Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 10.0.3Report Generated On : Wed, 7 Aug 2024 23:09:29 GMTDependencies Scanned : 251 (251 unique)Vulnerable Dependencies : 22 Vulnerabilities Found : 37Vulnerabilities Suppressed : 0 ... NVD API Last Checked : 2024-08-07T23:09:13ZNVD API Last Modified : 2024-08-07T22:20:28ZSummary Display:
Showing Vulnerable Dependencies (click to show all) annotations-13.0.jarDescription:
A set of annotations used for code inspection support and code documentation. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains/annotations/13.0/919f0dfe192fb4e063e7dacadee7f8bb9a2672a9/annotations-13.0.jar
MD5: f4fb462172517b46b6cd90003508515a
SHA1: 919f0dfe192fb4e063e7dacadee7f8bb9a2672a9
SHA256: ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478
Referenced In Projects/Scopes: documentation:javadocClasspath mjml-plugin:kotlinCompilerClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath quicktype-plugin:kotlinKlibCommonizerClasspath maven-plugin-plugin:runtimeClasspath okhttp-plugin:compileClasspath quicktype-plugin:runtimeClasspath github-plugin:compileClasspath quicktype-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:compileClasspath github-plugin:runtimeClasspath mjml-plugin:kotlinBuildToolsApiClasspath mjml-plugin:embeddedKotlin maven-plugin:compileClasspath mjml-plugin:compileClasspath maven-plugin:runtimeClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath annotations-13.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.22 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 Evidence Type Source Name Value Confidence Vendor file name annotations High Vendor gradle artifactid annotations Highest Vendor gradle groupid org.jetbrains Highest Vendor jar package name annotations Highest Vendor jar package name annotations Low Vendor jar package name intellij Highest Vendor jar package name intellij Low Vendor jar package name jetbrains Highest Vendor jar package name lang Low Vendor pom artifactid annotations Low Vendor pom developer id JetBrains Medium Vendor pom developer name JetBrains Team Medium Vendor pom developer org JetBrains Medium Vendor pom developer org URL http://www.jetbrains.com Medium Vendor pom groupid org.jetbrains Highest Vendor pom name IntelliJ IDEA Annotations High Vendor pom url http://www.jetbrains.org Highest Product file name annotations High Product gradle artifactid annotations Highest Product jar package name annotations Highest Product jar package name annotations Low Product jar package name intellij Highest Product jar package name jetbrains Highest Product jar package name lang Low Product pom artifactid annotations Highest Product pom developer id JetBrains Low Product pom developer name JetBrains Team Low Product pom developer org JetBrains Low Product pom developer org URL http://www.jetbrains.com Low Product pom groupid org.jetbrains Highest Product pom name IntelliJ IDEA Annotations High Product pom url http://www.jetbrains.org Medium Version file version 13.0 High Version gradle version 13.0 Highest Version pom version 13.0 Highest
aopalliance-1.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/aopalliance/aopalliance/1.0/235ba8b489512805ac13a8f9ea77a1ca5ebe3e8/aopalliance-1.0.jarMD5: 04177054e180d09e3998808efa0401c7SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8SHA256: 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath aopalliance-1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name aopalliance High Vendor gradle artifactid aopalliance Highest Vendor gradle groupid aopalliance Highest Vendor jar package name aopalliance Low Vendor jar package name intercept Low Product file name aopalliance High Product gradle artifactid aopalliance Highest Product jar package name intercept Low Version file name aopalliance Medium Version file version 1.0 High Version gradle version 1.0 Highest
apiguardian-api-1.1.2.jarDescription:
@API Guardian File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apiguardian/apiguardian-api/1.1.2/a231e0d844d2721b0fa1b238006d15c6ded6842a/apiguardian-api-1.1.2.jarMD5: 8c7de3f82037fa4a2e8be2a2f13092afSHA1: a231e0d844d2721b0fa1b238006d15c6ded6842aSHA256: b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38Referenced In Project/Scope: test-common:compileClasspathapiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 Evidence Type Source Name Value Confidence Vendor file name apiguardian-api High Vendor gradle artifactid apiguardian-api Highest Vendor gradle groupid org.apiguardian Highest Vendor jar package name api Low Vendor jar package name apiguardian Highest Vendor jar package name apiguardian Low Vendor Manifest build-date 2021-06-27 Low Vendor Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low Vendor Manifest build-time 14:53:10.089+0200 Low Vendor Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low Vendor Manifest bundle-symbolicname org.apiguardian.api Medium Vendor Manifest Implementation-Vendor apiguardian.org High Vendor Manifest specification-vendor apiguardian.org Low Product file name apiguardian-api High Product gradle artifactid apiguardian-api Highest Product jar package name api Highest Product jar package name api Low Product jar package name apiguardian Highest Product Manifest build-date 2021-06-27 Low Product Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low Product Manifest build-time 14:53:10.089+0200 Low Product Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low Product Manifest Bundle-Name apiguardian-api Medium Product Manifest bundle-symbolicname org.apiguardian.api Medium Product Manifest Implementation-Title apiguardian-api High Product Manifest specification-title apiguardian-api Medium Version file version 1.1.2 High Version Manifest Implementation-Version 1.1.2 High
asciidoctorj-2.5.7.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.asciidoctor/asciidoctorj/2.5.7/8667fe77c2ffb5270a17389e6fe76ea89b1087e4/asciidoctorj-2.5.7.jarMD5: 0bfe80189a03a3f5ebd255c5e021f460SHA1: 8667fe77c2ffb5270a17389e6fe76ea89b1087e4SHA256: 17deb7ab1ea8e62f43e7c85843b252e684e9000ca539fdbc1a903748623496b2Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r asciidoctorj-2.5.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/documentation@8.7.1 Evidence Type Source Name Value Confidence Vendor file name asciidoctorj High Vendor gradle artifactid asciidoctorj Highest Vendor gradle groupid org.asciidoctor Highest Vendor jar package name asciidoctor Highest Vendor jar package name asciidoctor Low Vendor jar package name jruby Low Vendor Manifest build-date 2022-10-21 Low Vendor Manifest bundle-symbolicname org.asciidoctor.asciidoctorj Medium Vendor Manifest Implementation-Vendor asciidoctor.org High Product file name asciidoctorj High Product gradle artifactid asciidoctorj Highest Product jar package name asciidoctor Highest Product jar package name jruby Low Product Manifest build-date 2022-10-21 Low Product Manifest Bundle-Name asciidoctorj Medium Product Manifest bundle-symbolicname org.asciidoctor.asciidoctorj Medium Product Manifest Implementation-Title asciidoctorj High Version file version 2.5.7 High Version Manifest Implementation-Version 2.5.7 High
asciidoctorj-2.5.7.jar: concurrent_ruby.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.asciidoctor/asciidoctorj/2.5.7/8667fe77c2ffb5270a17389e6fe76ea89b1087e4/asciidoctorj-2.5.7.jar/gems/concurrent-ruby-1.1.7/lib/concurrent-ruby/concurrent/concurrent_ruby.jarMD5: 92015e73fc2e79f2dfc4994e6865d15bSHA1: f7535d0a5efb585fd5f49c6d18952e191ed6e2c7SHA256: 7c35aee1609b885f760688733eaa5f4d53f2ef68558f7b19edd6a7179b5e381fReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name concurrent_ruby High Vendor jar package name concurrent_ruby Low Vendor jar package name ext Low Vendor jar package name jsr166e Low Product file name concurrent_ruby High Product jar package name ext Low Product jar package name jsr166e Low
asciidoctorj-2.5.7.jar: jruby_cache_backend.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.asciidoctor/asciidoctorj/2.5.7/8667fe77c2ffb5270a17389e6fe76ea89b1087e4/asciidoctorj-2.5.7.jar/gems/thread_safe-0.3.6-java/lib/thread_safe/jruby_cache_backend.jarMD5: 7f40e133c093c0e7baddce14ea90114bSHA1: 993f3706b397773d989d6a02fa4e91a9ea8b0a24SHA256: fd26af853ae547cdc0ff51d5875fe8cadc61edd23dc207651012217c4ff4257aReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name jruby_cache_backend High Vendor jar package name ext Low Vendor jar package name jruby Low Vendor jar package name thread_safe Low Product file name jruby_cache_backend High Product jar package name ext Low Product jar package name jsr166e Low Product jar package name thread_safe Low
asciidoctorj-api-2.5.7.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.asciidoctor/asciidoctorj-api/2.5.7/37ea651d5f1ba2ad3d1c09eb2356b17f35c15bb5/asciidoctorj-api-2.5.7.jarMD5: c81feb8db629e8f92f08d3f97f3e3c44SHA1: 37ea651d5f1ba2ad3d1c09eb2356b17f35c15bb5SHA256: 3fe1e4a778bf2ad73c756d4be5f6b983e4002c407e2e29a04fda7f36e6faa5d5Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r asciidoctorj-api-2.5.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 Evidence Type Source Name Value Confidence Vendor file name asciidoctorj-api High Vendor gradle artifactid asciidoctorj-api Highest Vendor gradle groupid org.asciidoctor Highest Vendor jar package name asciidoctor Highest Vendor jar package name asciidoctor Low Vendor Manifest build-date 2022-10-21 Low Vendor Manifest bundle-symbolicname org.asciidoctor.asciidoctorj-api Medium Vendor Manifest Implementation-Vendor asciidoctor.org High Product file name asciidoctorj-api High Product gradle artifactid asciidoctorj-api Highest Product jar package name asciidoctor Highest Product Manifest build-date 2022-10-21 Low Product Manifest Bundle-Name asciidoctorj-api Medium Product Manifest bundle-symbolicname org.asciidoctor.asciidoctorj-api Medium Product Manifest Implementation-Title asciidoctorj-api High Version file version 2.5.7 High Version Manifest Implementation-Version 2.5.7 High
asm-9.6.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm/9.6/aa205cf0a06dbd8e04ece91c0b37c3f5d567546a/asm-9.6.jar
MD5: 6f8bccf756f170d4185bb24c8c2d2020
SHA1: aa205cf0a06dbd8e04ece91c0b37c3f5d567546a
SHA256: 3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt asm-9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 Evidence Type Source Name Value Confidence Vendor file name asm High Vendor gradle artifactid asm Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Product file name asm High Product gradle artifactid asm Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High Version file version 9.6 High Version Manifest Implementation-Version 9.6 High
asm-9.7.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm/9.7/73d7b3086e14beb604ced229c302feff6449723/asm-9.7.jar
MD5: 3957b18bf02a62edcb6726d074b90b08
SHA1: 073d7b3086e14beb604ced229c302feff6449723
SHA256: adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath asm-9.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name asm High Vendor gradle artifactid asm Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Product file name asm High Product gradle artifactid asm Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High Version file version 9.7 High Version Manifest Implementation-Version 9.7 High
asm-analysis-9.7.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-analysis/9.7/e4a258b7eb96107106c0599f0061cfc1832fe07a/asm-analysis-9.7.jar
MD5: 910ac9c691023f1a9ff33c413ae9fbf6
SHA1: e4a258b7eb96107106c0599f0061cfc1832fe07a
SHA256: 7bc6bcbc21379948a0c8c467fb0f864206e5b818f6bc0b546872f5c9f941556f
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath asm-analysis-9.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name asm-analysis High Vendor gradle artifactid asm-analysis Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name analysis Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor jar package name tree Highest Vendor jar package name tree Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.tree.analysis Medium Vendor Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low Product file name asm-analysis High Product gradle artifactid asm-analysis Highest Product jar package name analysis Highest Product jar package name analysis Low Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product jar package name tree Highest Product jar package name tree Low Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm.tree.analysis Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm.tree.analysis Medium Product Manifest Implementation-Title Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework High Product Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low Version file version 9.7 High Version Manifest Implementation-Version 9.7 High
asm-commons-9.6.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-commons/9.6/f1a9e5508eff490744144565c47326c8648be309/asm-commons-9.6.jar
MD5: 9e317c75534bd1da8c00a67c618ab288
SHA1: f1a9e5508eff490744144565c47326c8648be309
SHA256: 7aefd0d5c0901701c69f7513feda765fb6be33af2ce7aa17c5781fc87657c511
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt asm-commons-9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 Evidence Type Source Name Value Confidence Vendor file name asm-commons High Vendor gradle artifactid asm-commons Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name commons Highest Vendor jar package name commons Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.commons Medium Vendor Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low Product file name asm-commons High Product gradle artifactid asm-commons Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name commons Highest Product jar package name commons Low Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm.commons Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm.commons Medium Product Manifest Implementation-Title Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework High Product Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low Version file version 9.6 High Version Manifest Implementation-Version 9.6 High
asm-tree-9.6.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-tree/9.6/c0cdda9d211e965d2a4448aa3fd86110f2f8c2de/asm-tree-9.6.jar
MD5: 6062608f1a98afe1e853d01fa1221a9e
SHA1: c0cdda9d211e965d2a4448aa3fd86110f2f8c2de
SHA256: c43ecf17b539c777e15da7b5b86553b377e2d39a683de6285567d5283888e7ef
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt asm-tree-9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 Evidence Type Source Name Value Confidence Vendor file name asm-tree High Vendor gradle artifactid asm-tree Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor jar package name tree Highest Vendor jar package name tree Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.tree Medium Vendor Manifest module-requires org.objectweb.asm;transitive=true Low Product file name asm-tree High Product gradle artifactid asm-tree Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product jar package name tree Highest Product jar package name tree Low Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm.tree Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm.tree Medium Product Manifest Implementation-Title Tree API of ASM, a very small and fast Java bytecode manipulation framework High Product Manifest module-requires org.objectweb.asm;transitive=true Low Version file version 9.6 High Version Manifest Implementation-Version 9.6 High
asm-tree-9.7.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-tree/9.7/e446a17b175bfb733b87c5c2560ccb4e57d69f1a/asm-tree-9.7.jar
MD5: ea5cad3e0cbd2520688e4b0b5c4218e7
SHA1: e446a17b175bfb733b87c5c2560ccb4e57d69f1a
SHA256: 62f4b3bc436045c1acb5c3ba2d8ec556ec3369093d7f5d06c747eb04b56d52b1
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath asm-tree-9.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name asm-tree High Vendor gradle artifactid asm-tree Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor jar package name tree Highest Vendor jar package name tree Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.tree Medium Vendor Manifest module-requires org.objectweb.asm;transitive=true Low Product file name asm-tree High Product gradle artifactid asm-tree Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product jar package name tree Highest Product jar package name tree Low Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm.tree Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm.tree Medium Product Manifest Implementation-Title Tree API of ASM, a very small and fast Java bytecode manipulation framework High Product Manifest module-requires org.objectweb.asm;transitive=true Low Version file version 9.7 High Version Manifest Implementation-Version 9.7 High
asm-util-9.7.jarLicense:
BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-util/9.7/c0655519f24d92af2202cb681cd7c1569df6ead6/asm-util-9.7.jar
MD5: e7d6e20888e6fd99605f4c5fe1dfa8b0
SHA1: c0655519f24d92af2202cb681cd7c1569df6ead6
SHA256: 37a6414d36641973f1af104937c95d6d921b2ddb4d612c66c5a9f2b13fc14211
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath asm-util-9.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name asm-util High Vendor gradle artifactid asm-util Highest Vendor gradle groupid org.ow2.asm Highest Vendor jar package name asm Highest Vendor jar package name asm Low Vendor jar package name objectweb Highest Vendor jar package name objectweb Low Vendor jar package name util Highest Vendor jar package name util Low Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.util Medium Vendor Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true,org.objectweb.asm.tree.analysis;transitive=true Low Product file name asm-util High Product gradle artifactid asm-util Highest Product jar package name asm Highest Product jar package name asm Low Product jar package name objectweb Highest Product jar package name util Highest Product jar package name util Low Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm.util Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm.util Medium Product Manifest Implementation-Title Utilities for ASM, a very small and fast Java bytecode manipulation framework High Product Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true,org.objectweb.asm.tree.analysis;transitive=true Low Version file version 9.7 High Version Manifest Implementation-Version 9.7 High
aspectj-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/aspectj-plugin/build/libs/aspectj-plugin-8.7.1.jarMD5: a156ba36120f539f10875ce6fcc2fb8dSHA1: de9e0ad92dcde53eefaa6c975a10f7e7bbaf3ccaSHA256: 6b21f4b490c5ea8efd4ffff8020fdd34be38d928081f3cafbc5bded8c098d7a9Referenced In Project/Scope: documentation:javadocClasspathaspectj-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name aspectj-plugin High Vendor gradle artifactid aspectj-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name aspectj-plugin High Product gradle artifactid aspectj-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
assertj-core-3.26.3.jarDescription:
Rich and fluent assertions for testing in Java License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.assertj/assertj-core/3.26.3/d26263eb7524252d98e602fc6942996a3195e29/assertj-core-3.26.3.jar
MD5: 59820c6af7b175494863c0b2eb4d0acc
SHA1: 0d26263eb7524252d98e602fc6942996a3195e29
SHA256: 4c2f86418ff47ee6b67fbc6adb194e80219b793281b3bda28799d4425bc9a0bd
Referenced In Projects/Scopes: documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath assertj-core-3.26.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 Evidence Type Source Name Value Confidence Vendor file name assertj-core High Vendor gradle artifactid assertj-core Highest Vendor gradle groupid org.assertj Highest Vendor jar package name assertions Highest Vendor jar package name assertj Highest Vendor jar package name core Highest Vendor Manifest bundle-developers joel-costigliola;email="joel.costigliola at gmail.com";name="Joel Costigliola";roles="Owner,Developer",scordio;name="Stefano Cordio";roles=Developer,PascalSchumacher;name="Pascal Schumacher";roles=Developer,epeee;name="Erhard Pointl";roles=Developer,croesch;name="Christian Rösch";roles=Developer,VanRoy;name="Julien Roy";roles=Developer,regis1512;name="Régis Pouiller";roles=Developer,fbiville;name="Florent Biville";roles=Developer,Patouche;name="Patrick Allain";roles=Developer Low Vendor Manifest bundle-docurl https://assertj.github.io/doc/#assertj-core Low Vendor Manifest bundle-symbolicname assertj-core Medium Vendor Manifest multi-release true Low Vendor pom artifactid assertj-core Low Vendor pom developer email joel.costigliola at gmail.com Low Vendor pom developer id croesch Medium Vendor pom developer id epeee Medium Vendor pom developer id fbiville Medium Vendor pom developer id joel-costigliola Medium Vendor pom developer id PascalSchumacher Medium Vendor pom developer id Patouche Medium Vendor pom developer id regis1512 Medium Vendor pom developer id scordio Medium Vendor pom developer id VanRoy Medium Vendor pom developer name Christian Rösch Medium Vendor pom developer name Erhard Pointl Medium Vendor pom developer name Florent Biville Medium Vendor pom developer name Joel Costigliola Medium Vendor pom developer name Julien Roy Medium Vendor pom developer name Pascal Schumacher Medium Vendor pom developer name Patrick Allain Medium Vendor pom developer name Régis Pouiller Medium Vendor pom developer name Stefano Cordio Medium Vendor pom groupid org.assertj Highest Vendor pom name AssertJ Core High Vendor pom url https://assertj.github.io/doc/#assertj-core Highest Product file name assertj-core High Product gradle artifactid assertj-core Highest Product jar package name assertions Highest Product jar package name assertj Highest Product jar package name core Highest Product Manifest bundle-developers joel-costigliola;email="joel.costigliola at gmail.com";name="Joel Costigliola";roles="Owner,Developer",scordio;name="Stefano Cordio";roles=Developer,PascalSchumacher;name="Pascal Schumacher";roles=Developer,epeee;name="Erhard Pointl";roles=Developer,croesch;name="Christian Rösch";roles=Developer,VanRoy;name="Julien Roy";roles=Developer,regis1512;name="Régis Pouiller";roles=Developer,fbiville;name="Florent Biville";roles=Developer,Patouche;name="Patrick Allain";roles=Developer Low Product Manifest bundle-docurl https://assertj.github.io/doc/#assertj-core Low Product Manifest Bundle-Name AssertJ Core Medium Product Manifest bundle-symbolicname assertj-core Medium Product Manifest multi-release true Low Product pom artifactid assertj-core Highest Product pom developer email joel.costigliola at gmail.com Low Product pom developer id croesch Low Product pom developer id epeee Low Product pom developer id fbiville Low Product pom developer id joel-costigliola Low Product pom developer id PascalSchumacher Low Product pom developer id Patouche Low Product pom developer id regis1512 Low Product pom developer id scordio Low Product pom developer id VanRoy Low Product pom developer name Christian Rösch Low Product pom developer name Erhard Pointl Low Product pom developer name Florent Biville Low Product pom developer name Joel Costigliola Low Product pom developer name Julien Roy Low Product pom developer name Pascal Schumacher Low Product pom developer name Patrick Allain Low Product pom developer name Régis Pouiller Low Product pom developer name Stefano Cordio Low Product pom groupid org.assertj Highest Product pom name AssertJ Core High Product pom url https://assertj.github.io/doc/#assertj-core Medium Version file version 3.26.3 High Version gradle version 3.26.3 Highest Version Manifest Bundle-Version 3.26.3 High Version pom version 3.26.3 Highest
byte-buddy-1.14.18.jarDescription:
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.bytebuddy/byte-buddy/1.14.18/81e9b9a20944626e6757b5950676af901c2485/byte-buddy-1.14.18.jar
MD5: e6429ed037d76e045ed06df9398f09ae
SHA1: 0081e9b9a20944626e6757b5950676af901c2485
SHA256: 52117af1696a53aa77c131353074ada25ccbdf2df511f2af33fad6704fa95104
Referenced In Projects/Scopes: documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath byte-buddy-1.14.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.assertj/assertj-core@3.26.3 pkg:maven/org.assertj/assertj-core@3.26.3 Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor gradle artifactid byte-buddy Highest Vendor gradle groupid net.bytebuddy Highest Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product gradle artifactid byte-buddy Highest Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.14.18 High Version gradle version 1.14.18 Highest Version Manifest Bundle-Version 1.14.18 High Version pom version 1.14.18 Highest
cdi-api-1.2.jarDescription:
APIs for CDI (Contexts and Dependency Injection for Java EE) License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.enterprise/cdi-api/1.2/53bba91dc3968adf411e076df020cf207283d7dc/cdi-api-1.2.jar
MD5: 2a8c973affa178efb89e6c50f78d79da
SHA1: 53bba91dc3968adf411e076df020cf207283d7dc
SHA256: cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath cdi-api-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name cdi-api High Vendor gradle artifactid cdi-api Highest Vendor gradle groupid javax.enterprise Highest Vendor jar package name enterprise Highest Vendor jar package name javax Highest Vendor Manifest bundle-docurl http://jboss.org Low Vendor Manifest bundle-symbolicname javax.enterprise.cdi-api Medium Vendor Manifest implementation-url http://cdi-spec.org Low Vendor Manifest Implementation-Vendor JBoss by Red Hat, Inc. High Vendor Manifest specification-vendor JBoss by Red Hat, Inc. Low Vendor pom artifactid cdi-api Low Vendor pom developer email asd[at]redhat[dot]com Low Vendor pom developer email jhartinger[at]redhat[dot]com Low Vendor pom developer email mkouba[at]redhat[dot]com Low Vendor pom developer email pmuir[at]redhat[dot]com Low Vendor pom developer email struberg[at]yahoo[dot]de Low Vendor pom developer id asabotdu Medium Vendor pom developer id jhartinger Medium Vendor pom developer id mkouba Medium Vendor pom developer id mstruberg Medium Vendor pom developer id pmuir Medium Vendor pom developer name Antoine Sabot-Durand Medium Vendor pom developer name Jozef Hartinger Medium Vendor pom developer name Mark Struberg Medium Vendor pom developer name Martin Kouba Medium Vendor pom developer name Pete Muir Medium Vendor pom developer org Red Hat Inc. Medium Vendor pom groupid javax.enterprise Highest Vendor pom name CDI APIs High Vendor pom organization name JBoss by Red Hat, Inc. High Vendor pom organization url http://jboss.org Medium Vendor pom parent-artifactid weld-parent Low Vendor pom parent-groupid org.jboss.weld Medium Vendor pom url http://cdi-spec.org Highest Product file name cdi-api High Product gradle artifactid cdi-api Highest Product jar package name enterprise Highest Product jar package name javax Highest Product Manifest bundle-docurl http://jboss.org Low Product Manifest Bundle-Name CDI APIs Medium Product Manifest bundle-symbolicname javax.enterprise.cdi-api Medium Product Manifest Implementation-Title CDI APIs High Product Manifest implementation-url http://cdi-spec.org Low Product Manifest specification-title CDI APIs Medium Product pom artifactid cdi-api Highest Product pom developer email asd[at]redhat[dot]com Low Product pom developer email jhartinger[at]redhat[dot]com Low Product pom developer email mkouba[at]redhat[dot]com Low Product pom developer email pmuir[at]redhat[dot]com Low Product pom developer email struberg[at]yahoo[dot]de Low Product pom developer id asabotdu Low Product pom developer id jhartinger Low Product pom developer id mkouba Low Product pom developer id mstruberg Low Product pom developer id pmuir Low Product pom developer name Antoine Sabot-Durand Low Product pom developer name Jozef Hartinger Low Product pom developer name Mark Struberg Low Product pom developer name Martin Kouba Low Product pom developer name Pete Muir Low Product pom developer org Red Hat Inc. Low Product pom groupid javax.enterprise Highest Product pom name CDI APIs High Product pom organization name JBoss by Red Hat, Inc. Low Product pom organization url http://jboss.org Low Product pom parent-artifactid weld-parent Medium Product pom parent-groupid org.jboss.weld Medium Product pom url http://cdi-spec.org Medium Version file version 1.2 High Version gradle version 1.2 Highest Version pom parent-version 1.2 Low Version pom version 1.2 Highest
checker-qual-3.33.0.jarLicense:
MIT File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.checkerframework/checker-qual/3.33.0/de2b60b62da487644fc11f734e73c8b0b431238f/checker-qual-3.33.0.jar
MD5: fc9418b779d9d57dcd52197006cbdb9b
SHA1: de2b60b62da487644fc11f734e73c8b0b431238f
SHA256: e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1
Referenced In Project/Scope: documentation:javadocClasspath
checker-qual-3.33.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor gradle artifactid checker-qual Highest Vendor gradle groupid org.checkerframework Highest Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Highest Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest automatic-module-name org.checkerframework.checker.qual Medium Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product gradle artifactid checker-qual Highest Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest automatic-module-name org.checkerframework.checker.qual Medium Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.33.0 High Version Manifest Implementation-Version 3.33.0 High
classgraph-4.8.173.jarDescription:
The uber-fast, ultra-lightweight classpath and module scanner for JVM languages. License:
The MIT License (MIT): http://opensource.org/licenses/MIT File Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.github.classgraph/classgraph/4.8.173/236e1b4360bf078142902c6c3ca80a03bfa95d5d/classgraph-4.8.173.jar
MD5: 8e98dcc3eb5d91bd92a03415d64caa2a
SHA1: 236e1b4360bf078142902c6c3ca80a03bfa95d5d
SHA256: 699841fd9028af0124e9b66067e0e543211611971a8a066ae212690888a5aaee
Referenced In Projects/Scopes: embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath classgraph-4.8.173.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.webjars/webjars-locator-core@0.59 pkg:maven/org.webjars/webjars-locator-core@0.59 Evidence Type Source Name Value Confidence Vendor file name classgraph High Vendor gradle artifactid classgraph Highest Vendor gradle groupid io.github.classgraph Highest Vendor jar package name classgraph Highest Vendor jar package name github Highest Vendor jar package name io Highest Vendor jar package name scanner Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-category Utilities Low Vendor Manifest bundle-symbolicname io.github.classgraph.classgraph Medium Vendor Manifest multi-release true Low Vendor pom artifactid classgraph Low Vendor pom developer email luke.hutch@gmail.com Low Vendor pom developer name Luke Hutchison Medium Vendor pom developer org ClassGraph Medium Vendor pom developer org URL https://github.com/classgraph Medium Vendor pom groupid io.github.classgraph Highest Vendor pom name ClassGraph High Vendor pom url classgraph/classgraph Highest Product file name classgraph High Product gradle artifactid classgraph Highest Product jar package name classgraph Highest Product jar package name github Highest Product jar package name io Highest Product jar package name scanner Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-category Utilities Low Product Manifest Bundle-Name ClassGraph Medium Product Manifest bundle-symbolicname io.github.classgraph.classgraph Medium Product Manifest Implementation-Title ClassGraph High Product Manifest multi-release true Low Product Manifest specification-title ClassGraph Medium Product pom artifactid classgraph Highest Product pom developer email luke.hutch@gmail.com Low Product pom developer name Luke Hutchison Low Product pom developer org ClassGraph Low Product pom developer org URL https://github.com/classgraph Low Product pom groupid io.github.classgraph Highest Product pom name ClassGraph High Product pom url classgraph/classgraph High Version file version 4.8.173 High Version gradle version 4.8.173 Highest Version Manifest Bundle-Version 4.8.173 High Version Manifest Implementation-Version 4.8.173 High Version pom version 4.8.173 Highest
classgraph-4.8.174.jarDescription:
The uber-fast, ultra-lightweight classpath and module scanner for JVM languages. License:
The MIT License (MIT): http://opensource.org/licenses/MIT File Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.github.classgraph/classgraph/4.8.174/d86b16ab77abd87118b51e6a2c61e2d44ce6deaa/classgraph-4.8.174.jar
MD5: 4a470ae869699a7c2feb64a01e91a33e
SHA1: d86b16ab77abd87118b51e6a2c61e2d44ce6deaa
SHA256: 3594bdb5ff2b420df7330b7e192221eaa6960c5f1e08890c391cb56109e3c4b9
Referenced In Projects/Scopes: documentation:javadocClasspath code-generator-plugin:compileClasspath code-generator-plugin:runtimeClasspath classgraph-4.8.174.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name classgraph High Vendor gradle artifactid classgraph Highest Vendor gradle groupid io.github.classgraph Highest Vendor jar package name classgraph Highest Vendor jar package name github Highest Vendor jar package name io Highest Vendor jar package name scanner Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-category Utilities Low Vendor Manifest bundle-symbolicname io.github.classgraph.classgraph Medium Vendor Manifest multi-release true Low Vendor pom artifactid classgraph Low Vendor pom developer email luke.hutch@gmail.com Low Vendor pom developer name Luke Hutchison Medium Vendor pom developer org ClassGraph Medium Vendor pom developer org URL https://github.com/classgraph Medium Vendor pom groupid io.github.classgraph Highest Vendor pom name ClassGraph High Vendor pom url classgraph/classgraph Highest Product file name classgraph High Product gradle artifactid classgraph Highest Product jar package name classgraph Highest Product jar package name github Highest Product jar package name io Highest Product jar package name scanner Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-category Utilities Low Product Manifest Bundle-Name ClassGraph Medium Product Manifest bundle-symbolicname io.github.classgraph.classgraph Medium Product Manifest Implementation-Title ClassGraph High Product Manifest multi-release true Low Product Manifest specification-title ClassGraph Medium Product pom artifactid classgraph Highest Product pom developer email luke.hutch@gmail.com Low Product pom developer name Luke Hutchison Low Product pom developer org ClassGraph Low Product pom developer org URL https://github.com/classgraph Low Product pom groupid io.github.classgraph Highest Product pom name ClassGraph High Product pom url classgraph/classgraph High Version file version 4.8.174 High Version gradle version 4.8.174 Highest Version Manifest Bundle-Version 4.8.174 High Version Manifest Implementation-Version 4.8.174 High Version pom version 4.8.174 Highest
code-generator-api-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/code-generator-api/build/libs/code-generator-api-8.7.1.jarMD5: c4837a0da7beb8baed6e980205e18904SHA1: caef9e6ce1b94fbf9155fadd9ef1c5c1406b49ccSHA256: d52a2adf61c43e605b4c41400f0456c9b985eecaca2d0143efcf9cc2bcd3692bReferenced In Projects/Scopes:
documentation:javadocClasspath code-generator-plugin:compileClasspath test-code-generator:compileClasspath test-code-generator:runtimeClasspath code-generator-plugin:runtimeClasspath code-generator-api-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-code-generator@8.7.1 pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/test-code-generator@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/test-code-generator@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name code-generator-api High Vendor gradle artifactid code-generator-api Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name code-generator-api High Product gradle artifactid code-generator-api Highest Product jar package name codegenerator Low Product jar package name freefair Low Product jar package name gradle Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
code-generator-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/code-generator-plugin/build/libs/code-generator-plugin-8.7.1.jarMD5: 771c94f8f451a45643789fd07caf4d00SHA1: aa443a83a9fb4587d6fdf293ea2eef56c25b1cd2SHA256: 877415d4d900af1526f6fd7a8669f973bbbb12f1a4ccda4cec35c017181956f7Referenced In Project/Scope: documentation:javadocClasspathcode-generator-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name code-generator-plugin High Vendor gradle artifactid code-generator-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name code-generator-plugin High Product gradle artifactid code-generator-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugin Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
commons-codec-1.16.1.jarDescription:
The Apache Commons Codec component contains encoder and decoders for
various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-codec/commons-codec/1.16.1/47bd4d333fba53406f6c6c51884ddbca435c8862/commons-codec-1.16.1.jar
MD5: 6c5be822d8d3fa61c3b54c4c8978dfdc
SHA1: 47bd4d333fba53406f6c6c51884ddbca435c8862
SHA256: ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4
Referenced In Projects/Scopes: maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-codec-1.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-codec High Vendor gradle artifactid commons-codec Highest Vendor gradle groupid commons-codec Highest Vendor jar package name apache Highest Vendor jar package name codec Highest Vendor jar package name commons Highest Vendor jar package name digest Highest Vendor jar package name encoder Highest Vendor Manifest automatic-module-name org.apache.commons.codec Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-codec Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email dgraham@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jon@collab.net Low Vendor pom developer email julius@apache.org Low Vendor pom developer email mattsicker@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@totalsync.com Low Vendor pom developer email tn@apache.org Low Vendor pom developer email tobrien@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id chtompki Medium Vendor pom developer id dgraham Medium Vendor pom developer id dlr Medium Vendor pom developer id ggregory Medium Vendor pom developer id jon Medium Vendor pom developer id julius Medium Vendor pom developer id mattsicker Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id tn Medium Vendor pom developer id tobrien Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name David Graham Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jon S. Stevens Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Matt Sicker Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer name Tim OBrien Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL http://juliusdavies.ca/ Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-codec Highest Vendor pom name Apache Commons Codec High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-codec/ Highest Product file name commons-codec High Product gradle artifactid commons-codec Highest Product jar package name apache Highest Product jar package name codec Highest Product jar package name commons Highest Product jar package name digest Highest Product jar package name encoder Highest Product Manifest automatic-module-name org.apache.commons.codec Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Product Manifest Bundle-Name Apache Commons Codec Medium Product Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Product Manifest Implementation-Title Apache Commons Codec High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Codec Medium Product pom artifactid commons-codec Highest Product pom developer email bayard@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email dgraham@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory at apache.org Low Product pom developer email jon@collab.net Low Product pom developer email julius@apache.org Low Product pom developer email mattsicker@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@totalsync.com Low Product pom developer email tn@apache.org Low Product pom developer email tobrien@apache.org Low Product pom developer id bayard Low Product pom developer id chtompki Low Product pom developer id dgraham Low Product pom developer id dlr Low Product pom developer id ggregory Low Product pom developer id jon Low Product pom developer id julius Low Product pom developer id mattsicker Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id tn Low Product pom developer id tobrien Low Product pom developer name Daniel Rall Low Product pom developer name David Graham Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jon S. Stevens Low Product pom developer name Julius Davies Low Product pom developer name Matt Sicker Low Product pom developer name Rob Tompkins Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Thomas Neidhart Low Product pom developer name Tim OBrien Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL http://juliusdavies.ca/ Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-codec Highest Product pom name Apache Commons Codec High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-codec/ Medium Version file version 1.16.1 High Version gradle version 1.16.1 Highest Version Manifest Bundle-Version 1.16.1 High Version Manifest Implementation-Version 1.16.1 High Version pom parent-version 1.16.1 Low Version pom version 1.16.1 Highest
commons-codec-1.17.0.jarDescription:
The Apache Commons Codec component contains encoder and decoders for
various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-codec/commons-codec/1.17.0/dbe8eef6e14460e73da07f7b11bf994d6626355/commons-codec-1.17.0.jar
MD5: ca1f080782f7e77cb3aec451e7a7f02d
SHA1: 0dbe8eef6e14460e73da07f7b11bf994d6626355
SHA256: f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath commons-codec-1.17.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name commons-codec High Vendor gradle artifactid commons-codec Highest Vendor gradle groupid commons-codec Highest Vendor jar package name apache Highest Vendor jar package name codec Highest Vendor jar package name commons Highest Vendor jar package name digest Highest Vendor jar package name encoder Highest Vendor Manifest automatic-module-name org.apache.commons.codec Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-codec Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email dgraham@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jon@collab.net Low Vendor pom developer email julius@apache.org Low Vendor pom developer email mattsicker@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@totalsync.com Low Vendor pom developer email tn@apache.org Low Vendor pom developer email tobrien@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id chtompki Medium Vendor pom developer id dgraham Medium Vendor pom developer id dlr Medium Vendor pom developer id ggregory Medium Vendor pom developer id jon Medium Vendor pom developer id julius Medium Vendor pom developer id mattsicker Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id tn Medium Vendor pom developer id tobrien Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name David Graham Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jon S. Stevens Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Matt Sicker Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer name Tim OBrien Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL http://juliusdavies.ca/ Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-codec Highest Vendor pom name Apache Commons Codec High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-codec/ Highest Product file name commons-codec High Product gradle artifactid commons-codec Highest Product jar package name apache Highest Product jar package name codec Highest Product jar package name commons Highest Product jar package name digest Highest Product jar package name encoder Highest Product Manifest automatic-module-name org.apache.commons.codec Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Product Manifest Bundle-Name Apache Commons Codec Medium Product Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Product Manifest Implementation-Title Apache Commons Codec High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Codec Medium Product pom artifactid commons-codec Highest Product pom developer email bayard@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email dgraham@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory at apache.org Low Product pom developer email jon@collab.net Low Product pom developer email julius@apache.org Low Product pom developer email mattsicker@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@totalsync.com Low Product pom developer email tn@apache.org Low Product pom developer email tobrien@apache.org Low Product pom developer id bayard Low Product pom developer id chtompki Low Product pom developer id dgraham Low Product pom developer id dlr Low Product pom developer id ggregory Low Product pom developer id jon Low Product pom developer id julius Low Product pom developer id mattsicker Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id tn Low Product pom developer id tobrien Low Product pom developer name Daniel Rall Low Product pom developer name David Graham Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jon S. Stevens Low Product pom developer name Julius Davies Low Product pom developer name Matt Sicker Low Product pom developer name Rob Tompkins Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Thomas Neidhart Low Product pom developer name Tim OBrien Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL http://juliusdavies.ca/ Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-codec Highest Product pom name Apache Commons Codec High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-codec/ Medium Version file version 1.17.0 High Version gradle version 1.17.0 Highest Version Manifest Bundle-Version 1.17.0 High Version Manifest Implementation-Version 1.17.0 High Version pom parent-version 1.17.0 Low Version pom version 1.17.0 Highest
commons-collections-3.2.1.jarDescription:
Types that extend and augment the Java Collections Framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-collections/commons-collections/3.2.1/761ea405b9b37ced573d2df0d1e3a4e0f9edc668/commons-collections-3.2.1.jar
MD5: 13bc641afd7fd95e09b260f69c1e4c91
SHA1: 761ea405b9b37ced573d2df0d1e3a4e0f9edc668
SHA256: 87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-collections-3.2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-collections High Vendor gradle artifactid commons-collections Highest Vendor gradle groupid commons-collections Highest Vendor jar package name apache Highest Vendor jar package name collections Highest Vendor jar package name commons Highest Vendor Manifest bundle-docurl http://commons.apache.org/collections/ Low Vendor Manifest bundle-symbolicname org.apache.commons.collections Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-collections Low Vendor pom developer id amamment Medium Vendor pom developer id bayard Medium Vendor pom developer id craigmcc Medium Vendor pom developer id geirm Medium Vendor pom developer id jcarman Medium Vendor pom developer id matth Medium Vendor pom developer id morgand Medium Vendor pom developer id psteitz Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id scolebourne Medium Vendor pom developer name Arun M. Thomas Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom groupid commons-collections Highest Vendor pom name Commons Collections High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/collections/ Highest Product file name commons-collections High Product gradle artifactid commons-collections Highest Product jar package name apache Highest Product jar package name collections Highest Product jar package name commons Highest Product Manifest bundle-docurl http://commons.apache.org/collections/ Low Product Manifest Bundle-Name Commons Collections Medium Product Manifest bundle-symbolicname org.apache.commons.collections Medium Product Manifest Implementation-Title Commons Collections High Product Manifest specification-title Commons Collections Medium Product pom artifactid commons-collections Highest Product pom developer id amamment Low Product pom developer id bayard Low Product pom developer id craigmcc Low Product pom developer id geirm Low Product pom developer id jcarman Low Product pom developer id matth Low Product pom developer id morgand Low Product pom developer id psteitz Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id scolebourne Low Product pom developer name Arun M. Thomas Low Product pom developer name Craig McClanahan Low Product pom developer name Geir Magnusson Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Matthew Hawthorne Low Product pom developer name Morgan Delagrange Low Product pom developer name Phil Steitz Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Stephen Colebourne Low Product pom groupid commons-collections Highest Product pom name Commons Collections High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/collections/ Medium Version file version 3.2.1 High Version gradle version 3.2.1 Highest Version Manifest Bundle-Version 3.2.1 High Version Manifest Implementation-Version 3.2.1 High Version pom parent-version 3.2.1 Low Version pom version 3.2.1 Highest
CVE-2015-6420 suppress
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P References:
Vulnerable Software & Versions: (show all )
commons-compress-1.26.1.jarDescription:
Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-compress/1.26.1/44331c1130c370e726a2e1a3e6fba6d2558ef04a/commons-compress-1.26.1.jar
MD5: 7af7d22a7280508327d809b183114a92
SHA1: 44331c1130c370e726a2e1a3e6fba6d2558ef04a
SHA256: 27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04
Referenced In Projects/Scopes: maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-compress-1.26.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-compress High Vendor gradle artifactid commons-compress Highest Vendor gradle groupid org.apache.commons Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name compress Highest Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Vendor Manifest extension-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-compress Low Vendor pom developer email bodewig at apache.org Low Vendor pom developer email chtompki at apache.org Low Vendor pom developer email damjan at apache.org Low Vendor pom developer email ebourg at apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email grobmeier at apache.org Low Vendor pom developer email julius at apache.org Low Vendor pom developer email peterlee at apache.org Low Vendor pom developer email sebb at apache.org Low Vendor pom developer email tcurdt at apache.org Low Vendor pom developer id bodewig Medium Vendor pom developer id chtompki Medium Vendor pom developer id damjan Medium Vendor pom developer id ebourg Medium Vendor pom developer id ggregory Medium Vendor pom developer id grobmeier Medium Vendor pom developer id julius Medium Vendor pom developer id peterlee Medium Vendor pom developer id sebb Medium Vendor pom developer id tcurdt Medium Vendor pom developer name Christian Grobmeier Medium Vendor pom developer name Damjan Jovanovic Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Peter Alfred Lee Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Sebastian Bazley Medium Vendor pom developer name Stefan Bodewig Medium Vendor pom developer name Torsten Curdt Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Compress High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-compress/ Highest Product file name commons-compress High Product gradle artifactid commons-compress Highest Product jar package name 9 Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name compress Highest Product Manifest automatic-module-name org.apache.commons.compress Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Product Manifest Bundle-Name Apache Commons Compress Medium Product Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Product Manifest extension-name org.apache.commons.compress Medium Product Manifest Implementation-Title Apache Commons Compress High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Product pom developer email bodewig at apache.org Low Product pom developer email chtompki at apache.org Low Product pom developer email damjan at apache.org Low Product pom developer email ebourg at apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email grobmeier at apache.org Low Product pom developer email julius at apache.org Low Product pom developer email peterlee at apache.org Low Product pom developer email sebb at apache.org Low Product pom developer email tcurdt at apache.org Low Product pom developer id bodewig Low Product pom developer id chtompki Low Product pom developer id damjan Low Product pom developer id ebourg Low Product pom developer id ggregory Low Product pom developer id grobmeier Low Product pom developer id julius Low Product pom developer id peterlee Low Product pom developer id sebb Low Product pom developer id tcurdt Low Product pom developer name Christian Grobmeier Low Product pom developer name Damjan Jovanovic Low Product pom developer name Emmanuel Bourg Low Product pom developer name Gary Gregory Low Product pom developer name Julius Davies Low Product pom developer name Peter Alfred Lee Low Product pom developer name Rob Tompkins Low Product pom developer name Sebastian Bazley Low Product pom developer name Stefan Bodewig Low Product pom developer name Torsten Curdt Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Compress High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-compress/ Medium Version file version 1.26.1 High Version gradle version 1.26.1 Highest Version Manifest Bundle-Version 1.26.1 High Version Manifest Implementation-Version 1.26.1 High Version pom parent-version 1.26.1 Low Version pom version 1.26.1 Highest
commons-compress-1.26.2.jarDescription:
Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-compress/1.26.2/eb1f823447af685208e684fce84783b43517960c/commons-compress-1.26.2.jar
MD5: d2c5abbd0a822c0b79cf4f03ead483ee
SHA1: eb1f823447af685208e684fce84783b43517960c
SHA256: 9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath commons-compress-1.26.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name commons-compress High Vendor gradle artifactid commons-compress Highest Vendor gradle groupid org.apache.commons Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name compress Highest Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Vendor Manifest extension-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-compress Low Vendor pom developer email bodewig at apache.org Low Vendor pom developer email chtompki at apache.org Low Vendor pom developer email damjan at apache.org Low Vendor pom developer email ebourg at apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email grobmeier at apache.org Low Vendor pom developer email julius at apache.org Low Vendor pom developer email peterlee at apache.org Low Vendor pom developer email sebb at apache.org Low Vendor pom developer email tcurdt at apache.org Low Vendor pom developer id bodewig Medium Vendor pom developer id chtompki Medium Vendor pom developer id damjan Medium Vendor pom developer id ebourg Medium Vendor pom developer id ggregory Medium Vendor pom developer id grobmeier Medium Vendor pom developer id julius Medium Vendor pom developer id peterlee Medium Vendor pom developer id sebb Medium Vendor pom developer id tcurdt Medium Vendor pom developer name Christian Grobmeier Medium Vendor pom developer name Damjan Jovanovic Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Peter Alfred Lee Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Sebastian Bazley Medium Vendor pom developer name Stefan Bodewig Medium Vendor pom developer name Torsten Curdt Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Compress High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-compress/ Highest Product file name commons-compress High Product gradle artifactid commons-compress Highest Product jar package name 9 Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name compress Highest Product Manifest automatic-module-name org.apache.commons.compress Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Product Manifest Bundle-Name Apache Commons Compress Medium Product Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Product Manifest extension-name org.apache.commons.compress Medium Product Manifest Implementation-Title Apache Commons Compress High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Product pom developer email bodewig at apache.org Low Product pom developer email chtompki at apache.org Low Product pom developer email damjan at apache.org Low Product pom developer email ebourg at apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email grobmeier at apache.org Low Product pom developer email julius at apache.org Low Product pom developer email peterlee at apache.org Low Product pom developer email sebb at apache.org Low Product pom developer email tcurdt at apache.org Low Product pom developer id bodewig Low Product pom developer id chtompki Low Product pom developer id damjan Low Product pom developer id ebourg Low Product pom developer id ggregory Low Product pom developer id grobmeier Low Product pom developer id julius Low Product pom developer id peterlee Low Product pom developer id sebb Low Product pom developer id tcurdt Low Product pom developer name Christian Grobmeier Low Product pom developer name Damjan Jovanovic Low Product pom developer name Emmanuel Bourg Low Product pom developer name Gary Gregory Low Product pom developer name Julius Davies Low Product pom developer name Peter Alfred Lee Low Product pom developer name Rob Tompkins Low Product pom developer name Sebastian Bazley Low Product pom developer name Stefan Bodewig Low Product pom developer name Torsten Curdt Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Compress High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-compress/ Medium Version file version 1.26.2 High Version gradle version 1.26.2 Highest Version Manifest Bundle-Version 1.26.2 High Version Manifest Implementation-Version 1.26.2 High Version pom parent-version 1.26.2 Low Version pom version 1.26.2 Highest
commons-io-2.15.1.jarDescription:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-io/commons-io/2.15.1/f11560da189ab563a5c8e351941415430e9304ea/commons-io-2.15.1.jar
MD5: 84351f7991a0e6722f00e96a4ccc376f
SHA1: f11560da189ab563a5c8e351941415430e9304ea
SHA256: a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154
Referenced In Projects/Scopes: maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-io-2.15.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-io High Vendor gradle artifactid commons-io Highest Vendor gradle groupid commons-io Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name file Highest Vendor jar package name io Highest Vendor Manifest automatic-module-name org.apache.commons.io Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-io Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-io Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email dion@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jeremias@apache.org Low Vendor pom developer email jochen.wiedmann@gmail.com Low Vendor pom developer email krosenvold@apache.org Low Vendor pom developer email martinc@apache.org Low Vendor pom developer email matth@apache.org Low Vendor pom developer email nicolaken@apache.org Low Vendor pom developer email roxspring@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id dion Medium Vendor pom developer id ggregory Medium Vendor pom developer id jeremias Medium Vendor pom developer id jochen Medium Vendor pom developer id jukka Medium Vendor pom developer id krosenvold Medium Vendor pom developer id martinc Medium Vendor pom developer id matth Medium Vendor pom developer id niallp Medium Vendor pom developer id nicolaken Medium Vendor pom developer id roxspring Medium Vendor pom developer id sanders Medium Vendor pom developer id scolebourne Medium Vendor pom developer name dIon Gillard Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jeremias Maerki Medium Vendor pom developer name Jochen Wiedmann Medium Vendor pom developer name Jukka Zitting Medium Vendor pom developer name Kristian Rosenvold Medium Vendor pom developer name Martin Cooper Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Nicola Ken Barozzi Medium Vendor pom developer name Rob Oxspring Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-io Highest Vendor pom name Apache Commons IO High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-io/ Highest Product file name commons-io High Product gradle artifactid commons-io Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name file Highest Product jar package name io Highest Product Manifest automatic-module-name org.apache.commons.io Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Product Manifest Bundle-Name Apache Commons IO Medium Product Manifest bundle-symbolicname org.apache.commons.commons-io Medium Product Manifest Implementation-Title Apache Commons IO High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons IO Medium Product pom artifactid commons-io Highest Product pom developer email bayard@apache.org Low Product pom developer email dion@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email jeremias@apache.org Low Product pom developer email jochen.wiedmann@gmail.com Low Product pom developer email krosenvold@apache.org Low Product pom developer email martinc@apache.org Low Product pom developer email matth@apache.org Low Product pom developer email nicolaken@apache.org Low Product pom developer email roxspring@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer id bayard Low Product pom developer id dion Low Product pom developer id ggregory Low Product pom developer id jeremias Low Product pom developer id jochen Low Product pom developer id jukka Low Product pom developer id krosenvold Low Product pom developer id martinc Low Product pom developer id matth Low Product pom developer id niallp Low Product pom developer id nicolaken Low Product pom developer id roxspring Low Product pom developer id sanders Low Product pom developer id scolebourne Low Product pom developer name dIon Gillard Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jeremias Maerki Low Product pom developer name Jochen Wiedmann Low Product pom developer name Jukka Zitting Low Product pom developer name Kristian Rosenvold Low Product pom developer name Martin Cooper Low Product pom developer name Matthew Hawthorne Low Product pom developer name Niall Pemberton Low Product pom developer name Nicola Ken Barozzi Low Product pom developer name Rob Oxspring Low Product pom developer name Scott Sanders Low Product pom developer name Stephen Colebourne Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-io Highest Product pom name Apache Commons IO High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-io/ Medium Version file version 2.15.1 High Version gradle version 2.15.1 Highest Version Manifest Bundle-Version 2.15.1 High Version Manifest Implementation-Version 2.15.1 High Version pom parent-version 2.15.1 Low Version pom version 2.15.1 Highest
commons-io-2.16.1.jarDescription:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-io/commons-io/2.16.1/377d592e740dc77124e0901291dbfaa6810a200e/commons-io-2.16.1.jar
MD5: ed8191a5a217940140001b0acfed18d9
SHA1: 377d592e740dc77124e0901291dbfaa6810a200e
SHA256: f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath commons-io-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name commons-io High Vendor gradle artifactid commons-io Highest Vendor gradle groupid commons-io Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name file Highest Vendor jar package name io Highest Vendor Manifest automatic-module-name org.apache.commons.io Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-io Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-io Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email dion@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jeremias@apache.org Low Vendor pom developer email jochen.wiedmann@gmail.com Low Vendor pom developer email krosenvold@apache.org Low Vendor pom developer email martinc@apache.org Low Vendor pom developer email matth@apache.org Low Vendor pom developer email nicolaken@apache.org Low Vendor pom developer email roxspring@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id dion Medium Vendor pom developer id ggregory Medium Vendor pom developer id jeremias Medium Vendor pom developer id jochen Medium Vendor pom developer id jukka Medium Vendor pom developer id krosenvold Medium Vendor pom developer id martinc Medium Vendor pom developer id matth Medium Vendor pom developer id niallp Medium Vendor pom developer id nicolaken Medium Vendor pom developer id roxspring Medium Vendor pom developer id sanders Medium Vendor pom developer id scolebourne Medium Vendor pom developer name dIon Gillard Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jeremias Maerki Medium Vendor pom developer name Jochen Wiedmann Medium Vendor pom developer name Jukka Zitting Medium Vendor pom developer name Kristian Rosenvold Medium Vendor pom developer name Martin Cooper Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Nicola Ken Barozzi Medium Vendor pom developer name Rob Oxspring Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-io Highest Vendor pom name Apache Commons IO High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-io/ Highest Product file name commons-io High Product gradle artifactid commons-io Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name file Highest Product jar package name io Highest Product Manifest automatic-module-name org.apache.commons.io Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Product Manifest Bundle-Name Apache Commons IO Medium Product Manifest bundle-symbolicname org.apache.commons.commons-io Medium Product Manifest Implementation-Title Apache Commons IO High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons IO Medium Product pom artifactid commons-io Highest Product pom developer email bayard@apache.org Low Product pom developer email dion@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email jeremias@apache.org Low Product pom developer email jochen.wiedmann@gmail.com Low Product pom developer email krosenvold@apache.org Low Product pom developer email martinc@apache.org Low Product pom developer email matth@apache.org Low Product pom developer email nicolaken@apache.org Low Product pom developer email roxspring@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer id bayard Low Product pom developer id dion Low Product pom developer id ggregory Low Product pom developer id jeremias Low Product pom developer id jochen Low Product pom developer id jukka Low Product pom developer id krosenvold Low Product pom developer id martinc Low Product pom developer id matth Low Product pom developer id niallp Low Product pom developer id nicolaken Low Product pom developer id roxspring Low Product pom developer id sanders Low Product pom developer id scolebourne Low Product pom developer name dIon Gillard Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jeremias Maerki Low Product pom developer name Jochen Wiedmann Low Product pom developer name Jukka Zitting Low Product pom developer name Kristian Rosenvold Low Product pom developer name Martin Cooper Low Product pom developer name Matthew Hawthorne Low Product pom developer name Niall Pemberton Low Product pom developer name Nicola Ken Barozzi Low Product pom developer name Rob Oxspring Low Product pom developer name Scott Sanders Low Product pom developer name Stephen Colebourne Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-io Highest Product pom name Apache Commons IO High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-io/ Medium Version file version 2.16.1 High Version gradle version 2.16.1 Highest Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom parent-version 2.16.1 Low Version pom version 2.16.1 Highest
commons-lang-2.4.jarDescription:
Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-lang/commons-lang/2.4/16313e02a793435009f1e458fa4af5d879f6fb11/commons-lang-2.4.jar
MD5: 237a8e845441bad2e535c57d985c8204
SHA1: 16313e02a793435009f1e458fa4af5d879f6fb11
SHA256: 2c73b940c91250bc98346926270f13a6a10bb6e29d2c9316a70d134e382c873e
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-lang-2.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-lang High Vendor gradle artifactid commons-lang Highest Vendor gradle groupid commons-lang Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name lang Highest Vendor Manifest bundle-docurl http://commons.apache.org/lang/ Low Vendor Manifest bundle-symbolicname org.apache.commons.lang Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory@seagullsw.com Low Vendor pom developer email jcarman@apache.org Low Vendor pom developer email phil@steitz.com Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email scolebourne@joda.org Low Vendor pom developer email stevencaswell@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id dlr Medium Vendor pom developer id fredrik Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id mbenson Medium Vendor pom developer id niallp Medium Vendor pom developer id psteitz Medium Vendor pom developer id rdonkin Medium Vendor pom developer id scaswell Medium Vendor pom developer id scolebourne Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name Fredrik Westermarck Medium Vendor pom developer name Gary D. Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Matt Benson Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Steven Caswell Medium Vendor pom developer org Carman Consulting, Inc. Medium Vendor pom developer org CollabNet, Inc. Medium Vendor pom developer org Seagull Software Medium Vendor pom developer org SITA ATS Ltd Medium Vendor pom groupid commons-lang Highest Vendor pom name Commons Lang High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/lang/ Highest Product file name commons-lang High Product gradle artifactid commons-lang Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name lang Highest Product Manifest bundle-docurl http://commons.apache.org/lang/ Low Product Manifest Bundle-Name Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang Medium Product Manifest Implementation-Title Commons Lang High Product Manifest specification-title Commons Lang Medium Product pom artifactid commons-lang Highest Product pom developer email bayard@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory@seagullsw.com Low Product pom developer email jcarman@apache.org Low Product pom developer email phil@steitz.com Low Product pom developer email rdonkin@apache.org Low Product pom developer email scolebourne@joda.org Low Product pom developer email stevencaswell@apache.org Low Product pom developer id bayard Low Product pom developer id dlr Low Product pom developer id fredrik Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id mbenson Low Product pom developer id niallp Low Product pom developer id psteitz Low Product pom developer id rdonkin Low Product pom developer id scaswell Low Product pom developer id scolebourne Low Product pom developer name Daniel Rall Low Product pom developer name Fredrik Westermarck Low Product pom developer name Gary D. Gregory Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Matt Benson Low Product pom developer name Niall Pemberton Low Product pom developer name Phil Steitz Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Stephen Colebourne Low Product pom developer name Steven Caswell Low Product pom developer org Carman Consulting, Inc. Low Product pom developer org CollabNet, Inc. Low Product pom developer org Seagull Software Low Product pom developer org SITA ATS Ltd Low Product pom groupid commons-lang Highest Product pom name Commons Lang High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/lang/ Medium Version file version 2.4 High Version gradle version 2.4 Highest Version Manifest Bundle-Version 2.4 High Version Manifest Implementation-Version 2.4 High Version pom parent-version 2.4 Low Version pom version 2.4 Highest
commons-lang3-3.14.0.jarDescription:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-lang3/3.14.0/1ed471194b02f2c6cb734a0cd6f6f107c673afae/commons-lang3-3.14.0.jar
MD5: 4e5c3f5e6b0b965ef241d7d72ac8971f
SHA1: 1ed471194b02f2c6cb734a0cd6f6f107c673afae
SHA256: 7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-lang3-3.14.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.commons/commons-compress@1.26.2 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-lang3 High Vendor gradle artifactid commons-lang3 Highest Vendor gradle groupid org.apache.commons Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name lang3 Highest Vendor Manifest automatic-module-name org.apache.commons.lang3 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email djones@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jcarman@apache.org Low Vendor pom developer email joerg.schaible@gmx.de Low Vendor pom developer email lguibert@apache.org Low Vendor pom developer email oheger@apache.org Low Vendor pom developer email pbenedict@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email scolebourne@joda.org Low Vendor pom developer email stevencaswell@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id djones Medium Vendor pom developer id dlr Medium Vendor pom developer id fredrik Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id joehni Medium Vendor pom developer id lguibert Medium Vendor pom developer id mbenson Medium Vendor pom developer id niallp Medium Vendor pom developer id oheger Medium Vendor pom developer id pbenedict Medium Vendor pom developer id rdonkin Medium Vendor pom developer id scaswell Medium Vendor pom developer id scolebourne Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name Duncan Jones Medium Vendor pom developer name Fredrik Westermarck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Joerg Schaible Medium Vendor pom developer name Loic Guibert Medium Vendor pom developer name Matt Benson Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Oliver Heger Medium Vendor pom developer name Paul Benedict Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Steven Caswell Medium Vendor pom developer org Carman Consulting, Inc. Medium Vendor pom developer org CollabNet, Inc. Medium Vendor pom developer org SITA ATS Ltd Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Lang High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-lang/ Highest Product file name commons-lang3 High Product gradle artifactid commons-lang3 Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name lang3 Highest Product Manifest automatic-module-name org.apache.commons.lang3 Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low Product Manifest Bundle-Name Apache Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product Manifest Implementation-Title Apache Commons Lang High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Lang Medium Product pom artifactid commons-lang3 Highest Product pom developer email bayard@apache.org Low Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email djones@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory at apache.org Low Product pom developer email jcarman@apache.org Low Product pom developer email joerg.schaible@gmx.de Low Product pom developer email lguibert@apache.org Low Product pom developer email oheger@apache.org Low Product pom developer email pbenedict@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email scolebourne@joda.org Low Product pom developer email stevencaswell@apache.org Low Product pom developer id bayard Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id djones Low Product pom developer id dlr Low Product pom developer id fredrik Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id joehni Low Product pom developer id lguibert Low Product pom developer id mbenson Low Product pom developer id niallp Low Product pom developer id oheger Low Product pom developer id pbenedict Low Product pom developer id rdonkin Low Product pom developer id scaswell Low Product pom developer id scolebourne Low Product pom developer name Benedikt Ritter Low Product pom developer name Daniel Rall Low Product pom developer name Duncan Jones Low Product pom developer name Fredrik Westermarck Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Joerg Schaible Low Product pom developer name Loic Guibert Low Product pom developer name Matt Benson Low Product pom developer name Niall Pemberton Low Product pom developer name Oliver Heger Low Product pom developer name Paul Benedict Low Product pom developer name Rob Tompkins Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Stephen Colebourne Low Product pom developer name Steven Caswell Low Product pom developer org Carman Consulting, Inc. Low Product pom developer org CollabNet, Inc. Low Product pom developer org SITA ATS Ltd Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Lang High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-lang/ Medium Version file version 3.14.0 High Version gradle version 3.14.0 Highest Version Manifest Bundle-Version 3.14.0 High Version Manifest Implementation-Version 3.14.0 High Version pom parent-version 3.14.0 Low Version pom version 3.14.0 Highest
commons-logging-1.2.jarDescription:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-logging/commons-logging/1.2/4bfc12adfe4842bf07b657f0369c4cb522955686/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath commons-logging-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name commons-logging High Vendor gradle artifactid commons-logging Highest Vendor gradle groupid commons-logging Highest Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name logging Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Vendor Manifest bundle-symbolicname org.apache.commons.logging Medium Vendor Manifest implementation-build tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-logging Low Vendor pom developer email baliuka@apache.org Low Vendor pom developer email costin@apache.org Low Vendor pom developer email craigmcc@apache.org Low Vendor pom developer email dennisl@apache.org Low Vendor pom developer email donaldp@apache.org Low Vendor pom developer email morgand@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email rsitze@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer email tn@apache.org Low Vendor pom developer id baliuka Medium Vendor pom developer id bstansberry Medium Vendor pom developer id costin Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dennisl Medium Vendor pom developer id donaldp Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rsitze Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id skitching Medium Vendor pom developer id tn Medium Vendor pom developer name Brian Stansberry Medium Vendor pom developer name Costin Manolache Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dennis Lundberg Medium Vendor pom developer name Juozas Baliuka Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Peter Donald Medium Vendor pom developer name Richard Sitze Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer org Apache Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom groupid commons-logging Highest Vendor pom name Apache Commons Logging High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/proper/commons-logging/ Highest Product file name commons-logging High Product gradle artifactid commons-logging Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name logging Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Product Manifest Bundle-Name Apache Commons Logging Medium Product Manifest bundle-symbolicname org.apache.commons.logging Medium Product Manifest implementation-build tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200 Low Product Manifest Implementation-Title Apache Commons Logging High Product Manifest specification-title Apache Commons Logging Medium Product pom artifactid commons-logging Highest Product pom developer email baliuka@apache.org Low Product pom developer email costin@apache.org Low Product pom developer email craigmcc@apache.org Low Product pom developer email dennisl@apache.org Low Product pom developer email donaldp@apache.org Low Product pom developer email morgand@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email rsitze@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer email skitching@apache.org Low Product pom developer email tn@apache.org Low Product pom developer id baliuka Low Product pom developer id bstansberry Low Product pom developer id costin Low Product pom developer id craigmcc Low Product pom developer id dennisl Low Product pom developer id donaldp Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rsitze Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id skitching Low Product pom developer id tn Low Product pom developer name Brian Stansberry Low Product pom developer name Costin Manolache Low Product pom developer name Craig McClanahan Low Product pom developer name Dennis Lundberg Low Product pom developer name Juozas Baliuka Low Product pom developer name Morgan Delagrange Low Product pom developer name Peter Donald Low Product pom developer name Richard Sitze Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer name Thomas Neidhart Low Product pom developer org Apache Low Product pom developer org The Apache Software Foundation Low Product pom groupid commons-logging Highest Product pom name Apache Commons Logging High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/proper/commons-logging/ Medium Version file version 1.2 High Version gradle version 1.2 Highest Version Manifest Implementation-Version 1.2 High Version pom parent-version 1.2 Low Version pom version 1.2 Highest
compress-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/compress-plugin/build/libs/compress-plugin-8.7.1.jarMD5: 84f7c68e6bb6c83f999cf2f8362c01d2SHA1: 4fb64a311b925a2e813a87a2d905ea3d0dbe4d6cSHA256: dda1b037a7f3cb29664592b7f86b1bec733d1fd9d7f28b70e097c3cd1454d46eReferenced In Project/Scope: documentation:javadocClasspathcompress-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name compress-plugin High Vendor gradle artifactid compress-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name compress-plugin High Product gradle artifactid compress-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
converter-gson-2.11.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.retrofit2/converter-gson/2.11.0/9d1fe9d1662de0548e08e293041140a8e4026f81/converter-gson-2.11.0.jarMD5: 0a5729d06133e4fdf6d484fda465b5c3SHA1: 9d1fe9d1662de0548e08e293041140a8e4026f81SHA256: 3d2b4b668909468465c5776430b57232275d0165513f20fc96b0cfe4aa531326Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath converter-gson-2.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name converter-gson High Vendor gradle artifactid converter-gson Highest Vendor gradle groupid com.squareup.retrofit2 Highest Vendor jar package name converter Highest Vendor jar package name converter Low Vendor jar package name gson Highest Vendor jar package name gson Low Vendor jar package name retrofit2 Highest Vendor jar package name retrofit2 Low Vendor Manifest automatic-module-name retrofit2.converter.gson Medium Product file name converter-gson High Product gradle artifactid converter-gson Highest Product jar package name converter Highest Product jar package name converter Low Product jar package name gson Highest Product jar package name gson Low Product jar package name retrofit2 Highest Product Manifest automatic-module-name retrofit2.converter.gson Medium Version file name converter-gson Medium Version file version 2.11.0 High Version gradle version 2.11.0 Highest
dec-0.1.2.jarDescription:
Brotli is a generic-purpose lossless compression algorithm. License:
http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.brotli/dec/0.1.2/c26a897ae0d524809eef1c786cc6183b4ddcc3b/dec-0.1.2.jar
MD5: 4b1cd14cf29733941cc536b27e6aedfa
SHA1: 0c26a897ae0d524809eef1c786cc6183b4ddcc3b
SHA256: 615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath dec-0.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name dec High Vendor gradle artifactid dec Highest Vendor gradle groupid org.brotli Highest Vendor jar package name brotli Highest Vendor jar package name dec Highest Vendor Manifest bundle-docurl http://brotli.org/dec Low Vendor Manifest bundle-symbolicname org.brotli.dec Medium Vendor pom artifactid dec Low Vendor pom groupid org.brotli Highest Vendor pom name : High Vendor pom parent-artifactid parent Low Product file name dec High Product gradle artifactid dec Highest Product jar package name brotli Highest Product jar package name dec Highest Product Manifest bundle-docurl http://brotli.org/dec Low Product Manifest Bundle-Name org.brotli:dec Medium Product Manifest bundle-symbolicname org.brotli.dec Medium Product pom artifactid dec Highest Product pom groupid org.brotli Highest Product pom name : High Product pom parent-artifactid parent Medium Version file version 0.1.2 High Version gradle version 0.1.2 Highest Version Manifest Bundle-Version 0.1.2 High Version pom version 0.1.2 Highest
doxia-logging-api-1.11.1.jarDescription:
Doxia Logging API. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.doxia/doxia-logging-api/1.11.1/ee28757cce6ee0215bac550dead25074c97c532d/doxia-logging-api-1.11.1.jarMD5: 6452e33a36b87939630e0b18f8ffcff0SHA1: ee28757cce6ee0215bac550dead25074c97c532dSHA256: 243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath doxia-logging-api-1.11.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name doxia-logging-api High Vendor gradle artifactid doxia-logging-api Highest Vendor gradle groupid org.apache.maven.doxia Highest Vendor jar package name apache Highest Vendor jar package name doxia Highest Vendor jar package name logging Highest Vendor jar package name maven Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid doxia-logging-api Low Vendor pom groupid org.apache.maven.doxia Highest Vendor pom name Doxia :: Logging API High Vendor pom parent-artifactid doxia Low Product file name doxia-logging-api High Product gradle artifactid doxia-logging-api Highest Product jar package name apache Highest Product jar package name doxia Highest Product jar package name logging Highest Product jar package name maven Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Doxia :: Logging API High Product Manifest specification-title Doxia :: Logging API Medium Product pom artifactid doxia-logging-api Highest Product pom groupid org.apache.maven.doxia Highest Product pom name Doxia :: Logging API High Product pom parent-artifactid doxia Medium Version file version 1.11.1 High Version gradle version 1.11.1 Highest Version Manifest Implementation-Version 1.11.1 High Version pom version 1.11.1 Highest
doxia-sink-api-1.11.1.jarDescription:
Doxia Sink API. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.doxia/doxia-sink-api/1.11.1/59c2255f58c78fbbcb7e638e82bd2914e78aec8b/doxia-sink-api-1.11.1.jarMD5: b1bd5c9efde9f14969fa881b87fe709bSHA1: 59c2255f58c78fbbcb7e638e82bd2914e78aec8bSHA256: 39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28fReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath doxia-sink-api-1.11.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name doxia-sink-api High Vendor gradle artifactid doxia-sink-api Highest Vendor gradle groupid org.apache.maven.doxia Highest Vendor jar package name apache Highest Vendor jar package name doxia Highest Vendor jar package name maven Highest Vendor jar package name sink Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid doxia-sink-api Low Vendor pom groupid org.apache.maven.doxia Highest Vendor pom name Doxia :: Sink API High Vendor pom parent-artifactid doxia Low Product file name doxia-sink-api High Product gradle artifactid doxia-sink-api Highest Product jar package name apache Highest Product jar package name doxia Highest Product jar package name maven Highest Product jar package name sink Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Doxia :: Sink API High Product Manifest specification-title Doxia :: Sink API Medium Product pom artifactid doxia-sink-api Highest Product pom groupid org.apache.maven.doxia Highest Product pom name Doxia :: Sink API High Product pom parent-artifactid doxia Medium Version file version 1.11.1 High Version gradle version 1.11.1 Highest Version Manifest Implementation-Version 1.11.1 High Version pom version 1.11.1 Highest
embedded-sass-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/embedded-sass-plugin/build/libs/embedded-sass-plugin-8.7.1.jarMD5: 60cf9432a59309219abbed5d3dc9f3fcSHA1: 64c374378f7719ace6d74fa881fbc818733c8d2dSHA256: 17338923c190e4c42c6fd11e419f3ce816a5248112a744fbf84af039ef2cec3fReferenced In Project/Scope: documentation:javadocClasspathembedded-sass-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name embedded-sass-plugin High Vendor gradle artifactid embedded-sass-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name embedded-sass-plugin High Product gradle artifactid embedded-sass-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
error_prone_annotations-2.18.0.jarLicense:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.errorprone/error_prone_annotations/2.18.0/89b684257096f548fa39a7df9fdaa409d4d4df91/error_prone_annotations-2.18.0.jar
MD5: 64145d0e7fee5a69ed7b84cf402de998
SHA1: 89b684257096f548fa39a7df9fdaa409d4d4df91
SHA256: 9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae
Referenced In Project/Scope: documentation:javadocClasspath
error_prone_annotations-2.18.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 Evidence Type Source Name Value Confidence Vendor file name error_prone_annotations High Vendor gradle artifactid error_prone_annotations Highest Vendor gradle groupid com.google.errorprone Highest Vendor jar package name annotations Highest Vendor jar package name errorprone Highest Vendor jar package name google Highest Vendor Manifest automatic-module-name com.google.errorprone.annotations Medium Vendor Manifest build-jdk-spec 11 Low Vendor pom artifactid error_prone_annotations Low Vendor pom groupid com.google.errorprone Highest Vendor pom name error-prone annotations High Vendor pom parent-artifactid error_prone_parent Low Product file name error_prone_annotations High Product gradle artifactid error_prone_annotations Highest Product jar package name annotations Highest Product jar package name errorprone Highest Product jar package name google Highest Product Manifest automatic-module-name com.google.errorprone.annotations Medium Product Manifest build-jdk-spec 11 Low Product pom artifactid error_prone_annotations Highest Product pom groupid com.google.errorprone Highest Product pom name error-prone annotations High Product pom parent-artifactid error_prone_parent Medium Version file version 2.18.0 High Version gradle version 2.18.0 Highest Version pom version 2.18.0 Highest
failureaccess-1.0.1.jarDescription:
Contains
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
InternalFutures. Most users will never need to use this artifact. Its
classes is conceptually a part of Guava, but they're in this separate
artifact so that Android libraries can use them without pulling in all of
Guava (just as they can use ListenableFuture by depending on the
listenablefuture artifact).
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.guava/failureaccess/1.0.1/1dcf1de382a0bf95a3d8b0849546c88bac1292c9/failureaccess-1.0.1.jar
MD5: 091883993ef5bfa91da01dcc8fc52236
SHA1: 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA256: a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath failureaccess-1.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name failureaccess High Vendor gradle artifactid failureaccess Highest Vendor gradle groupid com.google.guava Highest Vendor jar package name common Highest Vendor jar package name concurrent Highest Vendor jar package name google Highest Vendor jar package name util Highest Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor Manifest bundle-symbolicname com.google.guava.failureaccess Medium Vendor pom artifactid failureaccess Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava InternalFutureFailureAccess and InternalFutures High Vendor pom parent-artifactid guava-parent Low Product file name failureaccess High Product gradle artifactid failureaccess Highest Product jar package name common Highest Product jar package name concurrent Highest Product jar package name google Highest Product jar package name util Highest Product Manifest bundle-docurl https://github.com/google/guava/ Low Product Manifest Bundle-Name Guava InternalFutureFailureAccess and InternalFutures Medium Product Manifest bundle-symbolicname com.google.guava.failureaccess Medium Product pom artifactid failureaccess Highest Product pom groupid com.google.guava Highest Product pom name Guava InternalFutureFailureAccess and InternalFutures High Product pom parent-artifactid guava-parent Medium Version file version 1.0.1 High Version gradle version 1.0.1 Highest Version Manifest Bundle-Version 1.0.1 High Version pom parent-version 1.0.1 Low Version pom version 1.0.1 Highest
git-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/git-plugin/build/libs/git-plugin-8.7.1.jarMD5: 88b8a4edaf481b658eb292f2082e5b19SHA1: 0ed2ea3b62cea596e80cc67d589ce6e97d7b5771SHA256: 61758d63737321e6dd919d469b275b18f4d87969909dccda135b9bd3b52dccebReferenced In Project/Scope: documentation:javadocClasspathgit-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name git-plugin High Vendor gradle artifactid git-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name git-plugin High Product gradle artifactid git-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
github-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/github-plugin/build/libs/github-plugin-8.7.1.jarMD5: 93abca692f033a772b58f38076b0a07fSHA1: bf57ea7ec76c53d631773694192988afbd366cacSHA256: 0544772b2cdc581902098d9791db18cb867747c16fc4e29ba32944f8c5206a06Referenced In Project/Scope: documentation:javadocClasspathgithub-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name github-plugin High Vendor gradle artifactid github-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name github-plugin High Product gradle artifactid github-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
gradle-node-plugin-7.0.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.node-gradle/gradle-node-plugin/7.0.0/af9bce20964420e50d46e45fc14103200c651fd9/gradle-node-plugin-7.0.0.jarMD5: b98aef5efa9518376c89bf9d024b78d7SHA1: af9bce20964420e50d46e45fc14103200c651fd9SHA256: 285a384698f1c3a683afd19be12eb63bbb1602ee5b643b88e42ddf67251382b2Referenced In Projects/Scopes:
mjml-plugin:runtimeClasspath mjml-plugin:compileClasspath mjml-plugin:implementationDependenciesMetadata gradle-node-plugin-7.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name gradle-node-plugin High Vendor gradle artifactid gradle-node-plugin Highest Vendor gradle groupid com.github.node-gradle Highest Vendor jar package name github Low Vendor jar package name gradle Low Vendor jar package name node Low Product file name gradle-node-plugin High Product gradle artifactid gradle-node-plugin Highest Product jar package name gradle Low Product jar package name node Low Version file name gradle-node-plugin Medium Version file version 7.0.0 High Version gradle version 7.0.0 Highest
gradle-node-plugin-7.0.2.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.node-gradle/gradle-node-plugin/7.0.2/6853f790daea0f2e25e0b1acf8d268a014c814f6/gradle-node-plugin-7.0.2.jarMD5: ff61ad86b0121190004bff23a7ae4fd3SHA1: 6853f790daea0f2e25e0b1acf8d268a014c814f6SHA256: bfd8cb644593e7f6b6b719011fdaca4af0c02485e28176904470f300e48a19e2Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata gradle-node-plugin-7.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name gradle-node-plugin High Vendor gradle artifactid gradle-node-plugin Highest Vendor gradle groupid com.github.node-gradle Highest Vendor jar package name github Low Vendor jar package name gradle Low Vendor jar package name node Low Product file name gradle-node-plugin High Product gradle artifactid gradle-node-plugin Highest Product jar package name gradle Low Product jar package name node Low Version file name gradle-node-plugin Medium Version file version 7.0.2 High Version gradle version 7.0.2 Highest
gson-2.10.1.jarDescription:
Gson JSON library License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.code.gson/gson/2.10.1/b3add478d4382b78ea20b1671390a858002feb6c/gson-2.10.1.jar
MD5: df6097815738cb31fc56391553210843
SHA1: b3add478d4382b78ea20b1671390a858002feb6c
SHA256: 4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593
Referenced In Projects/Scopes: documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath gson-2.10.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name gson High Vendor gradle artifactid gson Highest Vendor gradle groupid com.google.code.gson Highest Vendor jar package name google Highest Vendor jar package name gson Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Vendor Manifest bundle-docurl https://github.com/google/gson/gson Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor Manifest multi-release true Low Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product file name gson High Product gradle artifactid gson Highest Product jar package name google Highest Product jar package name gson Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Product Manifest bundle-docurl https://github.com/google/gson/gson Low Product Manifest Bundle-Name Gson Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-symbolicname com.google.gson Medium Product Manifest multi-release true Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version file version 2.10.1 High Version gradle version 2.10.1 Highest Version Manifest Bundle-Version 2.10.1 High Version pom version 2.10.1 Highest
guava-32.0.1-jre.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, Google's collections, I/O classes, and
much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.guava/guava/32.0.1-jre/6e5d51a72d142f2d40a57dfb897188b36a95b489/guava-32.0.1-jre.jar
MD5: 6951895e804b36322214c95917e598d4
SHA1: 6e5d51a72d142f2d40a57dfb897188b36a95b489
SHA256: bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath guava-32.0.1-jre.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name guava High Vendor gradle artifactid guava Highest Vendor gradle groupid com.google.guava Highest Vendor jar package name common Highest Vendor jar package name google Highest Vendor Manifest automatic-module-name com.google.common Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom artifactid guava Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor pom parent-artifactid guava-parent Low Vendor pom url google/guava Highest Product file name guava High Product gradle artifactid guava Highest Product jar package name common Highest Product jar package name google Highest Product Manifest automatic-module-name com.google.common Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://github.com/google/guava/ Low Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product Manifest bundle-symbolicname com.google.guava Medium Product pom artifactid guava Highest Product pom groupid com.google.guava Highest Product pom name Guava: Google Core Libraries for Java High Product pom parent-artifactid guava-parent Medium Product pom url google/guava High Version gradle version 32.0.1-jre Highest Version pom version 32.0.1-jre Highest
guice-5.1.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.inject/guice/5.1.0/da25056c694c54ba16e78e4fc35f17fc60f0d1b4/guice-5.1.0.jar
MD5: 2560169296aa94492af34af2115e9511
SHA1: da25056c694c54ba16e78e4fc35f17fc60f0d1b4
SHA256: 4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath guice-5.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name guice High Vendor gradle artifactid guice Highest Vendor gradle groupid com.google.inject Highest Vendor jar package name google Highest Vendor jar package name google Low Vendor jar package name guice Highest Vendor jar package name inject Highest Vendor jar package name inject Low Vendor jar package name internal Low Vendor Manifest automatic-module-name com.google.guice Medium Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.google.inject Medium Vendor Manifest eclipse-extensibleapi true Low Product file name guice High Product gradle artifactid guice Highest Product jar package name dependency Highest Product jar package name google Highest Product jar package name guice Highest Product jar package name inject Highest Product jar package name inject Low Product jar package name internal Low Product Manifest automatic-module-name com.google.guice Medium Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-docurl https://github.com/google/guice Low Product Manifest Bundle-Name guice Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.google.inject Medium Product Manifest eclipse-extensibleapi true Low Version file name guice Medium Version file version 5.1.0 High Version gradle version 5.1.0 Highest Version jar package name google Highest Version jar package name guice Highest Version Manifest bundle-copyright 2006 Low Version Manifest Bundle-Version 5.1.0 High
httpclient-4.5.14.jarDescription:
Apache HttpComponents Client
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.httpcomponents/httpclient/4.5.14/1194890e6f56ec29177673f2f12d0b8e627dec98/httpclient-4.5.14.jarMD5: 2cb357c4b763f47e58af6cad47df6ba3SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98SHA256: c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath httpclient-4.5.14.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name httpclient High Vendor gradle artifactid httpclient Highest Vendor gradle groupid org.apache.httpcomponents Highest Vendor jar package name apache Highest Vendor jar package name client Highest Vendor jar package name httpclient Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.httpcomponents Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid httpclient Low Vendor pom groupid org.apache.httpcomponents Highest Vendor pom name Apache HttpClient High Vendor pom parent-artifactid httpcomponents-client Low Vendor pom url http://hc.apache.org/httpcomponents-client-ga Highest Product file name httpclient High Product gradle artifactid httpclient Highest Product jar package name apache Highest Product jar package name client Highest Product jar package name http Highest Product jar package name httpclient Highest Product Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium Product Manifest Implementation-Title Apache HttpClient High Product Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low Product Manifest specification-title Apache HttpClient Medium Product pom artifactid httpclient Highest Product pom groupid org.apache.httpcomponents Highest Product pom name Apache HttpClient High Product pom parent-artifactid httpcomponents-client Medium Product pom url http://hc.apache.org/httpcomponents-client-ga Medium Version file version 4.5.14 High Version gradle version 4.5.14 Highest Version Manifest Implementation-Version 4.5.14 High Version pom version 4.5.14 Highest
httpcore-4.4.16.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.httpcomponents/httpcore/4.4.16/51cf043c87253c9f58b539c9f7e44c8894223850/httpcore-4.4.16.jarMD5: 28d2cd9bf8789fd2ec774fb88436ebd1SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850SHA256: 6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464fReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath httpcore-4.4.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name httpcore High Vendor gradle artifactid httpcore Highest Vendor gradle groupid org.apache.httpcomponents Highest Vendor jar package name apache Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000 Low Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom artifactid httpcore Low Vendor pom groupid org.apache.httpcomponents Highest Vendor pom name Apache HttpCore High Vendor pom parent-artifactid httpcomponents-core Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Product file name httpcore High Product gradle artifactid httpcore Highest Product jar package name apache Highest Product jar package name http Highest Product Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000 Low Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product Manifest specification-title HttpComponents Apache HttpCore Medium Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom artifactid httpcore Highest Product pom groupid org.apache.httpcomponents Highest Product pom name Apache HttpCore High Product pom parent-artifactid httpcomponents-core Medium Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Version file version 4.4.16 High Version gradle version 4.4.16 Highest Version Manifest Implementation-Version 4.4.16 High Version pom version 4.4.16 Highest
j2objc-annotations-2.8.jarDescription:
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.j2objc/j2objc-annotations/2.8/c85270e307e7b822f1086b93689124b89768e273/j2objc-annotations-2.8.jar
MD5: c50af69b704dc91050efb98e0dff66d1
SHA1: c85270e307e7b822f1086b93689124b89768e273
SHA256: f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed
Referenced In Project/Scope: documentation:javadocClasspath
j2objc-annotations-2.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 Evidence Type Source Name Value Confidence Vendor file name j2objc-annotations High Vendor gradle artifactid j2objc-annotations Highest Vendor gradle groupid com.google.j2objc Highest Vendor jar package name annotations Highest Vendor jar package name annotations Low Vendor jar package name google Highest Vendor jar package name google Low Vendor jar package name j2objc Highest Vendor jar package name j2objc Low Vendor pom artifactid j2objc-annotations Low Vendor pom groupid com.google.j2objc Highest Vendor pom name J2ObjC Annotations High Vendor pom url google/j2objc/ Highest Product file name j2objc-annotations High Product gradle artifactid j2objc-annotations Highest Product jar package name annotations Highest Product jar package name annotations Low Product jar package name google Highest Product jar package name j2objc Highest Product jar package name j2objc Low Product pom artifactid j2objc-annotations Highest Product pom groupid com.google.j2objc Highest Product pom name J2ObjC Annotations High Product pom url google/j2objc/ High Version file version 2.8 High Version gradle version 2.8 Highest Version pom version 2.8 Highest
jackson-annotations-2.14.2.jarDescription:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-annotations/2.14.2/a7aae9525864930723e3453ab799521fdfd9d873/jackson-annotations-2.14.2.jar
MD5: 10d19982a8890f6eb37557af2f58e272
SHA1: a7aae9525864930723e3453ab799521fdfd9d873
SHA256: 2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d
Referenced In Projects/Scopes: mjml-plugin:runtimeClasspath quicktype-plugin:runtimeClasspath jackson-annotations-2.14.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.0 pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.2 Evidence Type Source Name Value Confidence Vendor file name jackson-annotations High Vendor gradle artifactid jackson-annotations Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-annotations Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-annotations High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-annotations High Product gradle artifactid jackson-annotations Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name Jackson-annotations Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product Manifest Implementation-Title Jackson-annotations High Product Manifest specification-title Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-annotations High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.14.2 High Version gradle version 2.14.2 Highest Version Manifest Bundle-Version 2.14.2 High Version Manifest Implementation-Version 2.14.2 High Version pom parent-version 2.14.2 Low Version pom version 2.14.2 Highest
jackson-annotations-2.17.1.jarDescription:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-annotations/2.17.1/fca7ef6192c9ad05d07bc50da991bf937a84af3a/jackson-annotations-2.17.1.jar
MD5: dbeffa5994a6234489a205fd7f33d9b9
SHA1: fca7ef6192c9ad05d07bc50da991bf937a84af3a
SHA256: fccad82e13172c0e4384db71577219c9b8631c0820f4b18daaa57016fb661c76
Referenced In Project/Scope: documentation:javadocClasspath
jackson-annotations-2.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name jackson-annotations High Vendor gradle artifactid jackson-annotations Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-annotations Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-annotations High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-annotations High Product gradle artifactid jackson-annotations Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name Jackson-annotations Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product Manifest Implementation-Title Jackson-annotations High Product Manifest specification-title Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-annotations High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.17.1 High Version gradle version 2.17.1 Highest Version Manifest Bundle-Version 2.17.1 High Version Manifest Implementation-Version 2.17.1 High Version pom parent-version 2.17.1 Low Version pom version 2.17.1 Highest
jackson-core-2.14.2.jarDescription:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.14.2/f804090e6399ce0cf78242db086017512dd71fcc/jackson-core-2.14.2.jar
MD5: 6ee422ee4c481b2d5aacb2b5e36a7dc0
SHA1: f804090e6399ce0cf78242db086017512dd71fcc
SHA256: b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a
Referenced In Projects/Scopes: mjml-plugin:runtimeClasspath quicktype-plugin:runtimeClasspath jackson-core-2.14.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.0 pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.2 Evidence Type Source Name Value Confidence Vendor file name jackson-core High Vendor gradle artifactid jackson-core Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name base Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product gradle artifactid jackson-core Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.14.2 High Version gradle version 2.14.2 Highest Version Manifest Bundle-Version 2.14.2 High Version Manifest Implementation-Version 2.14.2 High Version pom version 2.14.2 Highest
jackson-core-2.17.1.jarDescription:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.17.1/5e52a11644cd59a28ef79f02bddc2cc3bab45edb/jackson-core-2.17.1.jar
MD5: 9363584821290882417f1c3ceab784df
SHA1: 5e52a11644cd59a28ef79f02bddc2cc3bab45edb
SHA256: ddb26c8a1f1a84535e8213c48b35b253370434e3287b3cf15777856fc4e58ce6
Referenced In Projects/Scopes: documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath jackson-core-2.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.webjars/webjars-locator-core@0.59 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.webjars/webjars-locator-core@0.59 Evidence Type Source Name Value Confidence Vendor file name jackson-core High Vendor gradle artifactid jackson-core Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name base Highest Vendor jar package name com Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product gradle artifactid jackson-core Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name com Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.17.1 High Version gradle version 2.17.1 Highest Version Manifest Bundle-Version 2.17.1 High Version Manifest Implementation-Version 2.17.1 High Version pom version 2.17.1 Highest
jackson-databind-2.14.2.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.14.2/1e71fddbc80bb86f71a6345ac1e8ab8a00e7134/jackson-databind-2.14.2.jar
MD5: c1b12dd14734cd1986132bf55042dd7e
SHA1: 01e71fddbc80bb86f71a6345ac1e8ab8a00e7134
SHA256: 501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424
Referenced In Projects/Scopes: mjml-plugin:runtimeClasspath quicktype-plugin:runtimeClasspath jackson-databind-2.14.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.0 pkg:maven/com.github.node-gradle/gradle-node-plugin@7.0.2 Evidence Type Source Name Value Confidence Vendor file name jackson-databind High Vendor gradle artifactid jackson-databind Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product gradle artifactid jackson-databind Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.14.2 High Version gradle version 2.14.2 Highest Version Manifest Bundle-Version 2.14.2 High Version Manifest Implementation-Version 2.14.2 High Version pom version 2.14.2 Highest
CVE-2023-35116 suppress
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (4.7) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:1.0/RC:R/MAV:A References:
Vulnerable Software & Versions:
jackson-databind-2.17.1.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.17.1/524dcbcccdde7d45a679dfc333e4763feb09079/jackson-databind-2.17.1.jar
MD5: f0a1c37dc7d937f14e183d84f15c0f83
SHA1: 0524dcbcccdde7d45a679dfc333e4763feb09079
SHA256: b6ca2f7d5b1ab245cec5495ec339773d2d90554c48592590673fb18f4400a948
Referenced In Project/Scope: documentation:javadocClasspath
jackson-databind-2.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name jackson-databind High Vendor gradle artifactid jackson-databind Highest Vendor gradle groupid com.fasterxml.jackson.core Highest Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product gradle artifactid jackson-databind Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.17.1 High Version gradle version 2.17.1 Highest Version Manifest Bundle-Version 2.17.1 High Version Manifest Implementation-Version 2.17.1 High Version pom version 2.17.1 Highest
jacoco-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/jacoco-plugin/build/libs/jacoco-plugin-8.7.1.jarMD5: fa91a5895ea0e29c601b6ebbfdd6a83aSHA1: 678fd66639139ad7f168357979ae133601d097bcSHA256: c282062ac8543dfa6a4ee10eb40dc8ffe79f0c4332775ebe3ec60815ffbbedecReferenced In Project/Scope: documentation:javadocClasspathjacoco-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name jacoco-plugin High Vendor gradle artifactid jacoco-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name jacoco-plugin High Product gradle artifactid jacoco-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
javapoet-1.13.0.jarDescription:
Use beautiful Java code to generate beautiful Java code. License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup/javapoet/1.13.0/d6562d385049f35eb50403fa86bb11cce76b866a/javapoet-1.13.0.jar
MD5: 8d9a3cbeaa83e6700478b73c33a1b4fe
SHA1: d6562d385049f35eb50403fa86bb11cce76b866a
SHA256: 4c7517e848a71b36d069d12bb3bf46a70fd4cda3105d822b0ed2e19c00b69291
Referenced In Projects/Scopes: documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath javapoet-1.13.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 Evidence Type Source Name Value Confidence Vendor file name javapoet High Vendor gradle artifactid javapoet Highest Vendor gradle groupid com.squareup Highest Vendor jar package name javapoet Highest Vendor jar package name squareup Highest Vendor Manifest automatic-module-name com.squareup.javapoet Medium Vendor pom artifactid javapoet Low Vendor pom groupid com.squareup Highest Vendor pom name JavaPoet High Vendor pom organization name Square, Inc. High Vendor pom organization url http://squareup.com Medium Vendor pom url http://github.com/square/javapoet/ Highest Product file name javapoet High Product gradle artifactid javapoet Highest Product jar package name javapoet Highest Product jar package name squareup Highest Product Manifest automatic-module-name com.squareup.javapoet Medium Product pom artifactid javapoet Highest Product pom groupid com.squareup Highest Product pom name JavaPoet High Product pom organization name Square, Inc. Low Product pom organization url http://squareup.com Low Product pom url http://github.com/square/javapoet/ Medium Version file version 1.13.0 High Version gradle version 1.13.0 Highest Version pom version 1.13.0 Highest
javax.annotation-api-1.2.jarDescription:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.annotation/javax.annotation-api/1.2/479c1e06db31c432330183f5cae684163f186146/javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256: 5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath javax.annotation-api-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name javax.annotation-api High Vendor gradle artifactid javax.annotation-api Highest Vendor gradle groupid javax.annotation Highest Vendor jar package name annotation Highest Vendor jar package name javax Highest Vendor Manifest bundle-docurl https://glassfish.java.net Low Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor Manifest extension-name javax.annotation Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.annotation-api Low Vendor pom developer id mode Medium Vendor pom developer name Rajiv Mordani Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid javax.annotation Highest Vendor pom name API High Vendor pom organization name GlassFish Community High Vendor pom organization url https://glassfish.java.net Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Product file name javax.annotation-api High Product gradle artifactid javax.annotation-api Highest Product jar package name annotation Highest Product jar package name javax Highest Product Manifest bundle-docurl https://glassfish.java.net Low Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product Manifest extension-name javax.annotation Medium Product pom artifactid javax.annotation-api Highest Product pom developer id mode Low Product pom developer name Rajiv Mordani Low Product pom developer org Oracle, Inc. Low Product pom groupid javax.annotation Highest Product pom name API High Product pom organization name GlassFish Community Low Product pom organization url https://glassfish.java.net Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Version file version 1.2 High Version gradle version 1.2 Highest Version Manifest Bundle-Version 1.2 High Version Manifest Implementation-Version 1.2 High Version pom parent-version 1.2 Low Version pom version 1.2 Highest
javax.inject-1.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.inject/javax.inject/1/6975da39a7040257bd51d21a231b76c915872d38/javax.inject-1.jarMD5: 289075e48b909e9e74e6c915b3631d2eSHA1: 6975da39a7040257bd51d21a231b76c915872d38SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ffReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath javax.inject-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name javax.inject-1 High Vendor gradle artifactid javax.inject Highest Vendor gradle groupid javax.inject Highest Vendor jar package name inject Low Vendor jar package name javax Low Product file name javax.inject-1 High Product gradle artifactid javax.inject Highest Product jar package name inject Low Version file name javax.inject-1 Medium Version file version 1 Medium Version gradle version 1 Highest
jcommander-1.82.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.beust/jcommander/1.82/a7c5fef184d238065de38f81bbc6ee50cca2e21/jcommander-1.82.jarMD5: c350dc0db8aa038e6bbaf0050720d69cSHA1: 0a7c5fef184d238065de38f81bbc6ee50cca2e21SHA256: deeac157c8de6822878d85d0c7bc8467a19cc8484d37788f7804f039dde280b1Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r jcommander-1.82.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 Evidence Type Source Name Value Confidence Vendor file name jcommander High Vendor gradle artifactid jcommander Highest Vendor gradle groupid com.beust Highest Vendor jar package name beust Low Vendor jar package name jcommander Low Product file name jcommander High Product gradle artifactid jcommander Highest Product jar package name jcommander Low Version file name jcommander Medium Version file version 1.82 High Version gradle version 1.82 Highest
jlatexmath-1.0.7.jarDescription:
A Java API to render LaTeX File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.scilab.forge/jlatexmath/1.0.7/cf9786b1d813a64a4ad04befc0dae48b9cde8edb/jlatexmath-1.0.7.jarMD5: e4babd85c718a43b210808fd273de910SHA1: cf9786b1d813a64a4ad04befc0dae48b9cde8edbSHA256: 6d04c3843fc98d2eea9ba4cff0be7b80540ca75c5a4e0b3463fd1219c48cc65dReferenced In Project/Scope: documentation:javadocClasspathjlatexmath-1.0.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name jlatexmath High Vendor gradle artifactid jlatexmath Highest Vendor gradle groupid org.scilab.forge Highest Vendor jar package name forge Highest Vendor jar package name forge Low Vendor jar package name jlatexmath Highest Vendor jar package name jlatexmath Low Vendor jar package name scilab Highest Vendor jar package name scilab Low Vendor pom artifactid jlatexmath Low Vendor pom groupid org.scilab.forge Highest Vendor pom parent-artifactid jlatexmath-parent Low Product file name jlatexmath High Product gradle artifactid jlatexmath Highest Product jar package name forge Highest Product jar package name forge Low Product jar package name jlatexmath Highest Product jar package name jlatexmath Low Product jar package name scilab Highest Product pom artifactid jlatexmath Highest Product pom groupid org.scilab.forge Highest Product pom parent-artifactid jlatexmath-parent Medium Version file version 1.0.7 High Version gradle version 1.0.7 Highest Version pom version 1.0.7 Highest
jlatexmath-font-cyrillic-1.0.7.jarDescription:
Cyrillic font for use with jlatexmath File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.scilab.forge/jlatexmath-font-cyrillic/1.0.7/6dac646b8ff63e90eb2b1f893068448956d247dc/jlatexmath-font-cyrillic-1.0.7.jarMD5: e17f364cffdb69bdabf8919bca83f0ceSHA1: 6dac646b8ff63e90eb2b1f893068448956d247dcSHA256: 1a0150e4be64db88c250dff41f593349f55f0c9cfdb8e39433f15ba73ecd21b8Referenced In Project/Scope: documentation:javadocClasspathjlatexmath-font-cyrillic-1.0.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name jlatexmath-font-cyrillic High Vendor gradle artifactid jlatexmath-font-cyrillic Highest Vendor gradle groupid org.scilab.forge Highest Vendor pom artifactid jlatexmath-font-cyrillic Low Vendor pom groupid org.scilab.forge Highest Vendor pom parent-artifactid jlatexmath-parent Low Product file name jlatexmath-font-cyrillic High Product gradle artifactid jlatexmath-font-cyrillic Highest Product pom artifactid jlatexmath-font-cyrillic Highest Product pom groupid org.scilab.forge Highest Product pom parent-artifactid jlatexmath-parent Medium Version file version 1.0.7 High Version gradle version 1.0.7 Highest Version pom version 1.0.7 Highest
jlatexmath-font-greek-1.0.7.jarDescription:
Greek font for use with jlatexmath File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.scilab.forge/jlatexmath-font-greek/1.0.7/63e33c6019f38bd15441410b3ab0c29a5e0dbdaa/jlatexmath-font-greek-1.0.7.jarMD5: c0a1a74df6d7534364ca1700386b0ae0SHA1: 63e33c6019f38bd15441410b3ab0c29a5e0dbdaaSHA256: cddc7e7e6f3e7ff0434c8a4805eadc3e9dc80457d582d19c3699e6aaee8f6af2Referenced In Project/Scope: documentation:javadocClasspathjlatexmath-font-greek-1.0.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name jlatexmath-font-greek High Vendor gradle artifactid jlatexmath-font-greek Highest Vendor gradle groupid org.scilab.forge Highest Vendor pom artifactid jlatexmath-font-greek Low Vendor pom groupid org.scilab.forge Highest Vendor pom parent-artifactid jlatexmath-parent Low Product file name jlatexmath-font-greek High Product gradle artifactid jlatexmath-font-greek Highest Product pom artifactid jlatexmath-font-greek Highest Product pom groupid org.scilab.forge Highest Product pom parent-artifactid jlatexmath-parent Medium Version file version 1.0.7 High Version gradle version 1.0.7 Highest Version pom version 1.0.7 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jffi:1.3.9)Description:
Java Foreign Function Interface License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jffi/pom.xml
MD5: 5d1a63e1ca400249e3d30b9358d16d98
SHA1: 174c6ac29abb9e8303247a149453c51414799eec
SHA256: cc4aa6c329a4457a8185dbc4da21f5ec062e2225aec79c20083b20d751127a1c
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jffi Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id wmeissner Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jffi High Vendor pom url http://github.com/jnr/jffi Highest Product pom artifactid jffi Highest Product pom developer email wmeissner@gmail.com Low Product pom developer id wmeissner Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jffi High Product pom url http://github.com/jnr/jffi Medium Version pom version 1.3.9 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-a64asm:1.0.0)Description:
A pure-java A64 assembler License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-a64asm/pom.xml
MD5: 49cf6d2169962d46d987325c15c3ca65
SHA1: 17a5a92b79393a59e19ba38e1bdf8252a660e359
SHA256: 9dd9c299ca3ec9287db2ec26571a5cc611dc21a1a4f5d2ef1255a924face47a8
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-a64asm Low Vendor pom developer email ossdev@puresoftware.com Low Vendor pom developer id ossdev Medium Vendor pom developer name ossdev Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-a64asm High Product pom artifactid jnr-a64asm Highest Product pom developer email ossdev@puresoftware.com Low Product pom developer id ossdev Low Product pom developer name ossdev Low Product pom groupid com.github.jnr Highest Product pom name jnr-a64asm High Version pom version 1.0.0 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-constants:0.10.3)Description:
A set of platform constants (e.g. errno values) License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-constants/pom.xml
MD5: c95844446f54429b217cf286410bce7d
SHA1: 36dc060b908125fcdc15ba1e4a30d551eb611cd1
SHA256: e6cfebe4ae44de96a1ec8ee3ff3eb1134ed493b0a15b29a8663e39b6fdaba7a2
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-constants Low Vendor pom developer email headius@headius.com Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id headius Medium Vendor pom developer id wmeissner Medium Vendor pom developer name Charles Oliver Nutter Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-constants High Vendor pom url http://github.com/jnr/jnr-constants Highest Product pom artifactid jnr-constants Highest Product pom developer email headius@headius.com Low Product pom developer email wmeissner@gmail.com Low Product pom developer id headius Low Product pom developer id wmeissner Low Product pom developer name Charles Oliver Nutter Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-constants High Product pom url http://github.com/jnr/jnr-constants Medium Version pom version 0.10.3 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-enxio:0.32.13)Description:
Native I/O access for java License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-enxio/pom.xml
MD5: 7d7dd084ca7cc9c9e634408d0f768925
SHA1: dc0486133eafd86b3c665251bedea096146aec69
SHA256: a5caef6df94a2580542dd42c673374d38450d96fbcd8e77c98e6a85f8967fd39
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-enxio Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id wmeissner Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-enxio High Vendor pom url http://github.com/jnr/jnr-enxio Highest Product pom artifactid jnr-enxio Highest Product pom developer email wmeissner@gmail.com Low Product pom developer id wmeissner Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-enxio High Product pom url http://github.com/jnr/jnr-enxio Medium Version pom version 0.32.13 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-ffi:2.2.11)Description:
A library for invoking native functions from java License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-ffi/pom.xml
MD5: 231775a58f949c06373696f2a7ab0ba8
SHA1: 3dac1a9f6214f802a736b7ea0f09473b89ecc11a
SHA256: 8be242591cacccb6cae9da700f4373ddad00760e8da679697a98128bb42a5f7b
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-ffi Low Vendor pom developer email headius@headius.com Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id headius Medium Vendor pom developer id wmeissner Medium Vendor pom developer name Charles Oliver Nutter Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-ffi High Vendor pom url http://github.com/jnr/jnr-ffi Highest Product pom artifactid jnr-ffi Highest Product pom developer email headius@headius.com Low Product pom developer email wmeissner@gmail.com Low Product pom developer id headius Low Product pom developer id wmeissner Low Product pom developer name Charles Oliver Nutter Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-ffi High Product pom url http://github.com/jnr/jnr-ffi Medium Version pom version 2.2.11 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-netdb:1.2.0)Description:
Lookup TCP and UDP services from java License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-netdb/pom.xml
MD5: 5f7adefaf9448cf27718e23106a879f9
SHA1: 3a6045d944a9b4720156cd533ca1cbd1f22bc4b5
SHA256: 44e976a6bf822ff20321b19940387b90a8ade8aaeeacbeecb55171cf2d40f1e7
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-netdb Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id wmeissner Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-netdb High Vendor pom url http://github.com/jnr/jnr-netdb Highest Product pom artifactid jnr-netdb Highest Product pom developer email wmeissner@gmail.com Low Product pom developer id wmeissner Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-netdb High Product pom url http://github.com/jnr/jnr-netdb Medium Version pom version 1.2.0 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-posix:3.1.15)Description:
Common cross-project/cross-platform POSIX APIs
License:
Eclipse Public License - v 2.0: https://www.eclipse.org/legal/epl-2.0/
GNU General Public License Version 2: http://www.gnu.org/copyleft/gpl.html
GNU Lesser General Public License Version 2.1: http://www.gnu.org/licenses/lgpl.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-posix/pom.xml
MD5: dc0f4cb313df0bc9556e435f2f6c09c2
SHA1: 0edc3357372e1ebdb86f673ab258ff2a0089b1ab
SHA256: aa3c236e5fbc6ec365e4c811ecea4dbca7591851cec7c7a1df6b324c4eb082a3
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-posix Low Vendor pom developer email headius@headius.com Low Vendor pom developer email tom.enebo@gmail.com Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id enebo Medium Vendor pom developer id headius Medium Vendor pom developer id wmeissner Medium Vendor pom developer name Charles Oliver Nutter Medium Vendor pom developer name Thomas E Enebo Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-posix High Product pom artifactid jnr-posix Highest Product pom developer email headius@headius.com Low Product pom developer email tom.enebo@gmail.com Low Product pom developer email wmeissner@gmail.com Low Product pom developer id enebo Low Product pom developer id headius Low Product pom developer id wmeissner Low Product pom developer name Charles Oliver Nutter Low Product pom developer name Thomas E Enebo Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-posix High Version pom version 3.1.15 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-unixsocket:0.38.17)Description:
UNIX socket channels for java License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-unixsocket/pom.xml
MD5: 1b3d4a4f25bd2a9e2b1a3d70483079b2
SHA1: 45e1898b528db500d5d175a07039b0f45408dfd6
SHA256: de848159e1524644e9f1c574af7f46b751e6e530f35a27eeb4c853e91ea1c2e1
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-unixsocket Low Vendor pom developer email fritz-github@fritz-elfert.de Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id felfert Medium Vendor pom developer id wmeissner Medium Vendor pom developer name Fritz Elfert Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-unixsocket High Vendor pom url http://github.com/jnr/jnr-unixsocket Highest Product pom artifactid jnr-unixsocket Highest Product pom developer email fritz-github@fritz-elfert.de Low Product pom developer email wmeissner@gmail.com Low Product pom developer id felfert Low Product pom developer id wmeissner Low Product pom developer name Fritz Elfert Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-unixsocket High Product pom url http://github.com/jnr/jnr-unixsocket Medium Version pom version 0.38.17 Highest
jruby-complete-9.3.8.0.jar (shaded: com.github.jnr:jnr-x86asm:1.0.2)Description:
A pure-java X86 and X86_64 assembler License:
MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.github.jnr/jnr-x86asm/pom.xml
MD5: cb16b0b890c8b7a726a547ca0b58d00a
SHA1: 91de5c25955d1f321832738dce614b45e9939050
SHA256: ea862ce3bd96ccb8ca36b8e9e7baef2da3fbbfbdc256baeaa8c8a873911074e7
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jnr-x86asm Low Vendor pom developer email wmeissner@gmail.com Low Vendor pom developer id wmeissner Medium Vendor pom developer name Wayne Meissner Medium Vendor pom groupid com.github.jnr Highest Vendor pom name jnr-x86asm High Vendor pom url http://github.com/jnr/jnr-x86asm Highest Product pom artifactid jnr-x86asm Highest Product pom developer email wmeissner@gmail.com Low Product pom developer id wmeissner Low Product pom developer name Wayne Meissner Low Product pom groupid com.github.jnr Highest Product pom name jnr-x86asm High Product pom url http://github.com/jnr/jnr-x86asm Medium Version pom version 1.0.2 Highest
jruby-complete-9.3.8.0.jar (shaded: com.headius:backport9:1.12)License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.headius/backport9/pom.xml
MD5: 1af02442211713e3e00a1b7f8bf7a92e
SHA1: c0b388a50a3030e56089ada5154366529a5da213
SHA256: 861b04ed538064ff8053aa619cdd407a7d290e7623be8d38719fa7633dd96f5a
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid backport9 Low Vendor pom developer email headius@headius.com Low Vendor pom developer id headius Medium Vendor pom developer name Charles Nutter Medium Vendor pom groupid com.headius Highest Product pom artifactid backport9 Highest Product pom developer email headius@headius.com Low Product pom developer id headius Low Product pom developer name Charles Nutter Low Product pom groupid com.headius Highest Version pom version 1.12 Highest
jruby-complete-9.3.8.0.jar (shaded: com.headius:invokebinder:1.12)License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.headius/invokebinder/pom.xml
MD5: d1ba5bea2e98d321d3bc7f7bc6c512ff
SHA1: a6c6a3452366292f645d1f80612a984367f5ec13
SHA256: 0fd6ec9c1ab88504895a8a88d4a1a538a04be59bc5a889d610bf4035224653b5
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid invokebinder Low Vendor pom developer email headius@headius.com Low Vendor pom developer id headius Medium Vendor pom developer name Charles Nutter Medium Vendor pom groupid com.headius Highest Vendor pom name invokebinder High Vendor pom url http://maven.apache.org Highest Product pom artifactid invokebinder Highest Product pom developer email headius@headius.com Low Product pom developer id headius Low Product pom developer name Charles Nutter Low Product pom groupid com.headius Highest Product pom name invokebinder High Product pom url http://maven.apache.org Medium Version pom version 1.12 Highest
jruby-complete-9.3.8.0.jar (shaded: com.headius:options:1.6)License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.headius/options/pom.xml
MD5: ab8aa85f5cc1c1d0ff704b1dc3837e2a
SHA1: 78e835c2bb1a934075961f2954452a0871b931be
SHA256: b5597f285a7c770acb92cef914788c613c7beaf79eace8a9f56d7f5026a5817e
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid options Low Vendor pom developer email headius@headius.com Low Vendor pom developer id headius Medium Vendor pom developer name Charles Nutter Medium Vendor pom groupid com.headius Highest Vendor pom name options High Vendor pom url headius/options Highest Product pom artifactid options Highest Product pom developer email headius@headius.com Low Product pom developer id headius Low Product pom developer name Charles Nutter Low Product pom groupid com.headius Highest Product pom name options High Product pom url headius/options High Version pom version 1.6 Highest
jruby-complete-9.3.8.0.jar (shaded: com.jcraft:jzlib:1.1.3)Description:
JZlib is a re-implementation of zlib in pure Java License:
BSD: http://www.jcraft.com/jzlib/LICENSE.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/com.jcraft/jzlib/pom.xml
MD5: 856f139610c4e36c1b0bdb5ad007c2a5
SHA1: 6e6789004c70477a6e2ea92c066b757534e63a10
SHA256: edb67251608556ad9584d00e46b5ef38ecf1246d571c0f80f24f50b285a9f682
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jzlib Low Vendor pom developer email ymnk at jcraft D0t com Low Vendor pom developer id ymnk Medium Vendor pom developer name Atsuhiko Yamanaka Medium Vendor pom developer org JCraft,Inc. Medium Vendor pom developer org URL http://www.jcraft.com/ Medium Vendor pom groupid com.jcraft Highest Vendor pom name JZlib High Vendor pom organization name jcraft High Vendor pom organization url http://www.jcraft.com/ Medium Vendor pom url http://www.jcraft.com/jzlib/ Highest Product pom artifactid jzlib Highest Product pom developer email ymnk at jcraft D0t com Low Product pom developer id ymnk Low Product pom developer name Atsuhiko Yamanaka Low Product pom developer org JCraft,Inc. Low Product pom developer org URL http://www.jcraft.com/ Low Product pom groupid com.jcraft Highest Product pom name JZlib High Product pom organization name jcraft Low Product pom organization url http://www.jcraft.com/ Low Product pom url http://www.jcraft.com/jzlib/ Medium Version pom version 1.1.3 Highest
jruby-complete-9.3.8.0.jar (shaded: joda-time:joda-time:2.10.10)Description:
Date and time library to replace JDK date handling License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/joda-time/joda-time/pom.xml
MD5: ef13c82390e8506f05364178a3300018
SHA1: d6b3422231b9c976bc409b906f114fa0697b280c
SHA256: 9c62e83b103e38b10351603e246d7e54899d4a8f1d305176f5546dd3f8c55358
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid joda-time Low Vendor pom developer id broneill Medium Vendor pom developer id jodastephen Medium Vendor pom developer name Brian S O'Neill Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom groupid joda-time Highest Vendor pom name Joda-Time High Vendor pom organization name Joda.org High Vendor pom organization url https://www.joda.org Medium Vendor pom url https://www.joda.org/joda-time/ Highest Product pom artifactid joda-time Highest Product pom developer id broneill Low Product pom developer id jodastephen Low Product pom developer name Brian S O'Neill Low Product pom developer name Stephen Colebourne Low Product pom groupid joda-time Highest Product pom name Joda-Time High Product pom organization name Joda.org Low Product pom organization url https://www.joda.org Low Product pom url https://www.joda.org/joda-time/ Medium Version pom version 2.10.10 Highest
jruby-complete-9.3.8.0.jar (shaded: me.qmx.jitescript:jitescript:0.4.1)Description:
Java API for Bytecode License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/me.qmx.jitescript/jitescript/pom.xml
MD5: a8244f2c8843244d8934742315b47154
SHA1: 63a1b1c6c7ac7c29e8d7a065a9c2649058455749
SHA256: 4001176ebaedccf43616c92dad87d0d305b54000cfae4e999675e8acb35735f6
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jitescript Low Vendor pom developer email qmx@qmx.me Low Vendor pom developer id qmx Medium Vendor pom developer name Douglas Campos Medium Vendor pom groupid me.qmx.jitescript Highest Vendor pom name jitescript High Vendor pom url qmx/jitescript Highest Product pom artifactid jitescript Highest Product pom developer email qmx@qmx.me Low Product pom developer id qmx Low Product pom developer name Douglas Campos Low Product pom groupid me.qmx.jitescript Highest Product pom name jitescript High Product pom url qmx/jitescript High Version pom version 0.4.1 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby.jcodings:jcodings:1.0.57)Description:
Byte based encoding support library for java License:
MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby.jcodings/jcodings/pom.xml
MD5: ace4d97fafd4d6410b9ab88a7261e73f
SHA1: d5a1f30683c63fefe6b57f90fd1bdcd8c68bd165
SHA256: 1e34fc29607b56e4b6003598da3a05c4ed8c87a05e0b011ad699137beb833d8f
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jcodings Low Vendor pom developer email headius@headius.com Low Vendor pom developer email lopx@gazeta.pl Low Vendor pom developer id headius Medium Vendor pom developer id lopex Medium Vendor pom developer name Charles Oliver Nutter Medium Vendor pom developer name Marcin Mielzynski Medium Vendor pom groupid org.jruby.jcodings Highest Vendor pom name JCodings High Product pom artifactid jcodings Highest Product pom developer email headius@headius.com Low Product pom developer email lopx@gazeta.pl Low Product pom developer id headius Low Product pom developer id lopex Low Product pom developer name Charles Oliver Nutter Low Product pom developer name Marcin Mielzynski Low Product pom groupid org.jruby.jcodings Highest Product pom name JCodings High Version pom version 1.0.57 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby.joni:joni:2.1.43)Description:
Java port of Oniguruma: http://www.geocities.jp/kosako3/oniguruma
that uses byte arrays directly instead of java Strings and chars
License:
MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby.joni/joni/pom.xml
MD5: 2d05ca83c96cf602c3af73539106d1d3
SHA1: 3883bc9616a31c5936ccb724150ab5a336a4c816
SHA256: bfe531310628079273c7fb2174bc4658540cea56e93d966d060d9833ad9c425a
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid joni Low Vendor pom developer email lopx@gazeta.pl Low Vendor pom developer id lopex Medium Vendor pom developer name Marcin Mielzynski Medium Vendor pom groupid org.jruby.joni Highest Vendor pom name Joni High Product pom artifactid joni Highest Product pom developer email lopx@gazeta.pl Low Product pom developer id lopex Low Product pom developer name Marcin Mielzynski Low Product pom groupid org.jruby.joni Highest Product pom name Joni High Version pom version 2.1.43 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby:dirgra:0.3)Description:
Simple Directed Graph License:
EPL: http://www.eclipse.org/legal/epl-v10.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby/dirgra/pom.xml
MD5: 4d7f76247a22e56064ab9db464794cd4
SHA1: 91c78b3f134c5b1f04d3a6447d246cf0a0d9a8e2
SHA256: d0f49f7eaf14307bc8ce44b14fe999c1330e029043f6e8a125b5a9f7ed1c417a
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid dirgra Low Vendor pom developer email tom.enebo@gmail.com Low Vendor pom developer id enebo Medium Vendor pom developer name Thomas E. Enebo Medium Vendor pom groupid org.jruby Highest Vendor pom name Dirgra High Vendor pom url jruby/dirgra Highest Product pom artifactid dirgra Highest Product pom developer email tom.enebo@gmail.com Low Product pom developer id enebo Low Product pom developer name Thomas E. Enebo Low Product pom groupid org.jruby Highest Product pom name Dirgra High Product pom url jruby/dirgra High Version pom version 0.3 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby:jruby-base:9.3.8.0)File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby/jruby-base/pom.xmlMD5: 38df003437aebcf620ce9ce72bbce81cSHA1: 30d7a33eee5406164c3ec8089edff0452746da7bSHA256: cd294c6d580215fe80782cd0f36520d77a0ed84a211f47a238085f894af4541fReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jruby-base Low Vendor pom groupid org.jruby Highest Vendor pom name JRuby Base High Vendor pom parent-artifactid jruby-parent Low Product pom artifactid jruby-base Highest Product pom groupid org.jruby Highest Product pom name JRuby Base High Product pom parent-artifactid jruby-parent Medium Version pom version 9.3.8.0 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby:jruby-core:9.3.8.0)File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby/jruby-core/pom.xmlMD5: 7105cc82edfb7d6fd77f4c1a8b6d7f1aSHA1: 1b17b9b7e8eb6c5351136c2c80e041be80bf3a5eSHA256: 9aff65fffb6c5db14304e523e8a7de80e38ebac12cb5711c0bdfa5a18cd050b3Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jruby-core Low Vendor pom groupid org.jruby Highest Vendor pom name JRuby Core High Vendor pom parent-artifactid jruby-parent Low Product pom artifactid jruby-core Highest Product pom groupid org.jruby Highest Product pom name JRuby Core High Product pom parent-artifactid jruby-parent Medium Version pom version 9.3.8.0 Highest
jruby-complete-9.3.8.0.jar (shaded: org.jruby:jruby-stdlib:9.3.8.0)File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/maven/org.jruby/jruby-stdlib/pom.xmlMD5: 5b3dd30283430bc13c278cb8043ec30aSHA1: c6d66034002c3e5a2e53f9d7bd9374faf1eba9eeSHA256: 82298921e4b5bddc6bdfaa9bfe1f475edc59dadd64b3498fdc9607831a22ae1bReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jruby-stdlib Low Vendor pom groupid org.jruby Highest Vendor pom name JRuby Lib Setup High Vendor pom parent-artifactid jruby-parent Low Product pom artifactid jruby-stdlib Highest Product pom groupid org.jruby Highest Product pom name JRuby Lib Setup High Product pom parent-artifactid jruby-parent Medium Version pom version 9.3.8.0 Highest
jruby-complete-9.3.8.0.jarDescription:
JRuby 9.3.8.0 OSGi bundle License:
http://www.gnu.org/licenses/gpl-2.0-standalone.html, http://www.gnu.org/licenses/lgpl-2.1-standalone.html, http://www.eclipse.org/legal/epl-v20.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar
MD5: 2d5ad438a1fefda48f8ab797454f43fd
SHA1: 8e11191265ab501930125081d8c21a3f55f1b8cd
SHA256: b574542f75c71d543ae057a707ca9840e778d62ab6da610e94cd7bbfa5eef5d5
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r jruby-complete-9.3.8.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 pkg:maven/org.asciidoctor/asciidoctorj@2.5.7 Evidence Type Source Name Value Confidence Vendor file name jruby-complete High Vendor gradle artifactid jruby-complete Highest Vendor gradle groupid org.jruby Highest Vendor jar package name jruby Highest Vendor jar package name org Highest Vendor Manifest automatic-module-name org.jruby.complete Medium Vendor Manifest bundle-docurl https://www.jruby.org Low Vendor Manifest bundle-symbolicname org.jruby.jruby Medium Vendor Manifest embed-transitive true Low Vendor pom artifactid jruby-complete Low Vendor pom groupid org.jruby Highest Vendor pom name JRuby Complete High Vendor pom parent-artifactid jruby-artifacts Low Product file name jruby-complete High Product gradle artifactid jruby-complete Highest Product jar package name jruby Highest Product jar package name org Highest Product jar package name osgi Highest Product Manifest automatic-module-name org.jruby.complete Medium Product Manifest bundle-docurl https://www.jruby.org Low Product Manifest Bundle-Name JRuby 9.3.8.0 Medium Product Manifest bundle-symbolicname org.jruby.jruby Medium Product Manifest embed-transitive true Low Product pom artifactid jruby-complete Highest Product pom groupid org.jruby Highest Product pom name JRuby Complete High Product pom parent-artifactid jruby-artifacts Medium Version file version 9.3.8.0 High Version gradle version 9.3.8.0 Highest Version Manifest Bundle-Version 9.3.8.0 High Version pom version 9.3.8.0 Highest
jruby-complete-9.3.8.0.jar: bcpkix-jdk15on-1.68.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/org/bouncycastle/bcpkix-jdk15on/1.68/bcpkix-jdk15on-1.68.jarMD5: 37e058210e056a04d4521d8185fb0051SHA1: 81da950604ff0b2652348cbd2b48fde46ced9867SHA256: fb8d0f8f673ad6e16c604732093d7aa31b26ff4e0bd9cae1d7f99984c06b8a0fReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name bcpkix-jdk15on High Vendor jar package name bouncycastle Highest Vendor jar package name bouncycastle Low Vendor jar package name pkix Highest Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest application-name Bouncy Castle PKIX API Medium Vendor Manifest automatic-module-name org.bouncycastle.pkix Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname bcpkix Medium Vendor Manifest caller-allowable-codebase * Low Vendor Manifest codebase * Low Vendor Manifest extension-name org.bouncycastle.bcpkix Medium Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by 25.275-b01 (Private Build) Low Vendor Manifest permissions all-permissions Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor Manifest trusted-library true Low Product file name bcpkix-jdk15on High Product jar package name bouncycastle Highest Product jar package name pkix Highest Product Manifest application-library-allowable-codebase * Low Product Manifest application-name Bouncy Castle PKIX API Medium Product Manifest automatic-module-name org.bouncycastle.pkix Medium Product Manifest Bundle-Name bcpkix Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname bcpkix Medium Product Manifest caller-allowable-codebase * Low Product Manifest codebase * Low Product Manifest extension-name org.bouncycastle.bcpkix Medium Product Manifest multi-release true Low Product Manifest originally-created-by 25.275-b01 (Private Build) Low Product Manifest permissions all-permissions Low Product Manifest trusted-library true Low Version file name bcpkix-jdk15on Medium Version file version 1.68 High Version Manifest Bundle-Version 1.68 High Version Manifest Implementation-Version 1.68.00.0 High
jruby-complete-9.3.8.0.jar: bcprov-jdk15on-1.68.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/org/bouncycastle/bcprov-jdk15on/1.68/bcprov-jdk15on-1.68.jarMD5: f34043ac8be2793843364b4406a15543SHA1: 46a080368d38b428d237a59458f9bc915222894dSHA256: f732a46c8de7e2232f2007c682a21d1f4cc8a8a0149b6b7bd6aa1afdc65a0f8dReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name bcprov-jdk15on High Vendor jar package name bouncycastle Highest Vendor jar package name bouncycastle Low Vendor jar package name org Highest Vendor jar package name provider Highest Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest application-name Bouncy Castle Provider Medium Vendor Manifest automatic-module-name org.bouncycastle.provider Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname bcprov Medium Vendor Manifest caller-allowable-codebase * Low Vendor Manifest codebase * Low Vendor Manifest extension-name org.bouncycastle.bcprovider Medium Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by 25.275-b01 (Private Build) Low Vendor Manifest permissions all-permissions Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor Manifest trusted-library true Low Product file name bcprov-jdk15on High Product hint analyzer product legion-of-the-bouncy-castle-java-crytography-api High Product hint analyzer product the_bouncy_castle_crypto_package_for_java High Product jar package name bouncycastle Highest Product jar package name org Highest Product jar package name provider Highest Product Manifest application-library-allowable-codebase * Low Product Manifest application-name Bouncy Castle Provider Medium Product Manifest automatic-module-name org.bouncycastle.provider Medium Product Manifest Bundle-Name bcprov Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname bcprov Medium Product Manifest caller-allowable-codebase * Low Product Manifest codebase * Low Product Manifest extension-name org.bouncycastle.bcprovider Medium Product Manifest multi-release true Low Product Manifest originally-created-by 25.275-b01 (Private Build) Low Product Manifest permissions all-permissions Low Product Manifest trusted-library true Low Version file version 1.68 High Version Manifest Implementation-Version 1.68.0 High
CVE-2023-33202 suppress
Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.) CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
jruby-complete-9.3.8.0.jar: bctls-jdk15on-1.68.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/org/bouncycastle/bctls-jdk15on/1.68/bctls-jdk15on-1.68.jarMD5: 31459bc4acb8b285deffd1f163751046SHA1: 5046fe5893b16dd7e72a34d04d25c83968ddeff3SHA256: 9d862b35f241debf89211d92fb5ba5a0b0ac1ddb2c9ae214b84d80bc285bab25Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name bctls-jdk15on High Vendor jar package name bouncycastle Highest Vendor jar package name bouncycastle Low Vendor jar package name org Highest Vendor jar package name provider Highest Vendor jar package name tls Highest Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest application-name Bouncy Castle TLS API and Provider Medium Vendor Manifest automatic-module-name org.bouncycastle.tls Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname bctls Medium Vendor Manifest caller-allowable-codebase * Low Vendor Manifest codebase * Low Vendor Manifest extension-name org.bouncycastle.bctls Medium Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by 25.275-b01 (Private Build) Low Vendor Manifest permissions all-permissions Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor Manifest trusted-library true Low Product file name bctls-jdk15on High Product jar package name bouncycastle Highest Product jar package name org Highest Product jar package name provider Highest Product jar package name tls Highest Product Manifest application-library-allowable-codebase * Low Product Manifest application-name Bouncy Castle TLS API and Provider Medium Product Manifest automatic-module-name org.bouncycastle.tls Medium Product Manifest Bundle-Name bctls Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname bctls Medium Product Manifest caller-allowable-codebase * Low Product Manifest codebase * Low Product Manifest extension-name org.bouncycastle.bctls Medium Product Manifest multi-release true Low Product Manifest originally-created-by 25.275-b01 (Private Build) Low Product Manifest permissions all-permissions Low Product Manifest trusted-library true Low Version file name bctls-jdk15on Medium Version file version 1.68 High Version Manifest Bundle-Version 1.68 High Version Manifest Implementation-Version 1.68.00.0 High
jruby-complete-9.3.8.0.jar: cparse-jruby.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/racc/cparse-jruby.jarMD5: d44fe1421fbbcebaa9f922dc8f9ee90eSHA1: dde4adfef288358dafebc1857a4dbef5b41c20d1SHA256: 52a75469ecab7e6a4a6f79e5419c4e8d881d42f830b0d287091ef1c498123c34Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name cparse-jruby High Vendor jar package name headius Low Vendor jar package name racc Low Product file name cparse-jruby High Product jar package name racc Low
jruby-complete-9.3.8.0.jar: darkfish.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/rdoc/generator/template/darkfish/js/darkfish.jsMD5: 14a006c8a8c126d3a032db6a6778a2d6SHA1: 5de3c13a83ac02d213bacc7c5642673b7692f1c9SHA256: 00cb86c2c4b1d8d18f1971ca0b2cd7eb5ecad12a68db6c78d575e053a853ce39Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence
jruby-complete-9.3.8.0.jar: generator.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/json/ext/generator.jarMD5: 6db38de099e2ce60c777cb168de21e0dSHA1: 76ea0e00c7db180f3f2432fb0120bcea19ff2dc8SHA256: f6d4a830771618e697220f5707eabe831e25d46aff8da9e7cc5b60ef744714a3Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name generator High Vendor jar package name ext Low Vendor jar package name json Low Product file name generator High Product jar package name ext Low
jruby-complete-9.3.8.0.jar: jline-2.14.6.jarLicense:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/jline/jline/2.14.6/jline-2.14.6.jar
MD5: 480423551649bc6980b43f09e4717272
SHA1: c3aeac59c022bdc497c8c48ed86fa50450e4896a
SHA256: 97d1acaac82409be42e622d7a54d3ae9d08517e8aefdea3d2ba9791150c2f02d
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name jline High Vendor jar package name jline Highest Vendor Manifest bundle-symbolicname jline Medium Vendor pom artifactid jline Low Vendor pom developer email gnodet@gmail.com Low Vendor pom developer email jason@planet57.com Low Vendor pom developer email mprudhom@gmail.com Low Vendor pom developer id gnodet Medium Vendor pom developer id jdillon Medium Vendor pom developer id mprudhom Medium Vendor pom developer name Guillaume Nodet Medium Vendor pom developer name Jason Dillon Medium Vendor pom developer name Marc Prud'hommeaux Medium Vendor pom groupid jline Highest Vendor pom name JLine High Product file name jline High Product jar package name jline Highest Product Manifest Bundle-Name JLine Medium Product Manifest bundle-symbolicname jline Medium Product pom artifactid jline Highest Product pom developer email gnodet@gmail.com Low Product pom developer email jason@planet57.com Low Product pom developer email mprudhom@gmail.com Low Product pom developer id gnodet Low Product pom developer id jdillon Low Product pom developer id mprudhom Low Product pom developer name Guillaume Nodet Low Product pom developer name Jason Dillon Low Product pom developer name Marc Prud'hommeaux Low Product pom groupid jline Highest Product pom name JLine High Version file version 2.14.6 High Version Manifest Bundle-Version 2.14.6 High Version pom version 2.14.6 Highest
jruby-complete-9.3.8.0.jar: jopenssl.jar (shaded: rubygems:jruby-openssl:0.13.0)Description:
JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. License:
EPL-1.0: http://opensource.org/licenses/EPL-1.0
GPL-2.0: http://opensource.org/licenses/GPL-2.0
LGPL-2.1: http://opensource.org/licenses/LGPL-2.1 File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/jopenssl.jar/META-INF/maven/rubygems/jruby-openssl/pom.xml
MD5: 7d01b449528196196f27f061da72a97d
SHA1: e27fc66c82ed5b144afc548817047a577bb1383d
SHA256: eaa82ac5816e9e562bd3d3b8f00b19db4ca10201faf9bc5f72b3fac9c02c839e
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jruby-openssl Low Vendor pom developer email self+jruby-openssl@kares.org Low Vendor pom developer name JRuby contributors Medium Vendor pom developer name Karol Bucek Medium Vendor pom developer name Ola Bini Medium Vendor pom groupid rubygems Highest Vendor pom name JRuby OpenSSL High Vendor pom url jruby/jruby-openssl Highest Product pom artifactid jruby-openssl Highest Product pom developer email self+jruby-openssl@kares.org Low Product pom developer name JRuby contributors Low Product pom developer name Karol Bucek Low Product pom developer name Ola Bini Low Product pom groupid rubygems Highest Product pom name JRuby OpenSSL High Product pom url jruby/jruby-openssl High Version pom version 0.13.0 Highest
jruby-complete-9.3.8.0.jar: jopenssl.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/jopenssl.jarMD5: 8b010aa9489d4acc20f11fe933ef17cdSHA1: 602fff52a522aee546c55174e4ca560c93dc0425SHA256: 76f6d5357e0ebb2c8dff1d259d09763d47d4931e0132821469d08a98a95ff0f5Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name jopenssl High Vendor jar package name ext Low Vendor jar package name jruby Low Vendor jar package name openssl Low Product file name jopenssl High Product jar package name ext Low Product jar package name openssl Low
jruby-complete-9.3.8.0.jar: navigation.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/rdoc/generator/template/json_index/js/navigation.jsMD5: 0f2526548577d42eed5939333c321065SHA1: a99b9374c2e37d315a6279b9238615252becac49SHA256: 757a5fb0031eb9bc47912ec87bcf16ce5ae855bb072bdb318437ffd806d7ee56Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence
jruby-complete-9.3.8.0.jar: parser.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/json/ext/parser.jarMD5: 83373299e1f1bdcb6b4808cfb81a6506SHA1: 5499bb123ddf779ce9627a7b99d2d1e0b9eb63ccSHA256: c2018bf2eb02def0ba64b784d05ec5019db9f7ebfdcd01f9e36efb6b745318c4Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name parser High Vendor jar package name ext Low Vendor jar package name json Low Product file name parser High Product jar package name ext Low
jruby-complete-9.3.8.0.jar: psych.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/psych.jarMD5: 30566c4d2a723788b9368cc0b6759147SHA1: 51c6c3b4a4dbca8fb1c184f3691c26d222829854SHA256: 8938f788b10374cef7ca1968f6523b1eedb679da944c871987067dca6051d7c0Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name psych High Vendor jar package name ext Low Vendor jar package name jruby Low Vendor jar package name psych Low Product file name psych High Product jar package name ext Low Product jar package name psych Low
jruby-complete-9.3.8.0.jar: readline.jar (shaded: rubygems:jruby-readline:1.3.7)Description:
readline extension for JRuby License:
EPL-1.0: http://opensource.org/licenses/EPL-1.0
GPL-2.0: http://opensource.org/licenses/GPL-2.0
LGPL-2.1: http://opensource.org/licenses/LGPL-2.1 File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/readline.jar/META-INF/maven/rubygems/jruby-readline/pom.xml
MD5: f675c86ab93d2adadaab3e9ec7445fe6
SHA1: 3cb722b663bcb103aafaed0789d9491684d21eb6
SHA256: b931e0b3f3ff77ee17bb63301f5caabd262e046db28f190c434f565249383408
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor pom artifactid jruby-readline Low Vendor pom developer email dev@jruby.org Low Vendor pom developer name JRuby contributors Medium Vendor pom groupid rubygems Highest Vendor pom name JRuby Readline High Vendor pom url jruby/jruby Highest Product pom artifactid jruby-readline Highest Product pom developer email dev@jruby.org Low Product pom developer name JRuby contributors Low Product pom groupid rubygems Highest Product pom name JRuby Readline High Product pom url jruby/jruby High Version pom version 1.3.7 Highest
jruby-complete-9.3.8.0.jar: readline.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/readline.jarMD5: ee095d6e2062601784e821c0761b7a8dSHA1: f94495275a3d40af13986495b60d7a2029d8eba5SHA256: 25f6e191a7cddf15c926d9c5fb598237517b201d041f35f5cd01ae446b17d9d4Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name readline High Vendor jar package name demo Low Vendor jar package name jruby Low Vendor jar package name readline Low Product file name readline High Product jar package name demo Low Product jar package name readline Low
jruby-complete-9.3.8.0.jar: search.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/rdoc/generator/template/darkfish/js/search.jsMD5: 84b747a9f491cfb6740ab520d0c0602cSHA1: 7227a18b55ac08a0f8cc03ea8ac063f6dba1a1e5SHA256: 972b0c1524a5789afa094459c524b4a7333b58536c9b2db6280468621a2c5439Referenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence
jruby-complete-9.3.8.0.jar: searcher.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/rdoc/generator/template/json_index/js/searcher.jsMD5: e6753e62548eadebce36524f6178fd0bSHA1: ff8ca51fd50d759d6ad7b78a171c8646968f7520SHA256: e1b5467dd44b05a13e7b798a9c149954e9861089575dcaf8b302489c44bc359aReferenced In Projects/Scopes:
documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence
jruby-complete-9.3.8.0.jar: snakeyaml-1.31.jarDescription:
YAML 1.1 parser and emitter for Java License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jruby/jruby-complete/9.3.8.0/8e11191265ab501930125081d8c21a3f55f1b8cd/jruby-complete-9.3.8.0.jar/META-INF/jruby.home/lib/ruby/stdlib/org/yaml/snakeyaml/1.31/snakeyaml-1.31.jar
MD5: b5db04d0705604e0fadcd5f66ad65d60
SHA1: cf26b7b05fef01e7bec00cb88ab4feeeba743e12
SHA256: 64ff54977e93243b5431b9335bb6a90c05ec7c9f189298a36575c58de72e1c07
Referenced In Projects/Scopes: documentation:__$$asciidoctorj$$___r documentation:__$$asciidoctorj_asciidoctor$$__r Evidence Type Source Name Value Confidence Vendor file name snakeyaml High Vendor jar package name emitter Highest Vendor jar package name parser Highest Vendor jar package name snakeyaml Highest Vendor jar package name yaml Highest Vendor Manifest automatic-module-name org.yaml.snakeyaml Medium Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor pom artifactid snakeyaml Low Vendor pom developer email alexander.maslov@gmail.com Low Vendor pom developer email public.somov@gmail.com Low Vendor pom developer id asomov Medium Vendor pom developer id maslovalex Medium Vendor pom developer name Alexander Maslov Medium Vendor pom developer name Andrey Somov Medium Vendor pom groupid org.yaml Highest Vendor pom name SnakeYAML High Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest Product file name snakeyaml High Product jar package name emitter Highest Product jar package name parser Highest Product jar package name snakeyaml Highest Product jar package name yaml Highest Product Manifest automatic-module-name org.yaml.snakeyaml Medium Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product pom artifactid snakeyaml Highest Product pom developer email alexander.maslov@gmail.com Low Product pom developer email public.somov@gmail.com Low Product pom developer id asomov Low Product pom developer id maslovalex Low Product pom developer name Alexander Maslov Low Product pom developer name Andrey Somov Low Product pom groupid org.yaml Highest Product pom name SnakeYAML High Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium Version file version 1.31 High Version pom version 1.31 Highest
CVE-2022-1471 suppress
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
CWE-502 Deserialization of Untrusted Data, CWE-20 Improper Input Validation
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-38751 (OSSINDEX) suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.yaml:snakeyaml:1.31:*:*:*:*:*:*:* CVE-2022-38752 suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-41854 suppress
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
jsoup-1.17.2.jarDescription:
jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL fetching, data parsing, extraction, and manipulation using DOM API methods, CSS, and xpath selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers. License:
The MIT License: https://jsoup.org/license File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jsoup/jsoup/1.17.2/1e75b08d7019546a954f1e359477f916f537a34d/jsoup-1.17.2.jar
MD5: d9dd58c3f8a09f45e57d85e78993be6e
SHA1: 1e75b08d7019546a954f1e359477f916f537a34d
SHA256: f60b33b38e9d7ac93eaaa68a6c70f706bb99036494b2e2add2bfee11d09ac6f5
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath jsoup-1.17.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name jsoup High Vendor gradle artifactid jsoup Highest Vendor gradle groupid org.jsoup Highest Vendor jar package name jsoup Highest Vendor jar package name org Highest Vendor jar package name parser Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://jsoup.org/ Low Vendor Manifest bundle-symbolicname org.jsoup Medium Vendor Manifest Implementation-Vendor Jonathan Hedley High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jsoup Low Vendor pom developer email jonathan@hedley.net Low Vendor pom developer id jhy Medium Vendor pom developer name Jonathan Hedley Medium Vendor pom groupid org.jsoup Highest Vendor pom name jsoup Java HTML Parser High Vendor pom organization name Jonathan Hedley High Vendor pom organization url https://jhy.io/ Medium Vendor pom url https://jsoup.org/ Highest Product file name jsoup High Product gradle artifactid jsoup Highest Product jar package name 9 Highest Product jar package name jsoup Highest Product jar package name org Highest Product jar package name parser Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://jsoup.org/ Low Product Manifest Bundle-Name jsoup Java HTML Parser Medium Product Manifest bundle-symbolicname org.jsoup Medium Product Manifest Implementation-Title jsoup Java HTML Parser High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jsoup Highest Product pom developer email jonathan@hedley.net Low Product pom developer id jhy Low Product pom developer name Jonathan Hedley Low Product pom groupid org.jsoup Highest Product pom name jsoup Java HTML Parser High Product pom organization name Jonathan Hedley Low Product pom organization url https://jhy.io/ Low Product pom url https://jsoup.org/ Medium Version file version 1.17.2 High Version gradle version 1.17.2 Highest Version Manifest Bundle-Version 1.17.2 High Version Manifest Implementation-Version 1.17.2 High Version pom version 1.17.2 Highest
jsr305-3.0.2.jarDescription:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: documentation:javadocClasspath
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 Evidence Type Source Name Value Confidence Vendor file name jsr305 High Vendor gradle artifactid jsr305 Highest Vendor gradle groupid com.google.code.findbugs Highest Vendor Manifest bundle-symbolicname org.jsr-305 Medium Vendor pom artifactid jsr305 Low Vendor pom groupid com.google.code.findbugs Highest Vendor pom name FindBugs-jsr305 High Vendor pom url http://findbugs.sourceforge.net/ Highest Product file name jsr305 High Product gradle artifactid jsr305 Highest Product Manifest Bundle-Name FindBugs-jsr305 Medium Product Manifest bundle-symbolicname org.jsr-305 Medium Product pom artifactid jsr305 Highest Product pom groupid com.google.code.findbugs Highest Product pom name FindBugs-jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Version file version 3.0.2 High Version gradle version 3.0.2 Highest Version Manifest Bundle-Version 3.0.2 High Version pom version 3.0.2 Highest
jtidy-r938.jarDescription:
JTidy is a Java port of HTML Tidy, a HTML syntax checker and pretty printer. Like its non-Java cousin, JTidy can be
used as a tool for cleaning up malformed and faulty HTML. In addition, JTidy provides a DOM interface to the
document that is being processed, which effectively makes you able to use JTidy as a DOM parser for real-world HTML.
License:
Java HTML Tidy License: http://jtidy.svn.sourceforge.net/viewvc/jtidy/trunk/jtidy/LICENSE.txt?revision=95 File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sf.jtidy/jtidy/r938/ab08d87a225a715a69107732b67f21e1da930349/jtidy-r938.jar
MD5: 6a9121561b8f98c0a8fb9b6e57f50e6b
SHA1: ab08d87a225a715a69107732b67f21e1da930349
SHA256: 6fc03e51e73fa884f06e7eae0761e045e56fdeb4e146a4d952e3023cc9e3fb43
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath jtidy-r938.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name jtidy-r938 High Vendor gradle artifactid jtidy Highest Vendor gradle groupid net.sf.jtidy Highest Vendor jar package name parser Highest Vendor jar package name tidy Low Vendor jar package name w3c Low Vendor pom artifactid jtidy Low Vendor pom developer email atripp AT users.sourceforge.net Low Vendor pom developer email fgiust AT users.sourceforge.net Low Vendor pom developer email garypeskin AT users.sourceforge.net Low Vendor pom developer email lempinen AT users.sourceforge.net Low Vendor pom developer email russgold AT users.sourceforge.net Low Vendor pom developer id atripp Medium Vendor pom developer id fgiust Medium Vendor pom developer id garypeskin Medium Vendor pom developer id lempinen Medium Vendor pom developer id russgold Medium Vendor pom developer name Andy Tripp Medium Vendor pom developer name Fabrizio Giustina Medium Vendor pom developer name Gary L Peskin Medium Vendor pom developer name Russell Gold Medium Vendor pom developer name Sami Lempinen Medium Vendor pom developer org Sourceforge Medium Vendor pom groupid net.sf.jtidy Highest Vendor pom name JTidy High Vendor pom organization name sourceforge High Vendor pom organization url http://sourceforge.net Medium Vendor pom url http://jtidy.sourceforge.net Highest Product file name jtidy-r938 High Product gradle artifactid jtidy Highest Product jar package name parser Highest Product jar package name tidy Low Product pom artifactid jtidy Highest Product pom developer email atripp AT users.sourceforge.net Low Product pom developer email fgiust AT users.sourceforge.net Low Product pom developer email garypeskin AT users.sourceforge.net Low Product pom developer email lempinen AT users.sourceforge.net Low Product pom developer email russgold AT users.sourceforge.net Low Product pom developer id atripp Low Product pom developer id fgiust Low Product pom developer id garypeskin Low Product pom developer id lempinen Low Product pom developer id russgold Low Product pom developer name Andy Tripp Low Product pom developer name Fabrizio Giustina Low Product pom developer name Gary L Peskin Low Product pom developer name Russell Gold Low Product pom developer name Sami Lempinen Low Product pom developer org Sourceforge Low Product pom groupid net.sf.jtidy Highest Product pom name JTidy High Product pom organization name sourceforge Low Product pom organization url http://sourceforge.net Low Product pom url http://jtidy.sourceforge.net Medium Version gradle version r938 Highest Version pom version r938 Highest
CVE-2023-34623 suppress
An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. CWE-787 Out-of-bounds Write
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
junit-jupiter-api-5.10.3.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.10.3/a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5/junit-jupiter-api-5.10.3.jarMD5: 9c5af4543b8784a55eab254418cc367bSHA1: a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5SHA256: 6efe6e01ca1ff79b7bf4c6f1eed0b29292e166c27eaf7b00ac981a14d4de61aaReferenced In Projects/Scopes:
documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath junit-jupiter-api-5.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 Evidence Type Source Name Value Confidence Vendor file name junit-jupiter-api High Vendor gradle artifactid junit-jupiter-api Highest Vendor gradle groupid org.junit.jupiter Highest Vendor jar package name api Highest Vendor jar package name api Low Vendor jar package name junit Highest Vendor jar package name junit Low Vendor jar package name jupiter Highest Vendor jar package name jupiter Low Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-jupiter-api Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest specification-vendor junit.org Low Product file name junit-jupiter-api High Product gradle artifactid junit-jupiter-api Highest Product jar package name api Highest Product jar package name api Low Product jar package name junit Highest Product jar package name jupiter Highest Product jar package name jupiter Low Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Jupiter API Medium Product Manifest bundle-symbolicname junit-jupiter-api Medium Product Manifest Implementation-Title junit-jupiter-api High Product Manifest specification-title junit-jupiter-api Medium Version file version 5.10.3 High Version Manifest Implementation-Version 5.10.3 High
junit-platform-commons-1.10.3.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.10.3/a353d42a2f13343a7cb80c5228ae66ff64495481/junit-platform-commons-1.10.3.jarMD5: 83ff374dd428b03f1cf70d0143259f01SHA1: a353d42a2f13343a7cb80c5228ae66ff64495481SHA256: 9787f04d49db59397cdd7555d421a5bd2d1445666997d327b94f85e38bed57f1Referenced In Projects/Scopes:
documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath junit-platform-commons-1.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 Evidence Type Source Name Value Confidence Vendor file name junit-platform-commons High Vendor gradle artifactid junit-platform-commons Highest Vendor gradle groupid org.junit.platform Highest Vendor jar package name commons Highest Vendor jar package name commons Low Vendor jar package name junit Highest Vendor jar package name junit Low Vendor jar package name org Highest Vendor jar package name platform Highest Vendor jar package name platform Low Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-platform-commons Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor junit.org Low Product file name junit-platform-commons High Product gradle artifactid junit-platform-commons Highest Product jar package name commons Highest Product jar package name commons Low Product jar package name junit Highest Product jar package name platform Highest Product jar package name platform Low Product jar package name util Low Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Platform Commons Medium Product Manifest bundle-symbolicname junit-platform-commons Medium Product Manifest Implementation-Title junit-platform-commons High Product Manifest multi-release true Low Product Manifest specification-title junit-platform-commons Medium Version file version 1.10.3 High Version Manifest Implementation-Version 1.10.3 High
kotlin-android-extensions-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-android-extensions/1.9.22/6a2bb8c1f0fb8d9c74462e5766cbbbd6b64f3a4/kotlin-android-extensions-1.9.22.jarMD5: b01686f40c74c6c4ecf7a2c118a652c1SHA1: 06a2bb8c1f0fb8d9c74462e5766cbbbd6b64f3a4SHA256: 1e5e881642a99ddb8f6d13e6995a08c192bc384187396663d8447c081d87e24fReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath kotlin-android-extensions-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-android-extensions High Vendor gradle artifactid kotlin-android-extensions Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name android Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-android-extensions High Product gradle artifactid kotlin-android-extensions Highest Product jar package name android Highest Product jar package name android Low Product jar package name extensions Highest Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name synthetic Low Product Manifest Implementation-Title kotlin-android-extensions High Version file name kotlin-android-extensions Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-assignment-compiler-plugin-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-assignment-compiler-plugin-embeddable/1.9.22/6e8ba9e2525145f047a39c0587063fd9dcccfce8/kotlin-assignment-compiler-plugin-embeddable-1.9.22.jarMD5: 217f483b2cff6ff807c51fd1605f3c8aSHA1: 6e8ba9e2525145f047a39c0587063fd9dcccfce8SHA256: 2a61dd219fedbe5318a3b1e23c0f739b45ed1b5b24b0b6737519b7845e8095f8Referenced In Project/Scope: mjml-plugin:kotlinCompilerPluginClasspathMainkotlin-assignment-compiler-plugin-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1
Evidence Type Source Name Value Confidence Vendor file name kotlin-assignment-compiler-plugin-embeddable High Vendor gradle artifactid kotlin-assignment-compiler-plugin-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name assignment Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-assignment-compiler-plugin-embeddable High Product gradle artifactid kotlin-assignment-compiler-plugin-embeddable Highest Product jar package name assignment Highest Product jar package name assignment Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name plugin Highest Product jar package name plugin Low Product Manifest Implementation-Title kotlin-assignment-compiler-plugin.embeddable High Version file name kotlin-assignment-compiler-plugin-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-build-common-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-build-common/1.9.22/386c907637c37a1f15a636eeca9e49f2b8174a7f/kotlin-build-common-1.9.22.jarMD5: 69532e8d0c95af027dfa6399e728dea6SHA1: 386c907637c37a1f15a636eeca9e49f2b8174a7fSHA256: 53c3dcc5303f5903e6260aea73eccc6930f9a36efa2a11cd3bd3a7e55df63966Referenced In Projects/Scopes:
quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlin-build-common-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-build-common High Vendor gradle artifactid kotlin-build-common Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name incremental Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-build-common High Product gradle artifactid kotlin-build-common Highest Product jar package name build Highest Product jar package name incremental Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-build-common High Version file name kotlin-build-common Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-build-tools-api-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-build-tools-api/1.9.22/4b586cac70f83d04bb79b3b5a125e0b6159e2f0/kotlin-build-tools-api-1.9.22.jarMD5: 31ec794a6eceacb93dbd0947bbccf063SHA1: 04b586cac70f83d04bb79b3b5a125e0b6159e2f0SHA256: dd49cb7e28f4f3382f5250cfb05c864fd5f0a96d3265bb293c77b30adcc93ff6Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlin-build-tools-api-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-build-tools-api High Vendor gradle artifactid kotlin-build-tools-api Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name buildtools Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-build-tools-api High Product gradle artifactid kotlin-build-tools-api Highest Product jar package name api Highest Product jar package name api Low Product jar package name buildtools Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-build-tools-api High Version file name kotlin-build-tools-api Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-build-tools-impl-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-build-tools-impl/1.9.22/b73a584e8804367658a1a65391eaeda106f0d88/kotlin-build-tools-impl-1.9.22.jarMD5: 1ce20316a7ba3a37c061b127d19e86c8SHA1: 0b73a584e8804367658a1a65391eaeda106f0d88SHA256: 1b48d6de042a525f63b557513ae1266d699348225b013f940e32c63de2689428Referenced In Projects/Scopes:
quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlin-build-tools-impl-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-build-tools-impl High Vendor gradle artifactid kotlin-build-tools-impl Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name buildtools Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-build-tools-impl High Product gradle artifactid kotlin-build-tools-impl Highest Product jar package name buildtools Low Product jar package name internal Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-build-tools-impl High Version file name kotlin-build-tools-impl Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-compiler-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-compiler-embeddable/1.9.22/9cd4dc7773cf2a99ecd961a88fbbc9a2da3fb5e1/kotlin-compiler-embeddable-1.9.22.jarMD5: 0da92ab0aea48f14caf8c09062c277ceSHA1: 9cd4dc7773cf2a99ecd961a88fbbc9a2da3fb5e1SHA256: 2bfeadee59ab1988c336dbd6e65d991f766ae1dd8683f2a6ded5faa0279f0ca0Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-compiler-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-compiler-embeddable High Vendor gradle artifactid kotlin-compiler-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-compiler-embeddable High Product gradle artifactid kotlin-compiler-embeddable Highest Product jar package name compiler Highest Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-compiler-embeddable High Version file name kotlin-compiler-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-compiler-runner-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-compiler-runner/1.9.22/4a1d38f2422d2db9365947c89b09e868911450fb/kotlin-compiler-runner-1.9.22.jarMD5: 71810a1ff4b8c72f8245d936e399c92dSHA1: 4a1d38f2422d2db9365947c89b09e868911450fbSHA256: 73ec75bb99ebffa8b24a24a3b853f3f66096bc46a9351af0dac93debb69c15ebReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlin-compiler-runner-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-compiler-runner High Vendor gradle artifactid kotlin-compiler-runner Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name compilerrunner Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-compiler-runner High Product gradle artifactid kotlin-compiler-runner Highest Product jar package name compilerrunner Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-compiler-runner High Version file name kotlin-compiler-runner Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-daemon-client-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-daemon-client/1.9.22/fde46b1db1db37d8270a1c6a0c585ace99e4660e/kotlin-daemon-client-1.9.22.jarMD5: b6309773dc39b6bec9f47122936700ebSHA1: fde46b1db1db37d8270a1c6a0c585ace99e4660eSHA256: 5d73e1815b1167e4afe208f00b2a75c080bc5a810786caadb8e14787593a93b9Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlin-daemon-client-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-daemon-client High Vendor gradle artifactid kotlin-daemon-client Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name daemon Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-daemon-client High Product gradle artifactid kotlin-daemon-client Highest Product jar package name client Highest Product jar package name daemon Highest Product jar package name daemon Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-daemon-client High Version file name kotlin-daemon-client Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-daemon-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-daemon-embeddable/1.9.22/20e2c5df715f3240c765cfc222530e2796542021/kotlin-daemon-embeddable-1.9.22.jarMD5: f794b4d265617a3cfc8fa9a1736746e0SHA1: 20e2c5df715f3240c765cfc222530e2796542021SHA256: 92a57813171447d534461fa13fe37dc8cd3b7f86d83e9b1f7bb1b0be30541f8bReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-daemon-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-daemon-embeddable High Vendor gradle artifactid kotlin-daemon-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name daemon Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-daemon-embeddable High Product gradle artifactid kotlin-daemon-embeddable Highest Product jar package name common Low Product jar package name daemon Highest Product jar package name daemon Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-daemon-embeddable High Version file name kotlin-daemon-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-gradle-plugin-1.9.22-gradle82.jar (shaded: com.github.gundy:semver4j:0.16.4)Description:
Java implementation of a node-style SemVer expression parser/evaluator License:
MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.9.22/f598600f8b407cda9d4dcd9a4d901e83af68b90f/kotlin-gradle-plugin-1.9.22-gradle82.jar/META-INF/maven/com.github.gundy/semver4j/pom.xml
MD5: b2f793eaa1115b41eaa8bb63080406f8
SHA1: ca8df209029884f283afdcd7b104fb88576a18b1
SHA256: 32001db2443b339dd21f5b79ff29d1ade722d1ba080c214bde819f0f72d1604d
Referenced In Projects/Scopes: documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata Evidence Type Source Name Value Confidence Vendor pom artifactid semver4j Low Vendor pom developer email gundy@acm.org Low Vendor pom developer id gundy Medium Vendor pom developer name David Gundersen Medium Vendor pom groupid com.github.gundy Highest Vendor pom name SemVer4J High Vendor pom url http://github.com/gundy/semver4j Highest Product pom artifactid semver4j Highest Product pom developer email gundy@acm.org Low Product pom developer id gundy Low Product pom developer name David Gundersen Low Product pom groupid com.github.gundy Highest Product pom name SemVer4J High Product pom url http://github.com/gundy/semver4j Medium Version pom version 0.16.4 Highest
kotlin-gradle-plugin-1.9.22-gradle82.jar (shaded: com.google.code.gson:gson:2.8.9)License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.9.22/f598600f8b407cda9d4dcd9a4d901e83af68b90f/kotlin-gradle-plugin-1.9.22-gradle82.jar/META-INF/maven/com.google.code.gson/gson/pom.xml
MD5: 6cddce19473acd4bb9cfe35fad04f802
SHA1: e40b03e4cc2b52efb19af75c07596e9d15a52d82
SHA256: afded6e6a690fbf3ad4ae65ada397f0a90a5f630b303d1b741b9c97926fdd4de
Referenced In Projects/Scopes: documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata Evidence Type Source Name Value Confidence Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version pom version 2.8.9 Highest
kotlin-gradle-plugin-1.9.22-gradle82.jar (shaded: com.google.guava:guava:29.0-jre)Description:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.9.22/f598600f8b407cda9d4dcd9a4d901e83af68b90f/kotlin-gradle-plugin-1.9.22-gradle82.jar/META-INF/maven/com.google.guava/guava/pom.xmlMD5: d1ed8d2bec41bdbdee173c0545b0a238SHA1: e40cdee0d70244df1e963daac53a16241aea4585SHA256: 9027e934098903d287f1ba61c8b65f01d1d1e1da7a6fbcc04bf3de0544014426Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata Evidence Type Source Name Value Confidence Vendor pom artifactid guava Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor pom parent-artifactid guava-parent Low Product pom artifactid guava Highest Product pom groupid com.google.guava Highest Product pom name Guava: Google Core Libraries for Java High Product pom parent-artifactid guava-parent Medium Version pom version 29.0-jre Highest
CVE-2023-2976 suppress
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.
Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties
CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2020-8908 suppress
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-378 Creation of Temporary File With Insecure Permissions, CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
kotlin-gradle-plugin-1.9.22-gradle82.jar (shaded: org.antlr:antlr4-runtime:4.5.2-1)Description:
The ANTLR 4 Runtime File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.9.22/f598600f8b407cda9d4dcd9a4d901e83af68b90f/kotlin-gradle-plugin-1.9.22-gradle82.jar/META-INF/maven/org.antlr/antlr4-runtime/pom.xmlMD5: be6f8b9c66278c52274a8e6ba6fe351aSHA1: 6c4013c6b772dd3e8cc00837ccf5edd7619e8d21SHA256: 93bac9b6bc714d559904ed43242782a8cbe543cebf0104bb3ecc1786a9cb661eReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata Evidence Type Source Name Value Confidence Vendor pom artifactid antlr4-runtime Low Vendor pom groupid org.antlr Highest Vendor pom name ANTLR 4 Runtime High Vendor pom parent-artifactid antlr4-master Low Product pom artifactid antlr4-runtime Highest Product pom groupid org.antlr Highest Product pom name ANTLR 4 Runtime High Product pom parent-artifactid antlr4-master Medium Version pom version 4.5.2-1 Highest
kotlin-gradle-plugin-1.9.22-gradle82.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.9.22/f598600f8b407cda9d4dcd9a4d901e83af68b90f/kotlin-gradle-plugin-1.9.22-gradle82.jarMD5: e2860f2b12b893628fa64e0d3182c5faSHA1: f598600f8b407cda9d4dcd9a4d901e83af68b90fSHA256: d4e718dd5f30c6ba932d93ccfc5b3015e9dd3e44143a052b877028f1fae542dcReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-gradle-plugin-1.9.22-gradle82.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin High Vendor gradle artifactid kotlin-gradle-plugin Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-gradle-plugin High Product gradle artifactid kotlin-gradle-plugin Highest Product jar package name gradle Highest Product jar package name gradle Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name plugin Highest Product Manifest Implementation-Title kotlin-gradle-plugin High Version file name kotlin-gradle-plugin Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-gradle-plugin-annotations-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-annotations/1.9.22/56d4a967086a1a2f2d15bb0511e19b886b5e9fe/kotlin-gradle-plugin-annotations-1.9.22.jarMD5: 14c431e1a44b4d65d9dec8a4bf71fa49SHA1: 056d4a967086a1a2f2d15bb0511e19b886b5e9feSHA256: 967683cb98d9910145607fbf5b456295b43f0aaf93b1bba7bf6992e731cb24ecReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-gradle-plugin-annotations-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin-annotations High Vendor gradle artifactid kotlin-gradle-plugin-annotations Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-gradle-plugin-annotations High Product gradle artifactid kotlin-gradle-plugin-annotations Highest Product jar package name gradle Highest Product jar package name gradle Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-gradle-plugin-annotations High Version file name kotlin-gradle-plugin-annotations Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-gradle-plugin-api-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-api/1.9.22/17569b3e0ae3972df57b9b792857dc4c4de7d96e/kotlin-gradle-plugin-api-1.9.22.jarMD5: ba1cd421721f06b466f55ad0cd7688b3SHA1: 17569b3e0ae3972df57b9b792857dc4c4de7d96eSHA256: ecff67546065c60e095fb93b3f88b9b92ed1edc37e3febbc6f9ed35422fa412bReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-gradle-plugin-api-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin-api High Vendor gradle artifactid kotlin-gradle-plugin-api Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-gradle-plugin-api High Product gradle artifactid kotlin-gradle-plugin-api Highest Product jar package name gradle Highest Product jar package name gradle Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name plugin Highest Product jar package name plugin Low Product Manifest Implementation-Title kotlin-gradle-plugin-api High Version file name kotlin-gradle-plugin-api Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-gradle-plugin-idea-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea/1.9.22/83cf5d4acdbf6c1e7b32ca96cb79b96e4cce032e/kotlin-gradle-plugin-idea-1.9.22.jarMD5: 0f4a854fd2e9fd9640341914e20a4f72SHA1: 83cf5d4acdbf6c1e7b32ca96cb79b96e4cce032eSHA256: 8d1af87632d95148f122a9fa0ae2903c19ee6fab7d01e017f76e0d2c9a022c20Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath kotlin-gradle-plugin-idea-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin-idea High Vendor gradle artifactid kotlin-gradle-plugin-idea Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Product file name kotlin-gradle-plugin-idea High Product gradle artifactid kotlin-gradle-plugin-idea Highest Product jar package name gradle Low Product jar package name idea Low Product jar package name kotlin Low Version file name kotlin-gradle-plugin-idea Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest
kotlin-gradle-plugin-idea-proto-1.9.22.jar (shaded: com.google.protobuf:protobuf-java:3.21.9)Description:
Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
efficient yet extensible format.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.9.22/f3dfa2a32c488fb0d040b377aefe544f10d4c1f/kotlin-gradle-plugin-idea-proto-1.9.22.jar/META-INF/maven/com.google.protobuf/protobuf-java/pom.xmlMD5: a2dfabfa0f929c53986cf63a10619aaeSHA1: bd038b83cdb28c8102b00f2163f908e23bc3eb61SHA256: 66b34002eee26fd0e3d9387ef7d8e70021cf049ad93b083eb8f7143bbd176d29Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath Evidence Type Source Name Value Confidence Vendor pom artifactid protobuf-java Low Vendor pom groupid com.google.protobuf Highest Vendor pom name Protocol Buffers [Core] High Vendor pom parent-artifactid protobuf-parent Low Product pom artifactid protobuf-java Highest Product pom groupid com.google.protobuf Highest Product pom name Protocol Buffers [Core] High Product pom parent-artifactid protobuf-parent Medium Version pom version 3.21.9 Highest
kotlin-gradle-plugin-idea-proto-1.9.22.jar (shaded: com.google.protobuf:protobuf-kotlin:3.21.9)Description:
Kotlin core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
efficient yet extensible format.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.9.22/f3dfa2a32c488fb0d040b377aefe544f10d4c1f/kotlin-gradle-plugin-idea-proto-1.9.22.jar/META-INF/maven/com.google.protobuf/protobuf-kotlin/pom.xmlMD5: af12eecad210f41ac71b549f62e38a7bSHA1: 222361a7e9f4f7bb1291ea81e57c615a3d6082bdSHA256: 74408f909e1d9c3969055c431ac013485f5aa75c71214e9a933ee58f98853123Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath Evidence Type Source Name Value Confidence Vendor pom artifactid protobuf-kotlin Low Vendor pom groupid com.google.protobuf Highest Vendor pom name Protocol Buffers [Kotlin-Core] High Vendor pom parent-artifactid protobuf-parent Low Product pom artifactid protobuf-kotlin Highest Product pom groupid com.google.protobuf Highest Product pom name Protocol Buffers [Kotlin-Core] High Product pom parent-artifactid protobuf-parent Medium Version pom version 3.21.9 Highest
kotlin-gradle-plugin-idea-proto-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.9.22/f3dfa2a32c488fb0d040b377aefe544f10d4c1f/kotlin-gradle-plugin-idea-proto-1.9.22.jarMD5: ae168102f230907f6c7ba360d099b17bSHA1: 0f3dfa2a32c488fb0d040b377aefe544f10d4c1fSHA256: f5d82ee61966a2d98adfae19f24d6173022c15404896cdf236340035ee68c0f5Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath kotlin-gradle-plugin-idea-proto-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin-idea-proto High Vendor gradle artifactid kotlin-gradle-plugin-idea-proto Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-gradle-plugin-idea-proto High Product gradle artifactid kotlin-gradle-plugin-idea-proto Highest Product jar package name gradle Highest Product jar package name gradle Low Product jar package name idea Highest Product jar package name idea Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-gradle-plugin-idea-proto High Version file name kotlin-gradle-plugin-idea-proto Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-gradle-plugin-model-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-model/1.9.22/8ad595eac567746ccd6f029c0b1796ae08efe5bb/kotlin-gradle-plugin-model-1.9.22.jarMD5: 2ff347717d6aee9ed704606527f5d900SHA1: 8ad595eac567746ccd6f029c0b1796ae08efe5bbSHA256: 5108fad5be149825ece3a00103c3c21cf1afe954bb64b870789572939d7538cbReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-gradle-plugin-model-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-gradle-plugin-model High Vendor gradle artifactid kotlin-gradle-plugin-model Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name gradle Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-gradle-plugin-model High Product gradle artifactid kotlin-gradle-plugin-model Highest Product jar package name gradle Highest Product jar package name gradle Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name model Highest Product jar package name model Low Product Manifest Implementation-Title kotlin-gradle-plugin-model High Version file name kotlin-gradle-plugin-model Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-klib-commonizer-api-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-klib-commonizer-api/1.9.22/ecccaac16d10e24b3cf569aced956fc75907ca07/kotlin-klib-commonizer-api-1.9.22.jarMD5: ac3a4a55ba88d3fe16dd0ab9ec428ecaSHA1: ecccaac16d10e24b3cf569aced956fc75907ca07SHA256: 8c2f65429c182e2e4a2e09cb910e62b96db6eed285594b8f81af823b7e5944e2Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath kotlin-klib-commonizer-api-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-klib-commonizer-api High Vendor gradle artifactid kotlin-klib-commonizer-api Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name commonizer Low Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-klib-commonizer-api High Product gradle artifactid kotlin-klib-commonizer-api Highest Product jar package name commonizer Highest Product jar package name commonizer Low Product jar package name kotlin Highest Product jar package name kotlin Low Product Manifest Implementation-Title kotlin-klib-commonizer-api High Version file name kotlin-klib-commonizer-api Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-klib-commonizer-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable/1.9.22/5239b4634f46f697c68a4b703bf58b33a2a770/kotlin-klib-commonizer-embeddable-1.9.22.jarMD5: 91daec5dbba87c83ae577d56e158a652SHA1: 005239b4634f46f697c68a4b703bf58b33a2a770SHA256: 73fe743e74d21283d383d0babe85fd08c442afc1a7bd88082f8da0510d053d4bReferenced In Projects/Scopes:
quicktype-plugin:kotlinKlibCommonizerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-klib-commonizer-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-klib-commonizer-embeddable High Vendor gradle artifactid kotlin-klib-commonizer-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name internal Low Vendor jar package name jetbrains Highest Vendor jar package name kotlinx Low Vendor jar package name metadata Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-klib-commonizer-embeddable High Product gradle artifactid kotlin-klib-commonizer-embeddable Highest Product jar package name commonizer Highest Product jar package name internal Low Product jar package name klib Highest Product jar package name kotlin Highest Product jar package name metadata Low Product Manifest Implementation-Title kotlin-klib-commonizer-embeddable High Version file name kotlin-klib-commonizer-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-native-utils-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-native-utils/1.9.22/f8a640710af9828d08706f528f559b6775d8dbae/kotlin-native-utils-1.9.22.jarMD5: cadbffa8c482b8261fa88a32b2b9a64aSHA1: f8a640710af9828d08706f528f559b6775d8dbaeSHA256: 786c127dd5535db2c39ae597cd0b0cad9e914b83e236f1db0251235cc9c652acReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-native-utils-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-native-utils High Vendor gradle artifactid kotlin-native-utils Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name konan Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-native-utils High Product gradle artifactid kotlin-native-utils Highest Product jar package name konan Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name target Low Product Manifest Implementation-Title kotlin-native-utils High Version file name kotlin-native-utils Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-project-model-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-project-model/1.9.22/8b00ec83de75c7ba587891f63ae2719b720aca5/kotlin-project-model-1.9.22.jarMD5: 872bf6b28091969da7e60e8706f81215SHA1: 08b00ec83de75c7ba587891f63ae2719b720aca5SHA256: cc11d5c0b1909c5b0a08fd25ef0e754ffd2bf56caef665fb785122235e542a18Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-project-model-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-project-model High Vendor gradle artifactid kotlin-project-model Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name project Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-project-model High Product gradle artifactid kotlin-project-model Highest Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name model Highest Product jar package name model Low Product jar package name project Highest Product jar package name project Low Product Manifest Implementation-Title kotlin-project-model High Version file name kotlin-project-model Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-reflect-1.6.10.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-reflect/1.6.10/1cbe9c92c12a94eea200d23c2bbaedaf3daf5132/kotlin-reflect-1.6.10.jarMD5: a22187e3070e39a1cdb6a53970fa714dSHA1: 1cbe9c92c12a94eea200d23c2bbaedaf3daf5132SHA256: 3277ac102ae17aad10a55abec75ff5696c8d109790396434b496e75087854203Referenced In Projects/Scopes:
mjml-plugin:kotlinCompilerClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-reflect-1.6.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-reflect High Vendor gradle artifactid kotlin-reflect Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jvm Low Vendor jar package name kotlin Low Vendor jar package name reflect Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-reflect High Product gradle artifactid kotlin-reflect Highest Product jar package name internal Low Product jar package name jvm Low Product jar package name kotlin Highest Product jar package name reflect Highest Product jar package name reflect Low Product Manifest Implementation-Title kotlin-reflect High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-reflect Medium Version file version 1.6.10 High Version gradle version 1.6.10 Highest Version Manifest Implementation-Version 1.6.10-release-923(1.6.10) High
kotlin-reflect-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-reflect/1.9.22/761ab33cf85f03a3a24595e1b92639d82e7a9564/kotlin-reflect-1.9.22.jarMD5: 4017725f6908c3a2ef519e211ecb4b73SHA1: 761ab33cf85f03a3a24595e1b92639d82e7a9564SHA256: 77f311ca1384811d519fda389fcb1268bdaa058d605046e0ede76c03b0df3e97Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:compileClasspath mjml-plugin:embeddedKotlin mjml-plugin:compileClasspath mjml-plugin:compileOnlyDependenciesMetadata quicktype-plugin:implementationDependenciesMetadata kotlin-reflect-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-reflect High Vendor gradle artifactid kotlin-reflect Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jvm Low Vendor jar package name kotlin Low Vendor jar package name reflect Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-reflect High Product gradle artifactid kotlin-reflect Highest Product jar package name internal Low Product jar package name jvm Low Product jar package name kotlin Highest Product jar package name reflect Highest Product jar package name reflect Low Product Manifest Implementation-Title kotlin-reflect High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-reflect Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-sam-with-receiver-compiler-plugin-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-sam-with-receiver-compiler-plugin-embeddable/1.9.22/b6a14009aff935c357d29839734efb42ab10326a/kotlin-sam-with-receiver-compiler-plugin-embeddable-1.9.22.jarMD5: 088976b26f22b9c0bfa51e1334e02a05SHA1: b6a14009aff935c357d29839734efb42ab10326aSHA256: 8ea514a1140006cc57a07315b15a13688ed6fea1707f3ac98e9ce8095bb6cf7fReferenced In Project/Scope: mjml-plugin:kotlinCompilerPluginClasspathMainkotlin-sam-with-receiver-compiler-plugin-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1
Evidence Type Source Name Value Confidence Vendor file name kotlin-sam-with-receiver-compiler-plugin-embeddable High Vendor gradle artifactid kotlin-sam-with-receiver-compiler-plugin-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name samwithreceiver Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-sam-with-receiver-compiler-plugin-embeddable High Product gradle artifactid kotlin-sam-with-receiver-compiler-plugin-embeddable Highest Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name samwithreceiver Low Product Manifest Implementation-Title kotlin-sam-with-receiver-compiler-plugin.embeddable High Version file name kotlin-sam-with-receiver-compiler-plugin-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-script-runtime-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-script-runtime/1.9.22/f8139a46fc677ec9badc49ae954392f4f5e7e7c7/kotlin-script-runtime-1.9.22.jarMD5: 3edf88eb6caa351e4bc14ee9645da77cSHA1: f8139a46fc677ec9badc49ae954392f4f5e7e7c7SHA256: b80670579f7f92d473d8d5834f0b124f7755c4598fe94b244183b02834834574Referenced In Projects/Scopes:
mjml-plugin:kotlinCompilerClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinCompilerPluginClasspathMain mjml-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-script-runtime-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-script-runtime High Vendor gradle artifactid kotlin-script-runtime Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name kotlin Low Vendor jar package name script Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Product file name kotlin-script-runtime High Product gradle artifactid kotlin-script-runtime Highest Product jar package name dependencies Low Product jar package name kotlin Highest Product jar package name script Highest Product jar package name script Low Product Manifest Implementation-Title kotlin-script-runtime High Product Manifest kotlin-runtime-component Main Low Version file name kotlin-script-runtime Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-scripting-common-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-common/1.9.22/afe984c6e35d6ac356dbdeb79926474ea68ca7d1/kotlin-scripting-common-1.9.22.jarMD5: 8b7fbaee7184e588de9e9ed0ac805ad8SHA1: afe984c6e35d6ac356dbdeb79926474ea68ca7d1SHA256: fa500cbf034943ef8126f3d3dc65af09ff99dfffe44c5099b4fc2ed5bf2f5dc7Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain kotlin-scripting-common-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-scripting-common High Vendor gradle artifactid kotlin-scripting-common Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name experimental Low Vendor jar package name kotlin Low Vendor jar package name script Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-scripting-common High Product gradle artifactid kotlin-scripting-common Highest Product jar package name api Low Product jar package name experimental Low Product jar package name kotlin Highest Product jar package name script Low Product Manifest Implementation-Title kotlin-scripting-common High Version file name kotlin-scripting-common Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-scripting-compiler-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable/1.9.22/68ad2e5ddce3f436a154aab01459a52fee2f0d3b/kotlin-scripting-compiler-embeddable-1.9.22.jarMD5: e3cffc06152d6a4f24ac1437a6d93890SHA1: 68ad2e5ddce3f436a154aab01459a52fee2f0d3bSHA256: 223fec84830234499cd4c7a23ea1c92eba127c41b35d9bb1d4b61d24155aeb35Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain kotlin-scripting-compiler-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-scripting-compiler-embeddable High Vendor gradle artifactid kotlin-scripting-compiler-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name scripting Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-scripting-compiler-embeddable High Product gradle artifactid kotlin-scripting-compiler-embeddable Highest Product jar package name compiler Highest Product jar package name compiler Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name scripting Highest Product jar package name scripting Low Product Manifest Implementation-Title kotlin-scripting-compiler-embeddable High Version file name kotlin-scripting-compiler-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-scripting-compiler-impl-embeddable-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-compiler-impl-embeddable/1.9.22/6dbdc3dd777e0dd1f6a49ee66a199be3af088df8/kotlin-scripting-compiler-impl-embeddable-1.9.22.jarMD5: 85bf721a9f710dd87d3e37714a3eaedeSHA1: 6dbdc3dd777e0dd1f6a49ee66a199be3af088df8SHA256: 38991816a287ff76241f1a77e7f1116481d4e93a3db63259a657dde20e6d0f65Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain kotlin-scripting-compiler-impl-embeddable-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-scripting-compiler-impl-embeddable High Vendor gradle artifactid kotlin-scripting-compiler-impl-embeddable Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name scripting Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-scripting-compiler-impl-embeddable High Product gradle artifactid kotlin-scripting-compiler-impl-embeddable Highest Product jar package name definitions Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name scripting Highest Product jar package name scripting Low Product Manifest Implementation-Title kotlin-scripting-compiler-impl-embeddable High Version file name kotlin-scripting-compiler-impl-embeddable Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-scripting-jvm-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-jvm/1.9.22/79c7960eb58c43865829cb2f420cf8806f59f8b1/kotlin-scripting-jvm-1.9.22.jarMD5: c6bb54902d61b0c84544bfdd8af985f8SHA1: 79c7960eb58c43865829cb2f420cf8806f59f8b1SHA256: 8d127d76fcfa0517c36c1ea0e228ece03d5a4682642a01f6479a6bbdc7312a29Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain kotlin-scripting-jvm-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-scripting-jvm High Vendor gradle artifactid kotlin-scripting-jvm Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name experimental Low Vendor jar package name kotlin Low Vendor jar package name script Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-scripting-jvm High Product gradle artifactid kotlin-scripting-jvm Highest Product jar package name experimental Low Product jar package name jvm Highest Product jar package name jvm Low Product jar package name kotlin Highest Product jar package name script Low Product Manifest Implementation-Title kotlin-scripting-jvm High Version file name kotlin-scripting-jvm Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-stdlib-1.9.10.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.9.10/72812e8a368917ab5c0a5081b56915ffdfec93b7/kotlin-stdlib-1.9.10.jarMD5: da8348128b101f854fafa9a31e3806bdSHA1: 72812e8a368917ab5c0a5081b56915ffdfec93b7SHA256: 55e989c512b80907799f854309f3bc7782c5b3d13932442d0379d5c472711504Referenced In Projects/Scopes:
github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath kotlin-stdlib-1.9.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib High Vendor gradle artifactid kotlin-stdlib Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-stdlib High Product gradle artifactid kotlin-stdlib Highest Product jar package name kotlin Highest Product Manifest Implementation-Title kotlin-stdlib High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-stdlib Medium Version file version 1.9.10 High Version gradle version 1.9.10 Highest Version Manifest Implementation-Version 1.9.10-release-459 High
kotlin-stdlib-1.9.22-all.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.9.22/6c69e7b26179394dafd3c90e630ef763b8c1a267/kotlin-stdlib-1.9.22-all.jarMD5: 4468f2ad5cecac0c0c2639699aafcfc1SHA1: 6c69e7b26179394dafd3c90e630ef763b8c1a267SHA256: cec38bc3302e72a8aaf9cde436b5a9071ee0331e2ad05e84d8bb897334d7e9d4Referenced In Projects/Scopes:
quicktype-plugin:apiDependenciesMetadata mjml-plugin:compileOnlyDependenciesMetadata quicktype-plugin:implementationDependenciesMetadata kotlin-stdlib-1.9.22-all.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib High Vendor gradle artifactid kotlin-stdlib Highest Vendor gradle groupid org.jetbrains.kotlin Highest Product file name kotlin-stdlib High Product gradle artifactid kotlin-stdlib Highest Version file name kotlin-stdlib Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest
kotlin-stdlib-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.9.22/d6c44cd08d8f3f9bece8101216dbe6553365c6e3/kotlin-stdlib-1.9.22.jarMD5: c06551ea547417a446386c6ccb198894SHA1: d6c44cd08d8f3f9bece8101216dbe6553365c6e3SHA256: 6abe146c27864138b874ccccfe5f534e3eb923c99a1b7b5d45494ee5694f3e0aReferenced In Projects/Scopes:
documentation:javadocClasspath mjml-plugin:kotlinCompilerClasspath mjml-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinCompilerPluginClasspathMain quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:compileClasspath mjml-plugin:kotlinBuildToolsApiClasspath mjml-plugin:embeddedKotlin mjml-plugin:compileClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath kotlin-stdlib-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.9.22 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib High Vendor gradle artifactid kotlin-stdlib Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-stdlib High Product gradle artifactid kotlin-stdlib Highest Product jar package name kotlin Highest Product Manifest Implementation-Title kotlin-stdlib High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-stdlib Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-stdlib-common-1.9.10.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-common/1.9.10/dafaf2c27f27c09220cee312df10917d9a5d97ce/kotlin-stdlib-common-1.9.10.jarMD5: de4024a53c843e959f2d50ecd1f0e951SHA1: dafaf2c27f27c09220cee312df10917d9a5d97ceSHA256: cde3341ba18a2ba262b0b7cf6c55b20c90e8d434e42c9a13e6a3f770db965a88Referenced In Projects/Scopes:
github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath kotlin-stdlib-common-1.9.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib-common High Vendor gradle artifactid kotlin-stdlib-common Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Product file name kotlin-stdlib-common High Product gradle artifactid kotlin-stdlib-common Highest Product Manifest Implementation-Title kotlin-stdlib-common High Product Manifest kotlin-runtime-component Main Low Version file name kotlin-stdlib-common Medium Version file version 1.9.10 High Version gradle version 1.9.10 Highest Version Manifest Implementation-Version 1.9.10-release-459 High
kotlin-stdlib-jdk7-1.9.10.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk7/1.9.10/bc5bfc2690338defd5195b05c57562f2194eeb10/kotlin-stdlib-jdk7-1.9.10.jarMD5: 14f35bcc452b095f3034a1471960ccccSHA1: bc5bfc2690338defd5195b05c57562f2194eeb10SHA256: ac6361bf9ad1ed382c2103d9712c47cdec166232b4903ed596e8876b0681c9b7Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath kotlin-stdlib-jdk7-1.9.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib-jdk7 High Vendor gradle artifactid kotlin-stdlib-jdk7 Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name meta-inf Low Vendor jar package name versions Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-stdlib-jdk7 High Product gradle artifactid kotlin-stdlib-jdk7 Highest Product jar package name module-info Low Product jar package name versions Low Product Manifest Implementation-Title kotlin-stdlib-jdk7 High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-stdlib-jdk7 Medium Version file version 1.9.10 High Version gradle version 1.9.10 Highest Version Manifest Implementation-Version 1.9.10-release-459 High
kotlin-stdlib-jdk8-1.9.10.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk8/1.9.10/c7510d64a83411a649c76f2778304ddf71d7437b/kotlin-stdlib-jdk8-1.9.10.jarMD5: d223cbd9e57f02cf4e9f3d9ed01edceeSHA1: c7510d64a83411a649c76f2778304ddf71d7437bSHA256: a4c74d94d64ce1abe53760fe0389dd941f6fc558d0dab35e47c085a11ec80f28Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath kotlin-stdlib-jdk8-1.9.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib-jdk8 High Vendor gradle artifactid kotlin-stdlib-jdk8 Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name meta-inf Low Vendor jar package name versions Low Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Product file name kotlin-stdlib-jdk8 High Product gradle artifactid kotlin-stdlib-jdk8 Highest Product jar package name module-info Low Product jar package name versions Low Product Manifest Implementation-Title kotlin-stdlib-jdk8 High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Version file name kotlin-stdlib-jdk8 Medium Version file version 1.9.10 High Version gradle version 1.9.10 Highest Version Manifest Implementation-Version 1.9.10-release-459 High
kotlin-tooling-core-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-tooling-core/1.9.22/bdc01105250e7ecc8bbcf49a21805685cd557dda/kotlin-tooling-core-1.9.22.jarMD5: d2f3d8b451a8d165d532db475845a22bSHA1: bdc01105250e7ecc8bbcf49a21805685cd557ddaSHA256: 8938eb97e36320daa3e6fb2a60fd2a05b232ff4a557173c5019f045b8832d9f4Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-tooling-core-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-tooling-core High Vendor gradle artifactid kotlin-tooling-core Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name tooling Low Product file name kotlin-tooling-core High Product gradle artifactid kotlin-tooling-core Highest Product jar package name core Low Product jar package name kotlin Low Product jar package name tooling Low Version file name kotlin-tooling-core Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest
kotlin-util-io-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-util-io/1.9.22/6810a00fa9f4616c07c5b0b82bef47aa57f22cb0/kotlin-util-io-1.9.22.jarMD5: 445ee925f76c9b0e81d60025c24a15d0SHA1: 6810a00fa9f4616c07c5b0b82bef47aa57f22cb0SHA256: f6d7a58491a378b083ad1bead488a485e11d160b31e76c18c1ad520f1d28f46bReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-util-io-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-util-io High Vendor gradle artifactid kotlin-util-io Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name konan Low Vendor jar package name kotlin Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-util-io High Product gradle artifactid kotlin-util-io Highest Product jar package name file Low Product jar package name konan Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name util Highest Product Manifest Implementation-Title kotlin-util-io High Version file name kotlin-util-io Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlin-util-klib-1.9.22.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-util-klib/1.9.22/e79ef1ef604c865c06b2c6dafec27cf8382de839/kotlin-util-klib-1.9.22.jarMD5: b52744824eaf33d72ab8cc418430279aSHA1: e79ef1ef604c865c06b2c6dafec27cf8382de839SHA256: a679ee2f510f3ab92691818de5eb5b0902e86d88c97674e7db44dc4f2252c5f9Referenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath quicktype-plugin:compileClasspath quicktype-plugin:implementationDependenciesMetadata kotlin-util-klib-1.9.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.9.22 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlin-util-klib High Vendor gradle artifactid kotlin-util-klib Highest Vendor gradle groupid org.jetbrains.kotlin Highest Vendor jar package name jetbrains Highest Vendor jar package name jetbrains Low Vendor jar package name kotlin Low Vendor jar package name library Low Vendor Manifest Implementation-Vendor JetBrains High Product file name kotlin-util-klib High Product gradle artifactid kotlin-util-klib Highest Product jar package name impl Low Product jar package name kotlin Highest Product jar package name kotlin Low Product jar package name library Low Product Manifest Implementation-Title kotlin-util-klib High Version file name kotlin-util-klib Medium Version file version 1.9.22 High Version gradle version 1.9.22 Highest Version Manifest Implementation-Version 1.9.22-release-704 High
kotlinx-coroutines-core-jvm-1.5.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-coroutines-core-jvm/1.5.0/d8cebccdcddd029022aa8646a5a953ff88b13ac8/kotlinx-coroutines-core-jvm-1.5.0.jarMD5: 0a0d2e63b7d71b97778cbd41bb3dfce0SHA1: d8cebccdcddd029022aa8646a5a953ff88b13ac8SHA256: 78d6cc7135f84d692ff3752fcfd1fa1bbe0940d7df70652e4f1eaeec0c78afbbReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath kotlinx-coroutines-core-jvm-1.5.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name kotlinx-coroutines-core-jvm High Vendor gradle artifactid kotlinx-coroutines-core-jvm Highest Vendor gradle groupid org.jetbrains.kotlinx Highest Vendor jar package name coroutines Low Vendor jar package name kotlinx Low Vendor Manifest can-retransform-classes true Low Product file name kotlinx-coroutines-core-jvm High Product gradle artifactid kotlinx-coroutines-core-jvm Highest Product jar package name coroutines Low Product Manifest can-retransform-classes true Low Version file name kotlinx-coroutines-core-jvm Medium Version file version 1.5.0 High Version gradle version 1.5.0 Highest
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarDescription:
An empty artifact that Guava depends on to signal that it is providing
ListenableFuture -- but is also available in a second "version" that
contains com.google.common.util.concurrent.ListenableFuture class, without
any other Guava classes. The idea is:
- If users want only ListenableFuture, they depend on listenablefuture-1.0.
- If users want all of Guava, they depend on guava, which, as of Guava
27.0, depends on
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
version number is enough for some build systems (notably, Gradle) to select
that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
conflict with the copy of ListenableFuture in guava itself. If users are
using an older version of Guava or a build system other than Gradle, they
may see class conflicts. If so, they can solve them by manually excluding
the listenablefuture artifact or manually forcing their build systems to
use 9999.0-....
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/b421526c5f297295adef1c886e5246c39d4ac629/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarMD5: d094c22570d65e132c19cea5d352e381SHA1: b421526c5f297295adef1c886e5246c39d4ac629SHA256: b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99Referenced In Project/Scope: documentation:javadocClasspathlistenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6 Evidence Type Source Name Value Confidence Vendor file name listenablefuture High Vendor gradle artifactid listenablefuture Highest Vendor gradle groupid com.google.guava Highest Vendor pom artifactid listenablefuture Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava ListenableFuture only High Vendor pom parent-artifactid guava-parent Low Product file name listenablefuture High Product gradle artifactid listenablefuture Highest Product pom artifactid listenablefuture Highest Product pom groupid com.google.guava Highest Product pom name Guava ListenableFuture only High Product pom parent-artifactid guava-parent Medium Version gradle version 9999.0-empty-to-avoid-conflict-with-guava Highest Version pom parent-version 9999.0-empty-to-avoid-conflict-with-guava Low Version pom version 9999.0-empty-to-avoid-conflict-with-guava Highest
logging-interceptor-4.12.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okhttp3/logging-interceptor/4.12.0/e922c1f14d365c0f2bed140cc0825e18462c2778/logging-interceptor-4.12.0.jarMD5: 48029ba5a920bbb533503169cba8e498SHA1: e922c1f14d365c0f2bed140cc0825e18462c2778SHA256: f3e8d5f0903c250c2b55d2f47fcfe008e80634385da8385161c7a63aaed0c74cReferenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath logging-interceptor-4.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name logging-interceptor High Vendor gradle artifactid logging-interceptor Highest Vendor gradle groupid com.squareup.okhttp3 Highest Vendor jar package name logging Highest Vendor jar package name logging Low Vendor jar package name okhttp3 Highest Vendor jar package name okhttp3 Low Vendor Manifest automatic-module-name okhttp3.logging Medium Product file name logging-interceptor High Product gradle artifactid logging-interceptor Highest Product jar package name logging Highest Product jar package name logging Low Product jar package name okhttp3 Highest Product Manifest automatic-module-name okhttp3.logging Medium Version file name logging-interceptor Medium Version file version 4.12.0 High Version gradle version 4.12.0 Highest
lombok-1.18.30.jar lombok-1.18.30.jar: mavenEcjBootstrapAgent.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.projectlombok/lombok/1.18.30/f195ee86e6c896ea47a1d39defbe20eb59cd149d/lombok-1.18.30.jar/lombok/launch/mavenEcjBootstrapAgent.jarMD5: 2bc7812d729aa7f761f721c6f0620848SHA1: e67209a53266080be85e8848c01fd15af98700c7SHA256: 63da6c6457ba6bfb61867cf644542464783adc57bbf36a7f0843c2822c288169Referenced In Projects/Scopes:
plugin-utils:lombok test-common:annotationProcessor maven-plugin:annotationProcessor mkdocs-plugin:annotationProcessor code-generator-plugin:annotationProcessor jacoco-plugin:lombok code-generator-plugin:compileClasspath lombok-plugin:compileClasspath quicktype-plugin:lombok quicktype-plugin:annotationProcessor mjml-plugin:compileOnlyDependenciesMetadata github-plugin:compileClasspath okhttp-plugin:lombok test-code-generator:annotationProcessor git-plugin:annotationProcessor test-code-generator:lombok git-plugin:lombok code-generator-api:annotationProcessor settings-plugin:annotationProcessor embedded-sass-plugin:annotationProcessor code-generator-api:lombok lombok-plugin:lombok okhttp-plugin:compileClasspath aspectj-plugin:lombok git-plugin:compileClasspath code-generator-api:compileClasspath embedded-sass-plugin:lombok mjml-plugin:compileClasspath okhttp-plugin:annotationProcessor plugin-utils:compileClasspath test-common:lombok mkdocs-plugin:lombok settings-plugin:lombok mjml-plugin:lombok maven-plugin:lombok maven-plugin-plugin:compileClasspath compress-plugin:lombok settings-plugin:compileClasspath lombok-plugin:annotationProcessor mjml-plugin:annotationProcessor aspectj-plugin:compileClasspath compress-plugin:compileClasspath maven-plugin:compileClasspath test-common:compileClasspath embedded-sass-plugin:compileClasspath github-plugin:lombok plantuml-plugin:annotationProcessor jacoco-plugin:annotationProcessor plugin-utils:annotationProcessor aspectj-plugin:annotationProcessor mkdocs-plugin:compileClasspath maven-plugin-plugin:annotationProcessor quicktype-plugin:compileOnlyDependenciesMetadata jacoco-plugin:compileClasspath compress-plugin:annotationProcessor maven-plugin-plugin:lombok plantuml-plugin:compileClasspath plantuml-plugin:lombok quicktype-plugin:compileClasspath github-plugin:annotationProcessor test-code-generator:compileClasspath code-generator-plugin:lombok Evidence Type Source Name Value Confidence Vendor file name mavenEcjBootstrapAgent High Vendor jar package name launch Low Vendor jar package name lombok Low Vendor Manifest can-redefine-classes true Low Product file name mavenEcjBootstrapAgent High Product jar package name launch Low Product Manifest can-redefine-classes true Low
lombok-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/lombok-plugin/build/libs/lombok-plugin-8.7.1.jarMD5: 3ac9672fb633170efc5bf4eed3711c97SHA1: 4e304956cebfc00db31612647568823ae3d40765SHA256: 90b85cfb1fb84e8aa20adad048dc45b8edca2ae7291d12c0de533957115a2775Referenced In Project/Scope: documentation:javadocClasspathlombok-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name lombok-plugin High Vendor gradle artifactid lombok-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name lombok-plugin High Product gradle artifactid lombok-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
maven-artifact-3.9.6.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-artifact/3.9.6/fb0979832c10c1a25d038a33ca862bef055fcdc8/maven-artifact-3.9.6.jarMD5: 96a7982d9a46c5c19696b4558be1bbd2SHA1: fb0979832c10c1a25d038a33ca862bef055fcdc8SHA256: ad7a0fb408f8e47585ccc0d0011e0b501d93bfc9888d369bbd4a043d19475073Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-artifact-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-artifact High Vendor gradle artifactid maven-artifact Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name artifact Highest Vendor jar package name maven Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-artifact Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Artifact High Vendor pom parent-artifactid maven Low Product file name maven-artifact High Product gradle artifactid maven-artifact Highest Product jar package name apache Highest Product jar package name artifact Highest Product jar package name maven Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Artifact High Product Manifest specification-title Maven Artifact Medium Product pom artifactid maven-artifact Highest Product pom groupid org.apache.maven Highest Product pom name Maven Artifact High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-builder-support-3.9.6.jarDescription:
Support for descriptor builders (model, setting, toolchains) File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-builder-support/3.9.6/bcfc9d8175eaba21111edf21e0355a8523461abc/maven-builder-support-3.9.6.jarMD5: e004677a88ec086ba79a6a646b120f06SHA1: bcfc9d8175eaba21111edf21e0355a8523461abcSHA256: e1f4d2784459ce8a34b9dae1829a1999b569e483e21ee9faa7368691e729296eReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-builder-support-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-builder-support High Vendor gradle artifactid maven-builder-support Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-builder-support Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Builder Support High Vendor pom parent-artifactid maven Low Product file name maven-builder-support High Product gradle artifactid maven-builder-support Highest Product jar package name apache Highest Product jar package name maven Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Builder Support High Product Manifest specification-title Maven Builder Support Medium Product pom artifactid maven-builder-support Highest Product pom groupid org.apache.maven Highest Product pom name Maven Builder Support High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-core-3.9.6.jarDescription:
Maven Core classes. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-core/3.9.6/674ab3337566d493df8f95eddfda90e41002d214/maven-core-3.9.6.jarMD5: 0d872ce50d16e02ca72e348b9f7b3487SHA1: 674ab3337566d493df8f95eddfda90e41002d214SHA256: c1327590398759da1918dbf356eb6d63f8fce7192a805cb3c8e336fbb1155dc0Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-core-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-core High Vendor gradle artifactid maven-core Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-core Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Core High Vendor pom parent-artifactid maven Low Product file name maven-core High Product gradle artifactid maven-core Highest Product jar package name apache Highest Product jar package name maven Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Core High Product Manifest specification-title Maven Core Medium Product pom artifactid maven-core Highest Product pom groupid org.apache.maven Highest Product pom name Maven Core High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-model-3.9.4.jarDescription:
Model for Maven POM (Project Object Model) File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model/3.9.4/5b79d873cf6d13b3fc4020eac04e2a62ebbfa0aa/maven-model-3.9.4.jarMD5: d507b64e6608681ce809307a9e669316SHA1: 5b79d873cf6d13b3fc4020eac04e2a62ebbfa0aaSHA256: 7931dc8dda878eef46988d9fd07c4ade3c91892d7fb3208c742cb9457135bb15Referenced In Projects/Scopes:
mjml-plugin:runtimeClasspath mjml-plugin:compileClasspath mjml-plugin:implementationDependenciesMetadata maven-model-3.9.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name maven-model High Vendor gradle artifactid maven-model Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name model Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-model Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Model High Vendor pom parent-artifactid maven Low Product file name maven-model High Product gradle artifactid maven-model Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name model Highest Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Maven Model High Product Manifest specification-title Maven Model Medium Product pom artifactid maven-model Highest Product pom groupid org.apache.maven Highest Product pom name Maven Model High Product pom parent-artifactid maven Medium Version file version 3.9.4 High Version gradle version 3.9.4 Highest Version Manifest Implementation-Version 3.9.4 High Version pom version 3.9.4 Highest
maven-model-3.9.6.jarDescription:
Model for Maven POM (Project Object Model) File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model/3.9.6/ac9a1c8a8cfa36f3a5489837e653ec0cd530d576/maven-model-3.9.6.jarMD5: ac8747986567850914e2c7f0e85599b3SHA1: ac9a1c8a8cfa36f3a5489837e653ec0cd530d576SHA256: 4f8f07fdb6b8701fa89a23a2edf830808fd65892d90cce40c0e6df7c8f2fcb62Referenced In Project/Scope: maven-plugin-plugin:compileClasspathmaven-model-3.9.6.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-model High Vendor gradle artifactid maven-model Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name model Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-model Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Model High Vendor pom parent-artifactid maven Low Product file name maven-model High Product gradle artifactid maven-model Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name model Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Model High Product Manifest specification-title Maven Model Medium Product pom artifactid maven-model Highest Product pom groupid org.apache.maven Highest Product pom name Maven Model High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-model-3.9.8.jarDescription:
Model for Maven POM (Project Object Model) File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model/3.9.8/4ba1512e002efe9f9efc09ac8899c613f344d518/maven-model-3.9.8.jarMD5: c9444eab1467f505fa169de504def7c4SHA1: 4ba1512e002efe9f9efc09ac8899c613f344d518SHA256: 9b4be46c55f0720162664615d4fe8468f99866697a484e1652a19189656cb37dReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath maven-plugin:runtimeClasspath maven-model-3.9.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-model High Vendor gradle artifactid maven-model Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name model Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-model Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Model High Vendor pom parent-artifactid maven Low Product file name maven-model High Product gradle artifactid maven-model Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name model Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Model High Product Manifest specification-title Maven Model Medium Product pom artifactid maven-model Highest Product pom groupid org.apache.maven Highest Product pom name Maven Model High Product pom parent-artifactid maven Medium Version file version 3.9.8 High Version gradle version 3.9.8 Highest Version Manifest Implementation-Version 3.9.8 High Version pom version 3.9.8 Highest
maven-model-builder-3.9.6.jarDescription:
The effective model builder, with inheritance, profile activation, interpolation, ... File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model-builder/3.9.6/983ce00d50a9f78ad1b805e21e4fd71807fa6ebf/maven-model-builder-3.9.6.jarMD5: 8b1aa0b78ffdb501dd4a6cbc0cbeff68SHA1: 983ce00d50a9f78ad1b805e21e4fd71807fa6ebfSHA256: 5f96dafbc411ee4b1e8426368d0d31d05ab5a4dace69808143142a0017598721Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-model-builder-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-model-builder High Vendor gradle artifactid maven-model-builder Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name inheritance Highest Vendor jar package name interpolation Highest Vendor jar package name maven Highest Vendor jar package name model Highest Vendor jar package name profile Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-model-builder Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Model Builder High Vendor pom parent-artifactid maven Low Product file name maven-model-builder High Product gradle artifactid maven-model-builder Highest Product jar package name apache Highest Product jar package name inheritance Highest Product jar package name interpolation Highest Product jar package name maven Highest Product jar package name model Highest Product jar package name profile Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Model Builder High Product Manifest specification-title Maven Model Builder Medium Product pom artifactid maven-model-builder Highest Product pom groupid org.apache.maven Highest Product pom name Maven Model Builder High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/maven-plugin/build/libs/maven-plugin-8.7.1.jarMD5: 0e4168c939c85510fa16415d3d5824cbSHA1: 0efee75e3bac425a4354c250862cd0d8d4ad365bSHA256: 0a7d2f2be8312cd9f09dad8f3ca27b62adec10b8995b4f945046ba3ac4ff14ebReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin High Vendor gradle artifactid maven-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name maven-plugin High Product gradle artifactid maven-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
maven-plugin-annotations-3.13.1.jarDescription:
Java annotations to use in Mojos File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-annotations/3.13.1/ba70695f2f396589c49d5da5a99114ee71d03961/maven-plugin-annotations-3.13.1.jarMD5: 28e0cd46a9e26fb2b222eb8509295a49SHA1: ba70695f2f396589c49d5da5a99114ee71d03961SHA256: 8e22e4b806eb760990a0a9a79a8988d26af060b3342e00c62f7a0664f4d73575Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-annotations-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-annotations High Vendor gradle artifactid maven-plugin-annotations Highest Vendor gradle groupid org.apache.maven.plugin-tools Highest Vendor jar package name annotations Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-annotations Low Vendor pom groupid org.apache.maven.plugin-tools Highest Vendor pom name Maven Plugin Tools Java Annotations High Vendor pom parent-artifactid maven-plugin-tools Low Product file name maven-plugin-annotations High Product gradle artifactid maven-plugin-annotations Highest Product jar package name annotations Highest Product jar package name apache Highest Product jar package name maven Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Tools Java Annotations High Product Manifest specification-title Maven Plugin Tools Java Annotations Medium Product pom artifactid maven-plugin-annotations Highest Product pom groupid org.apache.maven.plugin-tools Highest Product pom name Maven Plugin Tools Java Annotations High Product pom parent-artifactid maven-plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-plugin-api-3.9.6.jarDescription:
The API for plugins - Mojos - development. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-plugin-api/3.9.6/64c127e31d9329928c72c403408a01f1871b6733/maven-plugin-api-3.9.6.jarMD5: d554ff9d1f948ef4ad67dd590e0eb299SHA1: 64c127e31d9329928c72c403408a01f1871b6733SHA256: 3fd664f7e511463561bc343822347618b8ca0952db85da785809166f0a762411Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-api-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-api High Vendor gradle artifactid maven-plugin-api Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-api Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Plugin API High Vendor pom parent-artifactid maven Low Product file name maven-plugin-api High Product gradle artifactid maven-plugin-api Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Plugin API High Product Manifest specification-title Maven Plugin API Medium Product pom artifactid maven-plugin-api Highest Product pom groupid org.apache.maven Highest Product pom name Maven Plugin API High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-plugin-plugin-3.13.1.jarDescription:
The Plugin Plugin is used to create a Maven plugin descriptor for any Mojos found in the source tree
in order to include them the resulting JAR. It is also used to generate a generic help goal. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugins/maven-plugin-plugin/3.13.1/693b63041d922c38b2de32ec0f788d4b770c44bb/maven-plugin-plugin-3.13.1.jarMD5: dfa3a3c77010a9c8892b99501457723bSHA1: 693b63041d922c38b2de32ec0f788d4b770c44bbSHA256: 68642549d6a65823f680754c2234f07cf68869ba7afd6f4160ac0c08fccd3e74Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-plugin High Vendor gradle artifactid maven-plugin-plugin Highest Vendor gradle groupid org.apache.maven.plugins Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor jar package name plugins Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-plugin Low Vendor pom groupid org.apache.maven.plugins Highest Vendor pom name Maven Plugin Plugin High Vendor pom parent-artifactid maven-plugin-tools Low Vendor pom parent-groupid org.apache.maven.plugin-tools Medium Product file name maven-plugin-plugin High Product gradle artifactid maven-plugin-plugin Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product jar package name plugins Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Plugin High Product Manifest specification-title Maven Plugin Plugin Medium Product pom artifactid maven-plugin-plugin Highest Product pom groupid org.apache.maven.plugins Highest Product pom name Maven Plugin Plugin High Product pom parent-artifactid maven-plugin-tools Medium Product pom parent-groupid org.apache.maven.plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-plugin-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/maven-plugin-plugin/build/libs/maven-plugin-plugin-8.7.1.jarMD5: 5158028ac4f2407827c5334d300c39f8SHA1: b63d99ada495ff436f1465ebe035ab150f75b915SHA256: 9514a5aee1179a9a13c7f5c928be05d8edee82f0819c6ed216f989611244fbe0Referenced In Project/Scope: documentation:javadocClasspathmaven-plugin-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name maven-plugin-plugin High Vendor gradle artifactid maven-plugin-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name maven-plugin-plugin High Product gradle artifactid maven-plugin-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
maven-plugin-tools-annotations-3.13.1.jarDescription:
Descriptor extractor for plugins written in Java with Java annotations. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-annotations/3.13.1/4875c97a093d49d3a8f27181343660d0aa04f729/maven-plugin-tools-annotations-3.13.1.jarMD5: f39c24a729ec37346935cc04df901494SHA1: 4875c97a093d49d3a8f27181343660d0aa04f729SHA256: 58ccf7f5cd49327e97f187ca9a457e8fdd4a3a5860c85472ea48098ed830efdbReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-tools-annotations-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-tools-annotations High Vendor gradle artifactid maven-plugin-tools-annotations Highest Vendor gradle groupid org.apache.maven.plugin-tools Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-tools-annotations Low Vendor pom groupid org.apache.maven.plugin-tools Highest Vendor pom name Maven Plugin Tool for Java with Annotations High Vendor pom parent-artifactid maven-plugin-tools Low Product file name maven-plugin-tools-annotations High Product gradle artifactid maven-plugin-tools-annotations Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product jar package name tools Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Tool for Java with Annotations High Product Manifest specification-title Maven Plugin Tool for Java with Annotations Medium Product pom artifactid maven-plugin-tools-annotations Highest Product pom groupid org.apache.maven.plugin-tools Highest Product pom name Maven Plugin Tool for Java with Annotations High Product pom parent-artifactid maven-plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-plugin-tools-api-3.13.1.jarDescription:
The Maven Plugin Tools Extractor API provides an API to extract descriptor information from Maven Plugins. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-api/3.13.1/ba79c98abb44d8b52d2a7c53231dfc108ec1d56e/maven-plugin-tools-api-3.13.1.jarMD5: 753cd37f047abc6218159f71c56bbb68SHA1: ba79c98abb44d8b52d2a7c53231dfc108ec1d56eSHA256: 9a6ab9cd996063597092341a52db957d74a59bcdf91c9f3ca23cc909e4453f22Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-tools-api-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-tools-api High Vendor gradle artifactid maven-plugin-tools-api Highest Vendor gradle groupid org.apache.maven.plugin-tools Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-tools-api Low Vendor pom groupid org.apache.maven.plugin-tools Highest Vendor pom name Maven Plugin Tools Extractor API High Vendor pom parent-artifactid maven-plugin-tools Low Product file name maven-plugin-tools-api High Product gradle artifactid maven-plugin-tools-api Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product jar package name tools Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Tools Extractor API High Product Manifest specification-title Maven Plugin Tools Extractor API Medium Product pom artifactid maven-plugin-tools-api Highest Product pom groupid org.apache.maven.plugin-tools Highest Product pom name Maven Plugin Tools Extractor API High Product pom parent-artifactid maven-plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-plugin-tools-generators-3.13.1.jarDescription:
The Maven Plugin Tools Generators provide content generation (XML descriptor, documentation, help goal) from
plugin descriptor extracted from plugin sources. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-generators/3.13.1/482ce5970ee727317a9272b7ac0603e4bc728bae/maven-plugin-tools-generators-3.13.1.jarMD5: 9800815e852aae8f276ddbad618b31a0SHA1: 482ce5970ee727317a9272b7ac0603e4bc728baeSHA256: a201ac701319c9ce54bd85c7c8e877e867495cd5f509f26ae5f2b408eafbf68fReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin-tools-generators-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-plugin-tools-generators High Vendor gradle artifactid maven-plugin-tools-generators Highest Vendor gradle groupid org.apache.maven.plugin-tools Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-tools-generators Low Vendor pom groupid org.apache.maven.plugin-tools Highest Vendor pom name Maven Plugin Tools Generators High Vendor pom parent-artifactid maven-plugin-tools Low Product file name maven-plugin-tools-generators High Product gradle artifactid maven-plugin-tools-generators Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product jar package name tools Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Tools Generators High Product Manifest specification-title Maven Plugin Tools Generators Medium Product pom artifactid maven-plugin-tools-generators Highest Product pom groupid org.apache.maven.plugin-tools Highest Product pom name Maven Plugin Tools Generators High Product pom parent-artifactid maven-plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-plugin-tools-java-3.13.1.jarDescription:
Descriptor extractor for plugins written in Java annotated with Mojo Javadoc Tags. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-java/3.13.1/a371887f1618dea0e630d4440614d73d59831d2d/maven-plugin-tools-java-3.13.1.jarMD5: 2112a957f948d8d51b4a09ca1f352222SHA1: a371887f1618dea0e630d4440614d73d59831d2dSHA256: 7d880de9ed64483ae6cb33ad637df0a29478115fd42b18f998b0bfac9a7b9969Referenced In Project/Scope: documentation:javadocClasspathmaven-plugin-tools-java-3.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1
Evidence Type Source Name Value Confidence Vendor file name maven-plugin-tools-java High Vendor gradle artifactid maven-plugin-tools-java Highest Vendor gradle groupid org.apache.maven.plugin-tools Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name plugin Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-plugin-tools-java Low Vendor pom groupid org.apache.maven.plugin-tools Highest Vendor pom name Maven Plugin Tool for Java with Javadoc Tags High Vendor pom parent-artifactid maven-plugin-tools Low Product file name maven-plugin-tools-java High Product gradle artifactid maven-plugin-tools-java Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name plugin Highest Product jar package name tools Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Maven Plugin Tool for Java with Javadoc Tags High Product Manifest specification-title Maven Plugin Tool for Java with Javadoc Tags Medium Product pom artifactid maven-plugin-tools-java Highest Product pom groupid org.apache.maven.plugin-tools Highest Product pom name Maven Plugin Tool for Java with Javadoc Tags High Product pom parent-artifactid maven-plugin-tools Medium Version file version 3.13.1 High Version gradle version 3.13.1 Highest Version Manifest Implementation-Version 3.13.1 High Version pom version 3.13.1 Highest
maven-reporting-api-3.1.1.jarDescription:
API to manage report generation. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.reporting/maven-reporting-api/3.1.1/74ca00a13e46d065071cdf6376d7d231e0208916/maven-reporting-api-3.1.1.jarMD5: 1e1e0b2f189c861995e33a2a746501bbSHA1: 74ca00a13e46d065071cdf6376d7d231e0208916SHA256: 25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-reporting-api-3.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-reporting-api High Vendor gradle artifactid maven-reporting-api Highest Vendor gradle groupid org.apache.maven.reporting Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name reporting Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-reporting-api Low Vendor pom developer email vincent.siveton@gmail.com Low Vendor pom developer id vsiveton Medium Vendor pom developer name Vincent Siveton Medium Vendor pom groupid org.apache.maven.reporting Highest Vendor pom name Apache Maven Reporting API High Vendor pom parent-artifactid maven-shared-components Low Vendor pom parent-groupid org.apache.maven.shared Medium Product file name maven-reporting-api High Product gradle artifactid maven-reporting-api Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name reporting Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Apache Maven Reporting API High Product Manifest specification-title Apache Maven Reporting API Medium Product pom artifactid maven-reporting-api Highest Product pom developer email vincent.siveton@gmail.com Low Product pom developer id vsiveton Low Product pom developer name Vincent Siveton Low Product pom groupid org.apache.maven.reporting Highest Product pom name Apache Maven Reporting API High Product pom parent-artifactid maven-shared-components Medium Product pom parent-groupid org.apache.maven.shared Medium Version file version 3.1.1 High Version gradle version 3.1.1 Highest Version Manifest Implementation-Version 3.1.1 High Version pom parent-version 3.1.1 Low Version pom version 3.1.1 Highest
maven-repository-metadata-3.9.6.jarDescription:
Per-directory local and remote repository metadata. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-repository-metadata/3.9.6/497cda3149f3c661113f9a663e0270ce2566cc95/maven-repository-metadata-3.9.6.jarMD5: 58a684bcc774fb44e4f73fa7466dc44dSHA1: 497cda3149f3c661113f9a663e0270ce2566cc95SHA256: e047a67b204c434994253e2ab5bdff5fe8cb7ada9316ac3e754c39f900ea847bReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-repository-metadata-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-repository-metadata High Vendor gradle artifactid maven-repository-metadata Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name repository Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-repository-metadata Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Repository Metadata Model High Vendor pom parent-artifactid maven Low Product file name maven-repository-metadata High Product gradle artifactid maven-repository-metadata Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name repository Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Repository Metadata Model High Product Manifest specification-title Maven Repository Metadata Model Medium Product pom artifactid maven-repository-metadata Highest Product pom groupid org.apache.maven Highest Product pom name Maven Repository Metadata Model High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-resolver-api-1.9.18.jarDescription:
The application programming interface for the repository system. License:
"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.resolver/maven-resolver-api/1.9.18/cd5174d6e80175398debe4869d484169c0abbf8/maven-resolver-api-1.9.18.jar
MD5: 43a87208b9585a61f268843f6a0931ec
SHA1: 0cd5174d6e80175398debe4869d484169c0abbf8
SHA256: ebfb9e1dfeea3c2017905184581e007874b4eaac9d28bfffcfe5133d70ac6339
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-api-1.9.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-api High Vendor gradle artifactid maven-resolver-api Highest Vendor gradle groupid org.apache.maven.resolver Highest Vendor jar package name artifact Highest Vendor jar package name repository Highest Vendor Manifest automatic-module-name org.apache.maven.resolver Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Vendor Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-api/ Low Vendor Manifest bundle-symbolicname org.apache.maven.resolver.api Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-api Low Vendor pom groupid org.apache.maven.resolver Highest Vendor pom name Maven Artifact Resolver API High Vendor pom parent-artifactid maven-resolver Low Product file name maven-resolver-api High Product gradle artifactid maven-resolver-api Highest Product jar package name artifact Highest Product jar package name repository Highest Product Manifest automatic-module-name org.apache.maven.resolver Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Product Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-api/ Low Product Manifest Bundle-Name Maven Artifact Resolver API Medium Product Manifest bundle-symbolicname org.apache.maven.resolver.api Medium Product Manifest Implementation-Title Maven Artifact Resolver API High Product Manifest specification-title Maven Artifact Resolver API Medium Product pom artifactid maven-resolver-api Highest Product pom groupid org.apache.maven.resolver Highest Product pom name Maven Artifact Resolver API High Product pom parent-artifactid maven-resolver Medium Version file version 1.9.18 High Version gradle version 1.9.18 Highest Version Manifest Bundle-Version 1.9.18 High Version Manifest Implementation-Version 1.9.18 High Version pom version 1.9.18 Highest
maven-resolver-impl-1.9.18.jarDescription:
An implementation of the repository system. License:
"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.resolver/maven-resolver-impl/1.9.18/e928b128d1e52e6299f94431ce3df74647bc8c26/maven-resolver-impl-1.9.18.jar
MD5: 0204f7788eb26200ff419d4abe21072b
SHA1: e928b128d1e52e6299f94431ce3df74647bc8c26
SHA256: 6bb9c90d007098004749c867da2eaf5785fc1139907718749c1097bdb2929bf8
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-impl-1.9.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-impl High Vendor gradle artifactid maven-resolver-impl Highest Vendor gradle groupid org.apache.maven.resolver Highest Vendor jar package name impl Highest Vendor Manifest automatic-module-name org.apache.maven.resolver.impl Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Vendor Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-impl/ Low Vendor Manifest bundle-symbolicname org.apache.maven.resolver.impl Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-impl Low Vendor pom groupid org.apache.maven.resolver Highest Vendor pom name Maven Artifact Resolver Implementation High Vendor pom parent-artifactid maven-resolver Low Product file name maven-resolver-impl High Product gradle artifactid maven-resolver-impl Highest Product jar package name impl Highest Product Manifest automatic-module-name org.apache.maven.resolver.impl Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Product Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-impl/ Low Product Manifest Bundle-Name Maven Artifact Resolver Implementation Medium Product Manifest bundle-symbolicname org.apache.maven.resolver.impl Medium Product Manifest Implementation-Title Maven Artifact Resolver Implementation High Product Manifest specification-title Maven Artifact Resolver Implementation Medium Product pom artifactid maven-resolver-impl Highest Product pom groupid org.apache.maven.resolver Highest Product pom name Maven Artifact Resolver Implementation High Product pom parent-artifactid maven-resolver Medium Version file version 1.9.18 High Version gradle version 1.9.18 Highest Version Manifest Bundle-Version 1.9.18 High Version Manifest Implementation-Version 1.9.18 High Version pom version 1.9.18 Highest
maven-resolver-named-locks-1.9.18.jarDescription:
A synchronization utility implementation using Named locks. License:
"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.resolver/maven-resolver-named-locks/1.9.18/31f948d89dcb3d9739e70d5e1000ebd68eb4405d/maven-resolver-named-locks-1.9.18.jar
MD5: e6da3cfadecd128a47814dfc661163dc
SHA1: 31f948d89dcb3d9739e70d5e1000ebd68eb4405d
SHA256: 098de7bbc5b0b26c3eff74ac30ffba6680fdab9bf4aebab95c3f5e2fe9eaeea8
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-named-locks-1.9.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-named-locks High Vendor gradle artifactid maven-resolver-named-locks Highest Vendor gradle groupid org.apache.maven.resolver Highest Vendor jar package name named Highest Vendor Manifest automatic-module-name org.apache.maven.resolver.named Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Vendor Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-named-locks/ Low Vendor Manifest bundle-symbolicname org.apache.maven.resolver.named Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-named-locks Low Vendor pom groupid org.apache.maven.resolver Highest Vendor pom name Maven Artifact Resolver Named Locks High Vendor pom parent-artifactid maven-resolver Low Product file name maven-resolver-named-locks High Product gradle artifactid maven-resolver-named-locks Highest Product jar package name named Highest Product jar package name support Highest Product Manifest automatic-module-name org.apache.maven.resolver.named Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Product Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-named-locks/ Low Product Manifest Bundle-Name Maven Artifact Resolver Named Locks Medium Product Manifest bundle-symbolicname org.apache.maven.resolver.named Medium Product Manifest Implementation-Title Maven Artifact Resolver Named Locks High Product Manifest specification-title Maven Artifact Resolver Named Locks Medium Product pom artifactid maven-resolver-named-locks Highest Product pom groupid org.apache.maven.resolver Highest Product pom name Maven Artifact Resolver Named Locks High Product pom parent-artifactid maven-resolver Medium Version file version 1.9.18 High Version gradle version 1.9.18 Highest Version Manifest Bundle-Version 1.9.18 High Version Manifest Implementation-Version 1.9.18 High Version pom version 1.9.18 Highest
maven-resolver-provider-3.9.6.jarDescription:
Extensions to Maven Resolver for utilizing Maven POM and repository metadata. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-resolver-provider/3.9.6/848c45d334f6cc5c8dd602b0e58fd4482964eddc/maven-resolver-provider-3.9.6.jarMD5: 74c2e9695842a46c2c2c1cd5179266c4SHA1: 848c45d334f6cc5c8dd602b0e58fd4482964eddcSHA256: 73b00b244b7b9e285654a45e765892bf5d369da77d42b5b4b5429122ed198a33Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-provider-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-provider High Vendor gradle artifactid maven-resolver-provider Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name repository Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-provider Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Artifact Resolver Provider High Vendor pom parent-artifactid maven Low Product file name maven-resolver-provider High Product gradle artifactid maven-resolver-provider Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name repository Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Artifact Resolver Provider High Product Manifest specification-title Maven Artifact Resolver Provider Medium Product pom artifactid maven-resolver-provider Highest Product pom groupid org.apache.maven Highest Product pom name Maven Artifact Resolver Provider High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-resolver-spi-1.9.18.jarDescription:
The service provider interface for repository system implementations and repository connectors. License:
"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.resolver/maven-resolver-spi/1.9.18/7fa176b3353ef6d78d02db39e025f3c27a983158/maven-resolver-spi-1.9.18.jar
MD5: b99c631156da02290d0c95cf40c4917b
SHA1: 7fa176b3353ef6d78d02db39e025f3c27a983158
SHA256: d364fce9a17b0e0b073c26efa92af95b29c00c42943dced4a1168a7923fd3fe1
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-spi-1.9.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-spi High Vendor gradle artifactid maven-resolver-spi Highest Vendor gradle groupid org.apache.maven.resolver Highest Vendor jar package name spi Highest Vendor Manifest automatic-module-name org.apache.maven.resolver.spi Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Vendor Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-spi/ Low Vendor Manifest bundle-symbolicname org.apache.maven.resolver.spi Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-spi Low Vendor pom groupid org.apache.maven.resolver Highest Vendor pom name Maven Artifact Resolver SPI High Vendor pom parent-artifactid maven-resolver Low Product file name maven-resolver-spi High Product gradle artifactid maven-resolver-spi Highest Product jar package name spi Highest Product Manifest automatic-module-name org.apache.maven.resolver.spi Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Product Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-spi/ Low Product Manifest Bundle-Name Maven Artifact Resolver SPI Medium Product Manifest bundle-symbolicname org.apache.maven.resolver.spi Medium Product Manifest Implementation-Title Maven Artifact Resolver SPI High Product Manifest specification-title Maven Artifact Resolver SPI Medium Product pom artifactid maven-resolver-spi Highest Product pom groupid org.apache.maven.resolver Highest Product pom name Maven Artifact Resolver SPI High Product pom parent-artifactid maven-resolver Medium Version file version 1.9.18 High Version gradle version 1.9.18 Highest Version Manifest Bundle-Version 1.9.18 High Version Manifest Implementation-Version 1.9.18 High Version pom version 1.9.18 Highest
maven-resolver-util-1.9.18.jarDescription:
A collection of utility classes to ease usage of the repository system. License:
"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.resolver/maven-resolver-util/1.9.18/5ae9406f188ae4a999c353fce3fd77273797a216/maven-resolver-util-1.9.18.jar
MD5: 0e6aa5f372550f4239361df35a53b4a1
SHA1: 5ae9406f188ae4a999c353fce3fd77273797a216
SHA256: 2eb0ea667bc489384478231dda7516407d4b5b22a138077229871de9362a7ae2
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-resolver-util-1.9.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-resolver-util High Vendor gradle artifactid maven-resolver-util Highest Vendor gradle groupid org.apache.maven.resolver Highest Vendor jar package name artifact Highest Vendor jar package name repository Highest Vendor jar package name util Highest Vendor Manifest automatic-module-name org.apache.maven.resolver.util Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Vendor Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-util/ Low Vendor Manifest bundle-symbolicname org.apache.maven.resolver.util Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-resolver-util Low Vendor pom groupid org.apache.maven.resolver Highest Vendor pom name Maven Artifact Resolver Utilities High Vendor pom parent-artifactid maven-resolver Low Product file name maven-resolver-util High Product gradle artifactid maven-resolver-util Highest Product jar package name artifact Highest Product jar package name repository Highest Product jar package name util Highest Product Manifest automatic-module-name org.apache.maven.resolver.util Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-developers khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7 Low Product Manifest bundle-docurl https://maven.apache.org/resolver/maven-resolver-util/ Low Product Manifest Bundle-Name Maven Artifact Resolver Utilities Medium Product Manifest bundle-symbolicname org.apache.maven.resolver.util Medium Product Manifest Implementation-Title Maven Artifact Resolver Utilities High Product Manifest specification-title Maven Artifact Resolver Utilities Medium Product pom artifactid maven-resolver-util Highest Product pom groupid org.apache.maven.resolver Highest Product pom name Maven Artifact Resolver Utilities High Product pom parent-artifactid maven-resolver Medium Version file version 1.9.18 High Version gradle version 1.9.18 Highest Version Manifest Bundle-Version 1.9.18 High Version Manifest Implementation-Version 1.9.18 High Version pom version 1.9.18 Highest
maven-settings-3.9.6.jarDescription:
Maven Settings model. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-settings/3.9.6/7687311690b68c935753c55dd3f016d8c4a7820f/maven-settings-3.9.6.jarMD5: 144dfb04d530da655c5f96d80adb4ef4SHA1: 7687311690b68c935753c55dd3f016d8c4a7820fSHA256: 0d200fd3b354d653d2a02cdba6a39b6dc2744a8539ff36ea423fe62cac736799Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-settings-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-settings High Vendor gradle artifactid maven-settings Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name settings Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-settings Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Settings High Vendor pom parent-artifactid maven Low Product file name maven-settings High Product gradle artifactid maven-settings Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name settings Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Settings High Product Manifest specification-title Maven Settings Medium Product pom artifactid maven-settings Highest Product pom groupid org.apache.maven Highest Product pom name Maven Settings High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-settings-builder-3.9.6.jarDescription:
The effective settings builder, with inheritance and password decryption. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-settings-builder/3.9.6/2b75954b6f0c7eef38f388d97b91ce1ae3229f21/maven-settings-builder-3.9.6.jarMD5: 5480ba40c9ae1cac6931abf16f7e8b81SHA1: 2b75954b6f0c7eef38f388d97b91ce1ae3229f21SHA256: e97cc245e4ef833c589fce0b5a8a4d77e3a0e01e619c57b5342c5e16d37a791dReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-settings-builder-3.9.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-settings-builder High Vendor gradle artifactid maven-settings-builder Highest Vendor gradle groupid org.apache.maven Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name settings Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-settings-builder Low Vendor pom groupid org.apache.maven Highest Vendor pom name Maven Settings Builder High Vendor pom parent-artifactid maven Low Product file name maven-settings-builder High Product gradle artifactid maven-settings-builder Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name settings Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Maven Settings Builder High Product Manifest specification-title Maven Settings Builder Medium Product pom artifactid maven-settings-builder Highest Product pom groupid org.apache.maven Highest Product pom name Maven Settings Builder High Product pom parent-artifactid maven Medium Version file version 3.9.6 High Version gradle version 3.9.6 Highest Version Manifest Implementation-Version 3.9.6 High Version pom version 3.9.6 Highest
maven-shared-utils-3.3.4.jarDescription:
Shared utilities for use by Maven core and plugins File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.shared/maven-shared-utils/3.3.4/f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac/maven-shared-utils-3.3.4.jarMD5: 908f2a0107ff330ac9b856356a0acaefSHA1: f87a61adb1e12a00dcc6cc6005a51e693aa7c4acSHA256: 7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6ddaReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-shared-utils-3.3.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name maven-shared-utils High Vendor gradle artifactid maven-shared-utils Highest Vendor gradle groupid org.apache.maven.shared Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name shared Highest Vendor jar package name utils Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid maven-shared-utils Low Vendor pom groupid org.apache.maven.shared Highest Vendor pom name Apache Maven Shared Utils High Vendor pom parent-artifactid maven-shared-components Low Product file name maven-shared-utils High Product gradle artifactid maven-shared-utils Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name shared Highest Product jar package name utils Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Apache Maven Shared Utils High Product Manifest specification-title Apache Maven Shared Utils Medium Product pom artifactid maven-shared-utils Highest Product pom groupid org.apache.maven.shared Highest Product pom name Apache Maven Shared Utils High Product pom parent-artifactid maven-shared-components Medium Version file version 3.3.4 High Version gradle version 3.3.4 Highest Version Manifest Implementation-Version 3.3.4 High Version pom parent-version 3.3.4 Low Version pom version 3.3.4 Highest
mjml-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/mjml-plugin/build/libs/mjml-plugin-8.7.1.jarMD5: 0ea985e5a4d5b8a49057d6e26f5635e3SHA1: 422f070ea9f7e796e47bd4269b9431d071647513SHA256: 3f30448a33d63c82eb6e936e28717cb7eda2d68e69c87e8b6a9fd642d69d9a94Referenced In Project/Scope: documentation:javadocClasspathmjml-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name mjml-plugin High Vendor gradle artifactid mjml-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name mjml-plugin High Product gradle artifactid mjml-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
mkdocs-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/mkdocs-plugin/build/libs/mkdocs-plugin-8.7.1.jarMD5: c5a7db1be214b721ac718f18315f1096SHA1: 09165ad03c0145fb71595dc542f1694645de6886SHA256: 1efe264badf84f2697f54f2b257acb2bd05827aff724f060a75de57a923365f3Referenced In Project/Scope: documentation:javadocClasspathmkdocs-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name mkdocs-plugin High Vendor gradle artifactid mkdocs-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name mkdocs-plugin High Product gradle artifactid mkdocs-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
okhttp-4.12.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okhttp3/okhttp/4.12.0/2f4525d4a200e97e1b87449c2cd9bd2e25b7e8cd/okhttp-4.12.0.jarMD5: 6acba053af88fed87e710c6c29911d7cSHA1: 2f4525d4a200e97e1b87449c2cd9bd2e25b7e8cdSHA256: b1050081b14bb7a3a7e55a4d3ef01b5dcfabc453b4573a4fc019767191d5f4e0Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath okhttp-4.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name okhttp High Vendor gradle artifactid okhttp Highest Vendor gradle groupid com.squareup.okhttp3 Highest Vendor jar package name internal Low Vendor jar package name okhttp3 Highest Vendor jar package name okhttp3 Low Vendor Manifest automatic-module-name okhttp3 Medium Product file name okhttp High Product gradle artifactid okhttp Highest Product jar package name internal Low Product jar package name okhttp3 Highest Product Manifest automatic-module-name okhttp3 Medium Version file name okhttp Medium Version file version 4.12.0 High Version gradle version 4.12.0 Highest
okhttp-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/okhttp-plugin/build/libs/okhttp-plugin-8.7.1.jarMD5: 8c721595ebcba6ae29b7d100b3b491d5SHA1: 338ba5deaa9d26c8cc4c9c17c2f17d57538f619fSHA256: 318df019284efbcb3ff096789eb36734f27472b5570db94a5653ec5528011f81Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath maven-plugin:runtimeClasspath okhttp-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name okhttp-plugin High Vendor gradle artifactid okhttp-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name okhttp-plugin High Product gradle artifactid okhttp-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
okio-jvm-3.6.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okio/okio-jvm/3.6.0/5600569133b7bdefe1daf9ec7f4abeb6d13e1786/okio-jvm-3.6.0.jarMD5: 26370180ff99a7e8a12dcaac2a70cc6eSHA1: 5600569133b7bdefe1daf9ec7f4abeb6d13e1786SHA256: 67543f0736fc422ae927ed0e504b98bc5e269fda0d3500579337cb713da28412Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath maven-plugin-plugin:compileClasspath okhttp-plugin:runtimeClasspath maven-plugin-plugin:runtimeClasspath maven-plugin:compileClasspath okhttp-plugin:compileClasspath maven-plugin:runtimeClasspath okio-jvm-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/logging-interceptor@4.12.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/com.squareup.retrofit2/retrofit@2.11.0 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/com.squareup.okhttp3/okhttp-bom@4.12.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name okio-jvm High Vendor gradle artifactid okio-jvm Highest Vendor gradle groupid com.squareup.okio Highest Vendor jar package name okio Highest Vendor jar package name okio Low Vendor Manifest automatic-module-name okio Medium Vendor Manifest bundle-symbolicname com.squareup.okio Medium Product file name okio-jvm High Product gradle artifactid okio-jvm Highest Product jar package name okio Highest Product Manifest automatic-module-name okio Medium Product Manifest Bundle-Name com.squareup.okio Medium Product Manifest bundle-symbolicname com.squareup.okio Medium Version file name okio-jvm Medium Version file version 3.6.0 High Version gradle version 3.6.0 Highest Version Manifest Bundle-Version 3.6.0 High
opentest4j-1.3.0.jarLicense:
The Apache License, Version 2.0 File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256: 48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Projects/Scopes: documentation:javadocClasspath test-common:compileClasspath test-common:runtimeClasspath opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit/junit-bom@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 Evidence Type Source Name Value Confidence Vendor file name opentest4j High Vendor gradle artifactid opentest4j Highest Vendor gradle groupid org.opentest4j Highest Vendor jar package name opentest4j Highest Vendor jar package name opentest4j Low Vendor Manifest build-date 2023-07-06 Low Vendor Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low Vendor Manifest build-time 14:25:06.116+0200 Low Vendor Manifest bundle-symbolicname org.opentest4j Medium Vendor Manifest Implementation-Vendor opentest4j.org High Vendor Manifest specification-vendor opentest4j.org Low Product file name opentest4j High Product gradle artifactid opentest4j Highest Product jar package name opentest4j Highest Product Manifest build-date 2023-07-06 Low Product Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low Product Manifest build-time 14:25:06.116+0200 Low Product Manifest Bundle-Name opentest4j Medium Product Manifest bundle-symbolicname org.opentest4j Medium Product Manifest Implementation-Title opentest4j High Product Manifest specification-title opentest4j Medium Version file version 1.3.0 High Version Manifest Implementation-Version 1.3.0 High
org.eclipse.elk.alg.common-0.9.1.jarDescription:
Common algorithms. License:
Eclipse Public License - v 2.0;link="http://www.eclipse.org/legal/epl-v20.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.elk/org.eclipse.elk.alg.common/0.9.1/c01a8fdff31e0fd06f6e7c83f2d8c7ad733ed96e/org.eclipse.elk.alg.common-0.9.1.jar
MD5: a44bf857290b2524d63e834e604e10e5
SHA1: c01a8fdff31e0fd06f6e7c83f2d8c7ad733ed96e
SHA256: cd89b8b9201bc70c61ddbe20d865bb4220d16f46e848115afc8e7ef2084e9d44
Referenced In Project/Scope: documentation:javadocClasspath
org.eclipse.elk.alg.common-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.elk.alg.common High Vendor gradle artifactid org.eclipse.elk.alg.common Highest Vendor gradle groupid org.eclipse.elk Highest Vendor jar package name alg Highest Vendor jar package name common Highest Vendor jar package name eclipse Highest Vendor jar package name elk Highest Vendor Manifest automatic-module-name org.eclipse.elk.alg.common Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Vendor Manifest bundle-symbolicname org.eclipse.elk.alg.common;singleton:=true Medium Vendor pom artifactid eclipse.elk.alg.common Low Vendor pom groupid org.eclipse.elk Highest Vendor pom name ELK Common Algorithms High Vendor pom parent-artifactid parent Low Product file name org.eclipse.elk.alg.common High Product gradle artifactid org.eclipse.elk.alg.common Highest Product jar package name alg Highest Product jar package name common Highest Product jar package name eclipse Highest Product jar package name elk Highest Product Manifest automatic-module-name org.eclipse.elk.alg.common Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name ELK Common Algorithms Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Product Manifest bundle-symbolicname org.eclipse.elk.alg.common;singleton:=true Medium Product pom artifactid eclipse.elk.alg.common Highest Product pom groupid org.eclipse.elk Highest Product pom name ELK Common Algorithms High Product pom parent-artifactid parent Medium Version file version 0.9.1 High Version gradle version 0.9.1 Highest Version Manifest Bundle-Version 0.9.1 High Version pom version 0.9.1 Highest
org.eclipse.elk.alg.layered-0.9.1.jarDescription:
Layout algorithm based on the layered approach. License:
Eclipse Public License - v 2.0;link="http://www.eclipse.org/legal/epl-v20.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.elk/org.eclipse.elk.alg.layered/0.9.1/6be180e8967c571cb14b7a351645b0ec64aa7a7e/org.eclipse.elk.alg.layered-0.9.1.jar
MD5: feada1e8586859541cfe5b9b8c7ebd56
SHA1: 6be180e8967c571cb14b7a351645b0ec64aa7a7e
SHA256: a1122376d8dc2665c7232e59c3e8000bf5326db95b8547bb0bc5a3a523b7a2e2
Referenced In Project/Scope: documentation:javadocClasspath
org.eclipse.elk.alg.layered-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.elk.alg.layered High Vendor gradle artifactid org.eclipse.elk.alg.layered Highest Vendor gradle groupid org.eclipse.elk Highest Vendor jar package name alg Highest Vendor jar package name eclipse Highest Vendor jar package name elk Highest Vendor jar package name layered Highest Vendor Manifest automatic-module-name org.eclipse.elk.alg.layered Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Vendor Manifest bundle-symbolicname org.eclipse.elk.alg.layered;singleton:=true Medium Vendor Manifest require-bundle com.google.guava,org.eclipse.xtext.xbase.lib;bundle-version="2.10.0",org.eclipse.elk.graph,org.eclipse.elk.core,org.eclipse.elk.alg.common Low Vendor pom artifactid eclipse.elk.alg.layered Low Vendor pom groupid org.eclipse.elk Highest Vendor pom name ELK Layered Layout Algorithm High Vendor pom parent-artifactid parent Low Product file name org.eclipse.elk.alg.layered High Product gradle artifactid org.eclipse.elk.alg.layered Highest Product jar package name alg Highest Product jar package name eclipse Highest Product jar package name elk Highest Product jar package name layered Highest Product Manifest automatic-module-name org.eclipse.elk.alg.layered Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name ELK Layered Layout Algorithm Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Product Manifest bundle-symbolicname org.eclipse.elk.alg.layered;singleton:=true Medium Product Manifest require-bundle com.google.guava,org.eclipse.xtext.xbase.lib;bundle-version="2.10.0",org.eclipse.elk.graph,org.eclipse.elk.core,org.eclipse.elk.alg.common Low Product pom artifactid eclipse.elk.alg.layered Highest Product pom groupid org.eclipse.elk Highest Product pom name ELK Layered Layout Algorithm High Product pom parent-artifactid parent Medium Version file version 0.9.1 High Version gradle version 0.9.1 Highest Version Manifest Bundle-Version 0.9.1 High Version pom version 0.9.1 Highest
CVE-2019-10249 suppress
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised. CWE-116 Improper Encoding or Escaping of Output, CWE-494 Download of Code Without Integrity Check, CWE-829 Inclusion of Functionality from Untrusted Control Sphere
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-2976 suppress
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.
Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties
CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2020-8908 suppress
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-378 Creation of Temporary File With Insecure Permissions, CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
org.eclipse.elk.alg.mrtree-0.9.1.jarDescription:
Layout algorithm based on the tree approach. License:
Eclipse Public License - v 2.0;link="http://www.eclipse.org/legal/epl-v20.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.elk/org.eclipse.elk.alg.mrtree/0.9.1/706b5ca4bb4b26350bd4c22293600d48796369e/org.eclipse.elk.alg.mrtree-0.9.1.jar
MD5: 1c0c49f65513b0b480c0716dfed911c4
SHA1: 0706b5ca4bb4b26350bd4c22293600d48796369e
SHA256: 587d368841f7711e515345e0e604248ae69105733a8b248aa7bd33138f42398f
Referenced In Project/Scope: documentation:javadocClasspath
org.eclipse.elk.alg.mrtree-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.elk.alg.mrtree High Vendor gradle artifactid org.eclipse.elk.alg.mrtree Highest Vendor gradle groupid org.eclipse.elk Highest Vendor jar package name alg Highest Vendor jar package name eclipse Highest Vendor jar package name elk Highest Vendor jar package name mrtree Highest Vendor Manifest automatic-module-name org.eclipse.elk.alg.mrtree Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Vendor Manifest bundle-symbolicname org.eclipse.elk.alg.mrtree;singleton:=true Medium Vendor pom artifactid eclipse.elk.alg.mrtree Low Vendor pom groupid org.eclipse.elk Highest Vendor pom name ELK Mr. Tree Layout Algorithm High Vendor pom parent-artifactid parent Low Product file name org.eclipse.elk.alg.mrtree High Product gradle artifactid org.eclipse.elk.alg.mrtree Highest Product jar package name alg Highest Product jar package name eclipse Highest Product jar package name elk Highest Product jar package name mrtree Highest Product Manifest automatic-module-name org.eclipse.elk.alg.mrtree Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name ELK Mr. Tree Layout Algorithm Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Product Manifest bundle-symbolicname org.eclipse.elk.alg.mrtree;singleton:=true Medium Product pom artifactid eclipse.elk.alg.mrtree Highest Product pom groupid org.eclipse.elk Highest Product pom name ELK Mr. Tree Layout Algorithm High Product pom parent-artifactid parent Medium Version file version 0.9.1 High Version gradle version 0.9.1 Highest Version Manifest Bundle-Version 0.9.1 High Version pom version 0.9.1 Highest
org.eclipse.elk.core-0.9.1.jarDescription:
The Core of the Eclipse Layout Kernel. License:
Eclipse Public License - v 2.0;link="http://www.eclipse.org/legal/epl-v20.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.elk/org.eclipse.elk.core/0.9.1/24d58ade8056cc0b00b354cabfcdc6d930484377/org.eclipse.elk.core-0.9.1.jar
MD5: 5b82f455490de66a8217e493b24cfdbc
SHA1: 24d58ade8056cc0b00b354cabfcdc6d930484377
SHA256: 15bce00eed2f694767cb466b8a3d735b79aa5a4e75b9523c034e61bebdd540d4
Referenced In Project/Scope: documentation:javadocClasspath
org.eclipse.elk.core-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.elk.core High Vendor gradle artifactid org.eclipse.elk.core Highest Vendor gradle groupid org.eclipse.elk Highest Vendor jar package name core Highest Vendor jar package name eclipse Highest Vendor jar package name elk Highest Vendor Manifest automatic-module-name org.eclipse.elk.core Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Vendor Manifest bundle-symbolicname org.eclipse.elk.core;singleton:=true Medium Vendor Manifest eclipse-buddypolicy registered Low Vendor pom artifactid eclipse.elk.core Low Vendor pom groupid org.eclipse.elk Highest Vendor pom name ELK Core Components High Vendor pom parent-artifactid parent Low Product file name org.eclipse.elk.core High Product gradle artifactid org.eclipse.elk.core Highest Product jar package name core Highest Product jar package name eclipse Highest Product jar package name elk Highest Product Manifest automatic-module-name org.eclipse.elk.core Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name ELK Core Components Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Product Manifest bundle-symbolicname org.eclipse.elk.core;singleton:=true Medium Product Manifest eclipse-buddypolicy registered Low Product pom artifactid eclipse.elk.core Highest Product pom groupid org.eclipse.elk Highest Product pom name ELK Core Components High Product pom parent-artifactid parent Medium Version file version 0.9.1 High Version gradle version 0.9.1 Highest Version Manifest Bundle-Version 0.9.1 High Version pom version 0.9.1 Highest
org.eclipse.elk.graph-0.9.1.jarDescription:
The ELK Graph is the central data structure of the Eclipse Layout Kernel. License:
Eclipse Public License - v 2.0;link="http://www.eclipse.org/legal/epl-v20.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.elk/org.eclipse.elk.graph/0.9.1/b5610dc0d7a9933db876000e9e9c996b2764576b/org.eclipse.elk.graph-0.9.1.jar
MD5: 0a421b991e133656fc7e717c876aefeb
SHA1: b5610dc0d7a9933db876000e9e9c996b2764576b
SHA256: 02bc4b33a00771a295dfea6f950fab32435da3ad0949ea514e517e6e2ecac406
Referenced In Project/Scope: documentation:javadocClasspath
org.eclipse.elk.graph-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.elk.graph High Vendor gradle artifactid org.eclipse.elk.graph Highest Vendor gradle groupid org.eclipse.elk Highest Vendor jar package name eclipse Highest Vendor jar package name elk Highest Vendor jar package name graph Highest Vendor Manifest automatic-module-name org.eclipse.elk.graph Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Vendor Manifest bundle-symbolicname org.eclipse.elk.graph;singleton:=true Medium Vendor Manifest require-bundle org.eclipse.emf.ecore;bundle-version="2.10.0";visibility:=reexport,com.google.guava Low Vendor pom artifactid eclipse.elk.graph Low Vendor pom groupid org.eclipse.elk Highest Vendor pom name ELK Graph Model High Vendor pom parent-artifactid parent Low Product file name org.eclipse.elk.graph High Product gradle artifactid org.eclipse.elk.graph Highest Product jar package name eclipse Highest Product jar package name elk Highest Product jar package name graph Highest Product Manifest automatic-module-name org.eclipse.elk.graph Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name ELK Graph Model Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low Product Manifest bundle-symbolicname org.eclipse.elk.graph;singleton:=true Medium Product Manifest require-bundle org.eclipse.emf.ecore;bundle-version="2.10.0";visibility:=reexport,com.google.guava Low Product pom artifactid eclipse.elk.graph Highest Product pom groupid org.eclipse.elk Highest Product pom name ELK Graph Model High Product pom parent-artifactid parent Medium Version file version 0.9.1 High Version gradle version 0.9.1 Highest Version Manifest Bundle-Version 0.9.1 High Version pom version 0.9.1 Highest
CVE-2023-2976 suppress
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.
Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties
CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2020-8908 suppress
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-378 Creation of Temporary File With Insecure Permissions, CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
org.eclipse.emf.common-2.12.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.emf/org.eclipse.emf.common/2.12.0/ce79e5cc3c2de3e8d96a6df4dad3bf5c9fa6b7d7/org.eclipse.emf.common-2.12.0.jarMD5: 5f1967ba404c98803d3c1c2875741809SHA1: ce79e5cc3c2de3e8d96a6df4dad3bf5c9fa6b7d7SHA256: 80b9ddd0174bbc5623767ed9f4c96b17ae98ffaefb8edbcc780d59b0d7efef83Referenced In Project/Scope: documentation:javadocClasspathorg.eclipse.emf.common-2.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.emf.common High Vendor gradle artifactid org.eclipse.emf.common Highest Vendor gradle groupid org.eclipse.emf Highest Vendor jar package name common Highest Vendor jar package name common Low Vendor jar package name eclipse Highest Vendor jar package name eclipse Low Vendor jar package name emf Highest Vendor jar package name emf Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium Vendor Manifest eclipse-buddypolicy dependent Low Vendor Manifest eclipse-lazystart true Low Vendor Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)" Low Product file name org.eclipse.emf.common High Product gradle artifactid org.eclipse.emf.common Highest Product jar package name common Highest Product jar package name common Low Product jar package name eclipse Highest Product jar package name emf Highest Product jar package name emf Low Product jar package name util Low Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium Product Manifest eclipse-buddypolicy dependent Low Product Manifest eclipse-lazystart true Low Product Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)" Low Version file name org.eclipse.emf.common Medium Version file version 2.12.0 High Version gradle version 2.12.0 Highest Version jar package name eclipse Highest Version Manifest Bundle-Version 2.12.0.v20160420-0247 High
CVE-2023-4218 suppress
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
CWE-611 Improper Restriction of XML External Entity Reference
CVSSv3:
Base Score: MEDIUM (5.0) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
org.eclipse.emf.ecore-2.12.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.emf/org.eclipse.emf.ecore/2.12.0/644751074e8b448526815f9bdeda26770df2e213/org.eclipse.emf.ecore-2.12.0.jarMD5: 280fed7993c935f5331f39316eeadae4SHA1: 644751074e8b448526815f9bdeda26770df2e213SHA256: 2ac691cc4fa09fdf18beef6bdd457b7bdfe4d301f9707a8c89c6cb209139f4f9Referenced In Project/Scope: documentation:javadocClasspathorg.eclipse.emf.ecore-2.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.emf.ecore High Vendor gradle artifactid org.eclipse.emf.ecore Highest Vendor gradle groupid org.eclipse.emf Highest Vendor jar package name eclipse Highest Vendor jar package name eclipse Low Vendor jar package name ecore Highest Vendor jar package name ecore Low Vendor jar package name emf Highest Vendor jar package name emf Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium Vendor Manifest eclipse-buddypolicy dependent Low Vendor Manifest eclipse-lazystart true Low Vendor Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)",org.eclipse.emf.common;visibility:="reexport";bundle-version="[2.12.0,3.0.0)",org.eclipse.core.resources;resolution:="optional";bundle-version="[3.5.0,4.0.0)" Low Product file name org.eclipse.emf.ecore High Product gradle artifactid org.eclipse.emf.ecore Highest Product jar package name eclipse Highest Product jar package name ecore Highest Product jar package name ecore Low Product jar package name emf Highest Product jar package name emf Low Product jar package name plugin Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium Product Manifest eclipse-buddypolicy dependent Low Product Manifest eclipse-lazystart true Low Product Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)",org.eclipse.emf.common;visibility:="reexport";bundle-version="[2.12.0,3.0.0)",org.eclipse.core.resources;resolution:="optional";bundle-version="[3.5.0,4.0.0)" Low Version file name org.eclipse.emf.ecore Medium Version file version 2.12.0 High Version gradle version 2.12.0 Highest Version jar package name eclipse Highest Version jar package name emf Highest Version jar package name plugin Highest Version Manifest Bundle-Version 2.12.0.v20160420-0247 High
CVE-2023-4218 suppress
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
CWE-611 Improper Restriction of XML External Entity Reference
CVSSv3:
Base Score: MEDIUM (5.0) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
org.eclipse.emf.ecore.xmi-2.12.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.emf/org.eclipse.emf.ecore.xmi/2.12.0/ad136ea23fcdaebec17ec6c730dfdf74b2077c37/org.eclipse.emf.ecore.xmi-2.12.0.jarMD5: b0488ec9ab96eb65aa077935dfa629e0SHA1: ad136ea23fcdaebec17ec6c730dfdf74b2077c37SHA256: b8c305ee775d885a089256c5b681f64dce78fc821d2714a2194c894048c03e11Referenced In Project/Scope: documentation:javadocClasspathorg.eclipse.emf.ecore.xmi-2.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/net.sourceforge.plantuml/plantuml@1.2024.6
Evidence Type Source Name Value Confidence Vendor file name org.eclipse.emf.ecore.xmi High Vendor gradle artifactid org.eclipse.emf.ecore.xmi Highest Vendor gradle groupid org.eclipse.emf Highest Vendor jar package name eclipse Highest Vendor jar package name eclipse Low Vendor jar package name ecore Highest Vendor jar package name ecore Low Vendor jar package name emf Highest Vendor jar package name emf Low Vendor jar package name xmi Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium Vendor Manifest eclipse-lazystart true Low Vendor Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)",org.eclipse.emf.ecore;visibility:="reexport";bundle-version="[2.12.0,3.0.0)" Low Product file name org.eclipse.emf.ecore.xmi High Product gradle artifactid org.eclipse.emf.ecore.xmi Highest Product jar package name eclipse Highest Product jar package name ecore Highest Product jar package name ecore Low Product jar package name emf Highest Product jar package name emf Low Product jar package name xmi Highest Product jar package name xmi Low Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium Product Manifest eclipse-lazystart true Low Product Manifest require-bundle org.eclipse.core.runtime;resolution:="optional";x-installation:="greedy";bundle-version="[3.5.0,4.0.0)",org.eclipse.emf.ecore;visibility:="reexport";bundle-version="[2.12.0,3.0.0)" Low Version file name org.eclipse.emf.ecore.xmi Medium Version file version 2.12.0 High Version gradle version 2.12.0 Highest Version jar package name eclipse Highest Version jar package name ecore Highest Version jar package name emf Highest Version Manifest Bundle-Version 2.12.0.v20160420-0247 High
CVE-2023-4218 suppress
In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
CWE-611 Improper Restriction of XML External Entity Reference
CVSSv3:
Base Score: MEDIUM (5.0) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
org.eclipse.sisu.inject-0.9.0.M2.jarDescription:
JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring License:
"Eclipse Public License, Version 1.0";link="http://www.eclipse.org/legal/epl-v10.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.sisu/org.eclipse.sisu.inject/0.9.0.M2/5ace70e1ea696d156f5034a42a615df13a52003a/org.eclipse.sisu.inject-0.9.0.M2.jar
MD5: eb805c5b2e22c8002877f0caadc6a87c
SHA1: 5ace70e1ea696d156f5034a42a615df13a52003a
SHA256: 9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath org.eclipse.sisu.inject-0.9.0.M2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name org.eclipse.sisu.inject High Vendor gradle artifactid org.eclipse.sisu.inject Highest Vendor gradle groupid org.eclipse.sisu Highest Vendor jar package name eclipse Highest Vendor jar package name inject Highest Vendor jar package name sisu Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Vendor Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium Vendor pom artifactid eclipse.sisu.inject Low Vendor pom groupid org.eclipse.sisu Highest Vendor pom parent-artifactid sisu-inject Low Product file name org.eclipse.sisu.inject High Product gradle artifactid org.eclipse.sisu.inject Highest Product jar package name dynamic Highest Product jar package name eclipse Highest Product jar package name inject Highest Product jar package name sisu Highest Product jar package name sonatype Highest Product jar package name wiring Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Product Manifest Bundle-Name Sisu-Inject (Incubation) Medium Product Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium Product pom artifactid eclipse.sisu.inject Highest Product pom groupid org.eclipse.sisu Highest Product pom parent-artifactid sisu-inject Medium Version gradle version 0.9.0.M2 Highest Version Manifest Bundle-Version 0.9.0.M2 High Version pom version 0.9.0.M2 Highest
org.eclipse.sisu.plexus-0.9.0.M2.jarDescription:
Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container License:
"Eclipse Public License, Version 1.0";link="http://www.eclipse.org/legal/epl-v10.html" File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.sisu/org.eclipse.sisu.plexus/0.9.0.M2/31456dd2293197bb282c03168f6767acca3dec96/org.eclipse.sisu.plexus-0.9.0.M2.jar
MD5: 98e320df2caac742b2ae33d938c69df8
SHA1: 31456dd2293197bb282c03168f6767acca3dec96
SHA256: 9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath org.eclipse.sisu.plexus-0.9.0.M2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name org.eclipse.sisu.plexus High Vendor gradle artifactid org.eclipse.sisu.plexus Highest Vendor gradle groupid org.eclipse.sisu Highest Vendor jar package name eclipse Highest Vendor jar package name plexus Highest Vendor jar package name sisu Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Vendor Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium Vendor pom artifactid eclipse.sisu.plexus Low Vendor pom groupid org.eclipse.sisu Highest Vendor pom parent-artifactid sisu-plexus Low Product file name org.eclipse.sisu.plexus High Product gradle artifactid org.eclipse.sisu.plexus Highest Product jar package name eclipse Highest Product jar package name plexus Highest Product jar package name sisu Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Product Manifest Bundle-Name Sisu-Plexus (Incubation) Medium Product Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium Product pom artifactid eclipse.sisu.plexus Highest Product pom groupid org.eclipse.sisu Highest Product pom parent-artifactid sisu-plexus Medium Version gradle version 0.9.0.M2 Highest Version Manifest Bundle-Version 0.9.0.M2 High Version pom version 0.9.0.M2 Highest
org.jacoco.agent-0.8.11.jarDescription:
JaCoCo Agent License:
https://www.eclipse.org/legal/epl-2.0/ File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.11/699ee14f7f0f3ae66dc76e7591799bb97c753155/org.jacoco.agent-0.8.11.jar
MD5: a828d0957ce1610af66233db2e9a3790
SHA1: 699ee14f7f0f3ae66dc76e7591799bb97c753155
SHA256: d3ed85dea78a9ed55846a7738e3a0ca15c702c661ee4bc8cbfe02a8b9f4a99c0
Referenced In Projects/Scopes: mjml-plugin:jacocoAgent quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAgent jacoco-plugin:jacocoAnt maven-plugin:jacocoAgent mkdocs-plugin:jacocoAgent mjml-plugin:jacocoAnt settings-plugin:jacocoAgent plantuml-plugin:jacocoAnt git-plugin:jacocoAgent github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt aspectj-plugin:jacocoAgent test-code-generator:jacocoAnt git-plugin:jacocoAnt github-plugin:jacocoAgent maven-plugin-plugin:jacocoAgent test-common:jacocoAgent code-generator-plugin:jacocoAgent okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt compress-plugin:jacocoAgent plugin-utils:jacocoAnt plantuml-plugin:jacocoAgent maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath quicktype-plugin:jacocoAgent plugin-utils:jacocoAgent code-generator-api:jacocoAgent mkdocs-plugin:jacocoAnt test-code-generator:jacocoAgent lombok-plugin:jacocoAgent embedded-sass-plugin:jacocoAgent lombok-plugin:jacocoAnt test-common:jacocoAnt jacoco-plugin:jacocoAgent code-generator-plugin:jacocoAnt org.jacoco.agent-0.8.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/code-generator-api@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/git-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/settings-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/mkdocs-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/test-code-generator@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/plugin-utils@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/jacoco-plugin@8.7.1 pkg:maven/io.freefair.gradle/plantuml-plugin@8.7.1 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/lombok-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name org.jacoco.agent High Vendor gradle artifactid org.jacoco.agent Highest Vendor gradle groupid org.jacoco Highest Vendor jar package name agent Highest Vendor jar package name jacoco Highest Vendor Manifest automatic-module-name org.jacoco.agent Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.jacoco.agent Medium Vendor pom artifactid jacoco.agent Low Vendor pom groupid org.jacoco Highest Vendor pom name JaCoCo :: Agent High Vendor pom parent-artifactid org.jacoco.build Low Product file name org.jacoco.agent High Product gradle artifactid org.jacoco.agent Highest Product jar package name agent Highest Product jar package name jacoco Highest Product Manifest automatic-module-name org.jacoco.agent Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name JaCoCo Agent Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.jacoco.agent Medium Product pom artifactid jacoco.agent Highest Product pom groupid org.jacoco Highest Product pom name JaCoCo :: Agent High Product pom parent-artifactid org.jacoco.build Medium Version file version 0.8.11 High Version gradle version 0.8.11 Highest Version pom version 0.8.11 Highest
org.jacoco.agent-0.8.11.jar: jacocoagent.jar (shaded: org.jacoco:org.jacoco.agent.rt:0.8.11)Description:
JaCoCo Java Agent File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.11/699ee14f7f0f3ae66dc76e7591799bb97c753155/org.jacoco.agent-0.8.11.jar/jacocoagent.jar/META-INF/maven/org.jacoco/org.jacoco.agent.rt/pom.xmlMD5: 8d0f23f1c67bdffca848dd8b5bc2d403SHA1: cbd5c132575912927afd717bac0de8de3f6b4a48SHA256: 9b82e7a84f6b1426f4a6bab7e3b7ceac2034934cf04c3a501d572f6864c359c9Referenced In Projects/Scopes:
mjml-plugin:jacocoAgent quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAgent jacoco-plugin:jacocoAnt maven-plugin:jacocoAgent mkdocs-plugin:jacocoAgent mjml-plugin:jacocoAnt settings-plugin:jacocoAgent plantuml-plugin:jacocoAnt git-plugin:jacocoAgent github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt aspectj-plugin:jacocoAgent test-code-generator:jacocoAnt git-plugin:jacocoAnt github-plugin:jacocoAgent maven-plugin-plugin:jacocoAgent test-common:jacocoAgent code-generator-plugin:jacocoAgent okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt compress-plugin:jacocoAgent plugin-utils:jacocoAnt plantuml-plugin:jacocoAgent maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath quicktype-plugin:jacocoAgent plugin-utils:jacocoAgent code-generator-api:jacocoAgent mkdocs-plugin:jacocoAnt test-code-generator:jacocoAgent lombok-plugin:jacocoAgent embedded-sass-plugin:jacocoAgent lombok-plugin:jacocoAnt test-common:jacocoAnt jacoco-plugin:jacocoAgent code-generator-plugin:jacocoAnt Evidence Type Source Name Value Confidence Vendor pom artifactid jacoco.agent.rt Low Vendor pom groupid org.jacoco Highest Vendor pom name JaCoCo :: Agent RT High Vendor pom parent-artifactid org.jacoco.build Low Product pom artifactid jacoco.agent.rt Highest Product pom groupid org.jacoco Highest Product pom name JaCoCo :: Agent RT High Product pom parent-artifactid org.jacoco.build Medium Version pom version 0.8.11 Highest
org.jacoco.agent-0.8.11.jar: jacocoagent.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.11/699ee14f7f0f3ae66dc76e7591799bb97c753155/org.jacoco.agent-0.8.11.jar/jacocoagent.jarMD5: 89a8ddcf1ddebe9721a25037873f0140SHA1: d5287cced3d0afd0cfa0be7f84773ea811836f21SHA256: 47257ae9f22b93817eea11bc1b1fd31fc8e23049ad5dd483bfde603eaa624d0bReferenced In Projects/Scopes:
mjml-plugin:jacocoAgent quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAgent jacoco-plugin:jacocoAnt maven-plugin:jacocoAgent mkdocs-plugin:jacocoAgent mjml-plugin:jacocoAnt settings-plugin:jacocoAgent plantuml-plugin:jacocoAnt git-plugin:jacocoAgent github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt aspectj-plugin:jacocoAgent test-code-generator:jacocoAnt git-plugin:jacocoAnt github-plugin:jacocoAgent maven-plugin-plugin:jacocoAgent test-common:jacocoAgent code-generator-plugin:jacocoAgent okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt compress-plugin:jacocoAgent plugin-utils:jacocoAnt plantuml-plugin:jacocoAgent maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath quicktype-plugin:jacocoAgent plugin-utils:jacocoAgent code-generator-api:jacocoAgent mkdocs-plugin:jacocoAnt test-code-generator:jacocoAgent lombok-plugin:jacocoAgent embedded-sass-plugin:jacocoAgent lombok-plugin:jacocoAnt test-common:jacocoAnt jacoco-plugin:jacocoAgent code-generator-plugin:jacocoAnt Evidence Type Source Name Value Confidence Vendor file name jacocoagent High Vendor jar package name agent Highest Vendor jar package name agent Low Vendor jar package name jacoco Highest Vendor jar package name jacoco Low Vendor jar package name rt Highest Vendor jar package name rt Low Vendor Manifest automatic-module-name org.jacoco.agent.rt Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest Implementation-Vendor Mountainminds GmbH & Co. KG High Product file name jacocoagent High Product jar package name agent Highest Product jar package name agent Low Product jar package name internal_4742761 Low Product jar package name jacoco Highest Product jar package name rt Highest Product jar package name rt Low Product Manifest automatic-module-name org.jacoco.agent.rt Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title JaCoCo Java Agent High Version Manifest build-jdk-spec 17 Low Version Manifest Implementation-Version 0.8.11 High
org.jacoco.ant-0.8.11.jarDescription:
JaCoCo Ant Tasks License:
https://www.eclipse.org/legal/epl-2.0/ File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.ant/0.8.11/13ae25fa9149b42cec8e3f495c783c00fbfbccd9/org.jacoco.ant-0.8.11.jar
MD5: b9fc2dc3734c916bfd7783b4a604b6a7
SHA1: 13ae25fa9149b42cec8e3f495c783c00fbfbccd9
SHA256: 81d7eb8890d9be30a939612c295603541063529cdd03a53265aba74474b70b7c
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt org.jacoco.ant-0.8.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/jacoco-plugin@8.7.1 pkg:maven/io.freefair.gradle/test-common@8.7.1 pkg:maven/io.freefair.gradle/code-generator-plugin@8.7.1 pkg:maven/io.freefair.gradle/test-code-generator@8.7.1 pkg:maven/io.freefair.gradle/git-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/plantuml-plugin@8.7.1 pkg:maven/io.freefair.gradle/okhttp-plugin@8.7.1 pkg:maven/io.freefair.gradle/plugin-utils@8.7.1 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/lombok-plugin@8.7.1 pkg:maven/io.freefair.gradle/jacoco-plugin@8.7.1 pkg:maven/io.freefair.gradle/mkdocs-plugin@8.7.1 pkg:maven/io.freefair.gradle/settings-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/io.freefair.gradle/code-generator-api@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name org.jacoco.ant High Vendor gradle artifactid org.jacoco.ant Highest Vendor gradle groupid org.jacoco Highest Vendor jar package name ant Highest Vendor jar package name jacoco Highest Vendor Manifest automatic-module-name org.jacoco.ant Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.jacoco.ant Medium Vendor Manifest require-bundle org.apache.ant;bundle-version="[1.7.0,2.0.0)" Low Vendor pom artifactid jacoco.ant Low Vendor pom groupid org.jacoco Highest Vendor pom name JaCoCo :: Ant High Vendor pom parent-artifactid org.jacoco.build Low Product file name org.jacoco.ant High Product gradle artifactid org.jacoco.ant Highest Product jar package name ant Highest Product jar package name jacoco Highest Product Manifest automatic-module-name org.jacoco.ant Medium Product Manifest Bundle-Name JaCoCo Ant Tasks Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.jacoco.ant Medium Product Manifest require-bundle org.apache.ant;bundle-version="[1.7.0,2.0.0)" Low Product pom artifactid jacoco.ant Highest Product pom groupid org.jacoco Highest Product pom name JaCoCo :: Ant High Product pom parent-artifactid org.jacoco.build Medium Version file version 0.8.11 High Version gradle version 0.8.11 Highest Version pom version 0.8.11 Highest
org.jacoco.core-0.8.11.jarDescription:
JaCoCo Core License:
https://www.eclipse.org/legal/epl-2.0/ File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.core/0.8.11/2ea73c899b5d6cde2a0a5e0ca29268b37622845d/org.jacoco.core-0.8.11.jar
MD5: efd6feb6a58c4b9c5a254cc982ec033d
SHA1: 2ea73c899b5d6cde2a0a5e0ca29268b37622845d
SHA256: fcd188c688473fc8dcc0c6caaf355e7b389502243527c33b9597a3ec28791f47
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt org.jacoco.core-0.8.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 Evidence Type Source Name Value Confidence Vendor file name org.jacoco.core High Vendor gradle artifactid org.jacoco.core Highest Vendor gradle groupid org.jacoco Highest Vendor jar package name core Highest Vendor jar package name jacoco Highest Vendor Manifest automatic-module-name org.jacoco.core Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.jacoco.core Medium Vendor pom artifactid jacoco.core Low Vendor pom groupid org.jacoco Highest Vendor pom name JaCoCo :: Core High Vendor pom parent-artifactid org.jacoco.build Low Product file name org.jacoco.core High Product gradle artifactid org.jacoco.core Highest Product jar package name core Highest Product jar package name jacoco Highest Product Manifest automatic-module-name org.jacoco.core Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name JaCoCo Core Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.jacoco.core Medium Product pom artifactid jacoco.core Highest Product pom groupid org.jacoco Highest Product pom name JaCoCo :: Core High Product pom parent-artifactid org.jacoco.build Medium Version file version 0.8.11 High Version gradle version 0.8.11 Highest Version pom version 0.8.11 Highest
org.jacoco.report-0.8.11.jarDescription:
JaCoCo Report License:
https://www.eclipse.org/legal/epl-2.0/ File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.11/177b88cc906c3251250cef5ef9bbdda548cdc1c5/org.jacoco.report-0.8.11.jar
MD5: 8e5dfa440e6504244e59ff7b88497dc5
SHA1: 177b88cc906c3251250cef5ef9bbdda548cdc1c5
SHA256: 8393295ae24680ed10cad8333907040f928b871332491581ca5bc784e2cb4fbe
Referenced In Projects/Scopes: quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt org.jacoco.report-0.8.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 pkg:maven/org.jacoco/org.jacoco.ant@0.8.11 Evidence Type Source Name Value Confidence Vendor file name org.jacoco.report High Vendor gradle artifactid org.jacoco.report Highest Vendor gradle groupid org.jacoco Highest Vendor jar package name jacoco Highest Vendor jar package name report Highest Vendor Manifest automatic-module-name org.jacoco.report Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.jacoco.report Medium Vendor pom artifactid jacoco.report Low Vendor pom groupid org.jacoco Highest Vendor pom name JaCoCo :: Report High Vendor pom parent-artifactid org.jacoco.build Low Product file name org.jacoco.report High Product gradle artifactid org.jacoco.report Highest Product jar package name jacoco Highest Product jar package name report Highest Product Manifest automatic-module-name org.jacoco.report Medium Product Manifest build-jdk-spec 17 Low Product Manifest Bundle-Name JaCoCo Report Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.jacoco.report Medium Product pom artifactid jacoco.report Highest Product pom groupid org.jacoco Highest Product pom name JaCoCo :: Report High Product pom parent-artifactid org.jacoco.build Medium Version file version 0.8.11 High Version gradle version 0.8.11 Highest Version pom version 0.8.11 Highest
org.jacoco.report-0.8.11.jar: prettify.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.11/177b88cc906c3251250cef5ef9bbdda548cdc1c5/org.jacoco.report-0.8.11.jar/org/jacoco/report/internal/html/resources/prettify.jsMD5: 4b337aaa3c606cfc1a6ff1986db2c8cbSHA1: 290093755739da933c180ae7e7ebf283724dad1dSHA256: 743c6c4cab9499cd0bfe18a5a62281eccce843f47ec75eedb32eeb29c755aa68Referenced In Projects/Scopes:
quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt Evidence Type Source Name Value Confidence
org.jacoco.report-0.8.11.jar: sort.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.11/177b88cc906c3251250cef5ef9bbdda548cdc1c5/org.jacoco.report-0.8.11.jar/org/jacoco/report/internal/html/resources/sort.jsMD5: d101d06d26e7deaf2b224e0d2137509aSHA1: 2c715325b546adf5beff3d624ce002a7256e3efeSHA256: 7ff293dabc89d68e33d5611f2de0dbbbcfed7e0177726fab5f9dcc0b91f593afReferenced In Projects/Scopes:
quicktype-plugin:jacocoAnt code-generator-api:jacocoAnt compress-plugin:jacocoAnt documentation:javadocClasspath maven-plugin-plugin:jacocoAnt okhttp-plugin:jacocoAnt aspectj-plugin:jacocoAnt jacoco-plugin:jacocoAnt plugin-utils:jacocoAnt maven-plugin:jacocoAnt settings-plugin:jacocoAnt jacoco-plugin:compileClasspath mjml-plugin:jacocoAnt mkdocs-plugin:jacocoAnt plantuml-plugin:jacocoAnt github-plugin:jacocoAnt embedded-sass-plugin:jacocoAnt lombok-plugin:jacocoAnt test-common:jacocoAnt test-code-generator:jacocoAnt code-generator-plugin:jacocoAnt git-plugin:jacocoAnt Evidence Type Source Name Value Confidence
packageurl-java-1.5.0.jarDescription:
The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal
specification for describing a package via a "mostly universal" URL.
License:
MIT: https://opensource.org/licenses/MIT File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.package-url/packageurl-java/1.5.0/e6bf530f52feab911f4032604ca0b8216f7ff337/packageurl-java-1.5.0.jar
MD5: 90856d8bb5b17e08fdf03b6a2f93b81c
SHA1: e6bf530f52feab911f4032604ca0b8216f7ff337
SHA256: e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247
Referenced In Projects/Scopes: documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath packageurl-java-1.5.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name packageurl-java High Vendor gradle artifactid packageurl-java Highest Vendor gradle groupid com.github.package-url Highest Vendor jar package name github Highest Vendor jar package name packageurl Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid packageurl-java Low Vendor pom developer email Steve.Springett@owasp.org Low Vendor pom developer name Steve Springett Medium Vendor pom developer org OWASP Medium Vendor pom developer org URL http://www.owasp.org/ Medium Vendor pom groupid com.github.package-url Highest Vendor pom name Package URL High Vendor pom url package-url/packageurl-java Highest Product file name packageurl-java High Product gradle artifactid packageurl-java Highest Product jar package name github Highest Product jar package name packageurl Highest Product Manifest build-jdk-spec 1.8 Low Product pom artifactid packageurl-java Highest Product pom developer email Steve.Springett@owasp.org Low Product pom developer name Steve Springett Low Product pom developer org OWASP Low Product pom developer org URL http://www.owasp.org/ Low Product pom groupid com.github.package-url Highest Product pom name Package URL High Product pom url package-url/packageurl-java High Version file version 1.5.0 High Version gradle version 1.5.0 Highest Version pom version 1.5.0 Highest
plantuml-1.2024.6.jar (shaded: com.google.errorprone:error_prone_annotations:2.26.1)License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jar/META-INF/maven/com.google.errorprone/error_prone_annotations/pom.xml
MD5: e42e9c767c3a332ea006bded5b9b5995
SHA1: 2e23702f7c5f6c85252ed22bf7e96b474fe48086
SHA256: aea7e991e2dfdcb47f5fbd508587535f7802bcb9e2fc2d4ebb50be41b684da9f
Referenced In Projects/Scopes: documentation:javadocClasspath plantuml-plugin:compileClasspath Evidence Type Source Name Value Confidence Vendor pom artifactid error_prone_annotations Low Vendor pom groupid com.google.errorprone Highest Vendor pom name error-prone annotations High Vendor pom parent-artifactid error_prone_parent Low Product pom artifactid error_prone_annotations Highest Product pom groupid com.google.errorprone Highest Product pom name error-prone annotations High Product pom parent-artifactid error_prone_parent Medium Version pom version 2.26.1 Highest
plantuml-1.2024.6.jar (shaded: com.google.guava:failureaccess:1.0.2)Description:
Contains
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
InternalFutures. Most users will never need to use this artifact. Its
classes are conceptually a part of Guava, but they're in this separate
artifact so that Android libraries can use them without pulling in all of
Guava (just as they can use ListenableFuture by depending on the
listenablefuture artifact).
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jar/META-INF/maven/com.google.guava/failureaccess/pom.xmlMD5: e75db8812df5c6dc4eab9c2656b22e9bSHA1: 2df7ebe307b885a222be352d3bffd5fcf0428ad4SHA256: 19ebc6f4bdb4edbb3d07b6ee994f846b54ef295582a9b5634719ffa9f31d03b2Referenced In Projects/Scopes:
documentation:javadocClasspath plantuml-plugin:compileClasspath Evidence Type Source Name Value Confidence Vendor pom artifactid failureaccess Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava InternalFutureFailureAccess and InternalFutures High Vendor pom parent-artifactid guava-parent Low Product pom artifactid failureaccess Highest Product pom groupid com.google.guava Highest Product pom name Guava InternalFutureFailureAccess and InternalFutures High Product pom parent-artifactid guava-parent Medium Version pom parent-version 1.0.2 Low Version pom version 1.0.2 Highest
plantuml-1.2024.6.jar (shaded: com.google.guava:guava:33.2.1-jre)Description:
Guava is a suite of core and expanded libraries that include
utility classes, Google's collections, I/O classes, and
much more.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jar/META-INF/maven/com.google.guava/guava/pom.xmlMD5: fdbe6eca1ed3faa436f22cc1428a4569SHA1: 5f72123f1bb7d99af8b4a67745fb8309b73a6294SHA256: 42817bdc1c0c8c737d6b411cfaf4a84769e7d271e879b016fd0850248a06dab5Referenced In Projects/Scopes:
documentation:javadocClasspath plantuml-plugin:compileClasspath Evidence Type Source Name Value Confidence Vendor pom artifactid guava Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor pom parent-artifactid guava-parent Low Vendor pom url google/guava Highest Product pom artifactid guava Highest Product pom groupid com.google.guava Highest Product pom name Guava: Google Core Libraries for Java High Product pom parent-artifactid guava-parent Medium Product pom url google/guava High Version pom version 33.2.1-jre Highest
plantuml-1.2024.6.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jarMD5: 6ce7efca501a9a0044bbdc24ac375c9aSHA1: 7f816181873004d16498dcf7e7d65e503dc7c34eSHA256: a8448e116083fc0feda12279931e4f386e16cf87fd74f4981b2179d7d4fd1c86Referenced In Projects/Scopes:
documentation:javadocClasspath plantuml-plugin:compileClasspath plantuml-1.2024.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/plantuml-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name plantuml High Vendor gradle artifactid plantuml Highest Vendor gradle groupid net.sourceforge.plantuml Highest Vendor jar package name net Highest Vendor jar package name plantuml Highest Vendor jar package name sourceforge Highest Vendor Manifest automatic-module-name net.sourceforge.plantuml Medium Vendor Manifest build-jdk-spec 17 Low Product file name plantuml High Product gradle artifactid plantuml Highest Product jar package name net Highest Product jar package name plantuml Highest Product jar package name sourceforge Highest Product Manifest automatic-module-name net.sourceforge.plantuml Medium Product Manifest build-jdk-spec 17 Low Version file version 1.2024.6 High Version Manifest Implementation-Version 1.2024.6 High
plantuml-1.2024.6.jar: default.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jar/svg/default.jsMD5: c75dd4bc9033a7c93143dbd7451e7a2eSHA1: 36a53cdf375d955ef1e0d04a9165f14a8bf365bcSHA256: 9b20f780613b679b97e2b0907006ec67fbc968245967859905da324a4e6f2326Referenced In Projects/Scopes:
documentation:javadocClasspath plantuml-plugin:compileClasspath Evidence Type Source Name Value Confidence
plantuml-1.2024.6.jar: onmouseinteractivefooter.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2024.6/7f816181873004d16498dcf7e7d65e503dc7c34e/plantuml-1.2024.6.jar/svg/onmouseinteractivefooter.jsMD5: 1958ca2dc647c7d94810eb31791b2865SHA1: 3173fc235e63fe33349ffd68b9f92e5b39bca9e8SHA256: c14b0f9079889aaf832980e9f8a27e106db862223c5effe5c4593f0f43ff1d41Referenced In Projects/Scopes:
documentation:javadocClasspath plantuml-plugin:compileClasspath Evidence Type Source Name Value Confidence
plantuml-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/plantuml-plugin/build/libs/plantuml-plugin-8.7.1.jarMD5: 08406186352139287d46ca9b3b0cc1d1SHA1: 632b4afbf07c49eb8f0e85d2c050faece75fe517SHA256: 50d7726e9d6f1bc15b4db5a6a16a8ea530a56c9797d761f9409a65b147021065Referenced In Project/Scope: documentation:javadocClasspathplantuml-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name plantuml-plugin High Vendor gradle artifactid plantuml-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name plantuml-plugin High Product gradle artifactid plantuml-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
plexus-archiver-4.9.2.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-archiver/4.9.2/a03ed402ef8468c1d1bda368d7213cad67f16a71/plexus-archiver-4.9.2.jarMD5: 408c466d4a20a02f4a2428a4f003ca13SHA1: a03ed402ef8468c1d1bda368d7213cad67f16a71SHA256: a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4cReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-archiver-4.9.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-archiver High Vendor gradle artifactid plexus-archiver Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name archiver Highest Vendor jar package name codehaus Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Codehaus Plexus High Vendor Manifest specification-vendor Codehaus Plexus Low Vendor pom artifactid plexus-archiver Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Archiver Component High Vendor pom parent-artifactid plexus Low Vendor pom url https://codehaus-plexus.github.io/plexus-archiver/ Highest Product file name plexus-archiver High Product gradle artifactid plexus-archiver Highest Product jar package name archiver Highest Product jar package name codehaus Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Plexus Archiver Component High Product Manifest specification-title Plexus Archiver Component Medium Product pom artifactid plexus-archiver Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Archiver Component High Product pom parent-artifactid plexus Medium Product pom url https://codehaus-plexus.github.io/plexus-archiver/ Medium Version file version 4.9.2 High Version gradle version 4.9.2 Highest Version Manifest Implementation-Version 4.9.2 High Version pom parent-version 4.9.2 Low Version pom version 4.9.2 Highest
plexus-build-api-0.0.7.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.sonatype.plexus/plexus-build-api/0.0.7/e6ba5cd4bfd8de00235af936e7f63eb24ed436e6/plexus-build-api-0.0.7.jarMD5: 49f0f8c6bdf2687e358870a4fc1559c6SHA1: e6ba5cd4bfd8de00235af936e7f63eb24ed436e6SHA256: 934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath plexus-build-api-0.0.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-build-api High Vendor gradle artifactid plexus-build-api Highest Vendor gradle groupid org.sonatype.plexus Highest Vendor jar package name build Highest Vendor jar package name build Low Vendor jar package name plexus Highest Vendor jar package name plexus Low Vendor jar package name sonatype Highest Vendor jar package name sonatype Low Vendor pom artifactid plexus-build-api Low Vendor pom groupid org.sonatype.plexus Highest Vendor pom parent-artifactid spice-parent Low Vendor pom parent-groupid org.sonatype.spice Medium Product file name plexus-build-api High Product gradle artifactid plexus-build-api Highest Product jar package name build Highest Product jar package name build Low Product jar package name incremental Low Product jar package name plexus Highest Product jar package name plexus Low Product jar package name sonatype Highest Product pom artifactid plexus-build-api Highest Product pom groupid org.sonatype.plexus Highest Product pom parent-artifactid spice-parent Medium Product pom parent-groupid org.sonatype.spice Medium Version file version 0.0.7 High Version gradle version 0.0.7 Highest Version pom parent-version 0.0.7 Low Version pom version 0.0.7 Highest
plexus-cipher-2.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-cipher/2.0/425ea8e534716b4bff1ea90f39bd76be951d651b/plexus-cipher-2.0.jarMD5: 55d612839faf248cbe3e273969c002c2SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651bSHA256: 9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203aReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-cipher High Vendor gradle artifactid plexus-cipher Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name cipher Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid plexus-cipher Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Cipher: encryption/decryption Component High Vendor pom parent-artifactid plexus Low Product file name plexus-cipher High Product gradle artifactid plexus-cipher Highest Product jar package name cipher Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 1.8 Low Product pom artifactid plexus-cipher Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Cipher: encryption/decryption Component High Product pom parent-artifactid plexus Medium Version file version 2.0 High Version gradle version 2.0 Highest Version pom parent-version 2.0 Low Version pom version 2.0 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-classworlds-2.7.0.jarDescription:
A class loader framework License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-classworlds/2.7.0/fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d/plexus-classworlds-2.7.0.jar
MD5: 6ed852b1a004288c44438381e6aaee1e
SHA1: fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d
SHA256: c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-classworlds-2.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-classworlds High Vendor gradle artifactid plexus-classworlds Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name classworlds Highest Vendor jar package name codehaus Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://codehaus-plexus.github.io/ Low Vendor Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium Vendor pom artifactid plexus-classworlds Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Classworlds High Vendor pom parent-artifactid plexus Low Product file name plexus-classworlds High Product gradle artifactid plexus-classworlds Highest Product jar package name classworlds Highest Product jar package name codehaus Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://codehaus-plexus.github.io/ Low Product Manifest Bundle-Name Plexus Classworlds Medium Product Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium Product pom artifactid plexus-classworlds Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Classworlds High Product pom parent-artifactid plexus Medium Version file version 2.7.0 High Version gradle version 2.7.0 Highest Version Manifest Bundle-Version 2.7.0 High Version pom parent-version 2.7.0 Low Version pom version 2.7.0 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-component-annotations-2.1.0.jarDescription:
Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
standard annotations instead of javadoc annotations.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-component-annotations/2.1.0/2f2147a6cc6a119a1b51a96f31d45c557f6244b9/plexus-component-annotations-2.1.0.jarMD5: 141fd7a2ae613cb17d25ecd54b43eb3fSHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9SHA256: bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acacReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-component-annotations High Vendor gradle artifactid plexus-component-annotations Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name annotations Highest Vendor jar package name codehaus Highest Vendor jar package name codehaus Low Vendor jar package name component Highest Vendor jar package name component Low Vendor jar package name plexus Highest Vendor jar package name plexus Low Vendor pom artifactid plexus-component-annotations Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus :: Component Annotations High Vendor pom parent-artifactid plexus-containers Low Product file name plexus-component-annotations High Product gradle artifactid plexus-component-annotations Highest Product jar package name annotations Highest Product jar package name annotations Low Product jar package name codehaus Highest Product jar package name component Highest Product jar package name component Low Product jar package name plexus Highest Product jar package name plexus Low Product pom artifactid plexus-component-annotations Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus :: Component Annotations High Product pom parent-artifactid plexus-containers Medium Version file version 2.1.0 High Version gradle version 2.1.0 Highest Version pom version 2.1.0 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-interpolation-1.26.jarDescription:
The Plexus project provides a full software stack for creating and executing software projects. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-interpolation/1.26/25b919c664b79795ccde0ede5cee0fd68b544197/plexus-interpolation-1.26.jar
MD5: 1049ae9f5cd8cf618abf5bc5805e6b94
SHA1: 25b919c664b79795ccde0ede5cee0fd68b544197
SHA256: b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-interpolation-1.26.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-interpolation High Vendor gradle artifactid plexus-interpolation Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name interpolation Highest Vendor jar package name plexus Highest Vendor Manifest bundle-docurl http://codehaus-plexus.github.io/ Low Vendor Manifest bundle-symbolicname org.codehaus.plexus.interpolation Medium Vendor pom artifactid plexus-interpolation Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Interpolation API High Vendor pom parent-artifactid plexus Low Product file name plexus-interpolation High Product gradle artifactid plexus-interpolation Highest Product jar package name codehaus Highest Product jar package name interpolation Highest Product jar package name plexus Highest Product Manifest bundle-docurl http://codehaus-plexus.github.io/ Low Product Manifest Bundle-Name Plexus Interpolation API Medium Product Manifest bundle-symbolicname org.codehaus.plexus.interpolation Medium Product pom artifactid plexus-interpolation Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Interpolation API High Product pom parent-artifactid plexus Medium Version file version 1.26 High Version gradle version 1.26 Highest Version pom parent-version 1.26 Low Version pom version 1.26 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-io-3.4.2.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-io/3.4.2/40deb3076e4597f1ef973dc794f3a510fa3a942d/plexus-io-3.4.2.jarMD5: 77515ce571e8169c13220c506ad177a4SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942dSHA256: 6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62aReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-io High Vendor gradle artifactid plexus-io Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name components Highest Vendor jar package name io Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 21 Low Vendor pom artifactid plexus-io Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus IO Components High Vendor pom parent-artifactid plexus Low Product file name plexus-io High Product gradle artifactid plexus-io Highest Product jar package name codehaus Highest Product jar package name components Highest Product jar package name io Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 21 Low Product pom artifactid plexus-io Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus IO Components High Product pom parent-artifactid plexus Medium Version file version 3.4.2 High Version gradle version 3.4.2 Highest Version pom parent-version 3.4.2 Low Version pom version 3.4.2 Highest
plexus-java-1.2.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-java/1.2.0/3f161764aac786d64c4cac26511215369250d4fd/plexus-java-1.2.0.jarMD5: fc0976d9a939e5afe5c543f72438f290SHA1: 3f161764aac786d64c4cac26511215369250d4fdSHA256: 4d2d63cdcad46feba432110ef64bcdc8f8fad48538fda5cd2253686b45a94304Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-java-1.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-java High Vendor gradle artifactid plexus-java Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name java Highest Vendor jar package name languages Highest Vendor jar package name org Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest multi-release true Low Vendor pom artifactid plexus-java Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Languages :: Java High Vendor pom parent-artifactid plexus-languages Low Product file name plexus-java High Product gradle artifactid plexus-java Highest Product jar package name codehaus Highest Product jar package name java Highest Product jar package name languages Highest Product jar package name org Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 21 Low Product Manifest multi-release true Low Product pom artifactid plexus-java Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Languages :: Java High Product pom parent-artifactid plexus-languages Medium Version file version 1.2.0 High Version gradle version 1.2.0 Highest Version pom version 1.2.0 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-sec-dispatcher-2.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-sec-dispatcher/2.0/f89c5080614ffd0764e49861895dbedde1b47237/plexus-sec-dispatcher-2.0.jarMD5: e68635a721630177ac70173e441336b6SHA1: f89c5080614ffd0764e49861895dbedde1b47237SHA256: 873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfcebReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-sec-dispatcher High Vendor gradle artifactid plexus-sec-dispatcher Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name plexus Highest Vendor jar package name sec Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid plexus-sec-dispatcher Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Security Dispatcher Component High Vendor pom parent-artifactid plexus Low Product file name plexus-sec-dispatcher High Product gradle artifactid plexus-sec-dispatcher Highest Product jar package name plexus Highest Product jar package name sec Highest Product Manifest build-jdk-spec 1.8 Low Product pom artifactid plexus-sec-dispatcher Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Security Dispatcher Component High Product pom parent-artifactid plexus Medium Version file version 2.0 High Version gradle version 2.0 Highest Version pom parent-version 2.0 Low Version pom version 2.0 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-utils-3.5.1.jarDescription:
A collection of various utility classes to ease working with strings, files, command lines, XML and
more.
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-utils/3.5.1/c6bfb17c97ecc8863e88778ea301be742c62b06d/plexus-utils-3.5.1.jarMD5: cdec471a77f52e687d0df4c43f392a71SHA1: c6bfb17c97ecc8863e88778ea301be742c62b06dSHA256: 86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07bReferenced In Projects/Scopes:
mjml-plugin:runtimeClasspath maven-plugin:compileClasspath mjml-plugin:compileClasspath mjml-plugin:implementationDependenciesMetadata maven-plugin:runtimeClasspath plexus-utils-3.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven/maven-model@3.9.8 pkg:maven/org.apache.maven/maven-model@3.9.4 pkg:maven/org.apache.maven/maven-model@3.9.8 pkg:maven/org.apache.maven/maven-model@3.9.4 pkg:maven/org.apache.maven/maven-model@3.9.4 Evidence Type Source Name Value Confidence Vendor file name plexus-utils High Vendor gradle artifactid plexus-utils Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name org Highest Vendor jar package name plexus Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest multi-release true Low Vendor pom artifactid plexus-utils Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Common Utilities High Vendor pom parent-artifactid plexus Low Product file name plexus-utils High Product gradle artifactid plexus-utils Highest Product jar package name 11 Highest Product jar package name codehaus Highest Product jar package name org Highest Product jar package name plexus Highest Product jar package name xml Highest Product Manifest build-jdk-spec 11 Low Product Manifest multi-release true Low Product pom artifactid plexus-utils Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Common Utilities High Product pom parent-artifactid plexus Medium Version file version 3.5.1 High Version gradle version 3.5.1 Highest Version pom parent-version 3.5.1 Low Version pom version 3.5.1 Highest
plexus-utils-4.0.1.jarDescription:
A collection of various utility classes to ease working with strings, files, command lines and
more. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-utils/4.0.1/2162c639aa9b081ef2a0be9d41643513e284bf99/plexus-utils-4.0.1.jarMD5: 0fa4c6aabfa676c4a1a1bf0c7473f684SHA1: 2162c639aa9b081ef2a0be9d41643513e284bf99SHA256: 96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8bReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-utils-4.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/mjml-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin@8.7.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-utils High Vendor gradle artifactid plexus-utils Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name org Highest Vendor jar package name plexus Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Codehaus Plexus High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor Codehaus Plexus Low Vendor pom artifactid plexus-utils Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Common Utilities High Vendor pom parent-artifactid plexus Low Vendor pom url https://codehaus-plexus.github.io/plexus-utils/ Highest Product file name plexus-utils High Product gradle artifactid plexus-utils Highest Product jar package name codehaus Highest Product jar package name org Highest Product jar package name plexus Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Plexus Common Utilities High Product Manifest multi-release true Low Product Manifest specification-title Plexus Common Utilities Medium Product pom artifactid plexus-utils Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Common Utilities High Product pom parent-artifactid plexus Medium Product pom url https://codehaus-plexus.github.io/plexus-utils/ Medium Version file version 4.0.1 High Version gradle version 4.0.1 Highest Version Manifest Implementation-Version 4.0.1 High Version pom parent-version 4.0.1 Low Version pom version 4.0.1 Highest
plexus-velocity-1.2.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-velocity/1.2/1331b9d6bbf99ead362c68c2f318ebe5fedda598/plexus-velocity-1.2.jarMD5: 7d7805136e8165f53c944612a809f1a6SHA1: 1331b9d6bbf99ead362c68c2f318ebe5fedda598SHA256: b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57abReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-velocity-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-velocity High Vendor gradle artifactid plexus-velocity Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name codehaus Low Vendor jar package name plexus Highest Vendor jar package name plexus Low Vendor jar package name velocity Highest Vendor jar package name velocity Low Vendor pom artifactid plexus-velocity Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Velocity Component High Vendor pom parent-artifactid plexus-components Low Product file name plexus-velocity High Product gradle artifactid plexus-velocity Highest Product jar package name codehaus Highest Product jar package name plexus Highest Product jar package name plexus Low Product jar package name velocity Highest Product jar package name velocity Low Product pom artifactid plexus-velocity Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Velocity Component High Product pom parent-artifactid plexus-components Medium Version file version 1.2 High Version gradle version 1.2 Highest Version pom parent-version 1.2 Low Version pom version 1.2 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plexus-xml-3.0.1.jarDescription:
A collection of various utility classes to ease working with XML in Maven 3. File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-xml/3.0.1/b0e73c21402f03c2765674b8dede21673b3288cf/plexus-xml-3.0.1.jarMD5: cd868918ebc742350840124ea4422ab0SHA1: b0e73c21402f03c2765674b8dede21673b3288cfSHA256: c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath plexus-xml-3.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name plexus-xml High Vendor gradle artifactid plexus-xml Highest Vendor gradle groupid org.codehaus.plexus Highest Vendor jar package name codehaus Highest Vendor jar package name plexus Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Codehaus Plexus High Vendor Manifest specification-vendor Codehaus Plexus Low Vendor pom artifactid plexus-xml Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus XML Utilities High Vendor pom parent-artifactid plexus Low Vendor pom url https://codehaus-plexus.github.io/plexus-xml/ Highest Product file name plexus-xml High Product gradle artifactid plexus-xml Highest Product jar package name codehaus Highest Product jar package name plexus Highest Product jar package name xml Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title Plexus XML Utilities High Product Manifest specification-title Plexus XML Utilities Medium Product pom artifactid plexus-xml Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus XML Utilities High Product pom parent-artifactid plexus Medium Product pom url https://codehaus-plexus.github.io/plexus-xml/ Medium Version file version 3.0.1 High Version gradle version 3.0.1 Highest Version Manifest Implementation-Version 3.0.1 High Version pom parent-version 3.0.1 Low Version pom version 3.0.1 Highest
CVE-2022-4244 suppress
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-4245 suppress
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection. CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
plugin-utils-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/plugin-utils/build/libs/plugin-utils-8.7.1.jarMD5: c5fbc7cb7bfe1a91aced6ae51e7520aaSHA1: 27f44ddb6f0852921df88459e7acad53c281c1ecSHA256: 245188a54e5b55e9d25c7f414c80f6c9c027acc6474eaee1d1f674a4280c6f9fReferenced In Projects/Scopes:
documentation:javadocClasspath aspectj-plugin:compileClasspath aspectj-plugin:runtimeClasspath git-plugin:compileClasspath git-plugin:runtimeClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath plugin-utils-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/documentation@8.7.1 pkg:maven/io.freefair.gradle/git-plugin@8.7.1 pkg:maven/io.freefair.gradle/git-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/git-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name plugin-utils High Vendor gradle artifactid plugin-utils Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name plugin-utils High Product gradle artifactid plugin-utils Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name util Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
protobuf-java-3.25.3.jarDescription:
Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. License:
https://opensource.org/licenses/BSD-3-Clause File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.protobuf/protobuf-java/3.25.3/d3200261955f3298e0d85c9892201e70492ce8eb/protobuf-java-3.25.3.jar
MD5: 8f4aa3786a92e0273854038f98423f18
SHA1: d3200261955f3298e0d85c9892201e70492ce8eb
SHA256: e90d8ddb963b20a972a6a59b5093ade2b07cbe546cab3279aaf4383260385f58
Referenced In Projects/Scopes: documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath protobuf-java-3.25.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 Evidence Type Source Name Value Confidence Vendor file name protobuf-java High Vendor gradle artifactid protobuf-java Highest Vendor gradle groupid com.google.protobuf Highest Vendor jar package name google Highest Vendor jar package name google Low Vendor jar package name protobuf Highest Vendor jar package name protobuf Low Vendor Manifest bundle-docurl https://developers.google.com/protocol-buffers/ Low Vendor Manifest bundle-symbolicname com.google.protobuf Medium Vendor Manifest target-label //java/core:lite_runtime_only Low Product file name protobuf-java High Product gradle artifactid protobuf-java Highest Product jar package name google Highest Product jar package name protobuf Highest Product jar package name protobuf Low Product Manifest bundle-docurl https://developers.google.com/protocol-buffers/ Low Product Manifest Bundle-Name Protocol Buffers [Core] Medium Product Manifest bundle-symbolicname com.google.protobuf Medium Product Manifest target-label //java/core:lite_runtime_only Low Version file name protobuf-java Medium Version file version 3.25.3 High Version gradle version 3.25.3 Highest Version jar package name google Highest Version Manifest Bundle-Version 3.25.3 High
qdox-2.1.0.jarDescription:
QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.thoughtworks.qdox/qdox/2.1.0/64dd4d16364d1eaecba9f6c4c0d6dbcef8e8160/qdox-2.1.0.jar
MD5: cb59cbe3eb621103fc9375e2c830bfb6
SHA1: 064dd4d16364d1eaecba9f6c4c0d6dbcef8e8160
SHA256: 804d51f9bae9e0a84889f3d1b79f5b6586aa91baaa33a8f2175a7b327bd9910e
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath qdox-2.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name qdox High Vendor gradle artifactid qdox Highest Vendor gradle groupid com.thoughtworks.qdox Highest Vendor jar package name parser Highest Vendor jar package name qdox Highest Vendor jar package name thoughtworks Highest Vendor jar package name tools Highest Vendor Manifest automatic-module-name com.thoughtworks.qdox Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid qdox Low Vendor pom developer id joe Medium Vendor pom developer id mauro Medium Vendor pom developer id mdub Medium Vendor pom developer id paul Medium Vendor pom developer id rfscholte Medium Vendor pom developer id rinkrank Medium Vendor pom developer name Aslak Hellesoy Medium Vendor pom developer name Joe Walnes Medium Vendor pom developer name Mauro Talevi Medium Vendor pom developer name Mike Williams Medium Vendor pom developer name Paul Hammant Medium Vendor pom developer name Robert Scholte Medium Vendor pom groupid com.thoughtworks.qdox Highest Vendor pom name QDox High Vendor pom url paul-hammant/qdox Highest Product file name qdox High Product gradle artifactid qdox Highest Product jar package name parser Highest Product jar package name qdox Highest Product jar package name thoughtworks Highest Product jar package name tools Highest Product Manifest automatic-module-name com.thoughtworks.qdox Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid qdox Highest Product pom developer id joe Low Product pom developer id mauro Low Product pom developer id mdub Low Product pom developer id paul Low Product pom developer id rfscholte Low Product pom developer id rinkrank Low Product pom developer name Aslak Hellesoy Low Product pom developer name Joe Walnes Low Product pom developer name Mauro Talevi Low Product pom developer name Mike Williams Low Product pom developer name Paul Hammant Low Product pom developer name Robert Scholte Low Product pom groupid com.thoughtworks.qdox Highest Product pom name QDox High Product pom url paul-hammant/qdox High Version file version 2.1.0 High Version gradle version 2.1.0 Highest Version pom version 2.1.0 Highest
quicktype-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/quicktype-plugin/build/libs/quicktype-plugin-8.7.1.jarMD5: ce59fcffa7af01b39dab1a140985f157SHA1: bd198acd11498b12b16e8ccd59a67d27f7c30edeSHA256: e59f0631b364c4f413ea7c246abaf9ae76f74ce3a144bc4e481116ddeb53c54dReferenced In Project/Scope: documentation:javadocClasspathquicktype-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name quicktype-plugin High Vendor gradle artifactid quicktype-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name quicktype-plugin High Product gradle artifactid quicktype-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
retrofit-2.11.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.retrofit2/retrofit/2.11.0/6ca8c6caf842271f3232e075519fe04081ef7069/retrofit-2.11.0.jarMD5: bb518c7b3078881a452b5e82e14f571eSHA1: 6ca8c6caf842271f3232e075519fe04081ef7069SHA256: 9f4fbbce70728584fbeed38d4061f36d4477e89bca74b4e2ac8aeb6819b0fe43Referenced In Projects/Scopes:
documentation:javadocClasspath github-plugin:compileClasspath github-plugin:runtimeClasspath retrofit-2.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 pkg:maven/com.squareup.retrofit2/converter-gson@2.11.0 pkg:maven/io.freefair.gradle/github-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name retrofit High Vendor gradle artifactid retrofit Highest Vendor gradle groupid com.squareup.retrofit2 Highest Vendor jar package name retrofit2 Highest Vendor jar package name retrofit2 Low Vendor Manifest automatic-module-name retrofit2 Medium Vendor Manifest multi-release true Low Product file name retrofit High Product gradle artifactid retrofit Highest Product jar package name retrofit2 Highest Product Manifest automatic-module-name retrofit2 Medium Product Manifest multi-release true Low Version file name retrofit Medium Version file version 2.11.0 High Version gradle version 2.11.0 Highest
sass-embedded-bundled-3.6.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-bundled/3.6.0/9bd9ca190f1fe0a5725dd7bde3effe4ed2601564/sass-embedded-bundled-3.6.0.jarMD5: 1198bfedb42cd791b50f2b0eac53f232SHA1: 9bd9ca190f1fe0a5725dd7bde3effe4ed2601564SHA256: a6d7e46a34c87646cf6a2ec5ccad6cffd6d5013440c1de2a45a4e56f4ca09702Referenced In Projects/Scopes:
documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath sass-embedded-bundled-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 Evidence Type Source Name Value Confidence Vendor file name sass-embedded-bundled High Vendor gradle artifactid sass-embedded-bundled Highest Vendor gradle groupid de.larsgrefer.sass Highest Vendor jar package name de Low Vendor jar package name larsgrefer Low Vendor jar package name sass Low Vendor Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Vendor Manifest specification-vendor Google LLC Low Product file name sass-embedded-bundled High Product gradle artifactid sass-embedded-bundled Highest Product jar package name embedded Highest Product jar package name embedded Low Product jar package name larsgrefer Highest Product jar package name larsgrefer Low Product jar package name sass Highest Product jar package name sass Low Product Manifest Implementation-Title SASS Embedded Bundled Compilers High Product Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Version file version 3.6.0 High Version Manifest Implementation-Version 3.6.0 High
sass-embedded-bundled-ia32-3.6.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-bundled-ia32/3.6.0/3bacb4a9ca936876a111f59eedafb228ea41df2d/sass-embedded-bundled-ia32-3.6.0.jarMD5: 8cd54fe5f97b8d8c7f2188769f29a26fSHA1: 3bacb4a9ca936876a111f59eedafb228ea41df2dSHA256: 7b6e1c90c3c3a869470f709a0e9cea4ca53b7d188bd13857753501cc20d59ea0Referenced In Projects/Scopes:
documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath sass-embedded-bundled-ia32-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 Evidence Type Source Name Value Confidence Vendor file name sass-embedded-bundled-ia32 High Vendor gradle artifactid sass-embedded-bundled-ia32 Highest Vendor gradle groupid de.larsgrefer.sass Highest Vendor Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Vendor Manifest specification-vendor Google LLC Low Product file name sass-embedded-bundled-ia32 High Product gradle artifactid sass-embedded-bundled-ia32 Highest Product Manifest Implementation-Title SASS Embedded Bundled Compilers ia32 High Product Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Version file version 3.6.0 High Version Manifest Implementation-Version 3.6.0 High
sass-embedded-host-3.6.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-host/3.6.0/b41ab45a12042a495de8075899fbc57a386d988b/sass-embedded-host-3.6.0.jarMD5: 66b7f256586fcf23001f0b39934e21aaSHA1: b41ab45a12042a495de8075899fbc57a386d988bSHA256: b8da4426a18a0c88458c3973b5564930b1d36b5d4bcb9257df55176119014ea5Referenced In Projects/Scopes:
documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath sass-embedded-host-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name sass-embedded-host High Vendor gradle artifactid sass-embedded-host Highest Vendor gradle groupid de.larsgrefer.sass Highest Vendor jar package name de Low Vendor jar package name larsgrefer Low Vendor jar package name sass Low Vendor Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Product file name sass-embedded-host High Product gradle artifactid sass-embedded-host Highest Product jar package name embedded Highest Product jar package name embedded Low Product jar package name larsgrefer Highest Product jar package name larsgrefer Low Product jar package name sass Highest Product jar package name sass Low Product Manifest Implementation-Title SASS Embedded Host High Product Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Version file version 3.6.0 High Version Manifest Implementation-Version 3.6.0 High
sass-embedded-protocol-3.6.0.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-protocol/3.6.0/37723f1bf632aa674e235b22ed833992c01ed190/sass-embedded-protocol-3.6.0.jarMD5: 6ed05946cb54769218d6ff03039ee913SHA1: 37723f1bf632aa674e235b22ed833992c01ed190SHA256: 869c86036ea2da6f2ae391ed4cb0c5d2f7a108bfd0b43174f7573b40d9edc9e7Referenced In Projects/Scopes:
documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath sass-embedded-protocol-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 Evidence Type Source Name Value Confidence Vendor file name sass-embedded-protocol High Vendor gradle artifactid sass-embedded-protocol Highest Vendor gradle groupid de.larsgrefer.sass Highest Vendor jar package name embedded_protocol Low Vendor jar package name sass_lang Low Vendor Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Vendor Manifest specification-vendor Google LLC Low Product file name sass-embedded-protocol High Product gradle artifactid sass-embedded-protocol Highest Product jar package name embedded_protocol Low Product Manifest Implementation-Title SASS Embedded Protocol High Product Manifest implementation-url https://github.com/larsgrefer/dart-sass-java Low Version file version 3.6.0 High Version Manifest Implementation-Version 3.6.0 High
settings-plugin-8.7.1.jarFile Path: /home/runner/work/gradle-plugins/gradle-plugins/settings-plugin/build/libs/settings-plugin-8.7.1.jarMD5: 17ea31ac2b87f1a91e03182918a371d0SHA1: 43fa55a93fd0c987d9b49399e39bf7dc618207a0SHA256: 673eeff8736b995392eeb0177f3db2a41539304a76e8764b09acd21d3ac8baaeReferenced In Project/Scope: documentation:javadocClasspathsettings-plugin-8.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name settings-plugin High Vendor gradle artifactid settings-plugin Highest Vendor gradle groupid io.freefair.gradle Highest Vendor jar package name freefair Low Vendor jar package name gradle Low Vendor jar package name io Low Product file name settings-plugin High Product gradle artifactid settings-plugin Highest Product jar package name freefair Low Product jar package name gradle Low Product jar package name plugins Low Version file version 8.7.1 High Version Manifest Implementation-Version 8.7.1 High
slf4j-api-1.7.36.jarDescription:
The slf4j API File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/1.7.36/6c62681a2f655b49963a5983b8b0950a6120ae14/slf4j-api-1.7.36.jarMD5: 872da51f5de7f3923da4de871d57fd85SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14SHA256: d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0Referenced In Projects/Scopes:
maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath slf4j-api-1.7.36.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor gradle artifactid slf4j-api Highest Vendor gradle groupid org.slf4j Highest Vendor jar package name slf4j Highest Vendor Manifest automatic-module-name org.slf4j Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product gradle artifactid slf4j-api Highest Product jar package name slf4j Highest Product Manifest automatic-module-name org.slf4j Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name slf4j-api Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 1.7.36 High Version gradle version 1.7.36 Highest Version Manifest Bundle-Version 1.7.36 High Version Manifest Implementation-Version 1.7.36 High Version pom version 1.7.36 Highest
slf4j-api-2.0.13.jarDescription:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.13/80229737f704b121a318bba5d5deacbcf395bc77/slf4j-api-2.0.13.jar
MD5: 7f4028aa04f75427327f3f30cd62ba4e
SHA1: 80229737f704b121a318bba5d5deacbcf395bc77
SHA256: e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9
Referenced In Projects/Scopes: documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath slf4j-api-2.0.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.webjars/webjars-locator-core@0.59 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 pkg:maven/de.larsgrefer.sass/sass-embedded-host@3.6.0 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.webjars/webjars-locator-core@0.59 Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor gradle artifactid slf4j-api Highest Vendor gradle groupid org.slf4j Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product gradle artifactid slf4j-api Highest Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.13 High Version gradle version 2.0.13 Highest Version Manifest Bundle-Version 2.0.13 High Version Manifest Implementation-Version 2.0.13 High Version pom version 2.0.13 Highest
snappy-0.4.jarDescription:
Port of Snappy to Java License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.iq80.snappy/snappy/0.4/a42b2d92a89efd35bb14738000dabcac6bd07a8d/snappy-0.4.jar
MD5: f0792d1dbe7f90d8b34c7c19961e0073
SHA1: a42b2d92a89efd35bb14738000dabcac6bd07a8d
SHA256: 46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath snappy-0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 Evidence Type Source Name Value Confidence Vendor file name snappy High Vendor gradle artifactid snappy Highest Vendor gradle groupid org.iq80.snappy Highest Vendor jar package name iq80 Highest Vendor jar package name iq80 Low Vendor jar package name snappy Highest Vendor jar package name snappy Low Vendor pom artifactid snappy Low Vendor pom developer email dain@iq80.com Low Vendor pom developer email david@acz.org Low Vendor pom developer id dain Medium Vendor pom developer id electrum Medium Vendor pom developer name Dain Sundstrom Medium Vendor pom developer name David Phillips Medium Vendor pom groupid org.iq80.snappy Highest Vendor pom name snappy High Vendor pom url http://github.com/dain/snappy Highest Product file name snappy High Product gradle artifactid snappy Highest Product jar package name iq80 Highest Product jar package name snappy Highest Product jar package name snappy Low Product pom artifactid snappy Highest Product pom developer email dain@iq80.com Low Product pom developer email david@acz.org Low Product pom developer id dain Low Product pom developer id electrum Low Product pom developer name Dain Sundstrom Low Product pom developer name David Phillips Low Product pom groupid org.iq80.snappy Highest Product pom name snappy High Product pom url http://github.com/dain/snappy Medium Version file version 0.4 High Version gradle version 0.4 Highest Version pom version 0.4 Highest
CVE-2024-36124 (OSSINDEX) suppress
iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks are performed and this has similar security consequences as out-of-bounds access in C or C++, namely it can lead to non-deterministic behavior or crash the JVM. iq80 Snappy is not actively maintained anymore. As quick fix users can upgrade to version 0.5.
CWE-125 Out-of-bounds Read
CVSSv3:
Base Score: MEDIUM (5.300000190734863) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.iq80.snappy:snappy:0.4:*:*:*:*:*:*:* spring-asciidoctor-extensions-block-switch-0.6.3.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.spring.asciidoctor/spring-asciidoctor-extensions-block-switch/0.6.3/ee30c30058592d39db61e08daf1d73d2d3fc1f86/spring-asciidoctor-extensions-block-switch-0.6.3.jarMD5: 454a36d905bf2f22f79bb34f7065012bSHA1: ee30c30058592d39db61e08daf1d73d2d3fc1f86SHA256: dfde9951be490a500f2a1e0ac5eb47905f85610be9a53308d5ff53ca1fe7235cReferenced In Project/Scope: documentation:asciidoctorExtspring-asciidoctor-extensions-block-switch-0.6.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/documentation@8.7.1
Evidence Type Source Name Value Confidence Vendor file name spring-asciidoctor-extensions-block-switch High Vendor gradle artifactid spring-asciidoctor-extensions-block-switch Highest Vendor gradle groupid io.spring.asciidoctor Highest Vendor jar package name asciidoctor Low Vendor jar package name io Low Vendor jar package name spring Low Product file name spring-asciidoctor-extensions-block-switch High Product gradle artifactid spring-asciidoctor-extensions-block-switch Highest Product jar package name asciidoctor Low Product jar package name blockswitch Low Product jar package name spring Low Version file name spring-asciidoctor-extensions-block-switch Medium Version file version 0.6.3 High Version gradle version 0.6.3 Highest
CVE-2018-18385 suppress
Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular expression that detects any list was not agreeing with the regular expression that detects a specific list type. So the line kept getting pushed back onto the reader, hence causing the loop. CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
spring-asciidoctor-extensions-block-switch-0.6.3.jar: blockSwitch.jsFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.spring.asciidoctor/spring-asciidoctor-extensions-block-switch/0.6.3/ee30c30058592d39db61e08daf1d73d2d3fc1f86/spring-asciidoctor-extensions-block-switch-0.6.3.jar/blockSwitch.jsMD5: d4b8f585cbeb7e87ce363fbbb6eb9454SHA1: c88002921c8338d9ccd08414e17db0ce91236f70SHA256: af0aabf4e915253aa7c1ca649ad9dfa3bab3ac301a05ca1900cdaa1ee0cf0d77Referenced In Project/Scope: documentation:asciidoctorExt
Evidence Type Source Name Value Confidence
trove4j-1.0.20200330.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.intellij.deps/trove4j/1.0.20200330/3afb14d5f9ceb459d724e907a21145e8ff394f02/trove4j-1.0.20200330.jarMD5: bb75697e375d588a9d3f8f2653b30f77SHA1: 3afb14d5f9ceb459d724e907a21145e8ff394f02SHA256: c5fd725bffab51846bf3c77db1383c60aaaebfe1b7fe2f00d23fe1b7df0a439dReferenced In Projects/Scopes:
documentation:javadocClasspath quicktype-plugin:runtimeClasspath mjml-plugin:kotlinCompilerClasspath quicktype-plugin:kotlinBuildToolsApiClasspath mjml-plugin:kotlinBuildToolsApiClasspath quicktype-plugin:kotlinKlibCommonizerClasspath quicktype-plugin:kotlinCompilerClasspath mjml-plugin:kotlinKlibCommonizerClasspath trove4j-1.0.20200330.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.9.22 pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.9.22 pkg:maven/io.freefair.gradle/quicktype-plugin@8.7.1 pkg:maven/io.freefair.gradle/aspectj-plugin@8.7.1 pkg:maven/org.jetbrains.kotlin/kotlin-build-tools-impl@1.9.22 Evidence Type Source Name Value Confidence Vendor file name trove4j High Vendor gradle artifactid trove4j Highest Vendor gradle groupid org.jetbrains.intellij.deps Highest Vendor jar package name gnu Low Vendor jar package name trove Low Product file name trove4j High Product gradle artifactid trove4j Highest Product jar package name trove Low Version file name trove4j Medium Version file version 1.0.20200330 High Version gradle version 1.0.20200330 Highest
velocity-1.7.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.velocity/velocity/1.7/2ceb567b8f3f21118ecdec129fe1271dbc09aa7a/velocity-1.7.jarMD5: 3692dd72f8367cb35fb6280dc2916725SHA1: 2ceb567b8f3f21118ecdec129fe1271dbc09aa7aSHA256: ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8eReferenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath velocity-1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name velocity High Vendor gradle artifactid velocity Highest Vendor gradle groupid org.apache.velocity Highest Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name runtime Low Vendor jar package name velocity Highest Vendor jar package name velocity Low Vendor Manifest bundle-symbolicname org.apache.velocity Medium Vendor Manifest extension-name velocity Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor Apache Software Foundation Low Product file name velocity High Product gradle artifactid velocity Highest Product jar package name apache Highest Product jar package name runtime Low Product jar package name template Highest Product jar package name velocity Highest Product jar package name velocity Low Product Manifest Bundle-Name Apache Velocity Medium Product Manifest bundle-symbolicname org.apache.velocity Medium Product Manifest extension-name velocity Medium Product Manifest Implementation-Title org.apache.velocity High Product Manifest specification-title Velocity is a Java-based template engine Medium Version file version 1.7 High Version Manifest Implementation-Version 1.7 High
CVE-2020-13936 suppress
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2. NVD-CWE-noinfo
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
wagon-provider-api-3.5.3.jarDescription:
Maven Wagon API that defines the contract between different Wagon implementations File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.wagon/wagon-provider-api/3.5.3/39c44ebb3945dee359665272d8acb83f9460491b/wagon-provider-api-3.5.3.jarMD5: 55a4be47ca51799ae3c18ed521f296dfSHA1: 39c44ebb3945dee359665272d8acb83f9460491bSHA256: 5e72000338945ed3e96f8e4f578d1d0672e1af7e19c0e9014197ae5b31af3ef4Referenced In Projects/Scopes:
documentation:javadocClasspath maven-plugin-plugin:compileClasspath maven-plugin-plugin:runtimeClasspath wagon-provider-api-3.5.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.13.1 Evidence Type Source Name Value Confidence Vendor file name wagon-provider-api High Vendor gradle artifactid wagon-provider-api Highest Vendor gradle groupid org.apache.maven.wagon Highest Vendor jar package name apache Highest Vendor jar package name maven Highest Vendor jar package name wagon Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid wagon-provider-api Low Vendor pom groupid org.apache.maven.wagon Highest Vendor pom name Apache Maven Wagon :: API High Vendor pom parent-artifactid wagon Low Product file name wagon-provider-api High Product gradle artifactid wagon-provider-api Highest Product jar package name apache Highest Product jar package name maven Highest Product jar package name wagon Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Apache Maven Wagon :: API High Product Manifest specification-title Apache Maven Wagon :: API Medium Product pom artifactid wagon-provider-api Highest Product pom groupid org.apache.maven.wagon Highest Product pom name Apache Maven Wagon :: API High Product pom parent-artifactid wagon Medium Version file version 3.5.3 High Version gradle version 3.5.3 Highest Version Manifest Implementation-Version 3.5.3 High Version pom version 3.5.3 Highest
webjars-locator-core-0.59.jarDescription:
WebJar Locator Core functionality License:
MIT: https://github.com/webjars/webjars-locator-core/blob/master/LICENSE.md File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.webjars/webjars-locator-core/0.59/a25e04cb0437d88eb177af1dface14edcd0cd767/webjars-locator-core-0.59.jar
MD5: 3138e5b870eddc24595a2c658fa1d648
SHA1: a25e04cb0437d88eb177af1dface14edcd0cd767
SHA256: 86e89c3504205ecfbc169cffcbc220bb2f4a68077acc5a95692d1129bf0e53fb
Referenced In Projects/Scopes: documentation:javadocClasspath embedded-sass-plugin:runtimeClasspath embedded-sass-plugin:compileClasspath webjars-locator-core-0.59.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name webjars-locator-core High Vendor gradle artifactid webjars-locator-core Highest Vendor gradle groupid org.webjars Highest Vendor jar package name webjars Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid webjars-locator-core Low Vendor pom developer email james@jamesward.org Low Vendor pom developer id jamesward Medium Vendor pom developer name James Ward Medium Vendor pom groupid org.webjars Highest Vendor pom name webjars-locator-core High Vendor pom url http://webjars.org Highest Product file name webjars-locator-core High Product gradle artifactid webjars-locator-core Highest Product jar package name webjars Highest Product Manifest build-jdk-spec 1.8 Low Product pom artifactid webjars-locator-core Highest Product pom developer email james@jamesward.org Low Product pom developer id jamesward Low Product pom developer name James Ward Low Product pom groupid org.webjars Highest Product pom name webjars-locator-core High Product pom url http://webjars.org Medium Version file version 0.59 High Version gradle version 0.59 Highest Version pom version 0.59 Highest
xz-1.10.jarLicense:
0BSD File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.tukaani/xz/1.10/1be8166f89e035a56c6bfc67dbc423996fe577e2/xz-1.10.jar
MD5: 56e3fd256e5423a74393bd5eaa5302bb
SHA1: 1be8166f89e035a56c6bfc67dbc423996fe577e2
SHA256: 95c63c1a55b22dd6453890a419cc1a640f790bbf7d8ae82db1e30aefefb08888
Referenced In Projects/Scopes: documentation:javadocClasspath compress-plugin:compileClasspath compress-plugin:runtimeClasspath xz-1.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/io.freefair.gradle/compress-plugin@8.7.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name xz High Vendor gradle artifactid xz Highest Vendor gradle groupid org.tukaani Highest Vendor jar package name org Highest Vendor jar package name tukaani Highest Vendor jar package name tukaani Low Vendor jar package name xz Highest Vendor jar package name xz Low Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-copyright The XZ for Java authors and contributors Low Vendor Manifest bundle-docurl https://tukaani.org/xz/xz-javadoc/ Low Vendor Manifest bundle-symbolicname org.tukaani.xz Medium Vendor Manifest implementation-url https://tukaani.org/xz/java.html Low Vendor Manifest multi-release true Low Product file name xz High Product gradle artifactid xz Highest Product jar package name org Highest Product jar package name tukaani Highest Product jar package name xz Highest Product jar package name xz Low Product Manifest build-jdk-spec 21 Low Product Manifest bundle-copyright The XZ for Java authors and contributors Low Product Manifest bundle-docurl https://tukaani.org/xz/xz-javadoc/ Low Product Manifest Bundle-Name XZ data compression Medium Product Manifest bundle-symbolicname org.tukaani.xz Medium Product Manifest Implementation-Title XZ data compression High Product Manifest implementation-url https://tukaani.org/xz/java.html Low Product Manifest multi-release true Low Version file version 1.10 High Version Manifest Implementation-Version 1.10 High
xz-1.9.jarFile Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.tukaani/xz/1.9/1ea4bec1a921180164852c65006d928617bd2caf/xz-1.9.jarMD5: 57c2fbfeb55e307ccae52e5322082e02SHA1: 1ea4bec1a921180164852c65006d928617bd2cafSHA256: 211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5Referenced In Project/Scope: maven-plugin-plugin:runtimeClasspathxz-1.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1
Evidence Type Source Name Value Confidence Vendor file name xz High Vendor gradle artifactid xz Highest Vendor gradle groupid org.tukaani Highest Vendor jar package name tukaani Highest Vendor jar package name tukaani Low Vendor jar package name xz Highest Vendor jar package name xz Low Vendor Manifest bundle-docurl https://tukaani.org/xz/java.html Low Vendor Manifest bundle-symbolicname org.tukaani.xz Medium Vendor Manifest implementation-url https://tukaani.org/xz/java.html Low Vendor Manifest multi-release true Low Product file name xz High Product gradle artifactid xz Highest Product jar package name tukaani Highest Product jar package name xz Highest Product jar package name xz Low Product Manifest bundle-docurl https://tukaani.org/xz/java.html Low Product Manifest Bundle-Name XZ data compression Medium Product Manifest bundle-symbolicname org.tukaani.xz Medium Product Manifest Implementation-Title XZ data compression High Product Manifest implementation-url https://tukaani.org/xz/java.html Low Product Manifest multi-release true Low Version file version 1.9 High Version Manifest Implementation-Version 1.9 High
zstd-jni-1.5.5-11.jarDescription:
JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages. License:
https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.luben/zstd-jni/1.5.5-11/ca6ab366315e179dd80645aad4a60bab959c6523/zstd-jni-1.5.5-11.jar
MD5: 00977099d76d2c01a7b19263375ee42e
SHA1: ca6ab366315e179dd80645aad4a60bab959c6523
SHA256: d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a
Referenced In Projects/Scopes: documentation:javadocClasspath maven-plugin-plugin:runtimeClasspath zstd-jni-1.5.5-11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.13.1 pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.13.1 pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.7.1 Evidence Type Source Name Value Confidence Vendor file name zstd-jni High Vendor gradle artifactid zstd-jni Highest Vendor gradle groupid com.github.luben Highest Vendor jar package name github Highest Vendor jar package name github Low Vendor jar package name luben Highest Vendor jar package name luben Low Vendor jar package name zstd Highest Vendor jar package name zstd Low Vendor Manifest automatic-module-name com.github.luben.zstd_jni Medium Vendor Manifest bundle-nativecode darwin/x86_64/libzstd-jni-1.5.5-11.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.5-11.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.5-11.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.5-11.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.5-11.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.5-11.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.5-11.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.5-11.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=x86 Low Vendor Manifest bundle-symbolicname com.github.luben.zstd-jni Medium Vendor Manifest Implementation-Vendor com.github.luben High Vendor Manifest Implementation-Vendor-Id com.github.luben Medium Vendor Manifest specification-vendor com.github.luben Low Product file name zstd-jni High Product gradle artifactid zstd-jni Highest Product jar package name github Highest Product jar package name luben Highest Product jar package name luben Low Product jar package name zstd Highest Product jar package name zstd Low Product Manifest automatic-module-name com.github.luben.zstd_jni Medium Product Manifest Bundle-Name zstd-jni Medium Product Manifest bundle-nativecode darwin/x86_64/libzstd-jni-1.5.5-11.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.5-11.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.5-11.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.5-11.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.5-11.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.5-11.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.5-11.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.5-11.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.5-11.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.5-11.dll;osname=Win32;processor=x86 Low Product Manifest bundle-symbolicname com.github.luben.zstd-jni Medium Product Manifest Implementation-Title zstd-jni High Product Manifest specification-title zstd-jni Medium Version file version 1.5.5.11 High Version Manifest Implementation-Version 1.5.5-11 High