Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 13.0.0
Report Generated On : Wed, 16 Sep 2026 10:41:53 GMT
Dependencies Scanned : 90 (68 unique)
Vulnerable Dependencies : 2
Vulnerabilities Found : 2
Vulnerabilities Suppressed : 0
...
NVD API Last Checked : 2026-09-16T10:41:42Z
NVD API Last Modified : 2026-09-16T10:16:56Z
Summary
Summary of Vulnerable Dependencies (click to show all)
GeographicLib-Java-1.49.jar
Description:
This is a Java implementation of the geodesic algorithms from
GeographicLib. This is a self-contained library which makes it
easy to do geodesic computations for an ellipsoid of revolution in
a Java program. It requires Java version 1.1 or later.
License:
The MIT License(MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/net/sf/geographiclib/GeographicLib-Java/1.49/GeographicLib-Java-1.49.jar
MD5: 5536ff35e4bb0b3262c6f62f43105ea4
SHA1: 7ff2164e69fa04e1ef2ca5079e1cee298a936ea1
SHA256: 78c292f7e6910d51a15fc9088c301fac3b4c0a43ac5ae17499f5763b4dd9aca8
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
GeographicLib-Java-1.49.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name GeographicLib-Java High
Vendor jar package name geodesic Highest
Vendor jar package name geographiclib Highest
Vendor jar package name geographiclib Low
Vendor jar package name net Highest
Vendor jar package name net Low
Vendor jar package name sf Highest
Vendor jar package name sf Low
Vendor pom artifactid GeographicLib-Java Highest
Vendor pom artifactid GeographicLib-Java Low
Vendor pom developer email charles@karney.com Low
Vendor pom developer name Charles Karney Medium
Vendor pom developer org URL
https://sourceforge.net/u/karney/profile/
Medium
Vendor pom groupid net.sf.geographiclib Highest
Vendor pom name Java implementation of GeographicLib High
Vendor pom url https://geographiclib.sourceforge.io Highest
Product file name GeographicLib-Java High
Product jar package name geodesic Highest
Product jar package name geographiclib Highest
Product jar package name geographiclib Low
Product jar package name net Highest
Product jar package name sf Highest
Product jar package name sf Low
Product pom artifactid GeographicLib-Java Highest
Product pom developer email charles@karney.com Low
Product pom developer name Charles Karney Low
Product pom developer org URL
https://sourceforge.net/u/karney/profile/
Low
Product pom groupid net.sf.geographiclib Highest
Product pom name Java implementation of GeographicLib High
Product pom url https://geographiclib.sourceforge.io Medium
Version file version 1.49 High
Version pom version 1.49 Highest
pkg:maven/net.sf.geographiclib/GeographicLib-Java@1.49
(Confidence :High)
amqp-client-5.35.0.jar
Description:
The RabbitMQ Java client library allows Java applications to interface with RabbitMQ.
License:
AL 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
GPL v2: https://www.gnu.org/licenses/gpl-2.0.txt
MPL 2.0: https://www.mozilla.org/en-US/MPL/2.0/
File Path: /home/runner/.m2/repository/com/rabbitmq/amqp-client/5.35.0/amqp-client-5.35.0.jar
MD5: dfc10a716af260a664d551da2eecb5b4
SHA1: 85a35a2c5ff795ad2e8c4290d8d4ec9fabbc7b43
SHA256: c23f1dffc08e2c209035f8d22a48edfd83477b629477e9416a5d25e2c116f3f6
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
amqp-client-5.35.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name amqp-client High
Vendor jar package name amqp Highest
Vendor jar package name client Highest
Vendor jar package name rabbitmq Highest
Vendor Manifest automatic-module-name com.rabbitmq.client Medium
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://www.rabbitmq.com Low
Vendor Manifest bundle-symbolicname com.rabbitmq.client Medium
Vendor Manifest implementation-url https://www.rabbitmq.com Low
Vendor Manifest Implementation-Vendor Broadcom Inc. and its subsidiaries. High
Vendor Manifest specification-vendor AMQP Working Group (www.amqp.org) Low
Vendor pom artifactid amqp-client Highest
Vendor pom artifactid amqp-client Low
Vendor pom developer email info@rabbitmq.com Low
Vendor pom developer name Team RabbitMQ Medium
Vendor pom developer org Broadcom Inc. and its subsidiaries. Medium
Vendor pom developer org URL https://rabbitmq.com Medium
Vendor pom groupid com.rabbitmq Highest
Vendor pom name RabbitMQ Java Client High
Vendor pom organization name Broadcom Inc. and its subsidiaries. High
Vendor pom organization url https://www.rabbitmq.com Medium
Vendor pom url https://www.rabbitmq.com Highest
Product file name amqp-client High
Product jar package name amqp Highest
Product jar package name client Highest
Product jar package name rabbitmq Highest
Product Manifest automatic-module-name com.rabbitmq.client Medium
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://www.rabbitmq.com Low
Product Manifest Bundle-Name RabbitMQ Java Client Medium
Product Manifest bundle-symbolicname com.rabbitmq.client Medium
Product Manifest Implementation-Title RabbitMQ Java Client High
Product Manifest implementation-url https://www.rabbitmq.com Low
Product Manifest specification-title AMQP Medium
Product pom artifactid amqp-client Highest
Product pom developer email info@rabbitmq.com Low
Product pom developer name Team RabbitMQ Low
Product pom developer org Broadcom Inc. and its subsidiaries. Low
Product pom developer org URL https://rabbitmq.com Low
Product pom groupid com.rabbitmq Highest
Product pom name RabbitMQ Java Client High
Product pom organization name Broadcom Inc. and its subsidiaries. Low
Product pom organization url https://www.rabbitmq.com Low
Product pom url https://www.rabbitmq.com Medium
Version file version 5.35.0 High
Version Manifest Bundle-Version 5.35.0 High
Version Manifest Implementation-Version 5.35.0 High
Version pom version 5.35.0 Highest
pkg:maven/com.rabbitmq/amqp-client@5.35.0
(Confidence :High)
antlr4-runtime-4.13.2.jar
Description:
The ANTLR 4 Runtime
License:
https://www.antlr.org/license.html
File Path: /home/runner/.m2/repository/org/antlr/antlr4-runtime/4.13.2/antlr4-runtime-4.13.2.jar
MD5: eecf1908f0cfff10f8bb82878b5ca401
SHA1: fc3db6d844df652a3d5db31c87fa12757f13691d
SHA256: dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
antlr4-runtime-4.13.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-jpa@4.1.0
Evidence
Type Source Name Value Confidence
Vendor file name antlr4-runtime High
Vendor jar package name antlr Highest
Vendor jar package name runtime Highest
Vendor Manifest automatic-module-name org.antlr.antlr4.runtime Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.antlr.org/ Low
Vendor Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium
Vendor Manifest Implementation-Vendor ANTLR High
Vendor pom artifactid antlr4-runtime Highest
Vendor pom artifactid antlr4-runtime Low
Vendor pom groupid org.antlr Highest
Vendor pom name ANTLR 4 Runtime High
Vendor pom parent-artifactid antlr4-master Low
Product file name antlr4-runtime High
Product jar package name antlr Highest
Product jar package name runtime Highest
Product Manifest automatic-module-name org.antlr.antlr4.runtime Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.antlr.org/ Low
Product Manifest Bundle-Name ANTLR 4 Runtime Medium
Product Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium
Product Manifest Implementation-Title ANTLR 4 Runtime High
Product pom artifactid antlr4-runtime Highest
Product pom groupid org.antlr Highest
Product pom name ANTLR 4 Runtime High
Product pom parent-artifactid antlr4-master Medium
Version file version 4.13.2 High
Version Manifest Bundle-Version 4.13.2 High
Version Manifest Implementation-Version 4.13.2 High
Version pom version 4.13.2 Highest
pkg:maven/org.antlr/antlr4-runtime@4.13.2
(Confidence :High)
apiguardian-api-1.1.2.jar
Description:
@API Guardian
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256: b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
Evidence
Type Source Name Value Confidence
Vendor file name apiguardian-api High
Vendor jar package name api Highest
Vendor jar package name apiguardian Highest
Vendor Manifest build-date 2021-06-27 Low
Vendor Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low
Vendor Manifest build-time 14:53:10.089+0200 Low
Vendor Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low
Vendor Manifest bundle-symbolicname org.apiguardian.api Medium
Vendor Manifest Implementation-Vendor apiguardian.org High
Vendor Manifest specification-vendor apiguardian.org Low
Vendor pom artifactid apiguardian-api Highest
Vendor pom artifactid apiguardian-api Low
Vendor pom developer email team@apiguardian.org Low
Vendor pom developer id apiguardian Medium
Vendor pom developer name @API Guardian Team Medium
Vendor pom groupid org.apiguardian Highest
Vendor pom name org.apiguardian:apiguardian-api High
Vendor pom url apiguardian-team/apiguardian Highest
Product file name apiguardian-api High
Product jar package name api Highest
Product jar package name apiguardian Highest
Product Manifest build-date 2021-06-27 Low
Product Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low
Product Manifest build-time 14:53:10.089+0200 Low
Product Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low
Product Manifest Bundle-Name apiguardian-api Medium
Product Manifest bundle-symbolicname org.apiguardian.api Medium
Product Manifest Implementation-Title apiguardian-api High
Product Manifest specification-title apiguardian-api Medium
Product pom artifactid apiguardian-api Highest
Product pom developer email team@apiguardian.org Low
Product pom developer id apiguardian Low
Product pom developer name @API Guardian Team Low
Product pom groupid org.apiguardian Highest
Product pom name org.apiguardian:apiguardian-api High
Product pom url apiguardian-team/apiguardian High
Version file version 1.1.2 High
Version Manifest Bundle-Version 1.1.2 High
Version Manifest Implementation-Version 1.1.2 High
Version pom version 1.1.2 Highest
pkg:maven/org.apiguardian/apiguardian-api@1.1.2
(Confidence :High)
asm-9.8.jar
Description:
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.8/asm-9.8.jar
MD5: f5adf3bfc54fb3d2cd8e3a1f275084bc
SHA1: dc19ecb3f7889b7860697215cae99c0f9b6f6b4b
SHA256: 876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
asm-9.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence
Vendor file name asm High
Vendor jar package name asm Highest
Vendor jar package name objectweb Highest
Vendor Manifest bundle-docurl http://asm.ow2.org Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.objectweb.asm Medium
Vendor pom artifactid asm Highest
Vendor pom artifactid asm Low
Vendor pom developer email ebruneton@free.fr Low
Vendor pom developer email eu@javatx.org Low
Vendor pom developer email forax@univ-mlv.fr Low
Vendor pom developer id ebruneton Medium
Vendor pom developer id eu Medium
Vendor pom developer id forax Medium
Vendor pom developer name Eric Bruneton Medium
Vendor pom developer name Eugene Kuleshov Medium
Vendor pom developer name Remi Forax Medium
Vendor pom groupid org.ow2.asm Highest
Vendor pom name asm High
Vendor pom organization name OW2 High
Vendor pom organization url http://www.ow2.org/ Medium
Vendor pom parent-artifactid ow2 Low
Vendor pom parent-groupid org.ow2 Medium
Vendor pom url http://asm.ow2.io/ Highest
Product file name asm High
Product jar package name asm Highest
Product jar package name objectweb Highest
Product Manifest bundle-docurl http://asm.ow2.org Low
Product Manifest Bundle-Name org.objectweb.asm Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.objectweb.asm Medium
Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High
Product pom artifactid asm Highest
Product pom developer email ebruneton@free.fr Low
Product pom developer email eu@javatx.org Low
Product pom developer email forax@univ-mlv.fr Low
Product pom developer id ebruneton Low
Product pom developer id eu Low
Product pom developer id forax Low
Product pom developer name Eric Bruneton Low
Product pom developer name Eugene Kuleshov Low
Product pom developer name Remi Forax Low
Product pom groupid org.ow2.asm Highest
Product pom name asm High
Product pom organization name OW2 Low
Product pom organization url http://www.ow2.org/ Low
Product pom parent-artifactid ow2 Medium
Product pom parent-groupid org.ow2 Medium
Product pom url http://asm.ow2.io/ Medium
Version file version 9.8 High
Version Manifest Bundle-Version 9.8 High
Version Manifest Implementation-Version 9.8 High
Version pom parent-version 9.8 Low
Version pom version 9.8 Highest
pkg:maven/org.ow2.asm/asm@9.8
(Confidence :High)
checker-qual-4.2.2.jar
Description:
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.
License:
The MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/4.2.2/checker-qual-4.2.2.jar
MD5: eda3b189b1db96113420aead434c441a
SHA1: 93b7afd8c171f5dc73a2b10f3412930d95bf777f
SHA256: 4efb9d11ecde9b8b79eca8a132f65162866f28733ee681748f0e7d1cebfa01d7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
checker-qual-4.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name checker-qual High
Vendor jar package name checker Highest
Vendor jar package name checkerframework Highest
Vendor jar package name framework Highest
Vendor jar package name qual Highest
Vendor Manifest bundle-symbolicname checker-qual Medium
Vendor Manifest implementation-url https://checkerframework.org Low
Vendor pom artifactid checker-qual Highest
Vendor pom artifactid checker-qual Low
Vendor pom developer email mernst@cs.washington.edu Low
Vendor pom developer email smillst@cs.washington.edu Low
Vendor pom developer id mernst Medium
Vendor pom developer id smillst Medium
Vendor pom developer name Michael Ernst Medium
Vendor pom developer name Suzanne Millstein Medium
Vendor pom developer org University of Washington Medium
Vendor pom developer org URL https://www.cs.washington.edu/ Medium
Vendor pom groupid org.checkerframework Highest
Vendor pom name Checker Qual High
Vendor pom url https://checkerframework.org/ Highest
Product file name checker-qual High
Product jar package name checker Highest
Product jar package name checkerframework Highest
Product jar package name framework Highest
Product jar package name qual Highest
Product Manifest Bundle-Name checker-qual Medium
Product Manifest bundle-symbolicname checker-qual Medium
Product Manifest implementation-url https://checkerframework.org Low
Product pom artifactid checker-qual Highest
Product pom developer email mernst@cs.washington.edu Low
Product pom developer email smillst@cs.washington.edu Low
Product pom developer id mernst Low
Product pom developer id smillst Low
Product pom developer name Michael Ernst Low
Product pom developer name Suzanne Millstein Low
Product pom developer org University of Washington Low
Product pom developer org URL https://www.cs.washington.edu/ Low
Product pom groupid org.checkerframework Highest
Product pom name Checker Qual High
Product pom url https://checkerframework.org/ Medium
Version file version 4.2.2 High
Version Manifest Bundle-Version 4.2.2 High
Version Manifest Implementation-Version 4.2.2 High
Version pom version 4.2.2 Highest
pkg:maven/org.checkerframework/checker-qual@4.2.2
(Confidence :High)
commons-beanutils-1.11.0.jar
Description:
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256: 9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.opencsv/opencsv@5.12.0
Evidence
Type Source Name Value Confidence
Vendor file name commons-beanutils High
Vendor jar package name apache Highest
Vendor jar package name beanutils Highest
Vendor jar package name commons Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-beanutils Highest
Vendor pom artifactid commons-beanutils Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email craigmcc@apache.org Low
Vendor pom developer email dion@apache.org Low
Vendor pom developer email epugh@apache.org Low
Vendor pom developer email geirm@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jcarman@apache.org Low
Vendor pom developer email jconlon@apache.org Low
Vendor pom developer email jstrachan@apache.org Low
Vendor pom developer email morgand@apache.org Low
Vendor pom developer email mvdb@apache.org Low
Vendor pom developer email niallp@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer email scolebourne@apache.org Low
Vendor pom developer email skitching@apache.org Low
Vendor pom developer email stain@apache.org Low
Vendor pom developer email tobrien@apache.org Low
Vendor pom developer email yoavs@apache.org Low
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dion Medium
Vendor pom developer id epugh Medium
Vendor pom developer id geirm Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id jconlon Medium
Vendor pom developer id jstrachan Medium
Vendor pom developer id morgand Medium
Vendor pom developer id mvdb Medium
Vendor pom developer id niallp Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer id skitching Medium
Vendor pom developer id stain Medium
Vendor pom developer id tobrien Medium
Vendor pom developer id yoavs Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name David Eric Pugh Medium
Vendor pom developer name Dion Gillard Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Geir Magnusson Jr. Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name James Strachan Medium
Vendor pom developer name John E. Conlon Medium
Vendor pom developer name Martin van den Bemt Medium
Vendor pom developer name Morgan James Delagrange Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Simon Kitching Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Stian Soiland-Reyes Medium
Vendor pom developer name Tim O'Brien Medium
Vendor pom developer name Yoav Shapira Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-beanutils Highest
Vendor pom name Apache Commons BeanUtils High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-beanutils Highest
Product file name commons-beanutils High
Product jar package name apache Highest
Product jar package name beanutils Highest
Product jar package name commons Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low
Product Manifest Bundle-Name Apache Commons BeanUtils Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium
Product Manifest Implementation-Title Apache Commons BeanUtils High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons BeanUtils Medium
Product pom artifactid commons-beanutils Highest
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email craigmcc@apache.org Low
Product pom developer email dion@apache.org Low
Product pom developer email epugh@apache.org Low
Product pom developer email geirm@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jcarman@apache.org Low
Product pom developer email jconlon@apache.org Low
Product pom developer email jstrachan@apache.org Low
Product pom developer email morgand@apache.org Low
Product pom developer email mvdb@apache.org Low
Product pom developer email niallp@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer email scolebourne@apache.org Low
Product pom developer email skitching@apache.org Low
Product pom developer email stain@apache.org Low
Product pom developer email tobrien@apache.org Low
Product pom developer email yoavs@apache.org Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id craigmcc Low
Product pom developer id dion Low
Product pom developer id epugh Low
Product pom developer id geirm Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id jconlon Low
Product pom developer id jstrachan Low
Product pom developer id morgand Low
Product pom developer id mvdb Low
Product pom developer id niallp Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id scolebourne Low
Product pom developer id skitching Low
Product pom developer id stain Low
Product pom developer id tobrien Low
Product pom developer id yoavs Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Craig McClanahan Low
Product pom developer name David Eric Pugh Low
Product pom developer name Dion Gillard Low
Product pom developer name Gary Gregory Low
Product pom developer name Geir Magnusson Jr. Low
Product pom developer name James Carman Low
Product pom developer name James Strachan Low
Product pom developer name John E. Conlon Low
Product pom developer name Martin van den Bemt Low
Product pom developer name Morgan James Delagrange Low
Product pom developer name Niall Pemberton Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Simon Kitching Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Stian Soiland-Reyes Low
Product pom developer name Tim O'Brien Low
Product pom developer name Yoav Shapira Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-beanutils Highest
Product pom name Apache Commons BeanUtils High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-beanutils Medium
Version file version 1.11.0 High
Version Manifest Bundle-Version 1.11.0 High
Version Manifest Implementation-Version 1.11.0 High
Version pom parent-version 1.11.0 Low
Version pom version 1.11.0 Highest
commons-collections-3.2.2.jar
Description:
Types that extend and augment the Java Collections Framework.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256: eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.opencsv/opencsv@5.12.0
Evidence
Type Source Name Value Confidence
Vendor file name commons-collections High
Vendor jar package name apache Highest
Vendor jar package name collections Highest
Vendor jar package name commons Highest
Vendor Manifest bundle-docurl http://commons.apache.org/collections/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.collections Medium
Vendor Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low
Vendor Manifest implementation-url http://commons.apache.org/collections/ Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-collections Highest
Vendor pom artifactid commons-collections Low
Vendor pom developer id amamment Medium
Vendor pom developer id bayard Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id geirm Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id matth Medium
Vendor pom developer id morgand Medium
Vendor pom developer id psteitz Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer name Arun M. Thomas Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name Matthew Hawthorne Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Phil Steitz Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom groupid commons-collections Highest
Vendor pom name Apache Commons Collections High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url http://commons.apache.org/collections/ Highest
Product file name commons-collections High
Product jar package name apache Highest
Product jar package name collections Highest
Product jar package name commons Highest
Product Manifest bundle-docurl http://commons.apache.org/collections/ Low
Product Manifest Bundle-Name Apache Commons Collections Medium
Product Manifest bundle-symbolicname org.apache.commons.collections Medium
Product Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low
Product Manifest Implementation-Title Apache Commons Collections High
Product Manifest implementation-url http://commons.apache.org/collections/ Low
Product Manifest specification-title Apache Commons Collections Medium
Product pom artifactid commons-collections Highest
Product pom developer id amamment Low
Product pom developer id bayard Low
Product pom developer id craigmcc Low
Product pom developer id geirm Low
Product pom developer id jcarman Low
Product pom developer id matth Low
Product pom developer id morgand Low
Product pom developer id psteitz Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id scolebourne Low
Product pom developer name Arun M. Thomas Low
Product pom developer name Craig McClanahan Low
Product pom developer name Geir Magnusson Low
Product pom developer name Henri Yandell Low
Product pom developer name James Carman Low
Product pom developer name Matthew Hawthorne Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Phil Steitz Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Stephen Colebourne Low
Product pom groupid commons-collections Highest
Product pom name Apache Commons Collections High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url http://commons.apache.org/collections/ Medium
Version file version 3.2.2 High
Version Manifest Bundle-Version 3.2.2 High
Version Manifest Implementation-Version 3.2.2 High
Version pom parent-version 3.2.2 Low
Version pom version 3.2.2 Highest
commons-collections4-4.5.0.jar
Description:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-collections4/4.5.0/commons-collections4-4.5.0.jar
MD5: d564105594035b363b193d8ce3c18b98
SHA1: e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a
SHA256: 00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-collections4-4.5.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.opencsv/opencsv@5.12.0
Evidence
Type Source Name Value Confidence
Vendor file name commons-collections4 High
Vendor jar package name apache Highest
Vendor jar package name collections4 Highest
Vendor jar package name commons Highest
Vendor Manifest automatic-module-name org.apache.commons.collections4 Medium
Vendor Manifest build-jdk-spec 23 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-collections4 Highest
Vendor pom artifactid commons-collections4 Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer id adriannistor Medium
Vendor pom developer id amamment Medium
Vendor pom developer id bayard Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dlaha Medium
Vendor pom developer id geirm Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id luc Medium
Vendor pom developer id matth Medium
Vendor pom developer id mbenson Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer id tn Medium
Vendor pom developer name Adrian Nistor Medium
Vendor pom developer name Arun M. Thomas Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dipanjan Laha Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name Luc Maisonobe Medium
Vendor pom developer name Matt Benson Medium
Vendor pom developer name Matthew Hawthorne Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Collections High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-collections/ Highest
Product file name commons-collections4 High
Product jar package name apache Highest
Product jar package name collections4 Highest
Product jar package name commons Highest
Product Manifest automatic-module-name org.apache.commons.collections4 Medium
Product Manifest build-jdk-spec 23 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low
Product Manifest Bundle-Name Apache Commons Collections Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium
Product Manifest Implementation-Title Apache Commons Collections High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Collections Medium
Product pom artifactid commons-collections4 Highest
Product pom developer email ggregory at apache.org Low
Product pom developer id adriannistor Low
Product pom developer id amamment Low
Product pom developer id bayard Low
Product pom developer id chtompki Low
Product pom developer id craigmcc Low
Product pom developer id dlaha Low
Product pom developer id geirm Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id luc Low
Product pom developer id matth Low
Product pom developer id mbenson Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id scolebourne Low
Product pom developer id tn Low
Product pom developer name Adrian Nistor Low
Product pom developer name Arun M. Thomas Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dipanjan Laha Low
Product pom developer name Gary Gregory Low
Product pom developer name Geir Magnusson Low
Product pom developer name Henri Yandell Low
Product pom developer name James Carman Low
Product pom developer name Luc Maisonobe Low
Product pom developer name Matt Benson Low
Product pom developer name Matthew Hawthorne Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Thomas Neidhart Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Collections High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-collections/ Medium
Version file version 4.5.0 High
Version Manifest Bundle-Version 4.5.0 High
Version Manifest Implementation-Version 4.5.0 High
Version pom parent-version 4.5.0 Low
Version pom version 4.5.0 Highest
commons-io-2.21.0.jar
Description:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-io/commons-io/2.21.0/commons-io-2.21.0.jar
MD5: bc7e020873f086ede85f97bd9f013215
SHA1: 52a6f68fe5afe335cde95461dd5c3412f04996f7
SHA256: 7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-io-2.21.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name commons-io High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name file Highest
Vendor jar package name io Highest
Vendor Manifest automatic-module-name org.apache.commons.io Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-io Medium
Vendor Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-io Highest
Vendor pom artifactid commons-io Low
Vendor pom developer email bayard@apache.org Low
Vendor pom developer email dion@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jeremias@apache.org Low
Vendor pom developer email jochen.wiedmann@gmail.com Low
Vendor pom developer email krosenvold@apache.org Low
Vendor pom developer email martinc@apache.org Low
Vendor pom developer email matth@apache.org Low
Vendor pom developer email nicolaken@apache.org Low
Vendor pom developer email roxspring@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer id bayard Medium
Vendor pom developer id dion Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jeremias Medium
Vendor pom developer id jochen Medium
Vendor pom developer id jukka Medium
Vendor pom developer id krosenvold Medium
Vendor pom developer id martinc Medium
Vendor pom developer id matth Medium
Vendor pom developer id niallp Medium
Vendor pom developer id nicolaken Medium
Vendor pom developer id roxspring Medium
Vendor pom developer id sanders Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer name dIon Gillard Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name Jeremias Maerki Medium
Vendor pom developer name Jochen Wiedmann Medium
Vendor pom developer name Jukka Zitting Medium
Vendor pom developer name Kristian Rosenvold Medium
Vendor pom developer name Martin Cooper Medium
Vendor pom developer name Matthew Hawthorne Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Nicola Ken Barozzi Medium
Vendor pom developer name Rob Oxspring Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-io Highest
Vendor pom name Apache Commons IO High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-io/ Highest
Product file name commons-io High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name file Highest
Product jar package name io Highest
Product Manifest automatic-module-name org.apache.commons.io Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low
Product Manifest Bundle-Name Apache Commons IO Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-io Medium
Product Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low
Product Manifest Implementation-Title Apache Commons IO High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons IO Medium
Product pom artifactid commons-io Highest
Product pom developer email bayard@apache.org Low
Product pom developer email dion@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jeremias@apache.org Low
Product pom developer email jochen.wiedmann@gmail.com Low
Product pom developer email krosenvold@apache.org Low
Product pom developer email martinc@apache.org Low
Product pom developer email matth@apache.org Low
Product pom developer email nicolaken@apache.org Low
Product pom developer email roxspring@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer id bayard Low
Product pom developer id dion Low
Product pom developer id ggregory Low
Product pom developer id jeremias Low
Product pom developer id jochen Low
Product pom developer id jukka Low
Product pom developer id krosenvold Low
Product pom developer id martinc Low
Product pom developer id matth Low
Product pom developer id niallp Low
Product pom developer id nicolaken Low
Product pom developer id roxspring Low
Product pom developer id sanders Low
Product pom developer id scolebourne Low
Product pom developer name dIon Gillard Low
Product pom developer name Gary Gregory Low
Product pom developer name Henri Yandell Low
Product pom developer name Jeremias Maerki Low
Product pom developer name Jochen Wiedmann Low
Product pom developer name Jukka Zitting Low
Product pom developer name Kristian Rosenvold Low
Product pom developer name Martin Cooper Low
Product pom developer name Matthew Hawthorne Low
Product pom developer name Niall Pemberton Low
Product pom developer name Nicola Ken Barozzi Low
Product pom developer name Rob Oxspring Low
Product pom developer name Scott Sanders Low
Product pom developer name Stephen Colebourne Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-io Highest
Product pom name Apache Commons IO High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-io/ Medium
Version file version 2.21.0 High
Version Manifest Bundle-Version 2.21.0 High
Version Manifest Implementation-Version 2.21.0 High
Version pom parent-version 2.21.0 Low
Version pom version 2.21.0 Highest
commons-lang3-3.20.0.jar
Description:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
The code is tested using the latest revision of the JDK for supported
LTS releases: 8, 11, 17, 21 and 25 currently.
See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
Please ensure your build environment is up-to-date and kindly report any build issues.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256: 69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.opencsv/opencsv@5.12.0
Evidence
Type Source Name Value Confidence
Vendor file name commons-lang3 High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name lang3 Highest
Vendor Manifest automatic-module-name org.apache.commons.lang3 Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-lang3 Highest
Vendor pom artifactid commons-lang3 Low
Vendor pom developer email bayard@apache.org Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email djones@apache.org Low
Vendor pom developer email dlr@finemaltcoding.com Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jcarman@apache.org Low
Vendor pom developer email joerg.schaible@gmx.de Low
Vendor pom developer email lguibert@apache.org Low
Vendor pom developer email oheger@apache.org Low
Vendor pom developer email pbenedict@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email scolebourne@joda.org Low
Vendor pom developer email stevencaswell@apache.org Low
Vendor pom developer id bayard Medium
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id djones Medium
Vendor pom developer id dlr Medium
Vendor pom developer id fredrik Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id joehni Medium
Vendor pom developer id lguibert Medium
Vendor pom developer id mbenson Medium
Vendor pom developer id niallp Medium
Vendor pom developer id oheger Medium
Vendor pom developer id pbenedict Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id scaswell Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Daniel Rall Medium
Vendor pom developer name Duncan Jones Medium
Vendor pom developer name Fredrik Westermarck Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name Joerg Schaible Medium
Vendor pom developer name Loic Guibert Medium
Vendor pom developer name Matt Benson Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Oliver Heger Medium
Vendor pom developer name Paul Benedict Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Steven Caswell Medium
Vendor pom developer org Carman Consulting, Inc. Medium
Vendor pom developer org CollabNet, Inc. Medium
Vendor pom developer org SITA ATS Ltd Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Lang High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-lang/ Highest
Product file name commons-lang3 High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name lang3 Highest
Product Manifest automatic-module-name org.apache.commons.lang3 Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low
Product Manifest Bundle-Name Apache Commons Lang Medium
Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium
Product Manifest Implementation-Title Apache Commons Lang High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Lang Medium
Product pom artifactid commons-lang3 Highest
Product pom developer email bayard@apache.org Low
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email djones@apache.org Low
Product pom developer email dlr@finemaltcoding.com Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jcarman@apache.org Low
Product pom developer email joerg.schaible@gmx.de Low
Product pom developer email lguibert@apache.org Low
Product pom developer email oheger@apache.org Low
Product pom developer email pbenedict@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email scolebourne@joda.org Low
Product pom developer email stevencaswell@apache.org Low
Product pom developer id bayard Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id djones Low
Product pom developer id dlr Low
Product pom developer id fredrik Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id joehni Low
Product pom developer id lguibert Low
Product pom developer id mbenson Low
Product pom developer id niallp Low
Product pom developer id oheger Low
Product pom developer id pbenedict Low
Product pom developer id rdonkin Low
Product pom developer id scaswell Low
Product pom developer id scolebourne Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Daniel Rall Low
Product pom developer name Duncan Jones Low
Product pom developer name Fredrik Westermarck Low
Product pom developer name Gary Gregory Low
Product pom developer name Henri Yandell Low
Product pom developer name James Carman Low
Product pom developer name Joerg Schaible Low
Product pom developer name Loic Guibert Low
Product pom developer name Matt Benson Low
Product pom developer name Niall Pemberton Low
Product pom developer name Oliver Heger Low
Product pom developer name Paul Benedict Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Steven Caswell Low
Product pom developer org Carman Consulting, Inc. Low
Product pom developer org CollabNet, Inc. Low
Product pom developer org SITA ATS Ltd Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Lang High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-lang/ Medium
Version file version 3.20.0 High
Version Manifest Bundle-Version 3.20.0 High
Version Manifest Implementation-Version 3.20.0 High
Version pom parent-version 3.20.0 Low
Version pom version 3.20.0 Highest
commons-logging-1.3.5.jar
Description:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256: 6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-logging-1.3.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence
Vendor file name commons-logging High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name logging Highest
Vendor Manifest automatic-module-name org.apache.commons.logging Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-logging Highest
Vendor pom artifactid commons-logging Low
Vendor pom developer email baliuka@apache.org Low
Vendor pom developer email costin@apache.org Low
Vendor pom developer email craigmcc@apache.org Low
Vendor pom developer email dennisl@apache.org Low
Vendor pom developer email donaldp@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email morgand@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email rsitze@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer email skitching@apache.org Low
Vendor pom developer email tn@apache.org Low
Vendor pom developer id baliuka Medium
Vendor pom developer id bstansberry Medium
Vendor pom developer id costin Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dennisl Medium
Vendor pom developer id donaldp Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rsitze Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id skitching Medium
Vendor pom developer id tn Medium
Vendor pom developer name Brian Stansberry Medium
Vendor pom developer name Costin Manolache Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dennis Lundberg Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Juozas Baliuka Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Peter Donald Medium
Vendor pom developer name Richard Sitze Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Simon Kitching Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom developer org Apache Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-logging Highest
Vendor pom name Apache Commons Logging High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-logging/ Highest
Product file name commons-logging High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name logging Highest
Product Manifest automatic-module-name org.apache.commons.logging Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Product Manifest Bundle-Name Apache Commons Logging Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Product Manifest Implementation-Title Apache Commons Logging High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Logging Medium
Product pom artifactid commons-logging Highest
Product pom developer email baliuka@apache.org Low
Product pom developer email costin@apache.org Low
Product pom developer email craigmcc@apache.org Low
Product pom developer email dennisl@apache.org Low
Product pom developer email donaldp@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email morgand@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email rsitze@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer email skitching@apache.org Low
Product pom developer email tn@apache.org Low
Product pom developer id baliuka Low
Product pom developer id bstansberry Low
Product pom developer id costin Low
Product pom developer id craigmcc Low
Product pom developer id dennisl Low
Product pom developer id donaldp Low
Product pom developer id ggregory Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rsitze Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id skitching Low
Product pom developer id tn Low
Product pom developer name Brian Stansberry Low
Product pom developer name Costin Manolache Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dennis Lundberg Low
Product pom developer name Gary Gregory Low
Product pom developer name Juozas Baliuka Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Peter Donald Low
Product pom developer name Richard Sitze Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Simon Kitching Low
Product pom developer name Thomas Neidhart Low
Product pom developer org Apache Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-logging Highest
Product pom name Apache Commons Logging High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-logging/ Medium
Version file version 1.3.5 High
Version Manifest Bundle-Version 1.3.5 High
Version Manifest Implementation-Version 1.3.5 High
Version pom parent-version 1.3.5 Low
Version pom version 1.3.5 Highest
pkg:maven/commons-logging/commons-logging@1.3.5
(Confidence :High)
commons-pool-1.5.4.jar
Description:
Commons Object Pooling Library
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
MD5: 80e9d1cbd70542f4f293793d109679a9
SHA1: 75b6e20c596ed2945a259cea26d7fadd298398e6
SHA256: 22095672ac3ad6503e42ec6d4cbc330cd1318040223f6c5d9605473b6d2aa0fd
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-pool-1.5.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name commons-pool High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name pool Highest
Vendor Manifest bundle-docurl http://commons.apache.org/pool/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.pool Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-pool Highest
Vendor pom artifactid commons-pool Low
Vendor pom developer id craigmcc Medium
Vendor pom developer id dirkv Medium
Vendor pom developer id dweinr1 Medium
Vendor pom developer id geirm Medium
Vendor pom developer id morgand Medium
Vendor pom developer id psteitz Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sandymac Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name David Weinrich Medium
Vendor pom developer name Dirk Verbeeck Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Phil Steitz Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Sandy McArthur Medium
Vendor pom developer org Apache Software Foundation Medium
Vendor pom groupid commons-pool Highest
Vendor pom name Commons Pool High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url http://commons.apache.org/pool/ Highest
Product file name commons-pool High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name pool Highest
Product Manifest bundle-docurl http://commons.apache.org/pool/ Low
Product Manifest Bundle-Name Commons Pool Medium
Product Manifest bundle-symbolicname org.apache.commons.pool Medium
Product Manifest Implementation-Title Commons Pool High
Product Manifest specification-title Commons Pool Medium
Product pom artifactid commons-pool Highest
Product pom developer id craigmcc Low
Product pom developer id dirkv Low
Product pom developer id dweinr1 Low
Product pom developer id geirm Low
Product pom developer id morgand Low
Product pom developer id psteitz Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id sandymac Low
Product pom developer name Craig McClanahan Low
Product pom developer name David Weinrich Low
Product pom developer name Dirk Verbeeck Low
Product pom developer name Geir Magnusson Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Phil Steitz Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Sandy McArthur Low
Product pom developer org Apache Software Foundation Low
Product pom groupid commons-pool Highest
Product pom name Commons Pool High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url http://commons.apache.org/pool/ Medium
Version file version 1.5.4 High
Version Manifest Bundle-Version 1.5.4 High
Version Manifest Implementation-Version 1.5.4 High
Version pom parent-version 1.5.4 Low
Version pom version 1.5.4 Highest
pkg:maven/commons-pool/commons-pool@1.5.4
(Confidence :High)
commons-text-1.13.1.jar
Description:
Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
and manipulating text that should be of use in a Java environment.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.13.1/commons-text-1.13.1.jar
MD5: 15f58ad641b4e9fd3c8bfa0f766300a2
SHA1: 088b9f76d465e35a06cd439ddcb8190ff182931e
SHA256: 76434bd2dd778ab140d84b3c6ffa40c40fe6219909f5ed1d8b8977c5ae8e50c8
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
commons-text-1.13.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.opencsv/opencsv@5.12.0
Evidence
Type Source Name Value Confidence
Vendor file name commons-text High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name text Highest
Vendor Manifest automatic-module-name org.apache.commons.text Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low
Vendor Manifest bundle-symbolicname org.apache.commons.text Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-text Highest
Vendor pom artifactid commons-text Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email djones@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email kinow@apache.org Low
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id djones Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id kinow Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Bruno P. Kinoshita Medium
Vendor pom developer name Duncan Jones Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Text High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-text Highest
Product file name commons-text High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name text Highest
Product Manifest automatic-module-name org.apache.commons.text Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low
Product Manifest Bundle-Name Apache Commons Text Medium
Product Manifest bundle-symbolicname org.apache.commons.text Medium
Product Manifest Implementation-Title Apache Commons Text High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Text Medium
Product pom artifactid commons-text Highest
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email djones@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email kinow@apache.org Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id djones Low
Product pom developer id ggregory Low
Product pom developer id kinow Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Bruno P. Kinoshita Low
Product pom developer name Duncan Jones Low
Product pom developer name Gary Gregory Low
Product pom developer name Rob Tompkins Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Text High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-text Medium
Version file version 1.13.1 High
Version Manifest Bundle-Version 1.13.1 High
Version Manifest Implementation-Version 1.13.1 High
Version pom parent-version 1.13.1 Low
Version pom version 1.13.1 Highest
dbunit-3.5.1.jar
Description:
dbUnit is a JUnit extension (also usable from Ant and Maven) targeted for database-driven projects that, among other things, puts your database into a known state between test runs. This is an excellent way to avoid the myriad of problems that can occur when one test case corrupts the database and causes subsequent tests to fail or exacerbate the damage.
License:
GNU Lesser General Public License, Version 2.1: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.txt
File Path: /home/runner/.m2/repository/org/dbunit/dbunit/3.5.1/dbunit-3.5.1.jar
MD5: 63eebc0f6454c795314ecefe47a20204
SHA1: bde41373e419b1cce4a0168432d00d6bd8c87726
SHA256: 21a1b97d59d77a2b932601c07c688c23fb90b2712a590e9b056dfc85a6591a84
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
dbunit-3.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name dbunit High
Vendor jar package name ant Highest
Vendor jar package name database Highest
Vendor jar package name dbunit Highest
Vendor jar package name junit Highest
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid dbunit Highest
Vendor pom artifactid dbunit Low
Vendor pom developer email dbunit@felipeal.net Low
Vendor pom developer email epugh@opensourceconnections.com Low
Vendor pom developer email f.spinazzi@masterhouse.it Low
Vendor pom developer email gommma@users.sourceforge.net Low
Vendor pom developer email jbhurst@users.sourceforge.net Low
Vendor pom developer email jeffjensen@users.sourceforge.net Low
Vendor pom developer email quantas@users.sourceforge.net Low
Vendor pom developer email rlogiacco@users.sourceforge.net Low
Vendor pom developer email slecallonnec@users.sourceforge.net Low
Vendor pom developer id bdrum Medium
Vendor pom developer id dep4b Medium
Vendor pom developer id felipeal Medium
Vendor pom developer id fspinazzi Medium
Vendor pom developer id gommma Medium
Vendor pom developer id jbhurst Medium
Vendor pom developer id jeffjensen Medium
Vendor pom developer id mlaflamm Medium
Vendor pom developer id quantas Medium
Vendor pom developer id rlogiacco Medium
Vendor pom developer id slecallonnec Medium
Vendor pom developer id zieggy Medium
Vendor pom developer name Andrew Landsverk Medium
Vendor pom developer name Benjamin Cox Medium
Vendor pom developer name David Eric Pugh Medium
Vendor pom developer name Federico Spinazzi Medium
Vendor pom developer name Felipe Leme Medium
Vendor pom developer name Jeff Jensen Medium
Vendor pom developer name John Hurst Medium
Vendor pom developer name Manuel Laflamme Medium
Vendor pom developer name Matthias Gommeringer Medium
Vendor pom developer name Roberto Lo Giacco Medium
Vendor pom developer name Sebastien Le Callonnec Medium
Vendor pom developer name Timothy J. Ruppert Medium
Vendor pom developer org GoldenGate Software Medium
Vendor pom developer org Master House S.r.l Medium
Vendor pom developer org OpenSource Connections Medium
Vendor pom developer org Oz Communication Medium
Vendor pom developer org SmartLab Medium
Vendor pom groupid org.dbunit Highest
Vendor pom name dbUnit Extension High
Vendor pom url dbunit/dbunit-extension Highest
Product file name dbunit High
Product jar package name ant Highest
Product jar package name database Highest
Product jar package name dbunit Highest
Product jar package name junit Highest
Product Manifest build-jdk-spec 25 Low
Product pom artifactid dbunit Highest
Product pom developer email dbunit@felipeal.net Low
Product pom developer email epugh@opensourceconnections.com Low
Product pom developer email f.spinazzi@masterhouse.it Low
Product pom developer email gommma@users.sourceforge.net Low
Product pom developer email jbhurst@users.sourceforge.net Low
Product pom developer email jeffjensen@users.sourceforge.net Low
Product pom developer email quantas@users.sourceforge.net Low
Product pom developer email rlogiacco@users.sourceforge.net Low
Product pom developer email slecallonnec@users.sourceforge.net Low
Product pom developer id bdrum Low
Product pom developer id dep4b Low
Product pom developer id felipeal Low
Product pom developer id fspinazzi Low
Product pom developer id gommma Low
Product pom developer id jbhurst Low
Product pom developer id jeffjensen Low
Product pom developer id mlaflamm Low
Product pom developer id quantas Low
Product pom developer id rlogiacco Low
Product pom developer id slecallonnec Low
Product pom developer id zieggy Low
Product pom developer name Andrew Landsverk Low
Product pom developer name Benjamin Cox Low
Product pom developer name David Eric Pugh Low
Product pom developer name Federico Spinazzi Low
Product pom developer name Felipe Leme Low
Product pom developer name Jeff Jensen Low
Product pom developer name John Hurst Low
Product pom developer name Manuel Laflamme Low
Product pom developer name Matthias Gommeringer Low
Product pom developer name Roberto Lo Giacco Low
Product pom developer name Sebastien Le Callonnec Low
Product pom developer name Timothy J. Ruppert Low
Product pom developer org GoldenGate Software Low
Product pom developer org Master House S.r.l Low
Product pom developer org OpenSource Connections Low
Product pom developer org Oz Communication Low
Product pom developer org SmartLab Low
Product pom groupid org.dbunit Highest
Product pom name dbUnit Extension High
Product pom url dbunit/dbunit-extension High
Version file version 3.5.1 High
Version pom version 3.5.1 Highest
pkg:maven/org.dbunit/dbunit@3.5.1
(Confidence :High)
cpe:2.3:a:golden_project:golden:3.5.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
ejml-core-0.41.jar
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-core/0.41/ejml-core-0.41.jar
MD5: 200146f623a8eb87196bbc35cae6c2b1
SHA1: 92ac2bee332a5697c42e576b94d563ba8c25877c
SHA256: 8d36469e8414d79c875defc0af3b980525d384761c9471d15a4f365b936dd1d5
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
ejml-core-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name ejml-core High
Vendor jar package name ejml Highest
Vendor jar package name ejml Low
Vendor jar package name matrix Highest
Vendor jar package name sparse Highest
Vendor pom artifactid ejml-core Highest
Vendor pom artifactid ejml-core Low
Vendor pom developer email peter.abeles@gmail.com Low
Vendor pom developer id pabeles Medium
Vendor pom developer name Peter Abeles Medium
Vendor pom groupid org.ejml Highest
Vendor pom name EJML High
Vendor pom url http://ejml.org/ Highest
Product file name ejml-core High
Product jar package name ejml Highest
Product jar package name matrix Highest
Product jar package name sparse Highest
Product pom artifactid ejml-core Highest
Product pom developer email peter.abeles@gmail.com Low
Product pom developer id pabeles Low
Product pom developer name Peter Abeles Low
Product pom groupid org.ejml Highest
Product pom name EJML High
Product pom url http://ejml.org/ Medium
Version file version 0.41 High
Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-core@0.41
(Confidence :High)
ejml-ddense-0.41.jar
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-ddense/0.41/ejml-ddense-0.41.jar
MD5: 2128d09683d0ed77429fac23f64e42c7
SHA1: 782c80d4c3c8a3432c4641f24c177f336a360f9c
SHA256: 355347e9cac7e96d5d724d331a9b04bb14a8a02e1d111f1ac51c79f25d937123
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
ejml-ddense-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name ejml-ddense High
Vendor jar package name dense Highest
Vendor jar package name dense Low
Vendor jar package name ejml Highest
Vendor jar package name ejml Low
Vendor jar package name row Low
Vendor pom artifactid ejml-ddense Highest
Vendor pom artifactid ejml-ddense Low
Vendor pom developer email peter.abeles@gmail.com Low
Vendor pom developer id pabeles Medium
Vendor pom developer name Peter Abeles Medium
Vendor pom groupid org.ejml Highest
Vendor pom name EJML High
Vendor pom url http://ejml.org/ Highest
Product file name ejml-ddense High
Product jar package name dense Highest
Product jar package name dense Low
Product jar package name ejml Highest
Product jar package name row Low
Product pom artifactid ejml-ddense Highest
Product pom developer email peter.abeles@gmail.com Low
Product pom developer id pabeles Low
Product pom developer name Peter Abeles Low
Product pom groupid org.ejml Highest
Product pom name EJML High
Product pom url http://ejml.org/ Medium
Version file version 0.41 High
Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-ddense@0.41
(Confidence :High)
geolatte-geom-1.11.jar
Description:
This geoLatte-geom library offers a geometry model that conforms to the OGC Simple Features for SQL
specification.
License:
LGPL 3.0: http://www.gnu.org/licenses/lgpl-3.0.txt
File Path: /home/runner/.m2/repository/org/geolatte/geolatte-geom/1.11/geolatte-geom-1.11.jar
MD5: 9c382d6307b7f3efde171fdb9860382d
SHA1: fcd0b4abded49e544b6d86042afc95889718f6c8
SHA256: 0a9ca5c9551bc56c5f6212a015e723aecbf73d9800a19f1d9ab7706bb07b3eda
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
geolatte-geom-1.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-spatial@7.4.5.Final
Evidence
Type Source Name Value Confidence
Vendor file name geolatte-geom High
Vendor jar package name geolatte Highest
Vendor jar package name geom Highest
Vendor jar package name geometry Highest
Vendor jar package name simple Highest
Vendor Manifest automatic-module-name org.geolatte.geom Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid geolatte-geom Highest
Vendor pom artifactid geolatte-geom Low
Vendor pom groupid org.geolatte Highest
Vendor pom name geolatte-geom High
Vendor pom parent-artifactid geolatte Low
Vendor pom url geolatte/geolatte-geom Highest
Product file name geolatte-geom High
Product jar package name geolatte Highest
Product jar package name geom Highest
Product jar package name geometry Highest
Product jar package name simple Highest
Product Manifest automatic-module-name org.geolatte.geom Medium
Product Manifest build-jdk-spec 17 Low
Product pom artifactid geolatte-geom Highest
Product pom groupid org.geolatte Highest
Product pom name geolatte-geom High
Product pom parent-artifactid geolatte Medium
Product pom url geolatte/geolatte-geom High
Version file version 1.11 High
Version pom version 1.11 Highest
pkg:maven/org.geolatte/geolatte-geom@1.11
(Confidence :High)
gt-api-35.1.jar
Description:
Standard interfaces implemented throughout the library.
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/gt-api/35.1/gt-api-35.1.jar
MD5: 74bda6e7edf744739ce47a9b2504eaba
SHA1: c2eb8d6e8e88c9834316e712eda63e49af1ce2d0
SHA256: c35112630513d378e50ef6024319451e92d99bf9d25b7eb85d7e56404cf3fdf0
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
gt-api-35.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name gt-api High
Vendor jar package name api Highest
Vendor jar package name geotools Highest
Vendor Manifest automatic-module-name org.geotools.api Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 14-Aug-2026 15:09 Low
Vendor Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Vendor pom artifactid gt-api Highest
Vendor pom artifactid gt-api Low
Vendor pom developer email aaime@users.sourceforge.net Low
Vendor pom developer email jive@users.sourceforge.net Low
Vendor pom developer id aaime Medium
Vendor pom developer id jive Medium
Vendor pom developer name Andrea Aime Medium
Vendor pom developer name Jody Garnett Medium
Vendor pom developer org Refractions Research Medium
Vendor pom groupid org.geotools Highest
Vendor pom name GeoTools Interfaces High
Vendor pom parent-artifactid library Low
Product file name gt-api High
Product jar package name api Highest
Product jar package name geotools Highest
Product Manifest automatic-module-name org.geotools.api Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 14-Aug-2026 15:09 Low
Product Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Product pom artifactid gt-api Highest
Product pom developer email aaime@users.sourceforge.net Low
Product pom developer email jive@users.sourceforge.net Low
Product pom developer id aaime Low
Product pom developer id jive Low
Product pom developer name Andrea Aime Low
Product pom developer name Jody Garnett Low
Product pom developer org Refractions Research Low
Product pom groupid org.geotools Highest
Product pom name GeoTools Interfaces High
Product pom parent-artifactid library Medium
Version file version 35.1 High
Version Manifest project-version 35.1 Medium
Version pom version 35.1 Highest
Related Dependencies
gt-http-35.1.jar
File Path: /home/runner/.m2/repository/org/geotools/gt-http/35.1/gt-http-35.1.jar
MD5: de39d040e3f09e5cfba30cb623e298b9
SHA1: d9afa478bb92106c8c841ee4fe350386ea072397
SHA256: 3100cfe1f456f703528c89978c8d2ae7519f9784aeed8aa5a2d4dbad93bca135
pkg:maven/org.geotools/gt-http@35.1
gt-main-35.1.jar
File Path: /home/runner/.m2/repository/org/geotools/gt-main/35.1/gt-main-35.1.jar
MD5: 1278db5b8030ca083b9e054287e32915
SHA1: 57cb4f43ef8fbb0e5577807b9fa90899507fa9d6
SHA256: c165ec6a268ae8d31d58cafd9e042c53583b111e90345da0eed53727807bdef8
pkg:maven/org.geotools/gt-main@35.1
gt-metadata-35.1.jar
File Path: /home/runner/.m2/repository/org/geotools/gt-metadata/35.1/gt-metadata-35.1.jar
MD5: 645698dd60f8705b47a5cc758d527532
SHA1: 2986d0a03f67045df7486fa6e2a8a581f0561a04
SHA256: 18d77f61eddf8ce9293dcb98083638c318ce76c1d3cb504e199251a5495cf77e
pkg:maven/org.geotools/gt-metadata@35.1
gt-referencing-35.1.jar
File Path: /home/runner/.m2/repository/org/geotools/gt-referencing/35.1/gt-referencing-35.1.jar
MD5: f220a8b4d1a70db0b00daa6fe5a00754
SHA1: a27a7f214b42d587169220b8709bf3b02dd7a7ab
SHA256: add5f25dddddd51b70bea5fad185300a0443520541c28d773eb9c8c09b001405
pkg:maven/org.geotools/gt-referencing@35.1
gt-shapefile-35.1.jar
File Path: /home/runner/.m2/repository/org/geotools/gt-shapefile/35.1/gt-shapefile-35.1.jar
MD5: 76c4444d653a283a1e80db215be5ba29
SHA1: 6af2fdec08e26c02813099caa52eb4b78ef1975b
SHA256: f5db6433dcba8258bf4462a8b706d27630fe253cec95d559797322c0319b13d9
pkg:maven/org.geotools/gt-shapefile@35.1
gt-xml-35.1.jar
Description:
GTXML Schema Driven Parser
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/gt-xml/35.1/gt-xml-35.1.jar
MD5: 5f8230978514ce2296599110e4f0989a
SHA1: dd23051bd2ad77eae729fd2923f90e40ecb47f26
SHA256: b2ff9837553173b3172a4972652553c428c41f1e0a624ebdfe41ff3be8436864
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
gt-xml-35.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name gt-xml High
Vendor jar package name geotools Highest
Vendor jar package name schema Highest
Vendor jar package name xml Highest
Vendor Manifest automatic-module-name org.geotools.xml Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 14-Aug-2026 15:09 Low
Vendor Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Vendor pom artifactid gt-xml Highest
Vendor pom artifactid gt-xml Low
Vendor pom developer email jdeolive@users.sourceforge.net Low
Vendor pom developer email jive@users.sourceforge.net Low
Vendor pom developer name Jody Garnett Medium
Vendor pom developer name Justin Deoliveira Medium
Vendor pom developer org Refractions Research Medium
Vendor pom developer org The Open Planning Project Medium
Vendor pom groupid org.geotools Highest
Vendor pom name XML Parsing Support High
Vendor pom parent-artifactid library Low
Product file name gt-xml High
Product jar package name geotools Highest
Product jar package name schema Highest
Product jar package name xml Highest
Product Manifest automatic-module-name org.geotools.xml Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 14-Aug-2026 15:09 Low
Product Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Product pom artifactid gt-xml Highest
Product pom developer email jdeolive@users.sourceforge.net Low
Product pom developer email jive@users.sourceforge.net Low
Product pom developer name Jody Garnett Low
Product pom developer name Justin Deoliveira Low
Product pom developer org Refractions Research Low
Product pom developer org The Open Planning Project Low
Product pom groupid org.geotools Highest
Product pom name XML Parsing Support High
Product pom parent-artifactid library Medium
Version file version 35.1 High
Version Manifest project-version 35.1 Medium
Version pom version 35.1 Highest
hibernate-spatial-7.4.5.Final.jar
Description:
Integrate support for Spatial/GIS data into Hibernate O/RM
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-spatial/7.4.5.Final/hibernate-spatial-7.4.5.Final.jar
MD5: 32f88357385425268d562c7d47a67ba9
SHA1: f0134905d66642b79c3c51095e05d50c22326aa0
SHA256: c245abeb6c4e59d83c2a004db73c9edd7c6dda105f2de5e6933efe6883db33b9
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
hibernate-spatial-7.4.5.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name hibernate-spatial High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name hibernate Highest
Vendor jar package name spatial Highest
Vendor Manifest automatic-module-name org.hibernate.orm.spatial Medium
Vendor Manifest bundle-docurl https://hibernate.org/orm/releases/7.4 Low
Vendor Manifest bundle-symbolicname org.hibernate.orm.spatial Medium
Vendor Manifest implementation-url https://hibernate.org/orm Low
Vendor Manifest Implementation-Vendor Hibernate.org High
Vendor Manifest Implementation-Vendor-Id org.hibernate Medium
Vendor Manifest specification-vendor Hibernate.org Low
Vendor pom artifactid hibernate-spatial Highest
Vendor pom artifactid hibernate-spatial Low
Vendor pom developer id hibernate-team Medium
Vendor pom developer name The Hibernate Development Team Medium
Vendor pom developer org Hibernate.org Medium
Vendor pom developer org URL https://hibernate.org Medium
Vendor pom groupid org.hibernate.orm Highest
Vendor pom name Hibernate ORM - hibernate-spatial High
Vendor pom organization name Hibernate.org High
Vendor pom organization url https://hibernate.org Medium
Vendor pom url https://hibernate.org/orm Highest
Product file name hibernate-spatial High
Product jar package name hibernate Highest
Product jar package name spatial Highest
Product Manifest automatic-module-name org.hibernate.orm.spatial Medium
Product Manifest bundle-docurl https://hibernate.org/orm/releases/7.4 Low
Product Manifest Bundle-Name hibernate-spatial Medium
Product Manifest bundle-symbolicname org.hibernate.orm.spatial Medium
Product Manifest Implementation-Title hibernate-spatial High
Product Manifest implementation-url https://hibernate.org/orm Low
Product Manifest specification-title hibernate-spatial Medium
Product pom artifactid hibernate-spatial Highest
Product pom developer id hibernate-team Low
Product pom developer name The Hibernate Development Team Low
Product pom developer org Hibernate.org Low
Product pom developer org URL https://hibernate.org Low
Product pom groupid org.hibernate.orm Highest
Product pom name Hibernate ORM - hibernate-spatial High
Product pom organization name Hibernate.org Low
Product pom organization url https://hibernate.org Low
Product pom url https://hibernate.org/orm Medium
Version Manifest Bundle-Version 7.4.5.Final High
Version Manifest Implementation-Version 7.4.5.Final High
Version pom version 7.4.5.Final Highest
imagen-core-0.9.2.jar
Description:
ImageN core interfaces
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-core/0.9.2/imagen-core-0.9.2.jar
MD5: fe6e70629b37a85e322fe0b2f76e604c
SHA1: 4c5e4aaed41957d17743178e4ead3c5940065fb1
SHA256: 0afb30cf57d9eb211fe762ae00fe602d81040c9a189cbe8289a70b45815d7747
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
imagen-core-0.9.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name imagen-core High
Vendor jar package name eclipse Highest
Vendor jar package name imagen Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid imagen-core Highest
Vendor pom artifactid imagen-core Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name imagen-core High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product Manifest build-jdk-spec 17 Low
Product pom artifactid imagen-core Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.2 High
Version pom version 0.9.2 Highest
pkg:maven/org.eclipse.imagen/imagen-core@0.9.2
(Confidence :High)
indriya-2.2.jar
Description:
Unit Standard (JSR 385) Reference Implementation.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/tech/units/indriya/2.2/indriya-2.2.jar
MD5: cefa3a26996e4c70071d27a0c36603ea
SHA1: 647a0e06d60346f3f3c48284f66d34b28ff83340
SHA256: 5b61eafd63fd235898dea0e5e614e9636c9d7783705a0c9f1794dd07e3a84b35
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
indriya-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name indriya High
Vendor jar package name indriya Highest
Vendor jar package name tech Highest
Vendor jar package name unit Highest
Vendor jar package name units Highest
Vendor Manifest automatic-module-name tech.units.indriya Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Vendor Manifest bundle-symbolicname tech.units.indriya Medium
Vendor Manifest implementation-url http://units.tech Low
Vendor Manifest Implementation-Vendor Units of Measurement project High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Vendor pom artifactid indriya Highest
Vendor pom artifactid indriya Low
Vendor pom developer email jean-marie@dautelle.com Low
Vendor pom developer email martin.desruisseaux@geomatys.com Low
Vendor pom developer email otaviopolianasantana@gmail.com Low
Vendor pom developer email werner.keil@gmx.net Low
Vendor pom developer id dautelle Medium
Vendor pom developer id desruisseaux Medium
Vendor pom developer id keilw Medium
Vendor pom developer id otaviojava Medium
Vendor pom developer name Jean-Marie Dautelle Medium
Vendor pom developer name Martin Desruisseaux Medium
Vendor pom developer name Otávio Gonçalves de Santana Medium
Vendor pom developer name Werner Keil Medium
Vendor pom developer org Airbus Medium
Vendor pom developer org Creative Arts & Technologies Medium
Vendor pom developer org Geomatys Medium
Vendor pom developer org Individual / SouJava Medium
Vendor pom developer org URL http://www.airbus.com Medium
Vendor pom developer org URL http://www.catmedia.us Medium
Vendor pom developer org URL http://www.geomatys.com Medium
Vendor pom groupid tech.units Highest
Vendor pom name Units of Measurement Reference Implementation High
Vendor pom organization name Units of Measurement project High
Vendor pom organization url http://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-parent Low
Vendor pom parent-groupid tech.uom Medium
Vendor pom url http://units.tech Highest
Product file name indriya High
Product jar package name indriya Highest
Product jar package name tech Highest
Product jar package name unit Highest
Product jar package name units Highest
Product Manifest automatic-module-name tech.units.indriya Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Product Manifest Bundle-Name Units of Measurement Reference Implementation Medium
Product Manifest bundle-symbolicname tech.units.indriya Medium
Product Manifest Implementation-Title Units of Measurement Reference Implementation High
Product Manifest implementation-url http://units.tech Low
Product Manifest multi-release true Low
Product Manifest specification-title Unit API Medium
Product pom artifactid indriya Highest
Product pom developer email jean-marie@dautelle.com Low
Product pom developer email martin.desruisseaux@geomatys.com Low
Product pom developer email otaviopolianasantana@gmail.com Low
Product pom developer email werner.keil@gmx.net Low
Product pom developer id dautelle Low
Product pom developer id desruisseaux Low
Product pom developer id keilw Low
Product pom developer id otaviojava Low
Product pom developer name Jean-Marie Dautelle Low
Product pom developer name Martin Desruisseaux Low
Product pom developer name Otávio Gonçalves de Santana Low
Product pom developer name Werner Keil Low
Product pom developer org Airbus Low
Product pom developer org Creative Arts & Technologies Low
Product pom developer org Geomatys Low
Product pom developer org Individual / SouJava Low
Product pom developer org URL http://www.airbus.com Low
Product pom developer org URL http://www.catmedia.us Low
Product pom developer org URL http://www.geomatys.com Low
Product pom groupid tech.units Highest
Product pom name Units of Measurement Reference Implementation High
Product pom organization name Units of Measurement project Low
Product pom organization url http://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-parent Medium
Product pom parent-groupid tech.uom Medium
Product pom url http://units.tech Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/tech.units/indriya@2.2
(Confidence :High)
iterators-0.9.2.jar
File Path: /home/runner/.m2/repository/org/eclipse/imagen/iterators/0.9.2/iterators-0.9.2.jar
MD5: 9aa1fca185385f821e87414df9e15d84
SHA1: 70e3c216ebf2eefa13bf9e85c0d382fc06814c9c
SHA256: 7efc9adf7dbe44f9de2187c1428d9bc645c58bd68698322e51e2d0589b7369cc
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
iterators-0.9.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name iterators High
Vendor jar package name eclipse Highest
Vendor jar package name imagen Highest
Vendor jar package name iterators Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid iterators Highest
Vendor pom artifactid iterators Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name iterators High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product jar package name iterators Highest
Product Manifest build-jdk-spec 17 Low
Product pom artifactid iterators Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.2 High
Version pom version 0.9.2 Highest
pkg:maven/org.eclipse.imagen/iterators@0.9.2
(Confidence :High)
jackson-core-3.2.0.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-core/3.2.0/jackson-core-3.2.0.jar
MD5: f14bb53e35ab1a789de27b7bb463f4f5
SHA1: ebf2fc67340907abfc4891ed74ba4c4419e2b47e
SHA256: 5e353ce53c6901105dfcbf183e3220c17072e334e552b818a4bb1b99decea596
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jackson-core-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name core Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor jar package name tools Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom developer email tatu@fasterxml.com Low
Vendor pom developer id cowtowncoder Medium
Vendor pom developer name Tatu Saloranta Medium
Vendor pom groupid tools.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid tools.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product jar package name 17 Highest
Product jar package name base Highest
Product jar package name core Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product jar package name tools Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom developer email tatu@fasterxml.com Low
Product pom developer id cowtowncoder Low
Product pom developer name Tatu Saloranta Low
Product pom groupid tools.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid tools.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 3.2.0 High
Version Manifest Bundle-Version 3.2.0 High
Version Manifest Implementation-Version 3.2.0 High
Version pom version 3.2.0 Highest
jakarta.annotation-api-3.0.0.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256: b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-jpa@4.1.0
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.annotation-api High
Vendor jar package name annotation Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 18 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium
Vendor Manifest extension-name jakarta.annotation Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.annotation-api Highest
Vendor pom artifactid jakarta.annotation-api Low
Vendor pom developer name Dmitry Kornilov Medium
Vendor pom developer name Linda De Michiel Medium
Vendor pom developer org Oracle Corp. Medium
Vendor pom groupid jakarta.annotation Highest
Vendor pom name Jakarta Annotations API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest
Product file name jakarta.annotation-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 18 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Annotations API Medium
Product Manifest bundle-symbolicname jakarta.annotation-api Medium
Product Manifest extension-name jakarta.annotation Medium
Product pom artifactid jakarta.annotation-api Highest
Product pom developer name Dmitry Kornilov Low
Product pom developer name Linda De Michiel Low
Product pom developer org Oracle Corp. Low
Product pom groupid jakarta.annotation Highest
Product pom name Jakarta Annotations API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium
Version file version 3.0.0 High
Version Manifest Bundle-Version 3.0.0 High
Version Manifest Implementation-Version 3.0.0 High
Version pom parent-version 3.0.0 Low
Version pom version 3.0.0 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0
(Confidence :High)
jakarta.inject-api-2.0.1.jar
Description:
Jakarta Dependency Injection
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256: f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.5.Final
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.inject-api High
Vendor jar package name inject Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium
Vendor pom artifactid jakarta.inject-api Highest
Vendor pom artifactid jakarta.inject-api Low
Vendor pom developer email asd[at]redhat[dot]com Low
Vendor pom developer email manovotn[at]redhat[dot]com Low
Vendor pom developer email mkouba[at]redhat[dot]com Low
Vendor pom developer email tremes[at]redhat[dot]com Low
Vendor pom developer id asabotdu Medium
Vendor pom developer id manovotn Medium
Vendor pom developer id mkouba Medium
Vendor pom developer id tremes Medium
Vendor pom developer name Antoine Sabot-Durand Medium
Vendor pom developer name Martin Kouba Medium
Vendor pom developer name Matej Novotny Medium
Vendor pom developer name Tomas Remes Medium
Vendor pom developer org Red Hat Inc. Medium
Vendor pom groupid jakarta.inject Highest
Vendor pom name Jakarta Dependency Injection High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url eclipse-ee4j/injection-api Highest
Product file name jakarta.inject-api High
Product jar package name inject Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Dependency Injection Medium
Product Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium
Product pom artifactid jakarta.inject-api Highest
Product pom developer email asd[at]redhat[dot]com Low
Product pom developer email manovotn[at]redhat[dot]com Low
Product pom developer email mkouba[at]redhat[dot]com Low
Product pom developer email tremes[at]redhat[dot]com Low
Product pom developer id asabotdu Low
Product pom developer id manovotn Low
Product pom developer id mkouba Low
Product pom developer id tremes Low
Product pom developer name Antoine Sabot-Durand Low
Product pom developer name Martin Kouba Low
Product pom developer name Matej Novotny Low
Product pom developer name Tomas Remes Low
Product pom developer org Red Hat Inc. Low
Product pom groupid jakarta.inject Highest
Product pom name Jakarta Dependency Injection High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url eclipse-ee4j/injection-api High
Version file version 2.0.1 High
Version Manifest Bundle-Version 2.0.1 High
Version pom parent-version 2.0.1 Low
Version pom version 2.0.1 Highest
pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1
(Confidence :High)
jakarta.persistence-api-3.2.0.jar
Description:
Jakarta Persistence 3.2 API jar
License:
Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.2.0/jakarta.persistence-api-3.2.0.jar
MD5: 79acec18d202797dcba1fff596a47684
SHA1: bb75a113f3fa191c2c7ee7b206d8e674251b3129
SHA256: be8a26b0e75c84c1b7600f759256fbc68d60333d89ec0ce3f784fc3ffa09aa8c
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jakarta.persistence-api-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.persistence-api High
Vendor jar package name jakarta Highest
Vendor jar package name persistence Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.persistence-api Medium
Vendor Manifest extension-name jakarta.persistence Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.persistence-api Highest
Vendor pom artifactid jakarta.persistence-api Low
Vendor pom developer id lukasj Medium
Vendor pom developer name Lukas Jungmann Medium
Vendor pom developer org Oracle, Inc. Medium
Vendor pom groupid jakarta.persistence Highest
Vendor pom name Jakarta Persistence API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url jakartaee/persistence Highest
Product file name jakarta.persistence-api High
Product jar package name jakarta Highest
Product jar package name persistence Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Persistence API jar Medium
Product Manifest bundle-symbolicname jakarta.persistence-api Medium
Product Manifest extension-name jakarta.persistence Medium
Product pom artifactid jakarta.persistence-api Highest
Product pom developer id lukasj Low
Product pom developer name Lukas Jungmann Low
Product pom developer org Oracle, Inc. Low
Product pom groupid jakarta.persistence Highest
Product pom name Jakarta Persistence API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url jakartaee/persistence High
Version file version 3.2.0 High
Version Manifest Bundle-Version 3.2.0 High
Version Manifest Implementation-Version 3.2.0 High
Version pom parent-version 3.2.0 Low
Version pom version 3.2.0 Highest
pkg:maven/jakarta.persistence/jakarta.persistence-api@3.2.0
(Confidence :High)
jboss-logging-3.6.1.Final.jar
Description:
The JBoss Logging Framework
License:
Apache License 2.0: https://repository.jboss.org/licenses/apache-2.0.txt
File Path: /home/runner/.m2/repository/org/jboss/logging/jboss-logging/3.6.1.Final/jboss-logging-3.6.1.Final.jar
MD5: acab989faf62db02c092448e95614fab
SHA1: 886afbb445b4016a37c8960a7aef6ebd769ce7e5
SHA256: 5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416
Referenced In Project/Scope: RealLifeDeveloper Build Tools:runtime
jboss-logging-3.6.1.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-spatial@7.4.5.Final
Evidence
Type Source Name Value Confidence
Vendor file name jboss-logging High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name jboss Highest
Vendor jar package name logging Highest
Vendor Manifest automatic-module-name org.jboss.logging Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.jboss.org Low
Vendor Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium
Vendor Manifest implementation-url http://www.jboss.org Low
Vendor Manifest Implementation-Vendor JBoss by Red Hat High
Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low
Vendor Manifest os-arch amd64 Low
Vendor Manifest os-name Linux Medium
Vendor Manifest specification-vendor JBoss by Red Hat Low
Vendor pom artifactid jboss-logging Highest
Vendor pom artifactid jboss-logging Low
Vendor pom groupid org.jboss.logging Highest
Vendor pom name JBoss Logging 3 High
Vendor pom parent-artifactid logging-parent Low
Vendor pom url http://www.jboss.org Highest
Product file name jboss-logging High
Product jar package name jboss Highest
Product jar package name logging Highest
Product Manifest automatic-module-name org.jboss.logging Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.jboss.org Low
Product Manifest Bundle-Name JBoss Logging 3 Medium
Product Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium
Product Manifest Implementation-Title JBoss Logging 3 High
Product Manifest implementation-url http://www.jboss.org Low
Product Manifest originally-created-by Apache Maven Bundle Plugin Low
Product Manifest os-arch amd64 Low
Product Manifest os-name Linux Medium
Product Manifest specification-title JBoss Logging 3 Medium
Product pom artifactid jboss-logging Highest
Product pom groupid org.jboss.logging Highest
Product pom name JBoss Logging 3 High
Product pom parent-artifactid logging-parent Medium
Product pom url http://www.jboss.org Medium
Version Manifest Bundle-Version 3.6.1.Final High
Version Manifest Implementation-Version 3.6.1.Final High
Version pom parent-version 3.6.1.Final Low
Version pom version 3.6.1.Final Highest
pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final
(Confidence :High)
jgridshift-core-1.3.jar
File Path: /home/runner/.m2/repository/it/geosolutions/jgridshift/jgridshift-core/1.3/jgridshift-core-1.3.jar
MD5: 04a57b57bb0654b3d603eaaa748de563
SHA1: 314702a7b6e634e1c74589983a6762974b9c51c8
SHA256: 303eb6a6f6f87369f6b9e3dcacefd6f9b0ad55920cd65a7f162ab9a23401c722
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jgridshift-core-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name jgridshift-core High
Vendor jar package name au Low
Vendor jar package name com Low
Vendor jar package name jgridshift Highest
Vendor jar package name objectix Low
Vendor pom artifactid jgridshift-core Highest
Vendor pom artifactid jgridshift-core Low
Vendor pom groupid it.geosolutions.jgridshift Highest
Vendor pom parent-artifactid jgridshift Low
Product file name jgridshift-core High
Product jar package name com Low
Product jar package name jgridshift Highest
Product jar package name jgridshift Low
Product jar package name objectix Low
Product pom artifactid jgridshift-core Highest
Product pom groupid it.geosolutions.jgridshift Highest
Product pom parent-artifactid jgridshift Medium
Version file version 1.3 High
Version pom version 1.3 Highest
pkg:maven/it.geosolutions.jgridshift/jgridshift-core@1.3
(Confidence :High)
jspecify-1.0.1.jar
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.1/jspecify-1.0.1.jar
MD5: d4fe1ea4d953b66fcb1d6043c22bffcf
SHA1: 3d60fd98eb8ade73004f4195c37b6317e02cf3d7
SHA256: 070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jspecify-1.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
Evidence
Type Source Name Value Confidence
Vendor file name jspecify High
Vendor jar package name annotations Highest
Vendor jar package name jspecify Highest
Vendor Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Vendor Manifest bundle-symbolicname org.jspecify.jspecify Medium
Vendor pom artifactid jspecify Highest
Vendor pom artifactid jspecify Low
Vendor pom developer email cpovirk@google.com Low
Vendor pom developer email dpb@google.com Low
Vendor pom developer email kevinb9n@gmail.com Low
Vendor pom developer id cpovirk Medium
Vendor pom developer id kevinb9n Medium
Vendor pom developer id netdpb Medium
Vendor pom developer name Chris Povirk Medium
Vendor pom developer name David P. Baker Medium
Vendor pom developer name Kevin Bourrillion Medium
Vendor pom developer org Google Medium
Vendor pom groupid org.jspecify Highest
Vendor pom name JSpecify annotations High
Vendor pom url https://jspecify.dev/ Highest
Product file name jspecify High
Product jar package name annotations Highest
Product jar package name jspecify Highest
Product Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Product Manifest Bundle-Name JSpecify annotations Medium
Product Manifest bundle-symbolicname org.jspecify.jspecify Medium
Product pom artifactid jspecify Highest
Product pom developer email cpovirk@google.com Low
Product pom developer email dpb@google.com Low
Product pom developer email kevinb9n@gmail.com Low
Product pom developer id cpovirk Low
Product pom developer id kevinb9n Low
Product pom developer id netdpb Low
Product pom developer name Chris Povirk Low
Product pom developer name David P. Baker Low
Product pom developer name Kevin Bourrillion Low
Product pom developer org Google Low
Product pom groupid org.jspecify Highest
Product pom name JSpecify annotations High
Product pom url https://jspecify.dev/ Medium
Version file version 1.0.1 High
Version Manifest Bundle-Version 1.0.1 High
Version Manifest Implementation-Version 1.0.1 High
Version pom version 1.0.1 Highest
pkg:maven/org.jspecify/jspecify@1.0.1
(Confidence :High)
cpe:2.3:a:google:gmail:1.0.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jsr305-3.0.2.jar
Description:
JSR305 Annotations for Findbugs
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
Evidence
Type Source Name Value Confidence
Vendor file name jsr305 High
Vendor Manifest bundle-symbolicname org.jsr-305 Medium
Vendor pom artifactid jsr305 Highest
Vendor pom artifactid jsr305 Low
Vendor pom groupid com.google.code.findbugs Highest
Vendor pom name FindBugs-jsr305 High
Vendor pom url http://findbugs.sourceforge.net/ Highest
Product file name jsr305 High
Product Manifest Bundle-Name FindBugs-jsr305 Medium
Product Manifest bundle-symbolicname org.jsr-305 Medium
Product pom artifactid jsr305 Highest
Product pom groupid com.google.code.findbugs Highest
Product pom name FindBugs-jsr305 High
Product pom url http://findbugs.sourceforge.net/ Medium
Version file version 3.0.2 High
Version Manifest Bundle-Version 3.0.2 High
Version pom version 3.0.2 Highest
pkg:maven/com.google.code.findbugs/jsr305@3.0.2
(Confidence :High)
jts-core-1.19.0.jar
Description:
The JTS Topology Suite is an API for 2D linear geometry predicates and functions.
License:
https://github.com/locationtech/jts/blob/master/LICENSE_EPLv2.txt, https://github.com/locationtech/jts/blob/master/LICENSE_EDLv1.txt
File Path: /home/runner/.m2/repository/org/locationtech/jts/jts-core/1.19.0/jts-core-1.19.0.jar
MD5: a3b90d76c097fd275fbbf22f8e3cde6b
SHA1: 3ff3baa0074445384f9e0068df81fbd0a168395a
SHA256: dbb8644cf324123d06c27aa982f570811e10b4cb1f2aef893b00de237d33efc0
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
jts-core-1.19.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-spatial@7.4.5.Final
Evidence
Type Source Name Value Confidence
Vendor file name jts-core High
Vendor jar package name jts Highest
Vendor jar package name locationtech Highest
Vendor Manifest automatic-module-name org.locationtech.jts Medium
Vendor Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium
Vendor pom artifactid jts-core Highest
Vendor pom artifactid jts-core Low
Vendor pom groupid org.locationtech.jts Highest
Vendor pom name : High
Vendor pom parent-artifactid jts-modules Low
Product file name jts-core High
Product jar package name geometry Highest
Product jar package name jts Highest
Product jar package name locationtech Highest
Product Manifest automatic-module-name org.locationtech.jts Medium
Product Manifest Bundle-Name jts-core Medium
Product Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium
Product pom artifactid jts-core Highest
Product pom groupid org.locationtech.jts Highest
Product pom name : High
Product pom parent-artifactid jts-modules Medium
Version file version 1.19.0 High
Version Manifest Bundle-Version 1.19.0 High
Version pom version 1.19.0 Highest
pkg:maven/org.locationtech.jts/jts-core@1.19.0
(Confidence :High)
junit-jupiter-api-6.1.3.jar
Description:
Module "junit-jupiter-api" of JUnit
License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html
File Path: /home/runner/.m2/repository/org/junit/jupiter/junit-jupiter-api/6.1.3/junit-jupiter-api-6.1.3.jar
MD5: 662a5b10a1bbb2e3192790351d67d269
SHA1: 6a57f0ce4d6bfe9784d103077055ba39f3e6f638
SHA256: 555d6cf20fa1710884dd01b86cc5785397ba73e21ada2d4b784f5f1a14dcafc4
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
junit-jupiter-api-6.1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name junit-jupiter-api High
Vendor jar package name api Highest
Vendor jar package name junit Highest
Vendor jar package name jupiter Highest
Vendor Manifest build-date 2026-08-07 Low
Vendor Manifest build-revision f59f60d2cebdf2224235d81f781b1f310cbc8138 Low
Vendor Manifest build-time 14:25:13.673+0200 Low
Vendor Manifest bundle-symbolicname junit-jupiter-api Medium
Vendor Manifest Implementation-Vendor junit.org High
Vendor Manifest specification-vendor junit.org Low
Vendor pom artifactid junit-jupiter-api Highest
Vendor pom artifactid junit-jupiter-api Low
Vendor pom developer email business@johanneslink.net Low
Vendor pom developer email derancourt.juliette@gmail.com Low
Vendor pom developer email mail@marcphilipp.de Low
Vendor pom developer email matthias.merdes@heidelpay.com Low
Vendor pom developer email mpkorstanje@junit.org Low
Vendor pom developer email sam@sambrannen.com Low
Vendor pom developer email sormuras@gmail.com Low
Vendor pom developer email stefan.bechtold@me.com Low
Vendor pom developer id bechte Medium
Vendor pom developer id jlink Medium
Vendor pom developer id juliette-derancourt Medium
Vendor pom developer id marcphilipp Medium
Vendor pom developer id mmerdes Medium
Vendor pom developer id mpkorstanje Medium
Vendor pom developer id sbrannen Medium
Vendor pom developer id sormuras Medium
Vendor pom developer name Christian Stein Medium
Vendor pom developer name Johannes Link Medium
Vendor pom developer name Juliette de Rancourt Medium
Vendor pom developer name M.P. Korstanje Medium
Vendor pom developer name Marc Philipp Medium
Vendor pom developer name Matthias Merdes Medium
Vendor pom developer name Sam Brannen Medium
Vendor pom developer name Stefan Bechtold Medium
Vendor pom groupid org.junit.jupiter Highest
Vendor pom name JUnit Jupiter API High
Vendor pom url https://junit.org/ Highest
Product file name junit-jupiter-api High
Product jar package name api Highest
Product jar package name junit Highest
Product jar package name jupiter Highest
Product Manifest build-date 2026-08-07 Low
Product Manifest build-revision f59f60d2cebdf2224235d81f781b1f310cbc8138 Low
Product Manifest build-time 14:25:13.673+0200 Low
Product Manifest Bundle-Name JUnit Jupiter API Medium
Product Manifest bundle-symbolicname junit-jupiter-api Medium
Product Manifest Implementation-Title junit-jupiter-api High
Product Manifest specification-title junit-jupiter-api Medium
Product pom artifactid junit-jupiter-api Highest
Product pom developer email business@johanneslink.net Low
Product pom developer email derancourt.juliette@gmail.com Low
Product pom developer email mail@marcphilipp.de Low
Product pom developer email matthias.merdes@heidelpay.com Low
Product pom developer email mpkorstanje@junit.org Low
Product pom developer email sam@sambrannen.com Low
Product pom developer email sormuras@gmail.com Low
Product pom developer email stefan.bechtold@me.com Low
Product pom developer id bechte Low
Product pom developer id jlink Low
Product pom developer id juliette-derancourt Low
Product pom developer id marcphilipp Low
Product pom developer id mmerdes Low
Product pom developer id mpkorstanje Low
Product pom developer id sbrannen Low
Product pom developer id sormuras Low
Product pom developer name Christian Stein Low
Product pom developer name Johannes Link Low
Product pom developer name Juliette de Rancourt Low
Product pom developer name M.P. Korstanje Low
Product pom developer name Marc Philipp Low
Product pom developer name Matthias Merdes Low
Product pom developer name Sam Brannen Low
Product pom developer name Stefan Bechtold Low
Product pom groupid org.junit.jupiter Highest
Product pom name JUnit Jupiter API High
Product pom url https://junit.org/ Medium
Version file version 6.1.3 High
Version Manifest Bundle-Version 6.1.3 High
Version Manifest Implementation-Version 6.1.3 High
Version pom version 6.1.3 Highest
pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
(Confidence :High)
junit-platform-commons-6.1.3.jar
Description:
Module "junit-platform-commons" of JUnit
License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html
File Path: /home/runner/.m2/repository/org/junit/platform/junit-platform-commons/6.1.3/junit-platform-commons-6.1.3.jar
MD5: 481a56275fe36dc163df005113a39f44
SHA1: acb99d3482ea51fcbcc4f6ea8672761e2b3d5bb7
SHA256: a4774ae923c109544034aeae7c762cf017fbcdd1342403ba90e0921984b608c3
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
junit-platform-commons-6.1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
Evidence
Type Source Name Value Confidence
Vendor file name junit-platform-commons High
Vendor jar package name commons Highest
Vendor jar package name junit Highest
Vendor jar package name platform Highest
Vendor Manifest build-date 2026-08-07 Low
Vendor Manifest build-revision f59f60d2cebdf2224235d81f781b1f310cbc8138 Low
Vendor Manifest build-time 14:25:13.673+0200 Low
Vendor Manifest bundle-symbolicname junit-platform-commons Medium
Vendor Manifest Implementation-Vendor junit.org High
Vendor Manifest specification-vendor junit.org Low
Vendor pom artifactid junit-platform-commons Highest
Vendor pom artifactid junit-platform-commons Low
Vendor pom developer email business@johanneslink.net Low
Vendor pom developer email derancourt.juliette@gmail.com Low
Vendor pom developer email mail@marcphilipp.de Low
Vendor pom developer email matthias.merdes@heidelpay.com Low
Vendor pom developer email mpkorstanje@junit.org Low
Vendor pom developer email sam@sambrannen.com Low
Vendor pom developer email sormuras@gmail.com Low
Vendor pom developer email stefan.bechtold@me.com Low
Vendor pom developer id bechte Medium
Vendor pom developer id jlink Medium
Vendor pom developer id juliette-derancourt Medium
Vendor pom developer id marcphilipp Medium
Vendor pom developer id mmerdes Medium
Vendor pom developer id mpkorstanje Medium
Vendor pom developer id sbrannen Medium
Vendor pom developer id sormuras Medium
Vendor pom developer name Christian Stein Medium
Vendor pom developer name Johannes Link Medium
Vendor pom developer name Juliette de Rancourt Medium
Vendor pom developer name M.P. Korstanje Medium
Vendor pom developer name Marc Philipp Medium
Vendor pom developer name Matthias Merdes Medium
Vendor pom developer name Sam Brannen Medium
Vendor pom developer name Stefan Bechtold Medium
Vendor pom groupid org.junit.platform Highest
Vendor pom name JUnit Platform Commons High
Vendor pom url https://junit.org/ Highest
Product file name junit-platform-commons High
Product jar package name commons Highest
Product jar package name junit Highest
Product jar package name platform Highest
Product Manifest build-date 2026-08-07 Low
Product Manifest build-revision f59f60d2cebdf2224235d81f781b1f310cbc8138 Low
Product Manifest build-time 14:25:13.673+0200 Low
Product Manifest Bundle-Name JUnit Platform Commons Medium
Product Manifest bundle-symbolicname junit-platform-commons Medium
Product Manifest Implementation-Title junit-platform-commons High
Product Manifest specification-title junit-platform-commons Medium
Product pom artifactid junit-platform-commons Highest
Product pom developer email business@johanneslink.net Low
Product pom developer email derancourt.juliette@gmail.com Low
Product pom developer email mail@marcphilipp.de Low
Product pom developer email matthias.merdes@heidelpay.com Low
Product pom developer email mpkorstanje@junit.org Low
Product pom developer email sam@sambrannen.com Low
Product pom developer email sormuras@gmail.com Low
Product pom developer email stefan.bechtold@me.com Low
Product pom developer id bechte Low
Product pom developer id jlink Low
Product pom developer id juliette-derancourt Low
Product pom developer id marcphilipp Low
Product pom developer id mmerdes Low
Product pom developer id mpkorstanje Low
Product pom developer id sbrannen Low
Product pom developer id sormuras Low
Product pom developer name Christian Stein Low
Product pom developer name Johannes Link Low
Product pom developer name Juliette de Rancourt Low
Product pom developer name M.P. Korstanje Low
Product pom developer name Marc Philipp Low
Product pom developer name Matthias Merdes Low
Product pom developer name Sam Brannen Low
Product pom developer name Stefan Bechtold Low
Product pom groupid org.junit.platform Highest
Product pom name JUnit Platform Commons High
Product pom url https://junit.org/ Medium
Version file version 6.1.3 High
Version Manifest Bundle-Version 6.1.3 High
Version Manifest Implementation-Version 6.1.3 High
Version pom version 6.1.3 Highest
pkg:maven/org.junit.platform/junit-platform-commons@6.1.3
(Confidence :High)
cpe:2.3:a:fan_platform_project:fan_platform:6.1.3:*:*:*:*:*:*:*
(Confidence :Low)
suppress
logback-core-1.6.3.jar
Description:
logback-core module
License:
https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.6.3/logback-core-1.6.3.jar
MD5: 6d741138bccf87bb512572c44cc7f43f
SHA1: ae9a279c723035307735fc4daf527a9076ea3f77
SHA256: a6967a28c8b086dee75a694d2f6fb8830c71153539866d7d8af065c9b6df91e0
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
logback-core-1.6.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/ch.qos.logback/logback-classic@1.6.3
Evidence
Type Source Name Value Confidence
Vendor file name logback-core High
Vendor jar package name ch Highest
Vendor jar package name core Highest
Vendor jar package name logback Highest
Vendor jar package name qos Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.qos.ch Low
Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium
Vendor Manifest Implementation-Vendor QOS.ch High
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor Manifest specification-vendor QOS.ch Low
Vendor pom artifactid logback-core Highest
Vendor pom artifactid logback-core Low
Vendor pom groupid ch.qos.logback Highest
Vendor pom name Logback Core Module High
Vendor pom parent-artifactid logback-parent Low
Product file name logback-core High
Product jar package name ch Highest
Product jar package name core Highest
Product jar package name logback Highest
Product jar package name qos Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.qos.ch Low
Product Manifest Bundle-Name Logback Core Module Medium
Product Manifest bundle-symbolicname ch.qos.logback.core Medium
Product Manifest Implementation-Title Logback Core Module High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product Manifest specification-title Logback Core Module Medium
Product pom artifactid logback-core Highest
Product pom groupid ch.qos.logback Highest
Product pom name Logback Core Module High
Product pom parent-artifactid logback-parent Medium
Version file version 1.6.3 High
Version Manifest Bundle-Version 1.6.3 High
Version Manifest Implementation-Version 1.6.3 High
Version pom version 1.6.3 Highest
Related Dependencies
logback-classic-1.6.3.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.6.3/logback-classic-1.6.3.jar
MD5: c4c3210a25faea352ecfe9ea2c219c14
SHA1: a8fc332633a9da2e543afb20357b7a015437f0a9
SHA256: beebede8db065fe1b72909ecc66bb49acda618901635d86c25fce14a5915e37e
pkg:maven/ch.qos.logback/logback-classic@1.6.3
lombok-1.18.46.jar
Description:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSE
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.46/lombok-1.18.46.jar
MD5: e02f419a66b86c594ffcafc862778723
SHA1: a5cfe99fdf320e84955ef653f2ce1bf789d11385
SHA256: 01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
lombok-1.18.46.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name lombok High
Vendor jar package name java Highest
Vendor jar package name lombok Highest
Vendor jar package name tostring Highest
Vendor Manifest automatic-module-name lombok Medium
Vendor Manifest can-redefine-classes true Low
Vendor pom artifactid lombok Highest
Vendor pom artifactid lombok Low
Vendor pom developer email reinier@projectlombok.org Low
Vendor pom developer email roel@projectlombok.org Low
Vendor pom developer id rspilker Medium
Vendor pom developer id rzwitserloot Medium
Vendor pom developer name Reinier Zwitserloot Medium
Vendor pom developer name Roel Spilker Medium
Vendor pom groupid org.projectlombok Highest
Vendor pom name Project Lombok High
Vendor pom url https://projectlombok.org Highest
Product file name lombok High
Product jar package name java Highest
Product jar package name lombok Highest
Product jar package name tostring Highest
Product Manifest automatic-module-name lombok Medium
Product Manifest can-redefine-classes true Low
Product pom artifactid lombok Highest
Product pom developer email reinier@projectlombok.org Low
Product pom developer email roel@projectlombok.org Low
Product pom developer id rspilker Low
Product pom developer id rzwitserloot Low
Product pom developer name Reinier Zwitserloot Low
Product pom developer name Roel Spilker Low
Product pom groupid org.projectlombok Highest
Product pom name Project Lombok High
Product pom url https://projectlombok.org Medium
Version file version 1.18.46 High
Version Manifest lombok-version 1.18.46 Medium
Version pom version 1.18.46 Highest
pkg:maven/org.projectlombok/lombok@1.18.46
(Confidence :High)
lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.46/lombok-1.18.46.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 8b80305e4846088e139701372844e637
SHA1: 4b03ce7b33d535b42e4a84e106c3647760eb8769
SHA256: 639da94437813649eac5af6d8154d736355f27199fc8aaeda85904fce947ee4f
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
Evidence
Type Source Name Value Confidence
Vendor file name mavenEcjBootstrapAgent High
Vendor jar package name launch Low
Vendor jar package name lombok Low
Vendor Manifest can-redefine-classes true Low
Product file name mavenEcjBootstrapAgent High
Product jar package name launch Low
Product Manifest can-redefine-classes true Low
micrometer-commons-1.17.1.jar
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.17.1/micrometer-commons-1.17.1.jar
MD5: aa9291ad211473834d3d48453ae05ea1
SHA1: b1c3fdea68c5a81495cf1c16cf2905c5ad9f30d2
SHA256: f2cee6ef046e72eec8128474c7f58c6217173b45ae373c30de0289f2a56ab0fd
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
micrometer-commons-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-commons High
Vendor jar package name common Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.commons Medium
Vendor Manifest branch release/1.17.1 Low
Vendor Manifest build-date 2026-08-17_07:25:39 Low
Vendor Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low
Vendor Manifest build-host https://github.com Low
Vendor Manifest build-job build-release Low
Vendor Manifest build-number 50 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status integration Low
Vendor Manifest bundle-symbolicname micrometer-commons Medium
Vendor Manifest change f1b1924 Low
Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low
Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low
Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low
Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low
Vendor pom artifactid micrometer-commons Highest
Vendor pom artifactid micrometer-commons Low
Vendor pom developer email jivanov@vmware.com Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id jonatan-ivanov Medium
Vendor pom developer id shakuzen Medium
Vendor pom developer name Jonatan Ivanov Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-commons High
Vendor pom url micrometer-metrics/micrometer-commercial Highest
Product file name micrometer-commons High
Product jar package name common Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.commons Medium
Product Manifest branch release/1.17.1 Low
Product Manifest build-date 2026-08-17_07:25:39 Low
Product Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low
Product Manifest build-host https://github.com Low
Product Manifest build-job build-release Low
Product Manifest build-number 50 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low
Product Manifest built-os Linux Low
Product Manifest built-status integration Low
Product Manifest Bundle-Name micrometer-commons Medium
Product Manifest bundle-symbolicname micrometer-commons Medium
Product Manifest change f1b1924 Low
Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low
Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.17.1 High
Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low
Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low
Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low
Product pom artifactid micrometer-commons Highest
Product pom developer email jivanov@vmware.com Low
Product pom developer email tludwig@vmware.com Low
Product pom developer id jonatan-ivanov Low
Product pom developer id shakuzen Low
Product pom developer name Jonatan Ivanov Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-commons High
Product pom url micrometer-metrics/micrometer-commercial High
Version file version 1.17.1 High
Version Manifest Bundle-Version 1.17.1 High
Version Manifest Implementation-Version 1.17.1 High
Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-commons@1.17.1
(Confidence :High)
micrometer-observation-1.17.1.jar
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.17.1/micrometer-observation-1.17.1.jar
MD5: f63baf5840fb4446b9313a3bd8773da1
SHA1: 24c0b05bc06a9ab6f4e09a48949b6eccc179ca15
SHA256: eb34f0cd84a879393ae5c21160fc06385ccdc74f36a4d1e31b199f59acfdaf71
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
micrometer-observation-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-observation High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor jar package name observation Highest
Vendor Manifest automatic-module-name micrometer.observation Medium
Vendor Manifest branch release/1.17.1 Low
Vendor Manifest build-date 2026-08-17_07:25:39 Low
Vendor Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low
Vendor Manifest build-host https://github.com Low
Vendor Manifest build-job build-release Low
Vendor Manifest build-number 50 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status integration Low
Vendor Manifest bundle-symbolicname micrometer-observation Medium
Vendor Manifest change f1b1924 Low
Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low
Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low
Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low
Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low
Vendor pom artifactid micrometer-observation Highest
Vendor pom artifactid micrometer-observation Low
Vendor pom developer email jivanov@vmware.com Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id jonatan-ivanov Medium
Vendor pom developer id shakuzen Medium
Vendor pom developer name Jonatan Ivanov Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-observation High
Vendor pom url micrometer-metrics/micrometer-commercial Highest
Product file name micrometer-observation High
Product jar package name io Highest
Product jar package name micrometer Highest
Product jar package name observation Highest
Product Manifest automatic-module-name micrometer.observation Medium
Product Manifest branch release/1.17.1 Low
Product Manifest build-date 2026-08-17_07:25:39 Low
Product Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low
Product Manifest build-host https://github.com Low
Product Manifest build-job build-release Low
Product Manifest build-number 50 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low
Product Manifest built-os Linux Low
Product Manifest built-status integration Low
Product Manifest Bundle-Name micrometer-observation Medium
Product Manifest bundle-symbolicname micrometer-observation Medium
Product Manifest change f1b1924 Low
Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low
Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.17.1 High
Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low
Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low
Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low
Product pom artifactid micrometer-observation Highest
Product pom developer email jivanov@vmware.com Low
Product pom developer email tludwig@vmware.com Low
Product pom developer id jonatan-ivanov Low
Product pom developer id shakuzen Low
Product pom developer name Jonatan Ivanov Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-observation High
Product pom url micrometer-metrics/micrometer-commercial High
Version file version 1.17.1 High
Version Manifest Bundle-Version 1.17.1 High
Version Manifest Implementation-Version 1.17.1 High
Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-observation@1.17.1
(Confidence :High)
net.opengis.ows-35.1.jar
Description:
Open Web Services Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.ows/35.1/net.opengis.ows-35.1.jar
MD5: eaa3cec85f221ac5431bbaffb2767b7e
SHA1: 9eacaf9c423929e2fcf1685abd4f7913dc93539c
SHA256: 0b12317df3dd7c88eaa1a3e4e8d7d416f0ca56f74d170baac0a018f1dc9547bc
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
net.opengis.ows-35.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name net.opengis.ows High
Vendor jar package name net Highest
Vendor jar package name opengis Highest
Vendor Manifest automatic-module-name org.geotools.ogc.net.opengis.ows Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 14-Aug-2026 15:09 Low
Vendor Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Vendor pom artifactid net.opengis.ows Highest
Vendor pom artifactid net.opengis.ows Low
Vendor pom groupid org.geotools.ogc Highest
Vendor pom name Open Web Services Model High
Vendor pom parent-artifactid ogc Low
Vendor pom parent-groupid org.geotools Medium
Product file name net.opengis.ows High
Product jar package name net Highest
Product jar package name opengis Highest
Product Manifest automatic-module-name org.geotools.ogc.net.opengis.ows Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 14-Aug-2026 15:09 Low
Product Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Product pom artifactid net.opengis.ows Highest
Product pom groupid org.geotools.ogc Highest
Product pom name Open Web Services Model High
Product pom parent-artifactid ogc Medium
Product pom parent-groupid org.geotools Medium
Version file version 35.1 High
Version Manifest project-version 35.1 Medium
Version pom version 35.1 Highest
netty-codec-protobuf-4.2.17.Final.jar
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
License:
https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/io/netty/netty-codec-protobuf/4.2.17.Final/netty-codec-protobuf-4.2.17.Final.jar
MD5: 3805f0d2a076ed73bbf521aecbf8af50
SHA1: 3390d16030c6e3bcc2ef8a31718222e45e1fb9a1
SHA256: 44b2fcc4bc1d6c01edafe6ae6c8a7de7c3c5bad59697a93b6b879a45a78a5387
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
netty-codec-protobuf-4.2.17.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.rabbitmq/amqp-client@5.35.0
Evidence
Type Source Name Value Confidence
Vendor file name netty-codec-protobuf High
Vendor jar package name codec Highest
Vendor jar package name io Highest
Vendor jar package name netty Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://netty.io/ Low
Vendor Manifest bundle-symbolicname io.netty.codec-protobuf Medium
Vendor Manifest implementation-url https://netty.io/netty-codec-protobuf/ Low
Vendor Manifest Implementation-Vendor The Netty Project High
Vendor Manifest Implementation-Vendor-Id io.netty Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Netty Project Low
Vendor pom artifactid netty-codec-protobuf Highest
Vendor pom artifactid netty-codec-protobuf Low
Vendor pom groupid io.netty Highest
Vendor pom name Netty/Codec/Protobuf High
Vendor pom parent-artifactid netty-parent Low
Product file name netty-codec-protobuf High
Product jar package name 11 Highest
Product jar package name codec Highest
Product jar package name io Highest
Product jar package name netty Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://netty.io/ Low
Product Manifest Bundle-Name Netty/Codec/Protobuf Medium
Product Manifest bundle-symbolicname io.netty.codec-protobuf Medium
Product Manifest Implementation-Title Netty/Codec/Protobuf High
Product Manifest implementation-url https://netty.io/netty-codec-protobuf/ Low
Product Manifest multi-release true Low
Product Manifest specification-title Netty/Codec/Protobuf Medium
Product pom artifactid netty-codec-protobuf Highest
Product pom groupid io.netty Highest
Product pom name Netty/Codec/Protobuf High
Product pom parent-artifactid netty-parent Medium
Version Manifest Bundle-Version 4.2.17.Final High
Version Manifest Implementation-Version 4.2.17.Final High
Version pom version 4.2.17.Final Highest
netty-common-4.2.17.Final.jar (shaded: org.jctools:jctools-core:4.0.6)
Description:
Java Concurrency Tools Core Library
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.17.Final/netty-common-4.2.17.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 8341fc089534412b4da254daf73fafc9
SHA1: d7ad6a6097946fd431f78598315022370a402631
SHA256: 6a7d37edc57b6a2b90a05037013fcc0b5eeac5e3dbf1d7109f7639c71cde41e7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
Evidence
Type Source Name Value Confidence
Vendor pom artifactid jctools-core Low
Vendor pom groupid org.jctools Highest
Vendor pom name Java Concurrency Tools Core Library High
Vendor pom url JCTools Highest
Product pom artifactid jctools-core Highest
Product pom groupid org.jctools Highest
Product pom name Java Concurrency Tools Core Library High
Product pom url JCTools High
Version pom version 4.0.6 Highest
pkg:maven/org.jctools/jctools-core@4.0.6
(Confidence :High)
netty-transport-4.2.17.Final.jar
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
License:
https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/io/netty/netty-transport/4.2.17.Final/netty-transport-4.2.17.Final.jar
MD5: 81ff6c65c703d34a26599f435f858f75
SHA1: 34335dc106caa0aefc242900d38ade65c8de64f4
SHA256: d2409ce3a735cbab4188d0ea5d82abed823a6a07a8389f49af4a9e1243a562bc
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
netty-transport-4.2.17.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.rabbitmq/amqp-client@5.35.0
Evidence
Type Source Name Value Confidence
Vendor file name netty-transport High
Vendor jar package name io Highest
Vendor jar package name netty Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://netty.io/ Low
Vendor Manifest bundle-symbolicname io.netty.transport Medium
Vendor Manifest implementation-url https://netty.io/netty-transport/ Low
Vendor Manifest Implementation-Vendor The Netty Project High
Vendor Manifest Implementation-Vendor-Id io.netty Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Netty Project Low
Vendor pom artifactid netty-transport Highest
Vendor pom artifactid netty-transport Low
Vendor pom groupid io.netty Highest
Vendor pom name Netty/Transport High
Vendor pom parent-artifactid netty-parent Low
Product file name netty-transport High
Product jar package name 11 Highest
Product jar package name io Highest
Product jar package name netty Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://netty.io/ Low
Product Manifest Bundle-Name Netty/Transport Medium
Product Manifest bundle-symbolicname io.netty.transport Medium
Product Manifest Implementation-Title Netty/Transport High
Product Manifest implementation-url https://netty.io/netty-transport/ Low
Product Manifest multi-release true Low
Product Manifest specification-title Netty/Transport Medium
Product pom artifactid netty-transport Highest
Product pom groupid io.netty Highest
Product pom name Netty/Transport High
Product pom parent-artifactid netty-parent Medium
Version Manifest Bundle-Version 4.2.17.Final High
Version Manifest Implementation-Version 4.2.17.Final High
Version pom version 4.2.17.Final Highest
Related Dependencies
netty-buffer-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-buffer/4.2.17.Final/netty-buffer-4.2.17.Final.jar
MD5: 5ea817ded4fca341ad462486a8b45e64
SHA1: daba397ff4ce7b22f6ac1e1f419e6e7754c135be
SHA256: 0d249178ec0204b35a6ad3e5ac8a6c2ecb3eb496c6cdae40b8eca4fa3cb6a0c7
pkg:maven/io.netty/netty-buffer@4.2.17.Final
netty-codec-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec/4.2.17.Final/netty-codec-4.2.17.Final.jar
MD5: 54f78650b7eef6d067419a6ceacf056e
SHA1: 87cf7956788d6cb451f5018fdd2b0973c9fdcc47
SHA256: ac76f972446a2f72818441f746d0e73c58519a4687bf680d2b687d7dc5e28e2e
pkg:maven/io.netty/netty-codec@4.2.17.Final
netty-codec-base-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-base/4.2.17.Final/netty-codec-base-4.2.17.Final.jar
MD5: 12b3b00718ba067e304b12570a05314c
SHA1: 7034de26b574322f365c790b9d6eb0634edab854
SHA256: 3b92bc3b7d231fa6f4889b2b9281cae6b634428b8121fb1b9b5fccba1543d352
pkg:maven/io.netty/netty-codec-base@4.2.17.Final
netty-codec-compression-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-compression/4.2.17.Final/netty-codec-compression-4.2.17.Final.jar
MD5: 0a6333fdc827c129fc8836a3fc7ba887
SHA1: ac6829387c962174e2efbcc94e833c9524ca1459
SHA256: 425b287a1f36986a5c8edd76379a49decdf99d284f3454f3fa607a073bfb2c18
pkg:maven/io.netty/netty-codec-compression@4.2.17.Final
netty-codec-marshalling-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-marshalling/4.2.17.Final/netty-codec-marshalling-4.2.17.Final.jar
MD5: ef2a0088ee304dac7922cadceaf0f481
SHA1: 168871f9f073d58cc5ff2fcac2d3bf9edd2eed82
SHA256: ee5ffed638da6b7e2b4567559bd5f78b18f635cdaa4f3b6d23aa27ccf6cb57c2
pkg:maven/io.netty/netty-codec-marshalling@4.2.17.Final
netty-common-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.17.Final/netty-common-4.2.17.Final.jar
MD5: fe50eabfdf19b59022b133b7d5e7de8d
SHA1: 57fa9e9af0bf70530e2fe1c8c8d6138f9167cf7a
SHA256: 502aae2a6680e9bca3558a3fa098f06dc4d87340b8b714e925a6d690871c092a
pkg:maven/io.netty/netty-common@4.2.17.Final
netty-handler-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-handler/4.2.17.Final/netty-handler-4.2.17.Final.jar
MD5: e32139e4772b66f72955f802bba2c699
SHA1: ed53dae90d09306b42bc886fa292510abdf5c5dc
SHA256: 4df11c7520b556c5e2c84b939182699d48fcbb09e97a6bb5e1c0b6835227d126
pkg:maven/io.netty/netty-handler@4.2.17.Final
netty-resolver-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-resolver/4.2.17.Final/netty-resolver-4.2.17.Final.jar
MD5: ffc4fd6b3d092275c4b5f12e07eb733e
SHA1: 6cba9d93bb06297cef0b7ac34e3873b6a25b4e3b
SHA256: 7a4b599b9c0c29a505d3b7311f142df883fb27d0f67495a7cbaf533b0e456623
pkg:maven/io.netty/netty-resolver@4.2.17.Final
netty-transport-native-unix-common-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-transport-native-unix-common/4.2.17.Final/netty-transport-native-unix-common-4.2.17.Final.jar
MD5: bc05fe306c299f5fa22a1f13aa81c288
SHA1: c404f2366b51136d4a2fde678eec95be6d10ca16
SHA256: e01aa467b9104de54a57c08c290f70b22e53ec97cf5583c87c112170ef5832cc
pkg:maven/io.netty/netty-transport-native-unix-common@4.2.17.Final
opencsv-5.12.0.jar
Description:
A simple library for reading and writing CSV in Java
License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/opencsv/opencsv/5.12.0/opencsv-5.12.0.jar
MD5: c7424a4784e6845911daf7ed7f3a4a23
SHA1: bc55d53c0961f8b191c96276e778a9ec67f7dd58
SHA256: f1c55d80a92c8ecfe3f15fb71785d5b156f3674cb5b9ad55dcfd378ffeed2960
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
opencsv-5.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name opencsv High
Vendor jar package name opencsv Highest
Vendor Manifest automatic-module-name com.opencsv Medium
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname com.opencsv Medium
Vendor pom artifactid opencsv Highest
Vendor pom artifactid opencsv Low
Vendor pom developer email arjones@t-online.de Low
Vendor pom developer email sconway@users.sourceforge.net Low
Vendor pom developer id aruckerjones Medium
Vendor pom developer id scott_conway Medium
Vendor pom developer name Andrew Rucker Jones Medium
Vendor pom developer name Scott Conway Medium
Vendor pom groupid com.opencsv Highest
Vendor pom name opencsv High
Vendor pom url http://opencsv.sf.net Highest
Product file name opencsv High
Product jar package name opencsv Highest
Product Manifest automatic-module-name com.opencsv Medium
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name opencsv Medium
Product Manifest bundle-symbolicname com.opencsv Medium
Product pom artifactid opencsv Highest
Product pom developer email arjones@t-online.de Low
Product pom developer email sconway@users.sourceforge.net Low
Product pom developer id aruckerjones Low
Product pom developer id scott_conway Low
Product pom developer name Andrew Rucker Jones Low
Product pom developer name Scott Conway Low
Product pom groupid com.opencsv Highest
Product pom name opencsv High
Product pom url http://opencsv.sf.net Medium
Version file version 5.12.0 High
Version Manifest Bundle-Version 5.12.0 High
Version pom version 5.12.0 Highest
pkg:maven/com.opencsv/opencsv@5.12.0
(Confidence :High)
opentest4j-1.3.0.jar
Description:
Open Test Alliance for the JVM
License:
The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opentest4j/opentest4j/1.3.0/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256: 48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
Evidence
Type Source Name Value Confidence
Vendor file name opentest4j High
Vendor jar package name opentest4j Highest
Vendor Manifest build-date 2023-07-06 Low
Vendor Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low
Vendor Manifest build-time 14:25:06.116+0200 Low
Vendor Manifest bundle-symbolicname org.opentest4j Medium
Vendor Manifest Implementation-Vendor opentest4j.org High
Vendor Manifest specification-vendor opentest4j.org Low
Vendor pom artifactid opentest4j Highest
Vendor pom artifactid opentest4j Low
Vendor pom developer email business@johanneslink.net Low
Vendor pom developer email mail@marcphilipp.de Low
Vendor pom developer email matthias.merdes@heidelpay.com Low
Vendor pom developer email sam@sambrannen.com Low
Vendor pom developer email stefan.bechtold@me.com Low
Vendor pom developer id bechte Medium
Vendor pom developer id jlink Medium
Vendor pom developer id marcphilipp Medium
Vendor pom developer id mmerdes Medium
Vendor pom developer id sbrannen Medium
Vendor pom developer name Johannes Link Medium
Vendor pom developer name Marc Philipp Medium
Vendor pom developer name Matthias Merdes Medium
Vendor pom developer name Sam Brannen Medium
Vendor pom developer name Stefan Bechtold Medium
Vendor pom groupid org.opentest4j Highest
Vendor pom name org.opentest4j:opentest4j High
Vendor pom url ota4j-team/opentest4j Highest
Product file name opentest4j High
Product jar package name opentest4j Highest
Product Manifest build-date 2023-07-06 Low
Product Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low
Product Manifest build-time 14:25:06.116+0200 Low
Product Manifest Bundle-Name opentest4j Medium
Product Manifest bundle-symbolicname org.opentest4j Medium
Product Manifest Implementation-Title opentest4j High
Product Manifest specification-title opentest4j Medium
Product pom artifactid opentest4j Highest
Product pom developer email business@johanneslink.net Low
Product pom developer email mail@marcphilipp.de Low
Product pom developer email matthias.merdes@heidelpay.com Low
Product pom developer email sam@sambrannen.com Low
Product pom developer email stefan.bechtold@me.com Low
Product pom developer id bechte Low
Product pom developer id jlink Low
Product pom developer id marcphilipp Low
Product pom developer id mmerdes Low
Product pom developer id sbrannen Low
Product pom developer name Johannes Link Low
Product pom developer name Marc Philipp Low
Product pom developer name Matthias Merdes Low
Product pom developer name Sam Brannen Low
Product pom developer name Stefan Bechtold Low
Product pom groupid org.opentest4j Highest
Product pom name org.opentest4j:opentest4j High
Product pom url ota4j-team/opentest4j High
Version file version 1.3.0 High
Version Manifest Bundle-Version 1.3.0 High
Version Manifest Implementation-Version 1.3.0 High
Version pom version 1.3.0 Highest
pkg:maven/org.opentest4j/opentest4j@1.3.0
(Confidence :High)
org.eclipse.emf.common-2.15.0.jar
Description:
EMF Common
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.common/2.15.0/org.eclipse.emf.common-2.15.0.jar
MD5: aa878b3e47b671ebc182108e6b4986c6
SHA1: e0f1608a9855651e899d609b106ae78f903a2f04
SHA256: bdb51f83b2daa51446b4ae5d606464e4b22fb7ef98f0477ac95de72551e2978a
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
org.eclipse.emf.common-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.common High
Vendor jar package name common Highest
Vendor jar package name eclipse Highest
Vendor jar package name emf Highest
Vendor Manifest automatic-module-name org.eclipse.emf.common Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium
Vendor Manifest eclipse-buddypolicy dependent Low
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.common Low
Vendor pom artifactid org.eclipse.emf.common Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.common High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.common High
Product jar package name common Highest
Product jar package name eclipse Highest
Product jar package name emf Highest
Product Manifest automatic-module-name org.eclipse.emf.common Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium
Product Manifest eclipse-buddypolicy dependent Low
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.common Highest
Product pom artifactid org.eclipse.emf.common Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.common High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.emf.ecore-2.15.0.jar
Description:
EMF Ecore
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0.jar
MD5: 566797e186b122fb2cb64a699b1c2d2b
SHA1: ccfc09c8b6a0d4fadde09216d8a07678d38998de
SHA256: d5e3c25344fe27f14f514f5d6deb6e9cc3f6153fa462361261a8d49a3dfe9bbf
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
org.eclipse.emf.ecore-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.ecore High
Vendor jar package name eclipse Highest
Vendor jar package name ecore Highest
Vendor jar package name emf Highest
Vendor Manifest automatic-module-name org.eclipse.emf.ecore Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium
Vendor Manifest eclipse-buddypolicy dependent Low
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.ecore Low
Vendor pom artifactid org.eclipse.emf.ecore Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.ecore High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.ecore High
Product jar package name eclipse Highest
Product jar package name ecore Highest
Product jar package name emf Highest
Product jar package name plugin Highest
Product Manifest automatic-module-name org.eclipse.emf.ecore Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium
Product Manifest eclipse-buddypolicy dependent Low
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.ecore Highest
Product pom artifactid org.eclipse.emf.ecore Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.ecore High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.emf.ecore.xmi-2.15.0.jar
Description:
EMF XML/XMI Persistence
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore.xmi/2.15.0/org.eclipse.emf.ecore.xmi-2.15.0.jar
MD5: 7ac89d5bf958f0a2cfab049690f2e68c
SHA1: 9aa1a584be1df1eb0ef8fae7123784af6e51f47a
SHA256: 712ff33fef916d2fa4d838992fccae85c4817a71639a9a5933fc44568ed6dc57
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
org.eclipse.emf.ecore.xmi-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.ecore.xmi High
Vendor jar package name eclipse Highest
Vendor jar package name ecore Highest
Vendor jar package name emf Highest
Vendor jar package name xmi Highest
Vendor Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.ecore.xmi Low
Vendor pom artifactid org.eclipse.emf.ecore.xmi Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.ecore.xmi High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.ecore.xmi High
Product jar package name eclipse Highest
Product jar package name ecore Highest
Product jar package name emf Highest
Product jar package name xmi Highest
Product Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.ecore.xmi Highest
Product pom artifactid org.eclipse.emf.ecore.xmi Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.ecore.xmi High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.sisu.inject-0.9.0.M4.jar
Description:
JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring
License:
"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M4/org.eclipse.sisu.inject-0.9.0.M4.jar
MD5: ee95c1a11ba4ca38368d71ef05676cfc
SHA1: a062d8e12dc62e698c9f943a3fce94e366b4e220
SHA256: 1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
org.eclipse.sisu.inject-0.9.0.M4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.sisu.inject High
Vendor jar package name dynamic Highest
Vendor jar package name eclipse Highest
Vendor jar package name inject Highest
Vendor jar package name sisu Highest
Vendor jar package name wiring Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low
Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low
Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low
Vendor Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium
Vendor pom artifactid eclipse.sisu.inject Low
Vendor pom artifactid org.eclipse.sisu.inject Highest
Vendor pom groupid org.eclipse.sisu Highest
Vendor pom name : High
Vendor pom parent-artifactid sisu-inject Low
Product file name org.eclipse.sisu.inject High
Product jar package name dynamic Highest
Product jar package name eclipse Highest
Product jar package name inject Highest
Product jar package name sisu Highest
Product jar package name sonatype Highest
Product jar package name wiring Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low
Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low
Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low
Product Manifest Bundle-Name Sisu-Inject (Incubation) Medium
Product Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium
Product pom artifactid eclipse.sisu.inject Highest
Product pom artifactid org.eclipse.sisu.inject Highest
Product pom groupid org.eclipse.sisu Highest
Product pom name : High
Product pom parent-artifactid sisu-inject Medium
Version Manifest Bundle-Version 0.9.0.M4 High
Version pom version 0.9.0.M4 Highest
pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4
(Confidence :High)
org.eclipse.sisu.plexus-0.9.0.M4.jar
Description:
Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container
License:
"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M4/org.eclipse.sisu.plexus-0.9.0.M4.jar
MD5: 51eea54bbc85323fc68f6a79f9b8f179
SHA1: 478f7935e88cd9da7ef01f509e4853e80ede9034
SHA256: b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
org.eclipse.sisu.plexus-0.9.0.M4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.sisu.plexus High
Vendor jar package name eclipse Highest
Vendor jar package name plexus Highest
Vendor jar package name sisu Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low
Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low
Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low
Vendor Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium
Vendor pom artifactid eclipse.sisu.plexus Low
Vendor pom artifactid org.eclipse.sisu.plexus Highest
Vendor pom groupid org.eclipse.sisu Highest
Vendor pom name : High
Vendor pom parent-artifactid sisu-inject Low
Product file name org.eclipse.sisu.plexus High
Product jar package name eclipse Highest
Product jar package name plexus Highest
Product jar package name sisu Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low
Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low
Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low
Product Manifest Bundle-Name Sisu-Plexus (Incubation) Medium
Product Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium
Product pom artifactid eclipse.sisu.plexus Highest
Product pom artifactid org.eclipse.sisu.plexus Highest
Product pom groupid org.eclipse.sisu Highest
Product pom name : High
Product pom parent-artifactid sisu-inject Medium
Version Manifest Bundle-Version 0.9.0.M4 High
Version pom version 0.9.0.M4 Highest
pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
(Confidence :High)
org.w3.xlink-35.1.jar
Description:
Xlink Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/org.w3.xlink/35.1/org.w3.xlink-35.1.jar
MD5: cd7f4329d891ad5a8711277aea7f45a1
SHA1: 0573ff0810a712eb4d96a528ec3820d8dcaadad4
SHA256: 2609088b6b24cb8f2bda08b5e735ede959f7f8cdce25e8a07688e538d1d949cb
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
org.w3.xlink-35.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name org.w3.xlink High
Vendor jar package name w3 Highest
Vendor jar package name xlink Highest
Vendor Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 14-Aug-2026 15:09 Low
Vendor Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Vendor pom artifactid org.w3.xlink Highest
Vendor pom artifactid w3.xlink Low
Vendor pom groupid org.geotools.ogc Highest
Vendor pom name Xlink Model High
Vendor pom parent-artifactid ogc Low
Vendor pom parent-groupid org.geotools Medium
Product file name org.w3.xlink High
Product jar package name w3 Highest
Product jar package name xlink Highest
Product Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 14-Aug-2026 15:09 Low
Product Manifest git-revision 820904c219b584f817dbf7341ba2c480fc1a3e06 Low
Product pom artifactid org.w3.xlink Highest
Product pom artifactid w3.xlink Highest
Product pom groupid org.geotools.ogc Highest
Product pom name Xlink Model High
Product pom parent-artifactid ogc Medium
Product pom parent-groupid org.geotools Medium
Version file version 35.1 High
Version Manifest project-version 35.1 Medium
Version pom version 35.1 Highest
plexus-classworlds-2.6.0.jar
Description:
A class loader framework
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-classworlds/2.6.0/plexus-classworlds-2.6.0.jar
MD5: 67e722b27e3a33b33c1b263b99dd7c43
SHA1: 8587e80fcb38e70b70fae8d5914b6376bfad6259
SHA256: 52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
plexus-classworlds-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence
Vendor file name plexus-classworlds High
Vendor jar package name classworlds Highest
Vendor jar package name codehaus Highest
Vendor jar package name plexus Highest
Vendor Manifest bundle-docurl http://codehaus-plexus.github.io/ Low
Vendor Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium
Vendor pom artifactid plexus-classworlds Highest
Vendor pom artifactid plexus-classworlds Low
Vendor pom groupid org.codehaus.plexus Highest
Vendor pom name Plexus Classworlds High
Vendor pom parent-artifactid plexus Low
Product file name plexus-classworlds High
Product jar package name classworlds Highest
Product jar package name codehaus Highest
Product jar package name plexus Highest
Product Manifest bundle-docurl http://codehaus-plexus.github.io/ Low
Product Manifest Bundle-Name Plexus Classworlds Medium
Product Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium
Product pom artifactid plexus-classworlds Highest
Product pom groupid org.codehaus.plexus Highest
Product pom name Plexus Classworlds High
Product pom parent-artifactid plexus Medium
Version file version 2.6.0 High
Version Manifest Bundle-Version 2.6.0 High
Version pom parent-version 2.6.0 Low
Version pom version 2.6.0 Highest
pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0
(Confidence :High)
plexus-component-annotations-2.1.0.jar
Description:
Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
standard annotations instead of javadoc annotations.
File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar
MD5: 141fd7a2ae613cb17d25ecd54b43eb3f
SHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9
SHA256: bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence
Vendor file name plexus-component-annotations High
Vendor jar package name annotations Highest
Vendor jar package name codehaus Highest
Vendor jar package name codehaus Low
Vendor jar package name component Highest
Vendor jar package name component Low
Vendor jar package name plexus Highest
Vendor jar package name plexus Low
Vendor pom artifactid plexus-component-annotations Highest
Vendor pom artifactid plexus-component-annotations Low
Vendor pom groupid org.codehaus.plexus Highest
Vendor pom name Plexus :: Component Annotations High
Vendor pom parent-artifactid plexus-containers Low
Product file name plexus-component-annotations High
Product jar package name annotations Highest
Product jar package name annotations Low
Product jar package name codehaus Highest
Product jar package name component Highest
Product jar package name component Low
Product jar package name plexus Highest
Product jar package name plexus Low
Product pom artifactid plexus-component-annotations Highest
Product pom groupid org.codehaus.plexus Highest
Product pom name Plexus :: Component Annotations High
Product pom parent-artifactid plexus-containers Medium
Version file version 2.1.0 High
Version pom version 2.1.0 Highest
pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0
(Confidence :High)
plexus-utils-3.5.1.jar
Description:
A collection of various utility classes to ease working with strings, files, command lines, XML and
more.
File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-utils/3.5.1/plexus-utils-3.5.1.jar
MD5: cdec471a77f52e687d0df4c43f392a71
SHA1: c6bfb17c97ecc8863e88778ea301be742c62b06d
SHA256: 86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
plexus-utils-3.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence
Vendor file name plexus-utils High
Vendor jar package name codehaus Highest
Vendor jar package name org Highest
Vendor jar package name plexus Highest
Vendor jar package name xml Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest multi-release true Low
Vendor pom artifactid plexus-utils Highest
Vendor pom artifactid plexus-utils Low
Vendor pom groupid org.codehaus.plexus Highest
Vendor pom name Plexus Common Utilities High
Vendor pom parent-artifactid plexus Low
Product file name plexus-utils High
Product jar package name 11 Highest
Product jar package name codehaus Highest
Product jar package name org Highest
Product jar package name plexus Highest
Product jar package name xml Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest multi-release true Low
Product pom artifactid plexus-utils Highest
Product pom groupid org.codehaus.plexus Highest
Product pom name Plexus Common Utilities High
Product pom parent-artifactid plexus Medium
Version file version 3.5.1 High
Version pom parent-version 3.5.1 Low
Version pom version 3.5.1 Highest
CVE-2025-67030 suppress
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
re2j-1.8.jar
Description:
Linear time regular expressions for Java
License:
Go License: https://golang.org/LICENSE
File Path: /home/runner/.m2/repository/com/google/re2j/re2j/1.8/re2j-1.8.jar
MD5: 4240e655caa938c61ddbec8b92bfb061
SHA1: 12c25e923e9e4fb1575a7640a2698745c6f19a94
SHA256: 7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
re2j-1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name re2j High
Vendor jar package name google Highest
Vendor jar package name google Low
Vendor jar package name re2 Highest
Vendor jar package name re2j Highest
Vendor jar package name re2j Low
Vendor pom artifactid re2j Highest
Vendor pom artifactid re2j Low
Vendor pom developer email re2j-discuss@googlegroups.com Low
Vendor pom developer id dev Medium
Vendor pom developer name The RE2/J Contributors Medium
Vendor pom groupid com.google.re2j Highest
Vendor pom name RE2/J High
Vendor pom url http://github.com/google/re2j Highest
Product file name re2j High
Product jar package name google Highest
Product jar package name re2 Highest
Product jar package name re2j Highest
Product jar package name re2j Low
Product pom artifactid re2j Highest
Product pom developer email re2j-discuss@googlegroups.com Low
Product pom developer id dev Low
Product pom developer name The RE2/J Contributors Low
Product pom groupid com.google.re2j Highest
Product pom name RE2/J High
Product pom url http://github.com/google/re2j Medium
Version file version 1.8 High
Version pom version 1.8 Highest
pkg:maven/com.google.re2j/re2j@1.8
(Confidence :High)
si-quantity-2.1.jar
Description:
Units of Measurement SI (Système International d'Unités)
License:
https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/si/uom/si-quantity/2.1/si-quantity-2.1.jar
MD5: 79685f60efca0051a6c579e1f1522542
SHA1: 5617d2cf30898ffcc760807009fe947483bd867b
SHA256: 2cdcfd3e5395db5576f5efc0f224b5bbd0731f3ec7552afee6ee7b63a4f65820
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
si-quantity-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name si-quantity High
Vendor jar package name quantity Highest
Vendor jar package name si Highest
Vendor jar package name uom Highest
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low
Vendor Manifest bundle-symbolicname si.uom.si-quantity Medium
Vendor pom artifactid si-quantity Highest
Vendor pom artifactid si-quantity Low
Vendor pom groupid si.uom Highest
Vendor pom name SI Quantities High
Vendor pom parent-artifactid si-parent Low
Product file name si-quantity High
Product jar package name quantity Highest
Product jar package name si Highest
Product jar package name uom Highest
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low
Product Manifest Bundle-Name SI Quantities Medium
Product Manifest bundle-symbolicname si.uom.si-quantity Medium
Product pom artifactid si-quantity Highest
Product pom groupid si.uom Highest
Product pom name SI Quantities High
Product pom parent-artifactid si-parent Medium
Version file version 2.1 High
Version pom version 2.1 Highest
pkg:maven/si.uom/si-quantity@2.1
(Confidence :High)
si-units-2.1.jar
Description:
"Units of Measurement SI (Système International d'Unités)"
License:
"BSD 3-Clause";link="https://opensource.org/licenses/BSD-3-Clause"
File Path: /home/runner/.m2/repository/si/uom/si-units/2.1/si-units-2.1.jar
MD5: 43abf4b896da58d8bca0e87f412a8457
SHA1: 7e812192ff1abbef6c79123249840c42b4e145d4
SHA256: 491ed9956ddf4b2e30180b087e1f6fb51debccb6d46785ae0d52026342013c51
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
si-units-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name si-units High
Vendor jar package name si Highest
Vendor jar package name uom Highest
Vendor Manifest build-jdk-spec 14 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low
Vendor Manifest bundle-symbolicname si-units Medium
Vendor Manifest implementation-url https://unitsofmeasurement.github.io/ Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement Low
Vendor pom artifactid si-units Highest
Vendor pom artifactid si-units Low
Vendor pom groupid si.uom Highest
Vendor pom name SI Units High
Vendor pom parent-artifactid si-parent Low
Product file name si-units High
Product jar package name si Highest
Product jar package name uom Highest
Product Manifest build-jdk-spec 14 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low
Product Manifest Bundle-Name SI Units Medium
Product Manifest bundle-symbolicname si-units Medium
Product Manifest Implementation-Title SI Units High
Product Manifest implementation-url https://unitsofmeasurement.github.io/ Low
Product Manifest specification-title International System of Units Medium
Product pom artifactid si-units Highest
Product pom groupid si.uom Highest
Product pom name SI Units High
Product pom parent-artifactid si-parent Medium
Version file version 2.1 High
Version Manifest Implementation-Version 2.1 High
Version pom version 2.1 Highest
pkg:maven/si.uom/si-units@2.1
(Confidence :High)
slf4j-api-2.0.18.jar
Description:
The slf4j API
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.18/slf4j-api-2.0.18.jar
MD5: fe2837bd49bfb76657419002fed20ca9
SHA1: 78a9e7a37cd6360e0b818e86341b24123d28d4df
SHA256: 44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
slf4j-api-2.0.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name slf4j-api High
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname slf4j.api Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid slf4j-api Highest
Vendor pom artifactid slf4j-api Low
Vendor pom groupid org.slf4j Highest
Vendor pom name SLF4J API Module High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name slf4j-api High
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name SLF4J API Module Medium
Product Manifest bundle-symbolicname slf4j.api Medium
Product Manifest Implementation-Title slf4j-api High
Product Manifest multi-release true Low
Product pom artifactid slf4j-api Highest
Product pom groupid org.slf4j Highest
Product pom name SLF4J API Module High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.18 High
Version Manifest Bundle-Version 2.0.18 High
Version Manifest Implementation-Version 2.0.18 High
Version pom version 2.0.18 Highest
pkg:maven/org.slf4j/slf4j-api@2.0.18
(Confidence :High)
spotbugs-annotations-4.10.4.jar
Description:
Annotations the SpotBugs tool supports
License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.10.4/spotbugs-annotations-4.10.4.jar
MD5: 472925cb4e5451c8f7a1aeeefe286622
SHA1: 7eb4c58212378becfb6ea6d236ec24a2352a316e
SHA256: 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
Referenced In Project/Scope: RealLifeDeveloper Build Tools:provided
spotbugs-annotations-4.10.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name spotbugs-annotations High
Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Vendor Manifest bundle-symbolicname spotbugs-annotations Medium
Vendor pom artifactid spotbugs-annotations Highest
Vendor pom artifactid spotbugs-annotations Low
Vendor pom developer email andreas.sewe@codetrails.com Low
Vendor pom developer email dbrosius@mebigfatguy.com Low
Vendor pom developer email loskutov@gmx.de Low
Vendor pom developer email skypencil@gmail.com Low
Vendor pom developer id henrik242 Medium
Vendor pom developer id iloveeclipse Medium
Vendor pom developer id jsotuyod Medium
Vendor pom developer id KengoTODA Medium
Vendor pom developer id mebigfatguy Medium
Vendor pom developer id sewe Medium
Vendor pom developer id ThrawnCA Medium
Vendor pom developer name Andreas Sewe Medium
Vendor pom developer name Andrey Loskutov Medium
Vendor pom developer name Dave Brosius Medium
Vendor pom developer name Juan Martín Sotuyo Dodero Medium
Vendor pom developer name Kengo TODA Medium
Vendor pom groupid com.github.spotbugs Highest
Vendor pom name SpotBugs Annotations High
Vendor pom url https://spotbugs.github.io/ Highest
Product file name spotbugs-annotations High
Product Manifest automatic-module-name com.github.spotbugs.annotations Medium
Product Manifest Bundle-Name spotbugs-annotations Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Product Manifest bundle-symbolicname spotbugs-annotations Medium
Product pom artifactid spotbugs-annotations Highest
Product pom developer email andreas.sewe@codetrails.com Low
Product pom developer email dbrosius@mebigfatguy.com Low
Product pom developer email loskutov@gmx.de Low
Product pom developer email skypencil@gmail.com Low
Product pom developer id henrik242 Low
Product pom developer id iloveeclipse Low
Product pom developer id jsotuyod Low
Product pom developer id KengoTODA Low
Product pom developer id mebigfatguy Low
Product pom developer id sewe Low
Product pom developer id ThrawnCA Low
Product pom developer name Andreas Sewe Low
Product pom developer name Andrey Loskutov Low
Product pom developer name Dave Brosius Low
Product pom developer name Juan Martín Sotuyo Dodero Low
Product pom developer name Kengo TODA Low
Product pom groupid com.github.spotbugs Highest
Product pom name SpotBugs Annotations High
Product pom url https://spotbugs.github.io/ Medium
Version file version 4.10.4 High
Version Manifest Bundle-Version 4.10.4 High
Version pom version 4.10.4 Highest
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
(Confidence :High)
spring-core-7.0.9.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.9/spring-core-7.0.9.jar
MD5: f87ba857b1fb00b125568d966aa66058
SHA1: e03c619fc5b26931973277f5ba65ae47967a20e3
SHA256: 5195f4722699b39878d99a832549fe65df2890b159d063b88fff31b1ca65ae36
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
spring-core-7.0.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name org Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email juergen.hoeller@broadcom.com Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name org Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product Manifest multi-release true Low
Product pom artifactid spring-core Highest
Product pom developer email juergen.hoeller@broadcom.com Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 7.0.9 High
Version Manifest Implementation-Version 7.0.9 High
Version pom version 7.0.9 Highest
Related Dependencies
spring-aop-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.9/spring-aop-7.0.9.jar
MD5: 1766c086d944229fdca3c052bd133735
SHA1: 35f68fd8cdf30444e18835cec152f2619c4c46c7
SHA256: b8c5d6bfcb1f4993f2cc124f7ab7fac40edf5256b9e43c2f7250a733cb5510e9
pkg:maven/org.springframework/spring-aop@7.0.9
spring-beans-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.9/spring-beans-7.0.9.jar
MD5: 4472076f5c22297927d129768a54119d
SHA1: 2bee42fa948a5f32761fd0838de3baa1f51c0225
SHA256: ff218b827a25c9e8929b0cd56dfb56916cea9d5b669ed97dc7cb262508ff548b
pkg:maven/org.springframework/spring-beans@7.0.9
spring-context-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.9/spring-context-7.0.9.jar
MD5: 4528f937c5eadd30458a0f19a977e3b8
SHA1: 7eb8e01ecf1633ddd4d64ca184194f967b6bc0aa
SHA256: 7552a2fcfa30cea53eb14d7a65a7a8e1b1dd82e832a7164fb7e6fb105f438858
pkg:maven/org.springframework/spring-context@7.0.9
spring-expression-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.9/spring-expression-7.0.9.jar
MD5: 46931226190dcd4ab0dd8862cd7f4986
SHA1: 9452ece85b97fa3e208046cc3a7e985c314b0034
SHA256: 046434c40f43819729b9b1db0e6c659dfa68184c1c2c2efa5f7b3a5b27c4e2e2
pkg:maven/org.springframework/spring-expression@7.0.9
spring-jdbc-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-jdbc/7.0.9/spring-jdbc-7.0.9.jar
MD5: 8ad57ba4acbff90453200358f014e282
SHA1: b1cfa486ba259e5fc93c67db9ad199ac44ac2f6d
SHA256: ca0d9af1c5721eef8cac1f94c8b9d27a753248bc33c86e3472bd3d1dbd78f450
pkg:maven/org.springframework/spring-jdbc@7.0.9
spring-orm-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-orm/7.0.9/spring-orm-7.0.9.jar
MD5: b5946bb1e2d034e37934b3da54cd7ccf
SHA1: 06e3089628cb98c4b8498d4b0c9ff0df17de6afb
SHA256: d44082acd9377b67858ae207316057e2ef236a16c96e1b4fd8af8d43a6784b31
pkg:maven/org.springframework/spring-orm@7.0.9
spring-tx-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-tx/7.0.9/spring-tx-7.0.9.jar
MD5: c8cc114571fc0a24f02533159086f115
SHA1: 4912434272ba05818632fe87844532ae98a4af40
SHA256: bfb15da6e096e2c0752e9db9987d2415bf0da1d744efc988535c10c6b6c2eedd
pkg:maven/org.springframework/spring-tx@7.0.9
spring-data-commons-4.1.0.jar
Description:
Core Spring concepts underpinning every Spring Data module.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-commons/4.1.0/spring-data-commons-4.1.0.jar
MD5: e958df33b064ab5a8b6cdb09a554fbfd
SHA1: e8d1077d09c20e9ecf3574a72ce5cc90a29b902a
SHA256: c9e41d45b30aacc0ce50c4426f0650a3544c066ab5d6d0304840e6f878388c5c
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
spring-data-commons-4.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-jpa@4.1.0
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-commons High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name data Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.commons Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-commons Highest
Vendor pom artifactid spring-data-commons Low
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data Core High
Vendor pom parent-artifactid spring-data-parent Low
Vendor pom parent-groupid org.springframework.data.build Medium
Vendor pom url https://spring.io/projects/spring-data Highest
Product file name spring-data-commons High
Product jar package name core Highest
Product jar package name data Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.commons Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data Core High
Product pom artifactid spring-data-commons Highest
Product pom groupid org.springframework.data Highest
Product pom name Spring Data Core High
Product pom parent-artifactid spring-data-parent Medium
Product pom parent-groupid org.springframework.data.build Medium
Product pom url https://spring.io/projects/spring-data Medium
Version file version 4.1.0 High
Version Manifest Implementation-Version 4.1.0 High
Version pom version 4.1.0 Highest
pkg:maven/org.springframework.data/spring-data-commons@4.1.0
(Confidence :High)
spring-data-jpa-4.1.0.jar
Description:
Spring Data module for JPA repositories.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-jpa/4.1.0/spring-data-jpa-4.1.0.jar
MD5: 4997e5be3b798b61a7df43a21fe80533
SHA1: 6387c88a4a9637f129e0ebcad50ada478ad01c3f
SHA256: 60b72b0513faecb3ef51f53f35d74de68b193af06dc7c1c66b54e265762bad66
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
spring-data-jpa-4.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-build-tools@3.5.1
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-jpa High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name data Highest
Vendor jar package name jpa Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.jpa Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-jpa Highest
Vendor pom artifactid spring-data-jpa Low
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data JPA High
Vendor pom parent-artifactid spring-data-jpa-parent Low
Vendor pom url https://projects.spring.io/spring-data-jpa Highest
Product file name spring-data-jpa High
Product jar package name data Highest
Product jar package name jpa Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.jpa Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data JPA High
Product pom artifactid spring-data-jpa Highest
Product pom groupid org.springframework.data Highest
Product pom name Spring Data JPA High
Product pom parent-artifactid spring-data-jpa-parent Medium
Product pom url https://projects.spring.io/spring-data-jpa Medium
Version file version 4.1.0 High
Version Manifest Implementation-Version 4.1.0 High
Version pom version 4.1.0 Highest
CVE-2026-47834 suppress
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources.
Spring Data JPA 4.1.0
Spring Data JPA 4.0.0 - 4.0.6
Spring Data JPA 3.5.0 - 3.5.13
Spring Data JPA 3.0.0 - 3.4.15
NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
systems-common-2.1.jar
Description:
Parent POM for Unit Systems
License:
BSD;link=LICENSE
File Path: /home/runner/.m2/repository/systems/uom/systems-common/2.1/systems-common-2.1.jar
MD5: 8c3a56e267bbd26bb947c826e51bee2b
SHA1: a173cc6f1fedc8b32498d6cc9599251baa72de27
SHA256: b3cc1f3e604dcd18d3bba266db5fd01744bbd6b02f147377d4016585ba375cff
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
systems-common-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name systems-common High
Vendor jar package name common Highest
Vendor jar package name systems Highest
Vendor jar package name uom Highest
Vendor Manifest automatic-module-name systems.uom.common Medium
Vendor Manifest build-jdk-spec 14 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl http://www.uom.systems/systems-common Low
Vendor Manifest bundle-symbolicname systems-common Medium
Vendor Manifest implementation-url http://uom.technology Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement project Low
Vendor pom artifactid systems-common Highest
Vendor pom artifactid systems-common Low
Vendor pom groupid systems.uom Highest
Vendor pom name Units of Measurement Common Unit Systems High
Vendor pom parent-artifactid systems-parent Low
Product file name systems-common High
Product jar package name common Highest
Product jar package name systems Highest
Product jar package name uom Highest
Product Manifest automatic-module-name systems.uom.common Medium
Product Manifest build-jdk-spec 14 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl http://www.uom.systems/systems-common Low
Product Manifest Bundle-Name Units of Measurement Common Unit Systems Medium
Product Manifest bundle-symbolicname systems-common Medium
Product Manifest Implementation-Title Units of Measurement Common Unit Systems High
Product Manifest implementation-url http://uom.technology Low
Product Manifest specification-title Units of Measurement Systems Medium
Product pom artifactid systems-common Highest
Product pom groupid systems.uom Highest
Product pom name Units of Measurement Common Unit Systems High
Product pom parent-artifactid systems-parent Medium
Version file version 2.1 High
Version Manifest Implementation-Version 2.1 High
Version pom version 2.1 Highest
pkg:maven/systems.uom/systems-common@2.1
(Confidence :High)
unit-api-2.2.jar
Description:
Units of Measurement Standard - This JSR specifies Java
packages for modeling and working with measurement values, quantities
and their corresponding units.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/javax/measure/unit-api/2.2/unit-api-2.2.jar
MD5: 6cbc2bae2cb63cb4f85c5a187ee7dda2
SHA1: 2b624f7334b94a82c74cb954ede9fb1179b8d30c
SHA256: 667487e1ee57298cdc767885f00b86c899b2fe7e72dc00b6560a6aa64f2bc9c4
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
unit-api-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name unit-api High
Vendor jar package name javax Highest
Vendor jar package name measure Highest
Vendor jar package name unit Highest
Vendor Manifest automatic-module-name java.measure Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Vendor Manifest bundle-symbolicname javax.measure.unit-api Medium
Vendor Manifest Implementation-Vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Vendor pom artifactid unit-api Highest
Vendor pom artifactid unit-api Low
Vendor pom developer email daniel.dias.analistati@gmail.com Low
Vendor pom developer email jean-marie@dautelle.com Low
Vendor pom developer email martin.desruisseaux@geomatys.com Low
Vendor pom developer email otaviopolianasantana@gmail.com Low
Vendor pom developer email thodoris.bais@gmail.com Low
Vendor pom developer email werner.keil@gmx.net Low
Vendor pom developer id Daniel-Dos Medium
Vendor pom developer id dautelle Medium
Vendor pom developer id desruisseaux Medium
Vendor pom developer id jhg023 Medium
Vendor pom developer id keilw Medium
Vendor pom developer id magesh678 Medium
Vendor pom developer id mohalmo Medium
Vendor pom developer id otaviojava Medium
Vendor pom developer id thodorisbais Medium
Vendor pom developer name Daniel Dias Medium
Vendor pom developer name Jacob Glickman Medium
Vendor pom developer name Jean-Marie Dautelle Medium
Vendor pom developer name Magesh Kasthuri Medium
Vendor pom developer name Martin Desruisseaux Medium
Vendor pom developer name Mohammed Al-Moayed Medium
Vendor pom developer name Otávio Gonçalves de Santana Medium
Vendor pom developer name Thodoris Bais Medium
Vendor pom developer name Werner Keil Medium
Vendor pom developer org Airbus Medium
Vendor pom developer org Creative Arts & Technologies Medium
Vendor pom developer org Geomatys Medium
Vendor pom developer org Individual Medium
Vendor pom developer org Individual / SouJava Medium
Vendor pom developer org Individual / Utrecht JUG Medium
Vendor pom developer org URL http://www.airbus.com Medium
Vendor pom developer org URL http://www.catmedia.us Medium
Vendor pom developer org URL http://www.geomatys.com Medium
Vendor pom groupid javax.measure Highest
Vendor pom name Units of Measurement API High
Vendor pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana High
Vendor pom organization url http://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-parent Low
Vendor pom parent-groupid tech.uom Medium
Vendor pom url https://unitsofmeasurement.github.io/unit-api/ Highest
Product file name unit-api High
Product jar package name javax Highest
Product jar package name measure Highest
Product jar package name unit Highest
Product Manifest automatic-module-name java.measure Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Product Manifest Bundle-Name Units of Measurement API Medium
Product Manifest bundle-symbolicname javax.measure.unit-api Medium
Product Manifest Implementation-Title Units of Measurement API High
Product Manifest multi-release true Low
Product Manifest specification-title Units of Measurement API Medium
Product pom artifactid unit-api Highest
Product pom developer email daniel.dias.analistati@gmail.com Low
Product pom developer email jean-marie@dautelle.com Low
Product pom developer email martin.desruisseaux@geomatys.com Low
Product pom developer email otaviopolianasantana@gmail.com Low
Product pom developer email thodoris.bais@gmail.com Low
Product pom developer email werner.keil@gmx.net Low
Product pom developer id Daniel-Dos Low
Product pom developer id dautelle Low
Product pom developer id desruisseaux Low
Product pom developer id jhg023 Low
Product pom developer id keilw Low
Product pom developer id magesh678 Low
Product pom developer id mohalmo Low
Product pom developer id otaviojava Low
Product pom developer id thodorisbais Low
Product pom developer name Daniel Dias Low
Product pom developer name Jacob Glickman Low
Product pom developer name Jean-Marie Dautelle Low
Product pom developer name Magesh Kasthuri Low
Product pom developer name Martin Desruisseaux Low
Product pom developer name Mohammed Al-Moayed Low
Product pom developer name Otávio Gonçalves de Santana Low
Product pom developer name Thodoris Bais Low
Product pom developer name Werner Keil Low
Product pom developer org Airbus Low
Product pom developer org Creative Arts & Technologies Low
Product pom developer org Geomatys Low
Product pom developer org Individual Low
Product pom developer org Individual / SouJava Low
Product pom developer org Individual / Utrecht JUG Low
Product pom developer org URL http://www.airbus.com Low
Product pom developer org URL http://www.catmedia.us Low
Product pom developer org URL http://www.geomatys.com Low
Product pom groupid javax.measure Highest
Product pom name Units of Measurement API High
Product pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Product pom organization url http://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-parent Medium
Product pom parent-groupid tech.uom Medium
Product pom url https://unitsofmeasurement.github.io/unit-api/ Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/javax.measure/unit-api@2.2
(Confidence :High)
uom-lib-common-2.2.jar
Description:
Units Common Library
License:
BSD: LICENSE
File Path: /home/runner/.m2/repository/tech/uom/lib/uom-lib-common/2.2/uom-lib-common-2.2.jar
MD5: eb6a1296ea160f731ac81ab8a2c7fed7
SHA1: 94a52abfdad3935c3769b4caab3ce9d384d8fb4e
SHA256: a01ece1c236b7b15a431b0383bdddf06dc6d7a85290e9a62b63904e1e4e0dc0d
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
uom-lib-common-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name uom-lib-common High
Vendor jar package name common Highest
Vendor jar package name lib Highest
Vendor jar package name tech Highest
Vendor jar package name uom Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low
Vendor Manifest bundle-symbolicname uom-lib-common Medium
Vendor Manifest implementation-url https://unitsofmeasurement.github.io Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement project Low
Vendor pom artifactid uom-lib-common Highest
Vendor pom artifactid uom-lib-common Low
Vendor pom groupid tech.uom.lib Highest
Vendor pom name Units of Measurement Common Library for Java High
Vendor pom organization name Units of Measurement project High
Vendor pom organization url https://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-lib Low
Vendor pom url https://unitsofmeasurement.github.io/uom-lib Highest
Product file name uom-lib-common High
Product jar package name common Highest
Product jar package name lib Highest
Product jar package name tech Highest
Product jar package name uom Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low
Product Manifest Bundle-Name Units of Measurement Common Library for Java Medium
Product Manifest bundle-symbolicname uom-lib-common Medium
Product Manifest Implementation-Title Units of Measurement Common Library for Java High
Product Manifest implementation-url https://unitsofmeasurement.github.io Low
Product Manifest specification-title Units of Measurement Medium
Product pom artifactid uom-lib-common Highest
Product pom groupid tech.uom.lib Highest
Product pom name Units of Measurement Common Library for Java High
Product pom organization name Units of Measurement project Low
Product pom organization url https://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-lib Medium
Product pom url https://unitsofmeasurement.github.io/uom-lib Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/tech.uom.lib/uom-lib-common@2.2
(Confidence :High)
utilities-0.9.2.jar
File Path: /home/runner/.m2/repository/org/eclipse/imagen/utilities/0.9.2/utilities-0.9.2.jar
MD5: 23dd078b878cf85b5f20fada650a2764
SHA1: 64b39c9e7f75d2172aa76a137550ecc6d5a99e77
SHA256: 03a359a70a99b69045b0fb0ea11efb3ebab30bb7df0a4ebf06955f8183cdd319
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
utilities-0.9.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name utilities High
Vendor jar package name eclipse Highest
Vendor jar package name eclipse Low
Vendor jar package name imagen Highest
Vendor jar package name imagen Low
Vendor jar package name media Low
Vendor jar package name utilities Highest
Vendor pom artifactid utilities Highest
Vendor pom artifactid utilities Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name utilities High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product jar package name imagen Low
Product jar package name media Low
Product jar package name utilities Highest
Product pom artifactid utilities Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.2 High
Version pom version 0.9.2 Highest
pkg:maven/org.eclipse.imagen/utilities@0.9.2
(Confidence :High)
xml-commons-resolver-1.2.jar
File Path: /home/runner/.m2/repository/org/apache/xml/xml-commons-resolver/1.2/xml-commons-resolver-1.2.jar
MD5: 706c533146c1f4ee46b66659ea14583a
SHA1: 3d0f97750b3a03e0971831566067754ba4bfd68c
SHA256: 47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1
Referenced In Project/Scope: RealLifeDeveloper Build Tools:compile
xml-commons-resolver-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-shapefile@35.1
Evidence
Type Source Name Value Confidence
Vendor file name xml-commons-resolver High
Vendor jar package name apache Highest
Vendor jar package name resolver Highest
Vendor jar package name xml Highest
Vendor manifest: org/apache/xml/resolver Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid xml-commons-resolver Highest
Vendor pom artifactid xml-commons-resolver Low
Vendor pom groupid org.apache.xml Highest
Product file name xml-commons-resolver High
Product jar package name apache Highest
Product jar package name catalog Highest
Product jar package name resolver Highest
Product jar package name xml Highest
Product manifest: org/apache/xml/resolver Implementation-Title org.apache.xml.resolver.Catalog Medium
Product pom artifactid xml-commons-resolver Highest
Product pom groupid org.apache.xml Highest
Version file version 1.2 High
Version manifest: org/apache/xml/resolver Implementation-Version 1.2 Medium
Version pom version 1.2 Highest
pkg:maven/org.apache.xml/xml-commons-resolver@1.2
(Confidence :High)