High)

jakarta.servlet-api-6.1.0.jar

Description:

Jakarta Servlet 6.1

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.1.0/jakarta.servlet-api-6.1.0.jar
MD5: 314c930b3e40ac1abc3529c7c9942f09
SHA1: 1169a246913fe3823782af7943e7a103634867c5
SHA256:8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4
Referenced In Projects/Scopes:

Web App Test:provided
Web App Parent:provided

pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	servlet	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Vendor	Manifest	extension-name	jakarta.servlet	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.eclipse	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.servlet-api	Highest
Vendor	pom	artifactid	jakarta.servlet-api	Low
Vendor	pom	developer id	yaminikb	Medium
Vendor	pom	developer name	Yamini K B	Medium
Vendor	pom	developer org	Oracle Corporation	Medium
Vendor	pom	developer org URL	http://www.oracle.com/	Medium
Vendor	pom	groupid	jakarta.servlet	Highest
Vendor	pom	name	Jakarta Servlet	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Highest
Product	file	name	jakarta.servlet-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	servlet	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Servlet	Medium
Product	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Product	Manifest	extension-name	jakarta.servlet	Medium
Product	pom	artifactid	jakarta.servlet-api	Highest
Product	pom	developer id	yaminikb	Low
Product	pom	developer name	Yamini K B	Low
Product	pom	developer org	Oracle Corporation	Low
Product	pom	developer org URL	http://www.oracle.com/	Low
Product	pom	groupid	jakarta.servlet	Highest
Product	pom	name	Jakarta Servlet	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Medium
Version	file	version	6.1.0	High
Version	Manifest	Bundle-Version	6.1.0	High
Version	Manifest	Implementation-Version	6.1.0	High
Version	pom	parent-version	6.1.0	Low
Version	pom	version	6.1.0	Highest

Identifiers

pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0 (Confidence:High)
cpe:2.3:a:oracle:projects:6.1.0:*:*:*:*:*:*:* (Confidence:Low)

jakarta.validation-api-3.1.0.jar

Description:

        Jakarta Validation API

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/jakarta/validation/jakarta.validation-api/3.1.0/jakarta.validation-api-3.1.0.jar
MD5: 7de160f58f128c0ecb3cfa4d5593c5c6
SHA1: 846b536eff8a32c1b91fdeb3c9c5b6c39916767d
SHA256:1a18593d8ba9b48215ca4993e51a4451c804a82f89e8d0d4a31a5e6b8731d4a7
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.validation-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	validation	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.validation.jakarta.validation-api	Medium
Vendor	pom	artifactid	jakarta.validation-api	Highest
Vendor	pom	artifactid	jakarta.validation-api	Low
Vendor	pom	developer email	emmanuel@hibernate.org	Low
Vendor	pom	developer email	guillaume.smet@hibernate.org	Low
Vendor	pom	developer email	gunnar@hibernate.org	Low
Vendor	pom	developer email	hferents@redhat.com	Low
Vendor	pom	developer id	emmanuelbernard	Medium
Vendor	pom	developer id	epbernard	Medium
Vendor	pom	developer id	guillaume.smet	Medium
Vendor	pom	developer id	gunnar.morling	Medium
Vendor	pom	developer id	hardy.ferentschik	Medium
Vendor	pom	developer name	Emmanuel Bernard	Medium
Vendor	pom	developer name	Guillaume Smet	Medium
Vendor	pom	developer name	Gunnar Morling	Medium
Vendor	pom	developer name	Hardy Ferentschik	Medium
Vendor	pom	developer org	Red Hat, Inc.	Medium
Vendor	pom	groupid	jakarta.validation	Highest
Vendor	pom	name	Jakarta Validation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://beanvalidation.org	Highest
Product	file	name	jakarta.validation-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	validation	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Validation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.validation.jakarta.validation-api	Medium
Product	pom	artifactid	jakarta.validation-api	Highest
Product	pom	developer email	emmanuel@hibernate.org	Low
Product	pom	developer email	guillaume.smet@hibernate.org	Low
Product	pom	developer email	gunnar@hibernate.org	Low
Product	pom	developer email	hferents@redhat.com	Low
Product	pom	developer id	emmanuelbernard	Low
Product	pom	developer id	epbernard	Low
Product	pom	developer id	guillaume.smet	Low
Product	pom	developer id	gunnar.morling	Low
Product	pom	developer id	hardy.ferentschik	Low
Product	pom	developer name	Emmanuel Bernard	Low
Product	pom	developer name	Guillaume Smet	Low
Product	pom	developer name	Gunnar Morling	Low
Product	pom	developer name	Hardy Ferentschik	Low
Product	pom	developer org	Red Hat, Inc.	Low
Product	pom	groupid	jakarta.validation	Highest
Product	pom	name	Jakarta Validation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://beanvalidation.org	Medium
Version	file	version	3.1.0	High
Version	Manifest	Bundle-Version	3.1.0	High
Version	pom	parent-version	3.1.0	Low
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/jakarta.validation/jakarta.validation-api@3.1.0 (Confidence:High)

jakarta.ws.rs-api-4.0.0.jar

Description:

Jakarta RESTful Web Services

License:

https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/4.0.0/jakarta.ws.rs-api-4.0.0.jar
MD5: 9b7cc90c000f193157d60d95caf45972
SHA1: c27a67f84ca491efcb3fa68f4df926e8a110069e
SHA256:6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.ws.rs-api	High
Vendor	hint analyzer	vendor	web services	Medium
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	rs	Highest
Vendor	jar	package name	ws	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org/org/foundation/	Low
Vendor	Manifest	bundle-symbolicname	jakarta.ws.rs-api	Medium
Vendor	Manifest	extension-name	jakarta.ws.rs	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.ws.rs-api	Highest
Vendor	pom	artifactid	jakarta.ws.rs-api	Low
Vendor	pom	groupid	jakarta.ws.rs	Highest
Vendor	pom	name	Jakarta RESTful WS API	High
Vendor	pom	parent-artifactid	all	Low
Product	file	name	jakarta.ws.rs-api	High
Product	hint analyzer	product	web services	Medium
Product	jar	package name	jakarta	Highest
Product	jar	package name	rs	Highest
Product	jar	package name	ws	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org/org/foundation/	Low
Product	Manifest	Bundle-Name	Jakarta RESTful WS API	Medium
Product	Manifest	bundle-symbolicname	jakarta.ws.rs-api	Medium
Product	Manifest	extension-name	jakarta.ws.rs	Medium
Product	pom	artifactid	jakarta.ws.rs-api	Highest
Product	pom	groupid	jakarta.ws.rs	Highest
Product	pom	name	Jakarta RESTful WS API	High
Product	pom	parent-artifactid	all	Medium
Version	file	version	4.0.0	High
Version	Manifest	Bundle-Version	4.0.0	High
Version	Manifest	Implementation-Version	4.0.0	High
Version	pom	version	4.0.0	Highest

Identifiers

pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0 (Confidence:High)

jakarta.xml.bind-api-4.0.2.jar

Description:

Jakarta XML Binding API 4.0 Design Specification

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar
MD5: 0c8f9991081def819435c3ff36e4d93f
SHA1: 6cd5a999b834b63238005b7144136379dc36cad2
SHA256:0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.xml.bind-api	High
Vendor	jar	package name	bind	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Vendor	Manifest	extension-name	jakarta.xml.bind	Medium
Vendor	Manifest	implementation-build-id	ca43d8b	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.xml.bind-api	Highest
Vendor	pom	artifactid	jakarta.xml.bind-api	Low
Vendor	pom	groupid	jakarta.xml.bind	Highest
Vendor	pom	name	Jakarta XML Binding API	High
Vendor	pom	parent-artifactid	jakarta.xml.bind-api-parent	Low
Product	file	name	jakarta.xml.bind-api	High
Product	jar	package name	bind	Highest
Product	jar	package name	jakarta	Highest
Product	jar	package name	xml	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta XML Binding API	Medium
Product	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Product	Manifest	extension-name	jakarta.xml.bind	Medium
Product	Manifest	implementation-build-id	ca43d8b	Low
Product	pom	artifactid	jakarta.xml.bind-api	Highest
Product	pom	groupid	jakarta.xml.bind	Highest
Product	pom	name	Jakarta XML Binding API	High
Product	pom	parent-artifactid	jakarta.xml.bind-api-parent	Medium
Version	file	version	4.0.2	High
Version	Manifest	Bundle-Version	4.0.2	High
Version	Manifest	Implementation-Version	4.0.2	High
Version	pom	version	4.0.2	Highest

Identifiers

pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2 (Confidence:High)

java-parent-test-3.0.34.jar

Description:

		Test for Java Parent

License:

Apache License (ASL), Version 2.0 (Apache-2.0): https://raw.githubusercontent.com/spdx/license-list-data/main/text/Apache-2.0.txt

File Path: /home/runner/.m2/repository/me/chrissw-r1/java-parent-test/3.0.34/java-parent-test-3.0.34.jar
MD5: 860c02712e9385afcf9e9b32c3268a89
SHA1: f72cd13dd955d798b6f5705491d735a3c92263e4
SHA256:32128d94aae14d29a473a3dae4b27cc8d2c3d0a1c0ec7684cad3ec479e97b46f
Referenced In Projects/Scopes:

Executable Java Test:compile
Web App Test:compile

pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	java-parent-test	High
Vendor	jar	package name	me	Highest
Vendor	jar	package name	test	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	artifactid	java-parent-test	Highest
Vendor	pom	artifactid	java-parent-test	Low
Vendor	pom	developer email	contact@ChrissW-R1.me	Low
Vendor	pom	developer id	ChrissW-R1	Medium
Vendor	pom	developer name	ChrissW-R1	Medium
Vendor	pom	groupid	me.chrissw-r1	Highest
Vendor	pom	name	Java Test	High
Vendor	pom	parent-artifactid	java-parent	Low
Vendor	pom	url	https://docs.urelion.world/me.chrissw-r1/general-parent/3.0.34	Highest
Product	file	name	java-parent-test	High
Product	jar	package name	me	Highest
Product	jar	package name	test	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	pom	artifactid	java-parent-test	Highest
Product	pom	developer email	contact@ChrissW-R1.me	Low
Product	pom	developer id	ChrissW-R1	Low
Product	pom	developer name	ChrissW-R1	Low
Product	pom	groupid	me.chrissw-r1	Highest
Product	pom	name	Java Test	High
Product	pom	parent-artifactid	java-parent	Medium
Product	pom	url	https://docs.urelion.world/me.chrissw-r1/general-parent/3.0.34	Medium
Version	file	version	3.0.34	High
Version	pom	version	3.0.34	Highest

Identifiers

pkg:maven/me.chrissw-r1/java-parent-test@3.0.34 (Confidence:High)

javassist-3.30.2-GA.jar

Description:

    Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.

License:

MPL 1.1: https://www.mozilla.org/en-US/MPL/1.1/
LGPL 2.1: https://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/javassist/javassist/3.30.2-GA/javassist-3.30.2-GA.jar
MD5: f5b827b8ddec0629cc7a6d7dafc45999
SHA1: 284580b5e42dfa1b8267058566435d9e93fae7f7
SHA256:eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0
pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javassist	High
Vendor	jar	package name	bytecode	Highest
Vendor	jar	package name	javassist	Highest
Vendor	Manifest	automatic-module-name	org.javassist	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	artifactid	javassist	Highest
Vendor	pom	artifactid	javassist	Low
Vendor	pom	developer email	adinn@redhat.com	Low
Vendor	pom	developer email	chiba@javassist.org	Low
Vendor	pom	developer email	kabir.khan@jboss.com	Low
Vendor	pom	developer email	smarlow@redhat.com	Low
Vendor	pom	developer id	adinn	Medium
Vendor	pom	developer id	chiba	Medium
Vendor	pom	developer id	kabir.khan@jboss.com	Medium
Vendor	pom	developer id	scottmarlow	Medium
Vendor	pom	developer name	Andrew Dinn	Medium
Vendor	pom	developer name	Kabir Khan	Medium
Vendor	pom	developer name	Scott Marlow	Medium
Vendor	pom	developer name	Shigeru Chiba	Medium
Vendor	pom	developer org	JBoss	Medium
Vendor	pom	developer org	The Javassist Project	Medium
Vendor	pom	developer org URL	https://www.javassist.org/	Medium
Vendor	pom	developer org URL	https://www.jboss.org/	Medium
Vendor	pom	groupid	org.javassist	Highest
Vendor	pom	name	Javassist	High
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	pom	url	https://www.javassist.org/	Highest
Product	file	name	javassist	High
Product	jar	package name	bytecode	Highest
Product	jar	package name	javassist	Highest
Product	Manifest	automatic-module-name	org.javassist	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Bundle-Name	Javassist	Medium
Product	Manifest	bundle-symbolicname	javassist	Medium
Product	Manifest	specification-title	Javassist	Medium
Product	pom	artifactid	javassist	Highest
Product	pom	developer email	adinn@redhat.com	Low
Product	pom	developer email	chiba@javassist.org	Low
Product	pom	developer email	kabir.khan@jboss.com	Low
Product	pom	developer email	smarlow@redhat.com	Low
Product	pom	developer id	adinn	Low
Product	pom	developer id	chiba	Low
Product	pom	developer id	kabir.khan@jboss.com	Low
Product	pom	developer id	scottmarlow	Low
Product	pom	developer name	Andrew Dinn	Low
Product	pom	developer name	Kabir Khan	Low
Product	pom	developer name	Scott Marlow	Low
Product	pom	developer name	Shigeru Chiba	Low
Product	pom	developer org	JBoss	Low
Product	pom	developer org	The Javassist Project	Low
Product	pom	developer org URL	https://www.javassist.org/	Low
Product	pom	developer org URL	https://www.jboss.org/	Low
Product	pom	groupid	org.javassist	Highest
Product	pom	name	Javassist	High
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	pom	url	https://www.javassist.org/	Medium
Version	pom	version	3.30.2-GA	Highest

Identifiers

pkg:maven/org.javassist/javassist@3.30.2-GA (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.inject-1	High
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	javax	Low
Vendor	pom	artifactid	javax.inject	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	pom	groupid	javax.inject	Highest
Vendor	pom	name	javax.inject	High
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Product	file	name	javax.inject-1	High
Product	jar	package name	inject	Highest
Product	jar	package name	inject	Low
Product	jar	package name	javax	Highest
Product	pom	artifactid	javax.inject	Highest
Product	pom	groupid	javax.inject	Highest
Product	pom	name	javax.inject	High
Product	pom	url	http://code.google.com/p/atinject/	Medium
Version	file	version	1	Medium
Version	pom	version	1	Highest

Identifiers

pkg:maven/javax.inject/javax.inject@1 (Confidence:High)

jcip-annotations-1.0-1.jar

Description:

    A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34
pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcip-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	jcip	Highest
Vendor	jar	package name	jcip	Low
Vendor	jar	package name	net	Low
Vendor	pom	artifactid	jcip-annotations	Highest
Vendor	pom	artifactid	jcip-annotations	Low
Vendor	pom	developer id	stephenc	Medium
Vendor	pom	developer name	Stephen Connolly	Medium
Vendor	pom	groupid	com.github.stephenc.jcip	Highest
Vendor	pom	name	JCIP Annotations under Apache License	High
Vendor	pom	url	http://stephenc.github.com/jcip-annotations	Highest
Product	file	name	jcip-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	jcip	Highest
Product	jar	package name	jcip	Low
Product	pom	artifactid	jcip-annotations	Highest
Product	pom	developer id	stephenc	Low
Product	pom	developer name	Stephen Connolly	Low
Product	pom	groupid	com.github.stephenc.jcip	Highest
Product	pom	name	JCIP Annotations under Apache License	High
Product	pom	url	http://stephenc.github.com/jcip-annotations	Medium
Version	pom	version	1.0-1	Highest

Identifiers

pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1 (Confidence:High)

jersey-server-4.0.0.jar

Description:

Jersey core server implementation

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
The GNU General Public License (GPL), Version 2, With Classpath Exception: https://www.gnu.org/software/classpath/license.html
Apache License, 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
Modified BSD: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-server/4.0.0/jersey-server-4.0.0.jar
MD5: d56524a3cdd76f5cf73fbb55a6f673ed
SHA1: 23f2b6c14a62d033ece905faa569ef319b9b3ccb
SHA256:64f4202866317bec580c2b65e42e7f2371c10bf7085af613c30c8b41023401b8
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jersey-server	High
Vendor	jar	package name	glassfish	Highest
Vendor	jar	package name	jersey	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	server	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org/org/foundation/	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.jersey.core.jersey-server	Medium
Vendor	pom	artifactid	jersey-server	Highest
Vendor	pom	artifactid	jersey-server	Low
Vendor	pom	groupid	org.glassfish.jersey.core	Highest
Vendor	pom	name	jersey-core-server	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.glassfish.jersey	Medium
Product	file	name	jersey-server	High
Product	jar	package name	glassfish	Highest
Product	jar	package name	jersey	Highest
Product	jar	package name	org	Highest
Product	jar	package name	server	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org/org/foundation/	Low
Product	Manifest	Bundle-Name	jersey-core-server	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.jersey.core.jersey-server	Medium
Product	pom	artifactid	jersey-server	Highest
Product	pom	groupid	org.glassfish.jersey.core	Highest
Product	pom	name	jersey-core-server	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.glassfish.jersey	Medium
Version	file	version	4.0.0	High
Version	Manifest	Bundle-Version	4.0.0	High
Version	pom	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0 (Confidence:High)
cpe:2.3:a:jersey_project:jersey:4.0.0:*:*:*:*:*:*:* (Confidence:Highest)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jspecify	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	jspecify	Highest
Vendor	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Vendor	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	jspecify	Highest
Vendor	pom	artifactid	jspecify	Low
Vendor	pom	developer email	kevinb9n@gmail.com	Low
Vendor	pom	developer id	kevinb9n	Medium
Vendor	pom	developer name	Kevin Bourrillion	Medium
Vendor	pom	groupid	org.jspecify	Highest
Vendor	pom	name	JSpecify annotations	High
Vendor	pom	url	http://jspecify.org/	Highest
Product	file	name	jspecify	High
Product	jar	package name	annotations	Highest
Product	jar	package name	jspecify	Highest
Product	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Product	Manifest	Bundle-Name	JSpecify annotations	Medium
Product	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	jspecify	Highest
Product	pom	developer email	kevinb9n@gmail.com	Low
Product	pom	developer id	kevinb9n	Low
Product	pom	developer name	Kevin Bourrillion	Low
Product	pom	groupid	org.jspecify	Highest
Product	pom	name	JSpecify annotations	High
Product	pom	url	http://jspecify.org/	Medium
Version	file	version	1.0.0	High
Version	Manifest	Bundle-Version	1.0.0	High
Version	Manifest	Implementation-Version	1.0.0	High
Version	pom	version	1.0.0	Highest

Identifiers

pkg:maven/org.jspecify/jspecify@1.0.0 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

lombok-1.18.42.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.42/lombok-1.18.42.jar
MD5: f29149836e0187fb9fd95d82dc718d36
SHA1: 8365263844ebb62398e0dc33057ba10ba472d3b8
SHA256:3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.42	High
Version	Manifest	lombok-version	1.18.42	Medium
Version	pom	version	1.18.42	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.42 (Confidence:High)

lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar

File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.42/lombok-1.18.42.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

maven-artifact-3.9.12.jar

File Path: /home/runner/.m2/repository/org/apache/maven/maven-artifact/3.9.12/maven-artifact-3.9.12.jar
MD5: d834fe188642d22ce7318e6af0a605dd
SHA1: 39acdd4ad6b74b1c001ae7c0858482a11d0ead59
SHA256:4361cecd7e863c0992a6c901202afbb6db2a06b4f9a5e4b22481d4d39bcf137c
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-artifact-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-artifact	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-artifact	Highest
Vendor	pom	artifactid	maven-artifact	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-artifact	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Artifact	High
Product	Manifest	specification-title	Maven Artifact	Medium
Product	pom	artifactid	maven-artifact	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-artifact@3.9.12 (Confidence:High)

maven-builder-support-3.9.12.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: /home/runner/.m2/repository/org/apache/maven/maven-builder-support/3.9.12/maven-builder-support-3.9.12.jar
MD5: 6afaba813236d781c7b3865f9fab3a44
SHA1: fe2fe54522eb2f77bd9b30cefc959d728d3f8105
SHA256:22a0345c7a90dbe7758209d52135967daa8aae6543c7016cb635891b0eceeed4
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-builder-support-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-builder-support	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-builder-support	Highest
Vendor	pom	artifactid	maven-builder-support	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Builder Support	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-builder-support	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Builder Support	High
Product	Manifest	specification-title	Maven Builder Support	Medium
Product	pom	artifactid	maven-builder-support	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Builder Support	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-builder-support@3.9.12 (Confidence:High)

maven-core-3.9.12.jar

Description:

Maven Core classes.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-core/3.9.12/maven-core-3.9.12.jar
MD5: 5988619119b33562228343c4ded75b9e
SHA1: a349a9dadebca9f2a2d1f99876f651a02961a366
SHA256:1ee217c759a895771a07a2018c026bba01373305d9bad0099f06dbbdbcf2c332
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-core-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-core	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-core	Highest
Vendor	pom	artifactid	maven-core	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Core	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-core	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Core	High
Product	Manifest	specification-title	Maven Core	Medium
Product	pom	artifactid	maven-core	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Core	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-core@3.9.12 (Confidence:High)
cpe:2.3:a:apache:maven:3.9.12:*:*:*:*:*:*:* (Confidence:Highest)

maven-model-3.9.12.jar

Description:

Model for Maven POM (Project Object Model)

File Path: /home/runner/.m2/repository/org/apache/maven/maven-model/3.9.12/maven-model-3.9.12.jar
MD5: 2eca810310f90f79e048265eb29165b9
SHA1: 6f91cb0e47b7fc6db492ed307b0c91b38bfce924
SHA256:d443a20cb801a7f116e10a80dd1ebf7aaae7182880d1097e0681d498c45e168b
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-model-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model	Highest
Vendor	pom	artifactid	maven-model	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Model	High
Product	Manifest	specification-title	Maven Model	Medium
Product	pom	artifactid	maven-model	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model@3.9.12 (Confidence:High)

maven-model-builder-3.9.12.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: /home/runner/.m2/repository/org/apache/maven/maven-model-builder/3.9.12/maven-model-builder-3.9.12.jar
MD5: 8d8d8278aeb6a462ce3421a5d1b7d7d5
SHA1: c1a74479d447e70d98ed5f03f6b32d54818ca046
SHA256:1cb12b9e51b9855599dd1d02e77f08ff88772e9d4b4a7c4ee1e5d7a4f2b9b9ea
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-model-builder-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model-builder	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	inheritance	Highest
Vendor	jar	package name	interpolation	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	jar	package name	profile	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model-builder	Highest
Vendor	pom	artifactid	maven-model-builder	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model Builder	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model-builder	High
Product	jar	package name	apache	Highest
Product	jar	package name	inheritance	Highest
Product	jar	package name	interpolation	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	jar	package name	profile	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Model Builder	High
Product	Manifest	specification-title	Maven Model Builder	Medium
Product	pom	artifactid	maven-model-builder	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model Builder	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model-builder@3.9.12 (Confidence:High)

maven-plugin-annotations-3.15.2.jar

Description:

Java annotations to use in Mojos

File Path: /home/runner/.m2/repository/org/apache/maven/plugin-tools/maven-plugin-annotations/3.15.2/maven-plugin-annotations-3.15.2.jar
MD5: 6b86f30960ce2f9eac20c6657db588a2
SHA1: dfc79f3b5b0c3afd01f55b8b01310f457568d2a4
SHA256:979d3cf8f4ac804cc27d2f8a6db07f2149d58ccd59bb3d589cc46bb9a44c0b4b
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-plugin-annotations-3.15.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-annotations	Highest
Vendor	pom	artifactid	maven-plugin-annotations	Low
Vendor	pom	groupid	org.apache.maven.plugin-tools	Highest
Vendor	pom	name	Maven Plugin Tools Java Annotations	High
Vendor	pom	parent-artifactid	maven-plugin-tools	Low
Product	file	name	maven-plugin-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Plugin Tools Java Annotations	High
Product	Manifest	specification-title	Maven Plugin Tools Java Annotations	Medium
Product	pom	artifactid	maven-plugin-annotations	Highest
Product	pom	groupid	org.apache.maven.plugin-tools	Highest
Product	pom	name	Maven Plugin Tools Java Annotations	High
Product	pom	parent-artifactid	maven-plugin-tools	Medium
Version	file	version	3.15.2	High
Version	Manifest	Implementation-Version	3.15.2	High
Version	pom	version	3.15.2	Highest

Identifiers

pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.2 (Confidence:High)

maven-plugin-api-3.9.12.jar

Description:

The API for plugins - Mojos - development.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-plugin-api/3.9.12/maven-plugin-api-3.9.12.jar
MD5: 8fcc7f1f1457476e6c0d6c7746bd0960
SHA1: 2c2d5180b3dae0e6f91575fc2507429727e01cc9
SHA256:104a1e073e5484eae2eac594c6e49b59bdd1103fe480ceb9a3468cd427449570
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-plugin-api-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugin	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-api	Highest
Vendor	pom	artifactid	maven-plugin-api	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Plugin API	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-plugin-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugin	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Plugin API	High
Product	Manifest	specification-title	Maven Plugin API	Medium
Product	pom	artifactid	maven-plugin-api	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Plugin API	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-plugin-api@3.9.12 (Confidence:High)

maven-repository-metadata-3.9.12.jar

Description:

Per-directory local and remote repository metadata.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-repository-metadata/3.9.12/maven-repository-metadata-3.9.12.jar
MD5: 6099a10e5063820edf75037e3e777863
SHA1: 3ecfc216f9a56f15c6bd6b3e22567b0b6cb2183e
SHA256:b3688646dde74429e2e04ba4d7e1482f720bd68ab53824990089d0d8c821f1da
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-repository-metadata-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-repository-metadata	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-repository-metadata	Highest
Vendor	pom	artifactid	maven-repository-metadata	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Repository Metadata Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-repository-metadata	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	repository	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Repository Metadata Model	High
Product	Manifest	specification-title	Maven Repository Metadata Model	Medium
Product	pom	artifactid	maven-repository-metadata	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Repository Metadata Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-repository-metadata@3.9.12 (Confidence:High)

maven-resolver-api-1.9.25.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /home/runner/.m2/repository/org/apache/maven/resolver/maven-resolver-api/1.9.25/maven-resolver-api-1.9.25.jar
MD5: 11a370687a765c2c2288bcff6f4f73cb
SHA1: 8b670256b812a45b1ca9ae1bbf7f1c0d00a9d4e4
SHA256:f414e7f40aff338cef65f836aabf6cd9a9e2a0f1bfa88589315beb0ac2f498c5
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-api	High
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-api/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.api	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-api	Highest
Vendor	pom	artifactid	maven-resolver-api	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver API	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-api	High
Product	jar	package name	artifact	Highest
Product	jar	package name	repository	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-api/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver API	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.api	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver API	High
Product	Manifest	specification-title	Maven Artifact Resolver API	Medium
Product	pom	artifactid	maven-resolver-api	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver API	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.25	High
Version	Manifest	Bundle-Version	1.9.25	High
Version	Manifest	Implementation-Version	1.9.25	High
Version	pom	version	1.9.25	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.25 (Confidence:High)

maven-resolver-impl-1.9.25.jar

Description:

An implementation of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /home/runner/.m2/repository/org/apache/maven/resolver/maven-resolver-impl/1.9.25/maven-resolver-impl-1.9.25.jar
MD5: 4792489c7592c08bebd235a7f2a3d4a1
SHA1: cc1bde9b56a2e95a181207958dcf40715dc71ab3
SHA256:8d28766de3a000efa3662d5f67e428ca225498a89001195f7b3c55ea7a8bc56d
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-impl	High
Vendor	jar	package name	impl	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.impl	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-impl/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.impl	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-impl	Highest
Vendor	pom	artifactid	maven-resolver-impl	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Implementation	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-impl	High
Product	jar	package name	impl	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.impl	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-impl/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Implementation	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.impl	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Implementation	High
Product	Manifest	specification-title	Maven Artifact Resolver Implementation	Medium
Product	pom	artifactid	maven-resolver-impl	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Implementation	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.25	High
Version	Manifest	Bundle-Version	1.9.25	High
Version	Manifest	Implementation-Version	1.9.25	High
Version	pom	version	1.9.25	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.25 (Confidence:High)

maven-resolver-named-locks-1.9.25.jar

Description:

A synchronization utility implementation using Named locks.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /home/runner/.m2/repository/org/apache/maven/resolver/maven-resolver-named-locks/1.9.25/maven-resolver-named-locks-1.9.25.jar
MD5: d14b4f832e13dc00cfa3e5e36a60f666
SHA1: fb1c8c95f17c816c3ceb8692aa84cbb068df5d94
SHA256:e9fc779106713c33b4b5a7ed85e4273cfd7b9a96df7cf678eb0ac588f72669e3
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-named-locks	High
Vendor	jar	package name	named	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.named.locks	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-named-locks/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.named.locks	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-named-locks	Highest
Vendor	pom	artifactid	maven-resolver-named-locks	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Named Locks	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-named-locks	High
Product	jar	package name	named	Highest
Product	jar	package name	support	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.named.locks	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-named-locks/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Named Locks	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.named.locks	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Named Locks	High
Product	Manifest	specification-title	Maven Artifact Resolver Named Locks	Medium
Product	pom	artifactid	maven-resolver-named-locks	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Named Locks	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.25	High
Version	Manifest	Bundle-Version	1.9.25	High
Version	Manifest	Implementation-Version	1.9.25	High
Version	pom	version	1.9.25	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.25 (Confidence:High)

maven-resolver-provider-3.9.12.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-resolver-provider/3.9.12/maven-resolver-provider-3.9.12.jar
MD5: f7b422b347c8009da8335e848b00b800
SHA1: 44963f45b78f89a8479705493c48e01fc54ff9d6
SHA256:79be07f591709b41d35e3ede06244a3447330fad469499fd5decb7606be01005
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-resolver-provider-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-provider	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-provider	Highest
Vendor	pom	artifactid	maven-resolver-provider	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact Resolver Provider	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-resolver-provider	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	repository	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Artifact Resolver Provider	High
Product	Manifest	specification-title	Maven Artifact Resolver Provider	Medium
Product	pom	artifactid	maven-resolver-provider	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact Resolver Provider	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-resolver-provider@3.9.12 (Confidence:High)

maven-resolver-spi-1.9.25.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /home/runner/.m2/repository/org/apache/maven/resolver/maven-resolver-spi/1.9.25/maven-resolver-spi-1.9.25.jar
MD5: 49f5e30b9862b489b9e8066c9744869a
SHA1: f81237d0140f9222cf4437c44756a53368a2d152
SHA256:781fafec23ea24f2624f3e3b48c674912f4bb1a1009a051df194307ed380280e
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-spi	High
Vendor	jar	package name	spi	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.spi	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-spi/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.spi	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-spi	Highest
Vendor	pom	artifactid	maven-resolver-spi	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver SPI	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-spi	High
Product	jar	package name	spi	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.spi	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-spi/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver SPI	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.spi	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver SPI	High
Product	Manifest	specification-title	Maven Artifact Resolver SPI	Medium
Product	pom	artifactid	maven-resolver-spi	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver SPI	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.25	High
Version	Manifest	Bundle-Version	1.9.25	High
Version	Manifest	Implementation-Version	1.9.25	High
Version	pom	version	1.9.25	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.25 (Confidence:High)

maven-resolver-util-1.9.25.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /home/runner/.m2/repository/org/apache/maven/resolver/maven-resolver-util/1.9.25/maven-resolver-util-1.9.25.jar
MD5: 8c4a25d08ba8ba18a9f93a821d518273
SHA1: f755f6816d8fd63b09b8f2c9e1eaaa1f60c179e8
SHA256:e31330fdb29045f3087b4985cb488a5b5ebbcbd7d879fda14e6ed4dd61b1fdf7
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-util	High
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	repository	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.util	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-util/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.util	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-util	Highest
Vendor	pom	artifactid	maven-resolver-util	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Utilities	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-util	High
Product	jar	package name	artifact	Highest
Product	jar	package name	repository	Highest
Product	jar	package name	util	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.util	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Chair";timezone="Europe/Paris",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Member";timezone="+1",krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mbuenger;email="mbuenger@apache.org";name="Matthias Bünger";roles=Committer;timezone="Europe/Berlin",mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",sparsick;email="sparsick@apache.org";name="Sandra Parsick";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles=Emeritus;timezone=-5,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-util/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Utilities	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.util	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Utilities	High
Product	Manifest	specification-title	Maven Artifact Resolver Utilities	Medium
Product	pom	artifactid	maven-resolver-util	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Utilities	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.25	High
Version	Manifest	Bundle-Version	1.9.25	High
Version	Manifest	Implementation-Version	1.9.25	High
Version	pom	version	1.9.25	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.25 (Confidence:High)

maven-settings-3.9.12.jar

Description:

Maven Settings model.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-settings/3.9.12/maven-settings-3.9.12.jar
MD5: c36d21412549711847bf183674c8d2ee
SHA1: ca072f2b90a59d36d8218dd4e1460722db6e2322
SHA256:eabb1adfa3ce3c9217318b6d289de20259ee42d7290660ed4358eecd56b5664f
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-settings-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-settings	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	settings	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-settings	Highest
Vendor	pom	artifactid	maven-settings	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Settings	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-settings	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	settings	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Settings	High
Product	Manifest	specification-title	Maven Settings	Medium
Product	pom	artifactid	maven-settings	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Settings	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-settings@3.9.12 (Confidence:High)

maven-settings-builder-3.9.12.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: /home/runner/.m2/repository/org/apache/maven/maven-settings-builder/3.9.12/maven-settings-builder-3.9.12.jar
MD5: d9dad42925db531f32bcc320783e7322
SHA1: 1ddd0b8da05d120768142176476a06f489cea11c
SHA256:92d137e366a4b4549eda848b52d968ef076ce24b9fb2db1b7a3083b9cc896eb1
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-settings-builder-3.9.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-settings-builder	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	settings	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-settings-builder	Highest
Vendor	pom	artifactid	maven-settings-builder	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Settings Builder	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-settings-builder	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	settings	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Settings Builder	High
Product	Manifest	specification-title	Maven Settings Builder	Medium
Product	pom	artifactid	maven-settings-builder	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Settings Builder	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.12	High
Version	Manifest	Implementation-Version	3.9.12	High
Version	pom	version	3.9.12	Highest

Identifiers

pkg:maven/org.apache.maven/maven-settings-builder@3.9.12 (Confidence:High)

maven-shared-utils-3.4.2.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: /home/runner/.m2/repository/org/apache/maven/shared/maven-shared-utils/3.4.2/maven-shared-utils-3.4.2.jar
MD5: 53a038f77a81cb5816ad2b1c7daa8711
SHA1: bfa28296272a5915b08de9f11f34a94b0a818fd0
SHA256:b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487
Referenced In Project/Scope: Maven Plugin Parent:provided
maven-shared-utils-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-shared-utils	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	jar	package name	utils	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-shared-utils	Highest
Vendor	pom	artifactid	maven-shared-utils	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Shared Utils	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-shared-utils	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	jar	package name	utils	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Apache Maven Shared Utils	High
Product	Manifest	specification-title	Apache Maven Shared Utils	Medium
Product	pom	artifactid	maven-shared-utils	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Shared Utils	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.4.2	High
Version	Manifest	Implementation-Version	3.4.2	High
Version	pom	parent-version	3.4.2	Low
Version	pom	version	3.4.2	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2 (Confidence:High)
cpe:2.3:a:apache:maven_shared_utils:3.4.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:3.4.2:*:*:*:*:*:*:* (Confidence:Highest)

org.eclipse.sisu.inject-0.9.0.M4.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"

File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M4/org.eclipse.sisu.inject-0.9.0.M4.jar
MD5: ee95c1a11ba4ca38368d71ef05676cfc
SHA1: a062d8e12dc62e698c9f943a3fce94e366b4e220
SHA256:1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.inject	High
Vendor	jar	package name	dynamic	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	sisu	Highest
Vendor	jar	package name	wiring	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.inject	Low
Vendor	pom	artifactid	org.eclipse.sisu.inject	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	name	:	High
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.inject	High
Product	jar	package name	dynamic	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	inject	Highest
Product	jar	package name	sisu	Highest
Product	jar	package name	sonatype	Highest
Product	jar	package name	wiring	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Inject (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.inject	Highest
Product	pom	artifactid	org.eclipse.sisu.inject	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	name	:	High
Product	pom	parent-artifactid	sisu-inject	Medium
Version	Manifest	Bundle-Version	0.9.0.M4	High
Version	pom	version	0.9.0.M4	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4 (Confidence:High)

org.eclipse.sisu.plexus-0.9.0.M4.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"

File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M4/org.eclipse.sisu.plexus-0.9.0.M4.jar
MD5: 51eea54bbc85323fc68f6a79f9b8f179
SHA1: 478f7935e88cd9da7ef01f509e4853e80ede9034
SHA256:b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.plexus	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sisu	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.plexus	Low
Vendor	pom	artifactid	org.eclipse.sisu.plexus	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	name	:	High
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.plexus	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	sisu	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Plexus (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.plexus	Highest
Product	pom	artifactid	org.eclipse.sisu.plexus	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	name	:	High
Product	pom	parent-artifactid	sisu-inject	Medium
Version	Manifest	Bundle-Version	0.9.0.M4	High
Version	pom	version	0.9.0.M4	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4 (Confidence:High)

osgi-resource-locator-3.0.0.jar

Description:

Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,        implementations of those APIs, and technology compatibility kits for Java runtimes        that enable development, deployment, and management of server-side and cloud-native applications.

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/hk2/osgi-resource-locator/3.0.0/osgi-resource-locator-3.0.0.jar
MD5: de9e96f2606a6f86def8659e9762c163
SHA1: 5483c94aa9a7e16319abaec0a6c74c999678feac
SHA256:a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55
Referenced In Projects/Scopes:

Web App Parent:compile
Web App Test:compile

pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0
pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	osgi-resource-locator	High
Vendor	jar	package name	glassfish	Highest
Vendor	jar	package name	hk2	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.hk2.osgi-resource-locator	Medium
Vendor	pom	artifactid	osgi-resource-locator	Highest
Vendor	pom	artifactid	osgi-resource-locator	Low
Vendor	pom	developer id	ss141213	Medium
Vendor	pom	developer name	Sahoo	Medium
Vendor	pom	developer org	Oracle Corporation	Medium
Vendor	pom	groupid	org.glassfish.hk2	Highest
Vendor	pom	name	HK2 OSGi resource locator	High
Vendor	pom	parent-artifactid	hk2-extra-parent	Low
Product	file	name	osgi-resource-locator	High
Product	jar	package name	glassfish	Highest
Product	jar	package name	hk2	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	HK2 OSGi resource locator	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.hk2.osgi-resource-locator	Medium
Product	pom	artifactid	osgi-resource-locator	Highest
Product	pom	developer id	ss141213	Low
Product	pom	developer name	Sahoo	Low
Product	pom	developer org	Oracle Corporation	Low
Product	pom	groupid	org.glassfish.hk2	Highest
Product	pom	name	HK2 OSGi resource locator	High
Product	pom	parent-artifactid	hk2-extra-parent	Medium
Version	file	version	3.0.0	High
Version	Manifest	Bundle-Version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0 (Confidence:High)

plexus-cipher-2.0.jar

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: Maven Plugin Parent:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-cipher	High
Vendor	jar	package name	cipher	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	plexus-cipher	Highest
Vendor	pom	artifactid	plexus-cipher	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Cipher: encryption/decryption Component	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-cipher	High
Product	jar	package name	cipher	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	plexus-cipher	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Cipher: encryption/decryption Component	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	2.0	High
Version	pom	parent-version	2.0	Low
Version	pom	version	2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-cipher@2.0 (Confidence:High)

plexus-classworlds-2.9.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-classworlds/2.9.0/plexus-classworlds-2.9.0.jar
MD5: 64e4ee5a1298f866d00f705e02058200
SHA1: ace0820f34de49f69511f5263bcebb09fac9731a
SHA256:1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-classworlds	High
Vendor	jar	package name	classworlds	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	23	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-classworlds	Highest
Vendor	pom	artifactid	plexus-classworlds	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Classworlds	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Highest
Product	file	name	plexus-classworlds	High
Product	jar	package name	classworlds	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	23	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Classworlds	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Product	Manifest	Implementation-Title	Plexus Classworlds	High
Product	Manifest	specification-title	Plexus Classworlds	Medium
Product	pom	artifactid	plexus-classworlds	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Classworlds	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Medium
Version	file	version	2.9.0	High
Version	Manifest	Bundle-Version	2.9.0	High
Version	Manifest	Implementation-Version	2.9.0	High
Version	pom	parent-version	2.9.0	Low
Version	pom	version	2.9.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0 (Confidence:High)

plexus-component-annotations-2.2.0.jar

Description:

Plexus Component Java Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-component-annotations/2.2.0/plexus-component-annotations-2.2.0.jar
MD5: a2397189a5ce25e7d2d44effa9f5176c
SHA1: a506f84636ea7ae370d04167dd155c103e616f68
SHA256:50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf
Referenced In Project/Scope: Maven Plugin Parent:provided
plexus-component-annotations-2.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-component-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	component	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	pom	artifactid	plexus-component-annotations	Highest
Vendor	pom	artifactid	plexus-component-annotations	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus :: Component Annotations (deprecated)	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	file	name	plexus-component-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	component	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	pom	artifactid	plexus-component-annotations	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus :: Component Annotations (deprecated)	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	file	version	2.2.0	High
Version	pom	version	2.2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0 (Confidence:High)

plexus-interpolation-1.29.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-interpolation/1.29/plexus-interpolation-1.29.jar
MD5: b1489e6968b874cecfe24cadb62b77db
SHA1: 5dd1b1fbaca263ad5baa169fbd8e804c789c9db5
SHA256:088d444dbcedfb384630d8686697ece3c401d6f33c8f8b3aa7259ea1c6996878
Referenced In Project/Scope: Maven Plugin Parent:provided
pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-interpolation	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	interpolation	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.interpolation	Medium
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-interpolation	Highest
Vendor	pom	artifactid	plexus-interpolation	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Interpolation API	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-interpolation	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	interpolation	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Interpolation API	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.interpolation	Medium
Product	Manifest	Implementation-Title	Plexus Interpolation API	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Plexus Interpolation API	Medium
Product	pom	artifactid	plexus-interpolation	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Interpolation API	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	1.29	High
Version	Manifest	Implementation-Version	1.29	High
Version	pom	parent-version	1.29	Low
Version	pom	version	1.29	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-interpolation@1.29 (Confidence:High)

plexus-sec-dispatcher-2.0.jar

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: Maven Plugin Parent:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-sec-dispatcher	High
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sec	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	plexus-sec-dispatcher	Highest
Vendor	pom	artifactid	plexus-sec-dispatcher	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Security Dispatcher Component	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-sec-dispatcher	High
Product	jar	package name	plexus	Highest
Product	jar	package name	sec	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	plexus-sec-dispatcher	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Security Dispatcher Component	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	2.0	High
Version	pom	parent-version	2.0	Low
Version	pom	version	2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0 (Confidence:High)
cpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:* (Confidence:Highest)

plexus-utils-3.6.0.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.

File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-utils/3.6.0/plexus-utils-3.6.0.jar
MD5: 1d5893fecbc7ec13f205a1c5893e90ce
SHA1: e8bc129728f22671a36fff3b604edcd39073a7b1
SHA256:27ef130e32c236090e408fb5498d94cb9ea26d14070fb1c8985d607b62d098d1
Referenced In Project/Scope: Maven Plugin Parent:provided
plexus-utils-3.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-utils	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	23	Low
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-utils	Highest
Vendor	pom	artifactid	plexus-utils	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Highest
Product	file	name	plexus-utils	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	org	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	23	Low
Product	Manifest	Implementation-Title	Plexus Common Utilities	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Plexus Common Utilities	Medium
Product	pom	artifactid	plexus-utils	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Common Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Medium
Version	file	version	3.6.0	High
Version	Manifest	Implementation-Version	3.6.0	High
Version	pom	parent-version	3.6.0	Low
Version	pom	version	3.6.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus:plexus-utils:3.6.0:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:3.6.0:*:*:*:*:*:*:* (Confidence:Highest)

proguard-annotations-7.8.2.jar

Description:

Java annotations to configure ProGuard, the free shrinker, optimizer, obfuscator, and preverifier for Java bytecode

License:

GNU General Public License, Version 2: https://www.gnu.org/licenses/gpl-2.0.txt

File Path: /home/runner/.m2/repository/com/guardsquare/proguard-annotations/7.8.2/proguard-annotations-7.8.2.jar
MD5: d14549b6031f5a0560f15034bfcd5927
SHA1: 938db20b9393793410777f51d7745b74fc7d39d7
SHA256:b5764e56e338468ebd94b7f8e6cbc65a94b3f997cc42d9429143aad8a5498220
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	proguard-annotations	High
Vendor	jar	package name	annotation	Low
Vendor	jar	package name	proguard	Highest
Vendor	jar	package name	proguard	Low
Vendor	pom	artifactid	proguard-annotations	Highest
Vendor	pom	artifactid	proguard-annotations	Low
Vendor	pom	developer id	lafortune	Medium
Vendor	pom	developer name	Eric Lafortune	Medium
Vendor	pom	developer org	Guardsquare	Medium
Vendor	pom	developer org URL	https://www.guardsquare.com/	Medium
Vendor	pom	groupid	com.guardsquare	Highest
Vendor	pom	name	com.guardsquare:proguard-annotations	High
Vendor	pom	url	https://www.guardsquare.com/proguard	Highest
Product	file	name	proguard-annotations	High
Product	jar	package name	annotation	Low
Product	jar	package name	proguard	Highest
Product	pom	artifactid	proguard-annotations	Highest
Product	pom	developer id	lafortune	Low
Product	pom	developer name	Eric Lafortune	Low
Product	pom	developer org	Guardsquare	Low
Product	pom	developer org URL	https://www.guardsquare.com/	Low
Product	pom	groupid	com.guardsquare	Highest
Product	pom	name	com.guardsquare:proguard-annotations	High
Product	pom	url	https://www.guardsquare.com/proguard	Medium
Version	file	version	7.8.2	High
Version	pom	version	7.8.2	Highest

Identifiers

pkg:maven/com.guardsquare/proguard-annotations@7.8.2 (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Projects/Scopes:

Executable Java Test:compile
Web App Parent:compile
Java Test:compile
Executable Java Parent:compile
Web App Test:compile
Java Parent:compile
Maven Plugin Parent:compile

pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34
pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.17	High
Version	Manifest	Bundle-Version	2.0.17	High
Version	Manifest	Implementation-Version	2.0.17	High
Version	pom	version	2.0.17	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Projects/Scopes:

Web App Test:provided
Java Test:provided
Maven Plugin Parent:provided
Executable Java Parent:provided
Executable Java Test:provided
Web App Parent:provided
Java Parent:provided

pkg:maven/me.chrissw-r1/java-parent@3.0.34
pkg:maven/me.chrissw-r1/maven-plugin-parent@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent-test@3.0.34
pkg:maven/me.chrissw-r1/java-exe-parent@3.0.34
pkg:maven/me.chrissw-r1/java-parent-test@3.0.34
pkg:maven/me.chrissw-r1/webapp-parent-test@3.0.34

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.9.8	High
Version	Manifest	Bundle-Version	4.9.8	High
Version	pom	version	4.9.8	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: General Parent

me.chrissw-r1:general-parent:3.0.34

Summary

Dependencies (vulnerable)

annotations-26.0.2-1.jar

Evidence

Identifiers

aopalliance-1.0.jar

Evidence

Identifiers

aopalliance-repackaged-4.0.0-M3.jar

Evidence

Identifiers

asm-9.9.jar

Evidence

Identifiers

eslint.config.js

Evidence

Identifiers

failureaccess-1.0.3.jar

Evidence

Identifiers

guava-33.5.0-jre.jar

Evidence

Identifiers

guice-5.1.0-classes.jar

Evidence

Identifiers

hk2-api-4.0.0-M3.jar

Evidence

Identifiers

hk2-locator-4.0.0-M3.jar

Evidence

Identifiers

hk2-utils-4.0.0-M3.jar

Evidence

Identifiers

jakarta.activation-api-2.1.3.jar

Evidence

Identifiers

jakarta.annotation-api-3.0.0.jar

Evidence

Identifiers

jakarta.inject-api-2.0.1.jar

Evidence

Identifiers

jakarta.servlet-api-6.1.0.jar

Evidence

Identifiers

jakarta.validation-api-3.1.0.jar

Evidence

Identifiers

jakarta.ws.rs-api-4.0.0.jar

Evidence

Identifiers

jakarta.xml.bind-api-4.0.2.jar

Evidence

Identifiers

java-parent-test-3.0.34.jar

Evidence

Identifiers

javassist-3.30.2-GA.jar

Evidence

Identifiers

javax.inject-1.jar

Evidence

Identifiers

jcip-annotations-1.0-1.jar

Evidence

Identifiers

jersey-server-4.0.0.jar

Evidence

Related Dependencies

Identifiers

jspecify-1.0.0.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence