Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 13.0.0Report Generated On : Sun, 23 Aug 2026 17:19:44 GMTDependencies Scanned : 77 (56 unique)Vulnerable Dependencies : 2 Vulnerabilities Found : 2Vulnerabilities Suppressed : 0
...
NVD API Last Checked : 2026-08-23T17:19:27ZNVD API Last Modified : 2026-08-23T16:16:39Z
Summary
Summary of Vulnerable Dependencies (click to show all)
Description:
The RabbitMQ Java client library allows Java applications to interface with RabbitMQ.
License:
AL 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
GPL v2: https://www.gnu.org/licenses/gpl-2.0.txt
MPL 2.0: https://www.mozilla.org/en-US/MPL/2.0/
File Path: /home/runner/.m2/repository/com/rabbitmq/amqp-client/5.35.0/amqp-client-5.35.0.jar
MD5: dfc10a716af260a664d551da2eecb5b4
SHA1: 85a35a2c5ff795ad2e8c4290d8d4ec9fabbc7b43
SHA256: c23f1dffc08e2c209035f8d22a48edfd83477b629477e9416a5d25e2c116f3f6
Referenced In Project/Scope: RealLifeDeveloper Common:compile
amqp-client-5.35.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name amqp-client High Vendor jar package name amqp Highest Vendor jar package name client Highest Vendor jar package name rabbitmq Highest Vendor Manifest automatic-module-name com.rabbitmq.client Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://www.rabbitmq.com Low Vendor Manifest bundle-symbolicname com.rabbitmq.client Medium Vendor Manifest implementation-url https://www.rabbitmq.com Low Vendor Manifest Implementation-Vendor Broadcom Inc. and its subsidiaries. High Vendor Manifest specification-vendor AMQP Working Group (www.amqp.org) Low Vendor pom artifactid amqp-client Highest Vendor pom artifactid amqp-client Low Vendor pom developer email info@rabbitmq.com Low Vendor pom developer name Team RabbitMQ Medium Vendor pom developer org Broadcom Inc. and its subsidiaries. Medium Vendor pom developer org URL https://rabbitmq.com Medium Vendor pom groupid com.rabbitmq Highest Vendor pom name RabbitMQ Java Client High Vendor pom organization name Broadcom Inc. and its subsidiaries. High Vendor pom organization url https://www.rabbitmq.com Medium Vendor pom url https://www.rabbitmq.com Highest Product file name amqp-client High Product jar package name amqp Highest Product jar package name client Highest Product jar package name rabbitmq Highest Product Manifest automatic-module-name com.rabbitmq.client Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://www.rabbitmq.com Low Product Manifest Bundle-Name RabbitMQ Java Client Medium Product Manifest bundle-symbolicname com.rabbitmq.client Medium Product Manifest Implementation-Title RabbitMQ Java Client High Product Manifest implementation-url https://www.rabbitmq.com Low Product Manifest specification-title AMQP Medium Product pom artifactid amqp-client Highest Product pom developer email info@rabbitmq.com Low Product pom developer name Team RabbitMQ Low Product pom developer org Broadcom Inc. and its subsidiaries. Low Product pom developer org URL https://rabbitmq.com Low Product pom groupid com.rabbitmq Highest Product pom name RabbitMQ Java Client High Product pom organization name Broadcom Inc. and its subsidiaries. Low Product pom organization url https://www.rabbitmq.com Low Product pom url https://www.rabbitmq.com Medium Version file version 5.35.0 High Version Manifest Bundle-Version 5.35.0 High Version Manifest Implementation-Version 5.35.0 High Version pom version 5.35.0 Highest
pkg:maven/com.rabbitmq/amqp-client@5.35.0
(Confidence :High)
Description:
The ANTLR 4 Runtime
License:
https://www.antlr.org/license.html File Path: /home/runner/.m2/repository/org/antlr/antlr4-runtime/4.13.2/antlr4-runtime-4.13.2.jar
MD5: eecf1908f0cfff10f8bb82878b5ca401
SHA1: fc3db6d844df652a3d5db31c87fa12757f13691d
SHA256: dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7
Referenced In Project/Scope: RealLifeDeveloper Common:compile
antlr4-runtime-4.13.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-jpa@4.1.0
Evidence
Type Source Name Value Confidence Vendor file name antlr4-runtime High Vendor jar package name antlr Highest Vendor jar package name runtime Highest Vendor Manifest automatic-module-name org.antlr.antlr4.runtime Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.antlr.org/ Low Vendor Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium Vendor Manifest Implementation-Vendor ANTLR High Vendor pom artifactid antlr4-runtime Highest Vendor pom artifactid antlr4-runtime Low Vendor pom groupid org.antlr Highest Vendor pom name ANTLR 4 Runtime High Vendor pom parent-artifactid antlr4-master Low Product file name antlr4-runtime High Product jar package name antlr Highest Product jar package name runtime Highest Product Manifest automatic-module-name org.antlr.antlr4.runtime Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.antlr.org/ Low Product Manifest Bundle-Name ANTLR 4 Runtime Medium Product Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium Product Manifest Implementation-Title ANTLR 4 Runtime High Product pom artifactid antlr4-runtime Highest Product pom groupid org.antlr Highest Product pom name ANTLR 4 Runtime High Product pom parent-artifactid antlr4-master Medium Version file version 4.13.2 High Version Manifest Bundle-Version 4.13.2 High Version Manifest Implementation-Version 4.13.2 High Version pom version 4.13.2 Highest
pkg:maven/org.antlr/antlr4-runtime@4.13.2
(Confidence :High)
Description:
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar
MD5: 9cb72080438acf27f2607002e1444a7b
SHA1: ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236
SHA256: ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb
Referenced In Project/Scope: RealLifeDeveloper Common:provided
asm-9.10.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.easymock/easymock@5.7.0
Evidence
Type Source Name Value Confidence Vendor file name asm High Vendor jar package name asm Highest Vendor jar package name objectweb Highest Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Vendor pom artifactid asm Highest Vendor pom artifactid asm Low Vendor pom developer email ebruneton@free.fr Low Vendor pom developer email eu@javatx.org Low Vendor pom developer email forax@univ-mlv.fr Low Vendor pom developer id ebruneton Medium Vendor pom developer id eu Medium Vendor pom developer id forax Medium Vendor pom developer name Eric Bruneton Medium Vendor pom developer name Eugene Kuleshov Medium Vendor pom developer name Remi Forax Medium Vendor pom groupid org.ow2.asm Highest Vendor pom name asm High Vendor pom organization name OW2 High Vendor pom organization url http://www.ow2.org/ Medium Vendor pom parent-artifactid ow2 Low Vendor pom parent-groupid org.ow2 Medium Vendor pom url http://asm.ow2.io/ Highest Product file name asm High Product jar package name asm Highest Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High Product pom artifactid asm Highest Product pom developer email ebruneton@free.fr Low Product pom developer email eu@javatx.org Low Product pom developer email forax@univ-mlv.fr Low Product pom developer id ebruneton Low Product pom developer id eu Low Product pom developer id forax Low Product pom developer name Eric Bruneton Low Product pom developer name Eugene Kuleshov Low Product pom developer name Remi Forax Low Product pom groupid org.ow2.asm Highest Product pom name asm High Product pom organization name OW2 Low Product pom organization url http://www.ow2.org/ Low Product pom parent-artifactid ow2 Medium Product pom parent-groupid org.ow2 Medium Product pom url http://asm.ow2.io/ Medium Version file version 9.10.1 High Version Manifest Bundle-Version 9.10.1 High Version Manifest Implementation-Version 9.10.1 High Version pom parent-version 9.10.1 Low Version pom version 9.10.1 Highest
pkg:maven/org.ow2.asm/asm@9.10.1
(Confidence :High)
Description:
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.
License:
The MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/4.2.2/checker-qual-4.2.2.jar
MD5: eda3b189b1db96113420aead434c441a
SHA1: 93b7afd8c171f5dc73a2b10f3412930d95bf777f
SHA256: 4efb9d11ecde9b8b79eca8a132f65162866f28733ee681748f0e7d1cebfa01d7
Referenced In Project/Scope: RealLifeDeveloper Common:provided
checker-qual-4.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checkerframework Highest Vendor jar package name framework Highest Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Vendor pom artifactid checker-qual Highest Vendor pom artifactid checker-qual Low Vendor pom developer email mernst@cs.washington.edu Low Vendor pom developer email smillst@cs.washington.edu Low Vendor pom developer id mernst Medium Vendor pom developer id smillst Medium Vendor pom developer name Michael Ernst Medium Vendor pom developer name Suzanne Millstein Medium Vendor pom developer org University of Washington Medium Vendor pom developer org URL https://www.cs.washington.edu/ Medium Vendor pom groupid org.checkerframework Highest Vendor pom name Checker Qual High Vendor pom url https://checkerframework.org/ Highest Product file name checker-qual High Product jar package name checker Highest Product jar package name checkerframework Highest Product jar package name framework Highest Product jar package name qual Highest Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Product pom artifactid checker-qual Highest Product pom developer email mernst@cs.washington.edu Low Product pom developer email smillst@cs.washington.edu Low Product pom developer id mernst Low Product pom developer id smillst Low Product pom developer name Michael Ernst Low Product pom developer name Suzanne Millstein Low Product pom developer org University of Washington Low Product pom developer org URL https://www.cs.washington.edu/ Low Product pom groupid org.checkerframework Highest Product pom name Checker Qual High Product pom url https://checkerframework.org/ Medium Version file version 4.2.2 High Version Manifest Bundle-Version 4.2.2 High Version Manifest Implementation-Version 4.2.2 High Version pom version 4.2.2 Highest
pkg:maven/org.checkerframework/checker-qual@4.2.2
(Confidence :High)
Description:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256: 6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4
Referenced In Project/Scope: RealLifeDeveloper Common:compile
commons-logging-1.3.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence Vendor file name commons-logging High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name logging Highest Vendor Manifest automatic-module-name org.apache.commons.logging Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-logging Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-logging Highest Vendor pom artifactid commons-logging Low Vendor pom developer email baliuka@apache.org Low Vendor pom developer email costin@apache.org Low Vendor pom developer email craigmcc@apache.org Low Vendor pom developer email dennisl@apache.org Low Vendor pom developer email donaldp@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email morgand@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email rsitze@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer email tn@apache.org Low Vendor pom developer id baliuka Medium Vendor pom developer id bstansberry Medium Vendor pom developer id costin Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dennisl Medium Vendor pom developer id donaldp Medium Vendor pom developer id ggregory Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rsitze Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id skitching Medium Vendor pom developer id tn Medium Vendor pom developer name Brian Stansberry Medium Vendor pom developer name Costin Manolache Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dennis Lundberg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Juozas Baliuka Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Peter Donald Medium Vendor pom developer name Richard Sitze Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer org Apache Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-logging Highest Vendor pom name Apache Commons Logging High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-logging/ Highest Product file name commons-logging High Product jar package name apache Highest Product jar package name commons Highest Product jar package name logging Highest Product Manifest automatic-module-name org.apache.commons.logging Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low Product Manifest Bundle-Name Apache Commons Logging Medium Product Manifest bundle-symbolicname org.apache.commons.commons-logging Medium Product Manifest Implementation-Title Apache Commons Logging High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Logging Medium Product pom artifactid commons-logging Highest Product pom developer email baliuka@apache.org Low Product pom developer email costin@apache.org Low Product pom developer email craigmcc@apache.org Low Product pom developer email dennisl@apache.org Low Product pom developer email donaldp@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email morgand@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email rsitze@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer email skitching@apache.org Low Product pom developer email tn@apache.org Low Product pom developer id baliuka Low Product pom developer id bstansberry Low Product pom developer id costin Low Product pom developer id craigmcc Low Product pom developer id dennisl Low Product pom developer id donaldp Low Product pom developer id ggregory Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rsitze Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id skitching Low Product pom developer id tn Low Product pom developer name Brian Stansberry Low Product pom developer name Costin Manolache Low Product pom developer name Craig McClanahan Low Product pom developer name Dennis Lundberg Low Product pom developer name Gary Gregory Low Product pom developer name Juozas Baliuka Low Product pom developer name Morgan Delagrange Low Product pom developer name Peter Donald Low Product pom developer name Richard Sitze Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer name Thomas Neidhart Low Product pom developer org Apache Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-logging Highest Product pom name Apache Commons Logging High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-logging/ Medium Version file version 1.3.5 High Version Manifest Bundle-Version 1.3.5 High Version Manifest Implementation-Version 1.3.5 High Version pom parent-version 1.3.5 Low Version pom version 1.3.5 Highest
pkg:maven/commons-logging/commons-logging@1.3.5
(Confidence :High)
Description:
Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.
License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.48.0/error_prone_annotations-2.48.0.jar
MD5: 5eba47749e8c9d5335cbbc5963300607
SHA1: bbe30942a31d1778c74cb272321267eca82dc708
SHA256: b49c5c958316ed67a09c699dda9aa749caf434d51d863dea599ef36a49b9c855
Referenced In Project/Scope: RealLifeDeveloper Common:compile
error_prone_annotations-2.48.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.google.code.gson/gson@2.14.0
Evidence
Type Source Name Value Confidence Vendor file name error_prone_annotations High Vendor jar package name annotations Highest Vendor jar package name errorprone Highest Vendor jar package name google Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Vendor Manifest bundle-symbolicname com.google.errorprone.annotations Medium Vendor Manifest multi-release true Low Vendor pom artifactid error_prone_annotations Highest Vendor pom artifactid error_prone_annotations Low Vendor pom groupid com.google.errorprone Highest Vendor pom name error-prone annotations High Vendor pom parent-artifactid error_prone_parent Low Product file name error_prone_annotations High Product jar package name annotations Highest Product jar package name errorprone Highest Product jar package name google Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Product Manifest Bundle-Name error-prone annotations Medium Product Manifest bundle-symbolicname com.google.errorprone.annotations Medium Product Manifest multi-release true Low Product pom artifactid error_prone_annotations Highest Product pom groupid com.google.errorprone Highest Product pom name error-prone annotations High Product pom parent-artifactid error_prone_parent Medium Version file version 2.48.0 High Version Manifest Bundle-Version 2.48.0 High Version pom version 2.48.0 Highest
pkg:maven/com.google.errorprone/error_prone_annotations@2.48.0
(Confidence :High)
Description:
Gson JSON library
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar
MD5: 43b20830936ec97d8df6b174e3509d9e
SHA1: efc0e34ede4e3204eaefb84a00e55e8c86634382
SHA256: 2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f
Referenced In Project/Scope: RealLifeDeveloper Common:compile
gson-2.14.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name gson High Vendor jar package name google Highest Vendor jar package name gson Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Vendor Manifest bundle-docurl https://github.com/google/gson Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor Manifest multi-release true Low Vendor pom artifactid gson Highest Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product file name gson High Product jar package name google Highest Product jar package name gson Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Product Manifest bundle-docurl https://github.com/google/gson Low Product Manifest Bundle-Name Gson Medium Product Manifest bundle-symbolicname com.google.gson Medium Product Manifest multi-release true Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version file version 2.14.0 High Version Manifest Bundle-Version 2.14.0 High Version pom version 2.14.0 Highest
Description:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.22/jackson-annotations-2.22.jar
MD5: 04c11c456fd1e21b9a21c25c665109cc
SHA1: 15c67f9498d6934cff9510fc70c5a12e52290457
SHA256: 21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-annotations-2.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jackson-annotations High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-annotations Highest Vendor pom artifactid jackson-annotations Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-annotations High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-annotations High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name Jackson-annotations Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product Manifest Implementation-Title Jackson-annotations High Product Manifest specification-title Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-annotations High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.22 High Version Manifest Implementation-Version 2.22 High Version pom version 2.22 Highest
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.22.2/jackson-core-2.22.2.jar
MD5: f341c2ed9f8d995ac068841925cf34d1
SHA1: 13a748ea3e329fa220076e021b45c8391b32420c
SHA256: ff167a6317be15895706c26668f45b898efe40ab8780970658210fe1393d52a6
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-core-2.22.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jackson-core High Vendor jar package name base Highest Vendor jar package name com Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Highest Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name com Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.22.2 High Version Manifest Bundle-Version 2.22.2 High Version Manifest Implementation-Version 2.22.2 High Version pom version 2.22.2 Highest
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.22.2/jackson-databind-2.22.2.jar
MD5: f67b45152b83310e3d75ffefc5b7ce32
SHA1: 921bd2092b0c539b2876de7063d55c72edcd05d3
SHA256: d0da14c12b16b5d54719aa172d83b542ff4abeb8b0fb7db476fde8ceece760ca
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-databind-2.22.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jackson-databind High Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Highest Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.22.2 High Version Manifest Bundle-Version 2.22.2 High Version Manifest Implementation-Version 2.22.2 High Version pom version 2.22.2 Highest
Description:
Pile of code that is shared by all Jackson-based Jakarta-RS
providers.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/jakarta/rs/jackson-jakarta-rs-base/2.22.2/jackson-jakarta-rs-base-2.22.2.jar
MD5: 6e5ef7c9d18bbe6146a09d1e813d58b2
SHA1: a1a35c6ac1be546fab6b94fdd6f2c8701bc4109c
SHA256: 98c330671a0354c735e05be1a367cbdb724bb8e738f19835d1a3e095740250b4
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-jakarta-rs-base-2.22.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jackson-jakarta-rs-base High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jakarta Highest Vendor jar package name rs Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.jakarta.rs.jackson-jakarta-rs-base Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.jakarta.rs Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-jakarta-rs-base Highest Vendor pom artifactid jackson-jakarta-rs-base Low Vendor pom groupid com.fasterxml.jackson.jakarta.rs Highest Vendor pom name Jackson Jakarta-RS: base High Vendor pom parent-artifactid jackson-jakarta-rs-providers Low Product file name jackson-jakarta-rs-base High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jakarta Highest Product jar package name rs Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base Low Product Manifest Bundle-Name Jackson Jakarta-RS: base Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.jakarta.rs.jackson-jakarta-rs-base Medium Product Manifest Implementation-Title Jackson Jakarta-RS: base High Product Manifest multi-release true Low Product Manifest specification-title Jackson Jakarta-RS: base Medium Product pom artifactid jackson-jakarta-rs-base Highest Product pom groupid com.fasterxml.jackson.jakarta.rs Highest Product pom name Jackson Jakarta-RS: base High Product pom parent-artifactid jackson-jakarta-rs-providers Medium Version file version 2.22.2 High Version Manifest Bundle-Version 2.22.2 High Version Manifest Implementation-Version 2.22.2 High Version pom version 2.22.2 Highest
pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.2
(Confidence :High)
Description:
Functionality to handle JSON input/output for Jakarta-RS implementations
(like Jersey and RESTeasy) using standard Jackson data binding.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/jakarta/rs/jackson-jakarta-rs-json-provider/2.22.2/jackson-jakarta-rs-json-provider-2.22.2.jar
MD5: ee847989ca84752ae528f0f792b765f9
SHA1: ad01960595f28cd594e1100ca22fea4d0cee79c7
SHA256: e240f805c812f840d2b2a67fb706fc14420b5004b9bb88c36aeb09840ea122d3
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-jakarta-rs-json-provider-2.22.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name jackson-jakarta-rs-json-provider High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jakarta Highest Vendor jar package name rs Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.jakarta.rs.jackson-jakarta-rs-json-provider Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.jakarta.rs Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-jakarta-rs-json-provider Highest Vendor pom artifactid jackson-jakarta-rs-json-provider Low Vendor pom groupid com.fasterxml.jackson.jakarta.rs Highest Vendor pom name Jackson Jakarta-RS: JSON High Vendor pom parent-artifactid jackson-jakarta-rs-providers Low Product file name jackson-jakarta-rs-json-provider High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jakarta Highest Product jar package name rs Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider Low Product Manifest Bundle-Name Jackson Jakarta-RS: JSON Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.jakarta.rs.jackson-jakarta-rs-json-provider Medium Product Manifest Implementation-Title Jackson Jakarta-RS: JSON High Product Manifest multi-release true Low Product Manifest specification-title Jackson Jakarta-RS: JSON Medium Product pom artifactid jackson-jakarta-rs-json-provider Highest Product pom groupid com.fasterxml.jackson.jakarta.rs Highest Product pom name Jackson Jakarta-RS: JSON High Product pom parent-artifactid jackson-jakarta-rs-providers Medium Version file version 2.22.2 High Version Manifest Bundle-Version 2.22.2 High Version Manifest Implementation-Version 2.22.2 High Version pom version 2.22.2 Highest
pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
(Confidence :High)
Description:
Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative
to "native" Jackson annotations, for configuring data-binding.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/module/jackson-module-jakarta-xmlbind-annotations/2.22.2/jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
MD5: ebe859210c694cc567d7883c1b4926d9
SHA1: 9d372f6c35d6cd30f4f3e72a2d39caedb321bea9
SHA256: e5f7efb6086f5036ae4c64d3c2059cf193a980099d7079d562006275c60badb7
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jackson-module-jakarta-xmlbind-annotations-2.22.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jackson-module-jakarta-xmlbind-annotations High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jakarta Highest Vendor jar package name module Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-base Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.module.jackson-module-jakarta-xmlbind-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.module Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-module-jakarta-xmlbind-annotations Highest Vendor pom artifactid jackson-module-jakarta-xmlbind-annotations Low Vendor pom groupid com.fasterxml.jackson.module Highest Vendor pom name Jackson module: Jakarta XML Bind Annotations (jakarta.xml.bind) High Vendor pom parent-artifactid jackson-modules-base Low Vendor pom url FasterXML/jackson-modules-base Highest Product file name jackson-module-jakarta-xmlbind-annotations High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jakarta Highest Product jar package name module Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-base Low Product Manifest Bundle-Name Jackson module: Jakarta XML Bind Annotations (jakarta.xml.bind) Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.module.jackson-module-jakarta-xmlbind-annotations Medium Product Manifest Implementation-Title Jackson module: Jakarta XML Bind Annotations (jakarta.xml.bind) High Product Manifest multi-release true Low Product Manifest specification-title Jackson module: Jakarta XML Bind Annotations (jakarta.xml.bind) Medium Product pom artifactid jackson-module-jakarta-xmlbind-annotations Highest Product pom groupid com.fasterxml.jackson.module Highest Product pom name Jackson module: Jakarta XML Bind Annotations (jakarta.xml.bind) High Product pom parent-artifactid jackson-modules-base Medium Product pom url FasterXML/jackson-modules-base High Version file version 2.22.2 High Version Manifest Bundle-Version 2.22.2 High Version Manifest Implementation-Version 2.22.2 High Version pom version 2.22.2 Highest
pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.2
(Confidence :High)
Description:
Specification
License:
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256: 01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.2
Evidence
Type Source Name Value Confidence Vendor file name jakarta.activation-api High Vendor jar package name activation Highest Vendor jar package name jakarta Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.activation-api Medium Vendor Manifest extension-name jakarta.activation Medium Vendor Manifest implementation-build-id 7f7d358 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.activation-api Highest Vendor pom artifactid jakarta.activation-api Low Vendor pom developer email bill.shannon@oracle.com Low Vendor pom developer id shannon Medium Vendor pom developer name Bill Shannon Medium Vendor pom developer org Oracle Medium Vendor pom groupid jakarta.activation Highest Vendor pom name Jakarta Activation API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url jakartaee/jaf-api Highest Vendor pom (hint) developer org sun Medium Product file name jakarta.activation-api High Product jar package name activation Highest Product jar package name jakarta Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Activation API Medium Product Manifest bundle-symbolicname jakarta.activation-api Medium Product Manifest extension-name jakarta.activation Medium Product Manifest implementation-build-id 7f7d358 Low Product Manifest Implementation-Title Jakarta Activation API High Product Manifest specification-title Jakarta Activation Specification Medium Product pom artifactid jakarta.activation-api Highest Product pom developer email bill.shannon@oracle.com Low Product pom developer id shannon Low Product pom developer name Bill Shannon Low Product pom developer org Oracle Low Product pom groupid jakarta.activation Highest Product pom name Jakarta Activation API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url jakartaee/jaf-api High Version file version 2.1.3 High Version Manifest Bundle-Version 2.1.3 High Version pom parent-version 2.1.3 Low Version pom version 2.1.3 Highest
pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3
(Confidence :High)
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256: b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-jpa@4.1.0
Evidence
Type Source Name Value Confidence Vendor file name jakarta.annotation-api High Vendor jar package name annotation Highest Vendor jar package name jakarta Highest Vendor Manifest build-jdk-spec 18 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium Vendor Manifest extension-name jakarta.annotation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.annotation-api Highest Vendor pom artifactid jakarta.annotation-api Low Vendor pom developer name Dmitry Kornilov Medium Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid jakarta.annotation Highest Vendor pom name Jakarta Annotations API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest Product file name jakarta.annotation-api High Product jar package name annotation Highest Product jar package name jakarta Highest Product Manifest build-jdk-spec 18 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Annotations API Medium Product Manifest bundle-symbolicname jakarta.annotation-api Medium Product Manifest extension-name jakarta.annotation Medium Product pom artifactid jakarta.annotation-api Highest Product pom developer name Dmitry Kornilov Low Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid jakarta.annotation Highest Product pom name Jakarta Annotations API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium Version file version 3.0.0 High Version Manifest Bundle-Version 3.0.0 High Version Manifest Implementation-Version 3.0.0 High Version pom parent-version 3.0.0 Low Version pom version 3.0.0 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0
(Confidence :High)
Description:
Jakarta Persistence 3.2 API jar
License:
Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.2.0/jakarta.persistence-api-3.2.0.jar
MD5: 79acec18d202797dcba1fff596a47684
SHA1: bb75a113f3fa191c2c7ee7b206d8e674251b3129
SHA256: be8a26b0e75c84c1b7600f759256fbc68d60333d89ec0ce3f784fc3ffa09aa8c
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jakarta.persistence-api-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name jakarta.persistence-api High Vendor jar package name jakarta Highest Vendor jar package name persistence Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.persistence-api Medium Vendor Manifest extension-name jakarta.persistence Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.persistence-api Highest Vendor pom artifactid jakarta.persistence-api Low Vendor pom developer id lukasj Medium Vendor pom developer name Lukas Jungmann Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid jakarta.persistence Highest Vendor pom name Jakarta Persistence API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url jakartaee/persistence Highest Product file name jakarta.persistence-api High Product jar package name jakarta Highest Product jar package name persistence Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Persistence API jar Medium Product Manifest bundle-symbolicname jakarta.persistence-api Medium Product Manifest extension-name jakarta.persistence Medium Product pom artifactid jakarta.persistence-api Highest Product pom developer id lukasj Low Product pom developer name Lukas Jungmann Low Product pom developer org Oracle, Inc. Low Product pom groupid jakarta.persistence Highest Product pom name Jakarta Persistence API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url jakartaee/persistence High Version file version 3.2.0 High Version Manifest Bundle-Version 3.2.0 High Version Manifest Implementation-Version 3.2.0 High Version pom parent-version 3.2.0 Low Version pom version 3.2.0 Highest
pkg:maven/jakarta.persistence/jakarta.persistence-api@3.2.0
(Confidence :High)
Description:
Jakarta Servlet 6.1
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.1.0/jakarta.servlet-api-6.1.0.jar
MD5: 314c930b3e40ac1abc3529c7c9942f09
SHA1: 1169a246913fe3823782af7943e7a103634867c5
SHA256: 8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4
Referenced In Project/Scope: RealLifeDeveloper Common:provided
jakarta.servlet-api-6.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name jakarta.servlet-api High Vendor jar package name jakarta Highest Vendor jar package name servlet Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium Vendor Manifest extension-name jakarta.servlet Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.eclipse Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.servlet-api Highest Vendor pom artifactid jakarta.servlet-api Low Vendor pom developer id yaminikb Medium Vendor pom developer name Yamini K B Medium Vendor pom developer org Oracle Corporation Medium Vendor pom developer org URL http://www.oracle.com/ Medium Vendor pom groupid jakarta.servlet Highest Vendor pom name Jakarta Servlet High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest Product file name jakarta.servlet-api High Product jar package name jakarta Highest Product jar package name servlet Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Servlet Medium Product Manifest bundle-symbolicname jakarta.servlet-api Medium Product Manifest extension-name jakarta.servlet Medium Product pom artifactid jakarta.servlet-api Highest Product pom developer id yaminikb Low Product pom developer name Yamini K B Low Product pom developer org Oracle Corporation Low Product pom developer org URL http://www.oracle.com/ Low Product pom groupid jakarta.servlet Highest Product pom name Jakarta Servlet High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium Version file version 6.1.0 High Version Manifest Bundle-Version 6.1.0 High Version Manifest Implementation-Version 6.1.0 High Version pom parent-version 6.1.0 Low Version pom version 6.1.0 Highest
pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0
(Confidence :High)
Description:
Jakarta RESTful Web Services
License:
https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/4.0.0/jakarta.ws.rs-api-4.0.0.jar
MD5: 9b7cc90c000f193157d60d95caf45972
SHA1: c27a67f84ca491efcb3fa68f4df926e8a110069e
SHA256: 6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6
Referenced In Project/Scope: RealLifeDeveloper Common:provided
jakarta.ws.rs-api-4.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name jakarta.ws.rs-api High Vendor hint analyzer vendor web services Medium Vendor jar package name jakarta Highest Vendor jar package name rs Highest Vendor jar package name ws Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low Vendor Manifest bundle-symbolicname jakarta.ws.rs-api Medium Vendor Manifest extension-name jakarta.ws.rs Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.ws.rs-api Highest Vendor pom artifactid jakarta.ws.rs-api Low Vendor pom groupid jakarta.ws.rs Highest Vendor pom name Jakarta RESTful WS API High Vendor pom parent-artifactid all Low Product file name jakarta.ws.rs-api High Product hint analyzer product web services Medium Product jar package name jakarta Highest Product jar package name rs Highest Product jar package name ws Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low Product Manifest Bundle-Name Jakarta RESTful WS API Medium Product Manifest bundle-symbolicname jakarta.ws.rs-api Medium Product Manifest extension-name jakarta.ws.rs Medium Product pom artifactid jakarta.ws.rs-api Highest Product pom groupid jakarta.ws.rs Highest Product pom name Jakarta RESTful WS API High Product pom parent-artifactid all Medium Version file version 4.0.0 High Version Manifest Bundle-Version 4.0.0 High Version Manifest Implementation-Version 4.0.0 High Version pom version 4.0.0 Highest
pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0
(Confidence :High)
Description:
Jakarta XML Binding API 4.0 Design Specification
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.4/jakarta.xml.bind-api-4.0.4.jar
MD5: 6dd465a232e545193ab8ab77cc4fbdb9
SHA1: d6d2327f3817d9a33a3b6b8f2e15a96bc2e7afdc
SHA256: c507ca69a8c6dd11bf4afeec9e0d412c4fa3933fffb0a84680ea5727e8472124
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jakarta.xml.bind-api-4.0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.5.Final
Evidence
Type Source Name Value Confidence Vendor file name jakarta.xml.bind-api High Vendor jar package name bind Highest Vendor jar package name jakarta Highest Vendor jar package name xml Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.xml.bind-api Medium Vendor Manifest extension-name jakarta.xml.bind Medium Vendor Manifest implementation-build-id 1df980a Low Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.xml.bind-api Highest Vendor pom artifactid jakarta.xml.bind-api Low Vendor pom groupid jakarta.xml.bind Highest Vendor pom name Jakarta XML Binding API High Vendor pom parent-artifactid jakarta.xml.bind-api-parent Low Product file name jakarta.xml.bind-api High Product jar package name bind Highest Product jar package name jakarta Highest Product jar package name xml Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta XML Binding API Medium Product Manifest bundle-symbolicname jakarta.xml.bind-api Medium Product Manifest extension-name jakarta.xml.bind Medium Product Manifest implementation-build-id 1df980a Low Product pom artifactid jakarta.xml.bind-api Highest Product pom groupid jakarta.xml.bind Highest Product pom name Jakarta XML Binding API High Product pom parent-artifactid jakarta.xml.bind-api-parent Medium Version file version 4.0.4 High Version Manifest Bundle-Version 4.0.4 High Version Manifest Implementation-Version 4.0.4 High Version pom version 4.0.4 Highest
pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4
(Confidence :High)
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.1/jspecify-1.0.1.jar
MD5: d4fe1ea4d953b66fcb1d6043c22bffcf
SHA1: 3d60fd98eb8ade73004f4195c37b6317e02cf3d7
SHA256: 070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66
Referenced In Project/Scope: RealLifeDeveloper Common:compile
jspecify-1.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.1.3
Evidence
Type Source Name Value Confidence Vendor file name jspecify High Vendor jar package name annotations Highest Vendor jar package name jspecify Highest Vendor Manifest bundle-docurl https://jspecify.dev/docs/start-here Low Vendor Manifest bundle-symbolicname org.jspecify.jspecify Medium Vendor pom artifactid jspecify Highest Vendor pom artifactid jspecify Low Vendor pom developer email cpovirk@google.com Low Vendor pom developer email dpb@google.com Low Vendor pom developer email kevinb9n@gmail.com Low Vendor pom developer id cpovirk Medium Vendor pom developer id kevinb9n Medium Vendor pom developer id netdpb Medium Vendor pom developer name Chris Povirk Medium Vendor pom developer name David P. Baker Medium Vendor pom developer name Kevin Bourrillion Medium Vendor pom developer org Google Medium Vendor pom groupid org.jspecify Highest Vendor pom name JSpecify annotations High Vendor pom url https://jspecify.dev/ Highest Product file name jspecify High Product jar package name annotations Highest Product jar package name jspecify Highest Product Manifest bundle-docurl https://jspecify.dev/docs/start-here Low Product Manifest Bundle-Name JSpecify annotations Medium Product Manifest bundle-symbolicname org.jspecify.jspecify Medium Product pom artifactid jspecify Highest Product pom developer email cpovirk@google.com Low Product pom developer email dpb@google.com Low Product pom developer email kevinb9n@gmail.com Low Product pom developer id cpovirk Low Product pom developer id kevinb9n Low Product pom developer id netdpb Low Product pom developer name Chris Povirk Low Product pom developer name David P. Baker Low Product pom developer name Kevin Bourrillion Low Product pom developer org Google Low Product pom groupid org.jspecify Highest Product pom name JSpecify annotations High Product pom url https://jspecify.dev/ Medium Version file version 1.0.1 High Version Manifest Bundle-Version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
pkg:maven/org.jspecify/jspecify@1.0.1
(Confidence :High)
cpe:2.3:a:google:gmail:1.0.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
JSR305 Annotations for Findbugs
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: RealLifeDeveloper Common:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
Evidence
Type Source Name Value Confidence Vendor file name jsr305 High Vendor Manifest bundle-symbolicname org.jsr-305 Medium Vendor pom artifactid jsr305 Highest Vendor pom artifactid jsr305 Low Vendor pom groupid com.google.code.findbugs Highest Vendor pom name FindBugs-jsr305 High Vendor pom url http://findbugs.sourceforge.net/ Highest Product file name jsr305 High Product Manifest Bundle-Name FindBugs-jsr305 Medium Product Manifest bundle-symbolicname org.jsr-305 Medium Product pom artifactid jsr305 Highest Product pom groupid com.google.code.findbugs Highest Product pom name FindBugs-jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Version file version 3.0.2 High Version Manifest Bundle-Version 3.0.2 High Version pom version 3.0.2 Highest
pkg:maven/com.google.code.findbugs/jsr305@3.0.2
(Confidence :High)
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/kafka/kafka-clients/4.2.1/kafka-clients-4.2.1.jar
MD5: be7702041671e7cab7fbbe302c667e02
SHA1: 6addc9b1f038d2dde0fc6b34464b1061ec5fb4c1
SHA256: 6a281026416938a53c105f2d91d2807fdc83d5658452abf0ad1b6d8ab8a553c8
Referenced In Project/Scope: RealLifeDeveloper Common:compile
kafka-clients-4.2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.kafka/spring-kafka@4.1.1
Evidence
Type Source Name Value Confidence Vendor file name kafka-clients High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name clients Highest Vendor jar package name common Low Vendor jar package name kafka Highest Vendor jar package name kafka Low Vendor pom artifactid kafka-clients Highest Vendor pom artifactid kafka-clients Low Vendor pom groupid org.apache.kafka Highest Vendor pom name Apache Kafka High Vendor pom url https://kafka.apache.org Highest Product file name kafka-clients High Product jar package name apache Highest Product jar package name clients Highest Product jar package name common Low Product jar package name kafka Highest Product jar package name kafka Low Product pom artifactid kafka-clients Highest Product pom groupid org.apache.kafka Highest Product pom name Apache Kafka High Product pom url https://kafka.apache.org Medium Version file version 4.2.1 High Version pom version 4.2.1 Highest
CVE-2026-41115 suppress
An improper authorization vulnerability has been identified in Apache Kafka.
The implementation of the CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This discrepancy can result in misconfigured Access Control Lists (ACLs) and unintended security postures, like granting READ permission to users who should not be able to join/sync groups, or allowing users without READ permission (but with DESCRIBE permission) to access sensitive group metadata.
The correct permission for CONSUMER_GROUP_DESCRIBE API is DESCRIBE GROUP so the current implementation is correct. However, the kafka documentation as well as the KIP-848 will be updated to reflect the correct permission. We advise the Kafka users to review existing group ACLs to ensure the principle of least privilege.
CWE-285 Improper Authorization
CVSSv3:
Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
A versatile, industrial-grade, and reference implementation of the Log4j API.
It bundles a rich set of components to assist various use cases:
Appenders targeting files, network sockets, databases, SMTP servers;
Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
It contains several extension points to introduce custom components, if needed.
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-core/2.26.1/log4j-core-2.26.1.jar
MD5: 915f6e01608f3d5d61b8725ce226b30a
SHA1: 1941359537713285d224714f63ca4e5cf004d575
SHA256: 2ec8c3bf5a6d7c89be8620116a2fc973f7dda1ad0261ad393c4d4726edfd3dcb
Referenced In Project/Scope: RealLifeDeveloper Common:compile
log4j-core-2.26.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name log4j-core High Vendor jar package name apache Highest Vendor jar package name core Highest Vendor jar package name log4j Highest Vendor jar package name logging Highest Vendor jar package name org Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest provide-capability osgi.service;objectClass:List="javax.annotation.processing.Processor";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.core.util.ContextDataProvider";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.message.ThreadDumpMessage$ThreadInfoFactory";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.annotation.processing.Processor";register:="org.apache.logging.log4j.core.config.plugins.processor.GraalVmProcessor",osgi.serviceloader;osgi.serviceloader="javax.annotation.processing.Processor";register:="org.apache.logging.log4j.core.config.plugins.processor.PluginProcessor",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.core.util.ContextDataProvider";register:="org.apache.logging.log4j.core.impl.ThreadContextDataProvider",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.message.ThreadDumpMessage$ThreadInfoFactory";register:="org.apache.logging.log4j.core.message.ExtendedThreadInfoFactory",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.log4j.core.impl.Log4jProvider" Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid log4j-core Highest Vendor pom artifactid log4j-core Low Vendor pom groupid org.apache.logging.log4j Highest Vendor pom name Apache Log4j Core High Vendor pom parent-artifactid log4j Low Vendor pom url https://logging.apache.org/log4j/2.x/ Highest Product file name log4j-core High Product jar package name apache Highest Product jar package name core Highest Product jar package name log4j Highest Product jar package name logging Highest Product jar package name org Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name Apache Log4j Core Medium Product Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Product Manifest Implementation-Title Apache Log4j Core High Product Manifest multi-release true Low Product Manifest provide-capability osgi.service;objectClass:List="javax.annotation.processing.Processor";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.core.util.ContextDataProvider";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.message.ThreadDumpMessage$ThreadInfoFactory";effective:=active,osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.annotation.processing.Processor";register:="org.apache.logging.log4j.core.config.plugins.processor.GraalVmProcessor",osgi.serviceloader;osgi.serviceloader="javax.annotation.processing.Processor";register:="org.apache.logging.log4j.core.config.plugins.processor.PluginProcessor",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.core.util.ContextDataProvider";register:="org.apache.logging.log4j.core.impl.ThreadContextDataProvider",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.message.ThreadDumpMessage$ThreadInfoFactory";register:="org.apache.logging.log4j.core.message.ExtendedThreadInfoFactory",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.log4j.core.impl.Log4jProvider" Low Product Manifest specification-title Apache Log4j Core Medium Product pom artifactid log4j-core Highest Product pom groupid org.apache.logging.log4j Highest Product pom name Apache Log4j Core High Product pom parent-artifactid log4j Medium Product pom url https://logging.apache.org/log4j/2.x/ Medium Version file version 2.26.1 High Version Manifest Bundle-Version 2.26.1 High Version Manifest Implementation-Version 2.26.1 High Version pom version 2.26.1 Highest
Related Dependencies
log4j-api-2.26.1.jar
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.26.1/log4j-api-2.26.1.jar
MD5: 8ed35fc9ea449bc9e21a8139842d6233
SHA1: b9864ed8d0c01f65f3b0bf70f1447e5cc1b49c24
SHA256: f1810a4704ccce019d02bba029dc02a4f2ac0c997f647b465e7d409c1927f822
pkg:maven/org.apache.logging.log4j/log4j-api@2.26.1
Description:
logback-core module
License:
https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.6.3/logback-core-1.6.3.jar
MD5: 6d741138bccf87bb512572c44cc7f43f
SHA1: ae9a279c723035307735fc4daf527a9076ea3f77
SHA256: a6967a28c8b086dee75a694d2f6fb8830c71153539866d7d8af065c9b6df91e0
Referenced In Project/Scope: RealLifeDeveloper Common:compile
logback-core-1.6.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Highest Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.6.3 High Version Manifest Bundle-Version 1.6.3 High Version Manifest Implementation-Version 1.6.3 High Version pom version 1.6.3 Highest
Related Dependencies
logback-classic-1.6.3.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.6.3/logback-classic-1.6.3.jar
MD5: c4c3210a25faea352ecfe9ea2c219c14
SHA1: a8fc332633a9da2e543afb20357b7a015437f0a9
SHA256: beebede8db065fe1b72909ecc66bb49acda618901635d86c25fce14a5915e37e
pkg:maven/ch.qos.logback/logback-classic@1.6.3
Description:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSE
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.46/lombok-1.18.46.jar
MD5: e02f419a66b86c594ffcafc862778723
SHA1: a5cfe99fdf320e84955ef653f2ce1bf789d11385
SHA256: 01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126
Referenced In Project/Scope: RealLifeDeveloper Common:provided
lombok-1.18.46.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name lombok High Vendor jar package name java Highest Vendor jar package name lombok Highest Vendor jar package name tostring Highest Vendor Manifest automatic-module-name lombok Medium Vendor Manifest can-redefine-classes true Low Vendor pom artifactid lombok Highest Vendor pom artifactid lombok Low Vendor pom developer email reinier@projectlombok.org Low Vendor pom developer email roel@projectlombok.org Low Vendor pom developer id rspilker Medium Vendor pom developer id rzwitserloot Medium Vendor pom developer name Reinier Zwitserloot Medium Vendor pom developer name Roel Spilker Medium Vendor pom groupid org.projectlombok Highest Vendor pom name Project Lombok High Vendor pom url https://projectlombok.org Highest Product file name lombok High Product jar package name java Highest Product jar package name lombok Highest Product jar package name tostring Highest Product Manifest automatic-module-name lombok Medium Product Manifest can-redefine-classes true Low Product pom artifactid lombok Highest Product pom developer email reinier@projectlombok.org Low Product pom developer email roel@projectlombok.org Low Product pom developer id rspilker Low Product pom developer id rzwitserloot Low Product pom developer name Reinier Zwitserloot Low Product pom developer name Roel Spilker Low Product pom groupid org.projectlombok Highest Product pom name Project Lombok High Product pom url https://projectlombok.org Medium Version file version 1.18.46 High Version Manifest lombok-version 1.18.46 Medium Version pom version 1.18.46 Highest
pkg:maven/org.projectlombok/lombok@1.18.46
(Confidence :High)
File Path: /home/runner/.m2/repository/org/projectlombok/lombok/1.18.46/lombok-1.18.46.jar/lombok/launch/mavenEcjBootstrapAgent.jarMD5: 8b80305e4846088e139701372844e637SHA1: 4b03ce7b33d535b42e4a84e106c3647760eb8769SHA256: 639da94437813649eac5af6d8154d736355f27199fc8aaeda85904fce947ee4f
Referenced In Project/Scope: RealLifeDeveloper Common:provided
Evidence
Type Source Name Value Confidence Vendor file name mavenEcjBootstrapAgent High Vendor jar package name launch Low Vendor jar package name lombok Low Vendor Manifest can-redefine-classes true Low Product file name mavenEcjBootstrapAgent High Product jar package name launch Low Product Manifest can-redefine-classes true Low
Description:
Java bindings and pure Java implementations of LZ4 and XXHash
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar
MD5: 8ea4d77e6a652da0162a69b6aea6e4a9
SHA1: f541d7f910fe3d76f38f799c507c48cc81b12ecb
SHA256: a58a84c4271e50df4c96ed916ccb7e48a869f8ed9cdcda1ad5d3d4c33b0214a3
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
lz4-java-1.10.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.kafka/spring-kafka@4.1.1
Evidence
Type Source Name Value Confidence Vendor file name lz4-java High Vendor jar package name lz4 Highest Vendor jar package name xxhash Highest Vendor Manifest automatic-module-name org.lz4.java Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname lz4-java Medium Vendor Manifest originally-created-by Maven JAR Plugin 3.4.1 Low Vendor pom artifactid lz4-java Highest Vendor pom artifactid lz4-java Low Vendor pom developer email jpountz@gmail.com Low Vendor pom developer email me@yawk.at Low Vendor pom developer email Rei.Odaira@gmail.com Low Vendor pom developer id jpountz Medium Vendor pom developer id odaira Medium Vendor pom developer id yawkat Medium Vendor pom developer name Adrien Grand Medium Vendor pom developer name Jonas Konrad Medium Vendor pom developer name Rei Odaira Medium Vendor pom groupid at.yawk.lz4 Highest Vendor pom name LZ4 Java Compression High Vendor pom url yawkat/lz4-java Highest Product file name lz4-java High Product jar package name lz4 Highest Product jar package name xxhash Highest Product Manifest automatic-module-name org.lz4.java Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name lz4-java Medium Product Manifest bundle-symbolicname lz4-java Medium Product Manifest originally-created-by Maven JAR Plugin 3.4.1 Low Product pom artifactid lz4-java Highest Product pom developer email jpountz@gmail.com Low Product pom developer email me@yawk.at Low Product pom developer email Rei.Odaira@gmail.com Low Product pom developer id jpountz Low Product pom developer id odaira Low Product pom developer id yawkat Low Product pom developer name Adrien Grand Low Product pom developer name Jonas Konrad Low Product pom developer name Rei Odaira Low Product pom groupid at.yawk.lz4 Highest Product pom name LZ4 Java Compression High Product pom url yawkat/lz4-java High Version file version 1.10.1 High Version pom version 1.10.1 Highest
pkg:maven/at.yawk.lz4/lz4-java@1.10.1
(Confidence :High)
Description:
An OSGi-fied version of markdown4j
File Path: /home/runner/.m2/repository/org/commonjava/googlecode/markdown4j/markdown4j/2.2-cj-1.1/markdown4j-2.2-cj-1.1.jarMD5: ab033e59e040e34bb79bb2220b0b7207SHA1: 9e920737c365f0a7985d2050bb99a7edd36b6e19SHA256: 28eb991f702c6d85d6cafd68c24d1ce841d1f5c995c943f25aedb433c0c13f60
Referenced In Project/Scope: RealLifeDeveloper Common:compile
markdown4j-2.2-cj-1.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name markdown4j-2.2-cj High Vendor jar package name markdown4j Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor Manifest bundle-symbolicname markdown4j Medium Vendor pom artifactid markdown4j Highest Vendor pom artifactid markdown4j Low Vendor pom groupid org.commonjava.googlecode.markdown4j Highest Vendor pom parent-artifactid commonjava Low Vendor pom parent-groupid org.commonjava Medium Product file name markdown4j-2.2-cj High Product jar package name markdown4j Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name markdown4j Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product Manifest bundle-symbolicname markdown4j Medium Product pom artifactid markdown4j Highest Product pom groupid org.commonjava.googlecode.markdown4j Highest Product pom parent-artifactid commonjava Medium Product pom parent-groupid org.commonjava Medium Version pom parent-version 2.2-cj-1.1 Low Version pom version 2.2-cj-1.1 Highest
pkg:maven/org.commonjava.googlecode.markdown4j/markdown4j@2.2-cj-1.1
(Confidence :High)
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.17.1/micrometer-commons-1.17.1.jar
MD5: aa9291ad211473834d3d48453ae05ea1
SHA1: b1c3fdea68c5a81495cf1c16cf2905c5ad9f30d2
SHA256: f2cee6ef046e72eec8128474c7f58c6217173b45ae373c30de0289f2a56ab0fd
Referenced In Project/Scope: RealLifeDeveloper Common:compile
micrometer-commons-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence Vendor file name micrometer-commons High Vendor jar package name common Highest Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor Manifest automatic-module-name micrometer.commons Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-commons Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-commons Highest Vendor pom artifactid micrometer-commons Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-commons High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-commons High Product jar package name common Highest Product jar package name io Highest Product jar package name micrometer Highest Product Manifest automatic-module-name micrometer.commons Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-commons Medium Product Manifest bundle-symbolicname micrometer-commons Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-commons Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-commons High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-commons@1.17.1
(Confidence :High)
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.17.1/micrometer-observation-1.17.1.jar
MD5: f63baf5840fb4446b9313a3bd8773da1
SHA1: 24c0b05bc06a9ab6f4e09a48949b6eccc179ca15
SHA256: eb34f0cd84a879393ae5c21160fc06385ccdc74f36a4d1e31b199f59acfdaf71
Referenced In Project/Scope: RealLifeDeveloper Common:compile
micrometer-observation-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence Vendor file name micrometer-observation High Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor jar package name observation Highest Vendor Manifest automatic-module-name micrometer.observation Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-observation Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-observation Highest Vendor pom artifactid micrometer-observation Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-observation High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-observation High Product jar package name io Highest Product jar package name micrometer Highest Product jar package name observation Highest Product Manifest automatic-module-name micrometer.observation Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-observation Medium Product Manifest bundle-symbolicname micrometer-observation Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-observation Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-observation High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-observation@1.17.1
(Confidence :High)
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/netty/netty-codec-protobuf/4.2.17.Final/netty-codec-protobuf-4.2.17.Final.jar
MD5: 3805f0d2a076ed73bbf521aecbf8af50
SHA1: 3390d16030c6e3bcc2ef8a31718222e45e1fb9a1
SHA256: 44b2fcc4bc1d6c01edafe6ae6c8a7de7c3c5bad59697a93b6b879a45a78a5387
Referenced In Project/Scope: RealLifeDeveloper Common:compile
netty-codec-protobuf-4.2.17.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.rabbitmq/amqp-client@5.35.0
Evidence
Type Source Name Value Confidence Vendor file name netty-codec-protobuf High Vendor jar package name codec Highest Vendor jar package name io Highest Vendor jar package name netty Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.codec-protobuf Medium Vendor Manifest implementation-url https://netty.io/netty-codec-protobuf/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-codec-protobuf Highest Vendor pom artifactid netty-codec-protobuf Low Vendor pom groupid io.netty Highest Vendor pom name Netty/Codec/Protobuf High Vendor pom parent-artifactid netty-parent Low Product file name netty-codec-protobuf High Product jar package name 11 Highest Product jar package name codec Highest Product jar package name io Highest Product jar package name netty Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/Codec/Protobuf Medium Product Manifest bundle-symbolicname io.netty.codec-protobuf Medium Product Manifest Implementation-Title Netty/Codec/Protobuf High Product Manifest implementation-url https://netty.io/netty-codec-protobuf/ Low Product Manifest multi-release true Low Product Manifest specification-title Netty/Codec/Protobuf Medium Product pom artifactid netty-codec-protobuf Highest Product pom groupid io.netty Highest Product pom name Netty/Codec/Protobuf High Product pom parent-artifactid netty-parent Medium Version Manifest Bundle-Version 4.2.17.Final High Version Manifest Implementation-Version 4.2.17.Final High Version pom version 4.2.17.Final Highest
Description:
Java Concurrency Tools Core Library
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.17.Final/netty-common-4.2.17.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 8341fc089534412b4da254daf73fafc9
SHA1: d7ad6a6097946fd431f78598315022370a402631
SHA256: 6a7d37edc57b6a2b90a05037013fcc0b5eeac5e3dbf1d7109f7639c71cde41e7
Referenced In Project/Scope: RealLifeDeveloper Common:compile
Evidence
Type Source Name Value Confidence Vendor pom artifactid jctools-core Low Vendor pom groupid org.jctools Highest Vendor pom name Java Concurrency Tools Core Library High Vendor pom url JCTools Highest Product pom artifactid jctools-core Highest Product pom groupid org.jctools Highest Product pom name Java Concurrency Tools Core Library High Product pom url JCTools High Version pom version 4.0.6 Highest
pkg:maven/org.jctools/jctools-core@4.0.6
(Confidence :High)
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/netty/netty-transport/4.2.17.Final/netty-transport-4.2.17.Final.jar
MD5: 81ff6c65c703d34a26599f435f858f75
SHA1: 34335dc106caa0aefc242900d38ade65c8de64f4
SHA256: d2409ce3a735cbab4188d0ea5d82abed823a6a07a8389f49af4a9e1243a562bc
Referenced In Project/Scope: RealLifeDeveloper Common:compile
netty-transport-4.2.17.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.rabbitmq/amqp-client@5.35.0
Evidence
Type Source Name Value Confidence Vendor file name netty-transport High Vendor jar package name io Highest Vendor jar package name netty Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.transport Medium Vendor Manifest implementation-url https://netty.io/netty-transport/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-transport Highest Vendor pom artifactid netty-transport Low Vendor pom groupid io.netty Highest Vendor pom name Netty/Transport High Vendor pom parent-artifactid netty-parent Low Product file name netty-transport High Product jar package name 11 Highest Product jar package name io Highest Product jar package name netty Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/Transport Medium Product Manifest bundle-symbolicname io.netty.transport Medium Product Manifest Implementation-Title Netty/Transport High Product Manifest implementation-url https://netty.io/netty-transport/ Low Product Manifest multi-release true Low Product Manifest specification-title Netty/Transport Medium Product pom artifactid netty-transport Highest Product pom groupid io.netty Highest Product pom name Netty/Transport High Product pom parent-artifactid netty-parent Medium Version Manifest Bundle-Version 4.2.17.Final High Version Manifest Implementation-Version 4.2.17.Final High Version pom version 4.2.17.Final Highest
Related Dependencies
netty-buffer-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-buffer/4.2.17.Final/netty-buffer-4.2.17.Final.jar
MD5: 5ea817ded4fca341ad462486a8b45e64
SHA1: daba397ff4ce7b22f6ac1e1f419e6e7754c135be
SHA256: 0d249178ec0204b35a6ad3e5ac8a6c2ecb3eb496c6cdae40b8eca4fa3cb6a0c7
pkg:maven/io.netty/netty-buffer@4.2.17.Final
netty-codec-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec/4.2.17.Final/netty-codec-4.2.17.Final.jar
MD5: 54f78650b7eef6d067419a6ceacf056e
SHA1: 87cf7956788d6cb451f5018fdd2b0973c9fdcc47
SHA256: ac76f972446a2f72818441f746d0e73c58519a4687bf680d2b687d7dc5e28e2e
pkg:maven/io.netty/netty-codec@4.2.17.Final
netty-codec-base-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-base/4.2.17.Final/netty-codec-base-4.2.17.Final.jar
MD5: 12b3b00718ba067e304b12570a05314c
SHA1: 7034de26b574322f365c790b9d6eb0634edab854
SHA256: 3b92bc3b7d231fa6f4889b2b9281cae6b634428b8121fb1b9b5fccba1543d352
pkg:maven/io.netty/netty-codec-base@4.2.17.Final
netty-codec-compression-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-compression/4.2.17.Final/netty-codec-compression-4.2.17.Final.jar
MD5: 0a6333fdc827c129fc8836a3fc7ba887
SHA1: ac6829387c962174e2efbcc94e833c9524ca1459
SHA256: 425b287a1f36986a5c8edd76379a49decdf99d284f3454f3fa607a073bfb2c18
pkg:maven/io.netty/netty-codec-compression@4.2.17.Final
netty-codec-marshalling-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-codec-marshalling/4.2.17.Final/netty-codec-marshalling-4.2.17.Final.jar
MD5: ef2a0088ee304dac7922cadceaf0f481
SHA1: 168871f9f073d58cc5ff2fcac2d3bf9edd2eed82
SHA256: ee5ffed638da6b7e2b4567559bd5f78b18f635cdaa4f3b6d23aa27ccf6cb57c2
pkg:maven/io.netty/netty-codec-marshalling@4.2.17.Final
netty-common-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.17.Final/netty-common-4.2.17.Final.jar
MD5: fe50eabfdf19b59022b133b7d5e7de8d
SHA1: 57fa9e9af0bf70530e2fe1c8c8d6138f9167cf7a
SHA256: 502aae2a6680e9bca3558a3fa098f06dc4d87340b8b714e925a6d690871c092a
pkg:maven/io.netty/netty-common@4.2.17.Final
netty-handler-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-handler/4.2.17.Final/netty-handler-4.2.17.Final.jar
MD5: e32139e4772b66f72955f802bba2c699
SHA1: ed53dae90d09306b42bc886fa292510abdf5c5dc
SHA256: 4df11c7520b556c5e2c84b939182699d48fcbb09e97a6bb5e1c0b6835227d126
pkg:maven/io.netty/netty-handler@4.2.17.Final
netty-resolver-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-resolver/4.2.17.Final/netty-resolver-4.2.17.Final.jar
MD5: ffc4fd6b3d092275c4b5f12e07eb733e
SHA1: 6cba9d93bb06297cef0b7ac34e3873b6a25b4e3b
SHA256: 7a4b599b9c0c29a505d3b7311f142df883fb27d0f67495a7cbaf533b0e456623
pkg:maven/io.netty/netty-resolver@4.2.17.Final
netty-transport-native-unix-common-4.2.17.Final.jar
File Path: /home/runner/.m2/repository/io/netty/netty-transport-native-unix-common/4.2.17.Final/netty-transport-native-unix-common-4.2.17.Final.jar
MD5: bc05fe306c299f5fa22a1f13aa81c288
SHA1: c404f2366b51136d4a2fde678eec95be6d10ca16
SHA256: e01aa467b9104de54a57c08c290f70b22e53ec97cf5583c87c112170ef5832cc
pkg:maven/io.netty/netty-transport-native-unix-common@4.2.17.Final
Description:
JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring
License:
"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M4/org.eclipse.sisu.inject-0.9.0.M4.jar
MD5: ee95c1a11ba4ca38368d71ef05676cfc
SHA1: a062d8e12dc62e698c9f943a3fce94e366b4e220
SHA256: 1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004
Referenced In Project/Scope: RealLifeDeveloper Common:provided
org.eclipse.sisu.inject-0.9.0.M4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.sisu.inject High Vendor jar package name dynamic Highest Vendor jar package name eclipse Highest Vendor jar package name inject Highest Vendor jar package name sisu Highest Vendor jar package name wiring Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Vendor Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium Vendor pom artifactid eclipse.sisu.inject Low Vendor pom artifactid org.eclipse.sisu.inject Highest Vendor pom groupid org.eclipse.sisu Highest Vendor pom name : High Vendor pom parent-artifactid sisu-inject Low Product file name org.eclipse.sisu.inject High Product jar package name dynamic Highest Product jar package name eclipse Highest Product jar package name inject Highest Product jar package name sisu Highest Product jar package name sonatype Highest Product jar package name wiring Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Product Manifest Bundle-Name Sisu-Inject (Incubation) Medium Product Manifest bundle-symbolicname org.eclipse.sisu.inject;singleton:=true Medium Product pom artifactid eclipse.sisu.inject Highest Product pom artifactid org.eclipse.sisu.inject Highest Product pom groupid org.eclipse.sisu Highest Product pom name : High Product pom parent-artifactid sisu-inject Medium Version Manifest Bundle-Version 0.9.0.M4 High Version pom version 0.9.0.M4 Highest
pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4
(Confidence :High)
Description:
Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container
License:
"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /home/runner/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M4/org.eclipse.sisu.plexus-0.9.0.M4.jar
MD5: 51eea54bbc85323fc68f6a79f9b8f179
SHA1: 478f7935e88cd9da7ef01f509e4853e80ede9034
SHA256: b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7
Referenced In Project/Scope: RealLifeDeveloper Common:provided
org.eclipse.sisu.plexus-0.9.0.M4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.sisu.plexus High Vendor jar package name eclipse Highest Vendor jar package name plexus Highest Vendor jar package name sisu Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Vendor Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Vendor Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Vendor Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium Vendor pom artifactid eclipse.sisu.plexus Low Vendor pom artifactid org.eclipse.sisu.plexus Highest Vendor pom groupid org.eclipse.sisu Highest Vendor pom name : High Vendor pom parent-artifactid sisu-inject Low Product file name org.eclipse.sisu.plexus High Product jar package name eclipse Highest Product jar package name plexus Highest Product jar package name sisu Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-copyright Copyright (c) 2010-present Sonatype, Inc. and others Low Product Manifest bundle-developers mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus" Low Product Manifest bundle-docurl http://www.eclipse.org/sisu/ Low Product Manifest Bundle-Name Sisu-Plexus (Incubation) Medium Product Manifest bundle-symbolicname org.eclipse.sisu.plexus;singleton:=true Medium Product pom artifactid eclipse.sisu.plexus Highest Product pom artifactid org.eclipse.sisu.plexus Highest Product pom groupid org.eclipse.sisu Highest Product pom name : High Product pom parent-artifactid sisu-inject Medium Version Manifest Bundle-Version 0.9.0.M4 High Version pom version 0.9.0.M4 Highest
pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
(Confidence :High)
Description:
OSGi Companion Code for org.osgi.annotation.versioning Version 1.1.2
License:
Apache-2.0: https://opensource.org/licenses/Apache-2.0
File Path: /home/runner/.m2/repository/org/osgi/org.osgi.annotation.versioning/1.1.2/org.osgi.annotation.versioning-1.1.2.jar
MD5: a61b3b8d09c85ad296c61e21bf77ec70
SHA1: dc3cd4ec96c0b3c5459fe00694bd73a816ecf93e
SHA256: f51f235e80df8ffbc30ef1b557b6ea38a696632d675404ec117e952978b8b863
Referenced In Project/Scope: RealLifeDeveloper Common:provided
org.osgi.annotation.versioning-1.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name org.osgi.annotation.versioning High Vendor jar package name annotation Highest Vendor jar package name osgi Highest Vendor jar package name versioning Highest Vendor Manifest automatic-module-name org.osgi.annotation.versioning Medium Vendor Manifest bundle-copyright Copyright (c) Contributors to the Eclipse Foundation Low Vendor Manifest bundle-developers osgi; email=osgi-wg@eclipse.org; name="OSGi Working Group"; organization="Eclipse Foundation"; organizationUrl="https://www.osgi.org/" Low Vendor Manifest bundle-docurl https://docs.osgi.org/ Low Vendor Manifest bundle-symbolicname org.osgi.annotation.versioning Medium Vendor Manifest git-descriptor r8-cmpn-final Low Vendor Manifest git-sha db39ce672917cadce15aad14a33795cbed7e8791 Low Vendor pom artifactid org.osgi.annotation.versioning Highest Vendor pom artifactid osgi.annotation.versioning Low Vendor pom developer email osgi-wg@eclipse.org Low Vendor pom developer id osgi Medium Vendor pom developer name OSGi Working Group Medium Vendor pom developer org Eclipse Foundation Medium Vendor pom developer org URL https://www.osgi.org/ Medium Vendor pom groupid org.osgi Highest Vendor pom name org.osgi:org.osgi.annotation.versioning High Vendor pom organization name Eclipse Foundation High Vendor pom url https://docs.osgi.org/ Highest Product file name org.osgi.annotation.versioning High Product jar package name annotation Highest Product jar package name osgi Highest Product jar package name versioning Highest Product Manifest automatic-module-name org.osgi.annotation.versioning Medium Product Manifest bundle-copyright Copyright (c) Contributors to the Eclipse Foundation Low Product Manifest bundle-developers osgi; email=osgi-wg@eclipse.org; name="OSGi Working Group"; organization="Eclipse Foundation"; organizationUrl="https://www.osgi.org/" Low Product Manifest bundle-docurl https://docs.osgi.org/ Low Product Manifest Bundle-Name org.osgi:org.osgi.annotation.versioning Medium Product Manifest bundle-symbolicname org.osgi.annotation.versioning Medium Product Manifest git-descriptor r8-cmpn-final Low Product Manifest git-sha db39ce672917cadce15aad14a33795cbed7e8791 Low Product pom artifactid org.osgi.annotation.versioning Highest Product pom artifactid osgi.annotation.versioning Highest Product pom developer email osgi-wg@eclipse.org Low Product pom developer id osgi Low Product pom developer name OSGi Working Group Low Product pom developer org Eclipse Foundation Low Product pom developer org URL https://www.osgi.org/ Low Product pom groupid org.osgi Highest Product pom name org.osgi:org.osgi.annotation.versioning High Product pom organization name Eclipse Foundation Low Product pom url https://docs.osgi.org/ Medium Version file version 1.1.2 High Version pom version 1.1.2 Highest
pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2
(Confidence :High)
Description:
A class loader framework
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-classworlds/2.6.0/plexus-classworlds-2.6.0.jar
MD5: 67e722b27e3a33b33c1b263b99dd7c43
SHA1: 8587e80fcb38e70b70fae8d5914b6376bfad6259
SHA256: 52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549
Referenced In Project/Scope: RealLifeDeveloper Common:provided
plexus-classworlds-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4
Evidence
Type Source Name Value Confidence Vendor file name plexus-classworlds High Vendor jar package name classworlds Highest Vendor jar package name codehaus Highest Vendor jar package name plexus Highest Vendor Manifest bundle-docurl http://codehaus-plexus.github.io/ Low Vendor Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium Vendor pom artifactid plexus-classworlds Highest Vendor pom artifactid plexus-classworlds Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Classworlds High Vendor pom parent-artifactid plexus Low Product file name plexus-classworlds High Product jar package name classworlds Highest Product jar package name codehaus Highest Product jar package name plexus Highest Product Manifest bundle-docurl http://codehaus-plexus.github.io/ Low Product Manifest Bundle-Name Plexus Classworlds Medium Product Manifest bundle-symbolicname org.codehaus.plexus.classworlds Medium Product pom artifactid plexus-classworlds Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Classworlds High Product pom parent-artifactid plexus Medium Version file version 2.6.0 High Version Manifest Bundle-Version 2.6.0 High Version pom parent-version 2.6.0 Low Version pom version 2.6.0 Highest
pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0
(Confidence :High)
Description:
Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
standard annotations instead of javadoc annotations.
File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jarMD5: 141fd7a2ae613cb17d25ecd54b43eb3fSHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9SHA256: bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac
Referenced In Project/Scope: RealLifeDeveloper Common:provided
plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name plexus-component-annotations High Vendor jar package name annotations Highest Vendor jar package name codehaus Highest Vendor jar package name codehaus Low Vendor jar package name component Highest Vendor jar package name component Low Vendor jar package name plexus Highest Vendor jar package name plexus Low Vendor pom artifactid plexus-component-annotations Highest Vendor pom artifactid plexus-component-annotations Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus :: Component Annotations High Vendor pom parent-artifactid plexus-containers Low Product file name plexus-component-annotations High Product jar package name annotations Highest Product jar package name annotations Low Product jar package name codehaus Highest Product jar package name component Highest Product jar package name component Low Product jar package name plexus Highest Product jar package name plexus Low Product pom artifactid plexus-component-annotations Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus :: Component Annotations High Product pom parent-artifactid plexus-containers Medium Version file version 2.1.0 High Version pom version 2.1.0 Highest
pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0
(Confidence :High)
Description:
A collection of various utility classes to ease working with strings, files, command lines, XML and
more.
File Path: /home/runner/.m2/repository/org/codehaus/plexus/plexus-utils/3.5.1/plexus-utils-3.5.1.jarMD5: cdec471a77f52e687d0df4c43f392a71SHA1: c6bfb17c97ecc8863e88778ea301be742c62b06dSHA256: 86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b
Referenced In Project/Scope: RealLifeDeveloper Common:provided
plexus-utils-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name plexus-utils High Vendor jar package name codehaus Highest Vendor jar package name org Highest Vendor jar package name plexus Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest multi-release true Low Vendor pom artifactid plexus-utils Highest Vendor pom artifactid plexus-utils Low Vendor pom groupid org.codehaus.plexus Highest Vendor pom name Plexus Common Utilities High Vendor pom parent-artifactid plexus Low Product file name plexus-utils High Product jar package name 11 Highest Product jar package name codehaus Highest Product jar package name org Highest Product jar package name plexus Highest Product jar package name xml Highest Product Manifest build-jdk-spec 11 Low Product Manifest multi-release true Low Product pom artifactid plexus-utils Highest Product pom groupid org.codehaus.plexus Highest Product pom name Plexus Common Utilities High Product pom parent-artifactid plexus Medium Version file version 3.5.1 High Version pom parent-version 3.5.1 Low Version pom version 3.5.1 Highest
CVE-2025-67030 suppress
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:
Base Score: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
The slf4j API
License:
https://opensource.org/license/mit File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.18/slf4j-api-2.0.18.jar
MD5: fe2837bd49bfb76657419002fed20ca9
SHA1: 78a9e7a37cd6360e0b818e86341b24123d28d4df
SHA256: 44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55
Referenced In Project/Scope: RealLifeDeveloper Common:compile
slf4j-api-2.0.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Highest Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.18 High Version Manifest Bundle-Version 2.0.18 High Version Manifest Implementation-Version 2.0.18 High Version pom version 2.0.18 Highest
pkg:maven/org.slf4j/slf4j-api@2.0.18
(Confidence :High)
Description:
snappy-java: A fast compression/decompression library
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.7/snappy-java-1.1.10.7.jar
MD5: d74bb2e2857f965683c9de931b71fc86
SHA1: 3049f95640f4625a945cfab85715f603fa4c8f80
SHA256: 4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
snappy-java-1.1.10.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.kafka/spring-kafka@4.1.1
Evidence
Type Source Name Value Confidence Vendor file name snappy-java High Vendor jar package name snappy Highest Vendor jar package name xerial Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-docurl http://www.xerial.org/ Low Vendor Manifest bundle-nativecode org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x86-64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=amd64,org/xerial/snappy/native/Windows/x86/snappyjava.dll;osname=win32;processor=x86,org/xerial/snappy/native/Mac/x86/libsnappyjava.jnilib;osname=macosx;processor=x86,org/xerial/snappy/native/Mac/x86_64/libsnappyjava.dylib;osname=macosx;processor=x86-64,org/xerial/snappy/native/Mac/aarch64/libsnappyjava.dylib;osname=macosx;processor=aarch64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x86-64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=amd64,org/xerial/snappy/native/Linux/x86/libsnappyjava.so;osname=linux;processor=x86,org/xerial/snappy/native/Linux/aarch64/libsnappyjava.so;osname=linux;processor=aarch64,org/xerial/snappy/native/Linux/riscv64/libsnappyjava.so;osname=linux;processor=riscv64,org/xerial/snappy/native/Linux/arm/libsnappyjava.so;osname=linux;processor=arm,org/xerial/snappy/native/Linux/armv7/libsnappyjava.so;osname=linux;processor=arm_le,org/xerial/snappy/native/Linux/ppc64/libsnappyjava.so;osname=linux;processor=ppc64le,org/xerial/snappy/native/Linux/s390x/libsnappyjava.so;osname=linux;processor=s390x,org/xerial/snappy/native/Linux/loongarch64/libsnappyjava.so;osname=linux;processor=loongarch64,org/xerial/snappy/native/AIX/ppc/libsnappyjava.a;osname=aix;processor=ppc,org/xerial/snappy/native/AIX/ppc64/libsnappyjava.a;osname=aix;processor=ppc64,org/xerial/snappy/native/SunOS/x86/libsnappyjava.so;osname=sunos;processor=x86,org/xerial/snappy/native/SunOS/x86_64/libsnappyjava.so;osname=sunos;processor=x86-64,org/xerial/snappy/native/SunOS/sparc/libsnappyjava.so;osname=sunos;processor=sparc Low Vendor Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Vendor Manifest implementation-url https://github.com/xerial/snappy-java Low Vendor Manifest Implementation-Vendor xerial.org High Vendor Manifest Implementation-Vendor-Id org.xerial.snappy Medium Vendor Manifest specification-vendor xerial.org Low Vendor pom artifactid snappy-java Highest Vendor pom artifactid snappy-java Low Vendor pom developer email leo@xerial.org Low Vendor pom developer id leo Medium Vendor pom developer name Taro L. Saito Medium Vendor pom groupid org.xerial.snappy Highest Vendor pom name snappy-java High Vendor pom organization name xerial.org High Vendor pom organization url xerial/snappy-java Medium Vendor pom url xerial/snappy-java Highest Product file name snappy-java High Product jar package name snappy Highest Product jar package name xerial Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-docurl http://www.xerial.org/ Low Product Manifest Bundle-Name snappy-java: A fast compression/decompression library Medium Product Manifest bundle-nativecode org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x86-64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=amd64,org/xerial/snappy/native/Windows/x86/snappyjava.dll;osname=win32;processor=x86,org/xerial/snappy/native/Mac/x86/libsnappyjava.jnilib;osname=macosx;processor=x86,org/xerial/snappy/native/Mac/x86_64/libsnappyjava.dylib;osname=macosx;processor=x86-64,org/xerial/snappy/native/Mac/aarch64/libsnappyjava.dylib;osname=macosx;processor=aarch64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x86-64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=amd64,org/xerial/snappy/native/Linux/x86/libsnappyjava.so;osname=linux;processor=x86,org/xerial/snappy/native/Linux/aarch64/libsnappyjava.so;osname=linux;processor=aarch64,org/xerial/snappy/native/Linux/riscv64/libsnappyjava.so;osname=linux;processor=riscv64,org/xerial/snappy/native/Linux/arm/libsnappyjava.so;osname=linux;processor=arm,org/xerial/snappy/native/Linux/armv7/libsnappyjava.so;osname=linux;processor=arm_le,org/xerial/snappy/native/Linux/ppc64/libsnappyjava.so;osname=linux;processor=ppc64le,org/xerial/snappy/native/Linux/s390x/libsnappyjava.so;osname=linux;processor=s390x,org/xerial/snappy/native/Linux/loongarch64/libsnappyjava.so;osname=linux;processor=loongarch64,org/xerial/snappy/native/AIX/ppc/libsnappyjava.a;osname=aix;processor=ppc,org/xerial/snappy/native/AIX/ppc64/libsnappyjava.a;osname=aix;processor=ppc64,org/xerial/snappy/native/SunOS/x86/libsnappyjava.so;osname=sunos;processor=x86,org/xerial/snappy/native/SunOS/x86_64/libsnappyjava.so;osname=sunos;processor=x86-64,org/xerial/snappy/native/SunOS/sparc/libsnappyjava.so;osname=sunos;processor=sparc Low Product Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Product Manifest Implementation-Title snappy-java High Product Manifest implementation-url https://github.com/xerial/snappy-java Low Product Manifest specification-title snappy-java Medium Product pom artifactid snappy-java Highest Product pom developer email leo@xerial.org Low Product pom developer id leo Low Product pom developer name Taro L. Saito Low Product pom groupid org.xerial.snappy Highest Product pom name snappy-java High Product pom organization name xerial.org Low Product pom url xerial/snappy-java High Version file version 1.1.10.7 High Version Manifest Bundle-Version 1.1.10.7 High Version Manifest Implementation-Version 1.1.10.7 High Version pom version 1.1.10.7 Highest
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.7/snappy-java-1.1.10.7.jar/org/xerial/snappy/native/Windows/aarch64/snappyjava.dllMD5: e048fff98f2eab2d60b8d1b0ba68c738SHA1: 2b35231edb0e225390bb9811a859ffdac70a4f5cSHA256: c8ffc0b29a931c12c134e62d78e78e60f4cb07d341176363729ad9ca64f65008
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.7/snappy-java-1.1.10.7.jar/org/xerial/snappy/native/Windows/x86/snappyjava.dllMD5: bf5815cae57523b4abc1e534c42be880SHA1: 076d9af93933210cb53a952a88b8163b3b0210f5SHA256: dd61eba39e26462d12828ca2c85a31bb6beec3ee0b27409ad78a92131a3a318a
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.7/snappy-java-1.1.10.7.jar/org/xerial/snappy/native/Windows/x86_64/snappyjava.dllMD5: bbf1620e74dd44a34e5a86ccd1c9dc70SHA1: e4150416cdb0f65ee39e0f1c0c921e3ff9937d4eSHA256: 3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
Description:
Annotations the SpotBugs tool supports
License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.10.4/spotbugs-annotations-4.10.4.jar
MD5: 472925cb4e5451c8f7a1aeeefe286622
SHA1: 7eb4c58212378becfb6ea6d236ec24a2352a316e
SHA256: 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
Referenced In Project/Scope: RealLifeDeveloper Common:provided
spotbugs-annotations-4.10.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name spotbugs-annotations High Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname spotbugs-annotations Medium Vendor pom artifactid spotbugs-annotations Highest Vendor pom artifactid spotbugs-annotations Low Vendor pom developer email andreas.sewe@codetrails.com Low Vendor pom developer email dbrosius@mebigfatguy.com Low Vendor pom developer email loskutov@gmx.de Low Vendor pom developer email skypencil@gmail.com Low Vendor pom developer id henrik242 Medium Vendor pom developer id iloveeclipse Medium Vendor pom developer id jsotuyod Medium Vendor pom developer id KengoTODA Medium Vendor pom developer id mebigfatguy Medium Vendor pom developer id sewe Medium Vendor pom developer id ThrawnCA Medium Vendor pom developer name Andreas Sewe Medium Vendor pom developer name Andrey Loskutov Medium Vendor pom developer name Dave Brosius Medium Vendor pom developer name Juan Martín Sotuyo Dodero Medium Vendor pom developer name Kengo TODA Medium Vendor pom groupid com.github.spotbugs Highest Vendor pom name SpotBugs Annotations High Vendor pom url https://spotbugs.github.io/ Highest Product file name spotbugs-annotations High Product Manifest automatic-module-name com.github.spotbugs.annotations Medium Product Manifest Bundle-Name spotbugs-annotations Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname spotbugs-annotations Medium Product pom artifactid spotbugs-annotations Highest Product pom developer email andreas.sewe@codetrails.com Low Product pom developer email dbrosius@mebigfatguy.com Low Product pom developer email loskutov@gmx.de Low Product pom developer email skypencil@gmail.com Low Product pom developer id henrik242 Low Product pom developer id iloveeclipse Low Product pom developer id jsotuyod Low Product pom developer id KengoTODA Low Product pom developer id mebigfatguy Low Product pom developer id sewe Low Product pom developer id ThrawnCA Low Product pom developer name Andreas Sewe Low Product pom developer name Andrey Loskutov Low Product pom developer name Dave Brosius Low Product pom developer name Juan Martín Sotuyo Dodero Low Product pom developer name Kengo TODA Low Product pom groupid com.github.spotbugs Highest Product pom name SpotBugs Annotations High Product pom url https://spotbugs.github.io/ Medium Version file version 4.10.4 High Version Manifest Bundle-Version 4.10.4 High Version pom version 4.10.4 Highest
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
(Confidence :High)
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.9/spring-core-7.0.9.jar
MD5: f87ba857b1fb00b125568d966aa66058
SHA1: e03c619fc5b26931973277f5ba65ae47967a20e3
SHA256: 5195f4722699b39878d99a832549fe65df2890b159d063b88fff31b1ca65ae36
Referenced In Project/Scope: RealLifeDeveloper Common:compile
spring-core-7.0.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.9
Evidence
Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name org Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.core Medium Vendor Manifest multi-release true Low Vendor pom artifactid spring-core Highest Vendor pom artifactid spring-core Low Vendor pom developer email juergen.hoeller@broadcom.com Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name io Highest Product jar package name org Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Product Manifest multi-release true Low Product pom artifactid spring-core Highest Product pom developer email juergen.hoeller@broadcom.com Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Core High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 7.0.9 High Version Manifest Implementation-Version 7.0.9 High Version pom version 7.0.9 Highest
Related Dependencies
spring-aop-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.9/spring-aop-7.0.9.jar
MD5: 1766c086d944229fdca3c052bd133735
SHA1: 35f68fd8cdf30444e18835cec152f2619c4c46c7
SHA256: b8c5d6bfcb1f4993f2cc124f7ab7fac40edf5256b9e43c2f7250a733cb5510e9
pkg:maven/org.springframework/spring-aop@7.0.9
spring-beans-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.9/spring-beans-7.0.9.jar
MD5: 4472076f5c22297927d129768a54119d
SHA1: 2bee42fa948a5f32761fd0838de3baa1f51c0225
SHA256: ff218b827a25c9e8929b0cd56dfb56916cea9d5b669ed97dc7cb262508ff548b
pkg:maven/org.springframework/spring-beans@7.0.9
spring-context-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.9/spring-context-7.0.9.jar
MD5: 4528f937c5eadd30458a0f19a977e3b8
SHA1: 7eb8e01ecf1633ddd4d64ca184194f967b6bc0aa
SHA256: 7552a2fcfa30cea53eb14d7a65a7a8e1b1dd82e832a7164fb7e6fb105f438858
pkg:maven/org.springframework/spring-context@7.0.9
spring-expression-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.9/spring-expression-7.0.9.jar
MD5: 46931226190dcd4ab0dd8862cd7f4986
SHA1: 9452ece85b97fa3e208046cc3a7e985c314b0034
SHA256: 046434c40f43819729b9b1db0e6c659dfa68184c1c2c2efa5f7b3a5b27c4e2e2
pkg:maven/org.springframework/spring-expression@7.0.9
spring-jdbc-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-jdbc/7.0.9/spring-jdbc-7.0.9.jar
MD5: 8ad57ba4acbff90453200358f014e282
SHA1: b1cfa486ba259e5fc93c67db9ad199ac44ac2f6d
SHA256: ca0d9af1c5721eef8cac1f94c8b9d27a753248bc33c86e3472bd3d1dbd78f450
pkg:maven/org.springframework/spring-jdbc@7.0.9
spring-messaging-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-messaging/7.0.9/spring-messaging-7.0.9.jar
MD5: bc8ac57b4df196abf087f50d67dce407
SHA1: f96b6ed4a35f5856b0bf1e535e7537204bac55b8
SHA256: 19ea7561e5d61e19bee0c94733d03bbf9384c9356eea2d4e90cce7ba3c0ab01b
pkg:maven/org.springframework/spring-messaging@7.0.9
spring-orm-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-orm/7.0.9/spring-orm-7.0.9.jar
MD5: b5946bb1e2d034e37934b3da54cd7ccf
SHA1: 06e3089628cb98c4b8498d4b0c9ff0df17de6afb
SHA256: d44082acd9377b67858ae207316057e2ef236a16c96e1b4fd8af8d43a6784b31
pkg:maven/org.springframework/spring-orm@7.0.9
spring-tx-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-tx/7.0.9/spring-tx-7.0.9.jar
MD5: c8cc114571fc0a24f02533159086f115
SHA1: 4912434272ba05818632fe87844532ae98a4af40
SHA256: bfb15da6e096e2c0752e9db9987d2415bf0da1d744efc988535c10c6b6c2eedd
pkg:maven/org.springframework/spring-tx@7.0.9
spring-web-7.0.9.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/7.0.9/spring-web-7.0.9.jar
MD5: 3ad4a5d872c4094ab34b16980aedafa9
SHA1: c42f4ce0cded1526527296726c4ed30335dfaa10
SHA256: 941ced476427bde2533872f293da535fd0258de3f3a650a7f1bfe01ed2927302
pkg:maven/org.springframework/spring-web@7.0.9
Description:
Core Spring concepts underpinning every Spring Data module.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-commons/4.1.0/spring-data-commons-4.1.0.jarMD5: e958df33b064ab5a8b6cdb09a554fbfdSHA1: e8d1077d09c20e9ecf3574a72ce5cc90a29b902aSHA256: c9e41d45b30aacc0ce50c4426f0650a3544c066ab5d6d0304840e6f878388c5c
Referenced In Project/Scope: RealLifeDeveloper Common:compile
spring-data-commons-4.1.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-commons High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name data Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.commons Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-commons Highest Vendor pom artifactid spring-data-commons Low Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data Core High Vendor pom parent-artifactid spring-data-parent Low Vendor pom parent-groupid org.springframework.data.build Medium Vendor pom url https://spring.io/projects/spring-data Highest Product file name spring-data-commons High Product jar package name core Highest Product jar package name data Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.commons Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data Core High Product pom artifactid spring-data-commons Highest Product pom groupid org.springframework.data Highest Product pom name Spring Data Core High Product pom parent-artifactid spring-data-parent Medium Product pom parent-groupid org.springframework.data.build Medium Product pom url https://spring.io/projects/spring-data Medium Version file version 4.1.0 High Version Manifest Implementation-Version 4.1.0 High Version pom version 4.1.0 Highest
pkg:maven/org.springframework.data/spring-data-commons@4.1.0
(Confidence :High)
Description:
Spring Data module for JPA repositories.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-jpa/4.1.0/spring-data-jpa-4.1.0.jarMD5: 4997e5be3b798b61a7df43a21fe80533SHA1: 6387c88a4a9637f129e0ebcad50ada478ad01c3fSHA256: 60b72b0513faecb3ef51f53f35d74de68b193af06dc7c1c66b54e265762bad66
Referenced In Project/Scope: RealLifeDeveloper Common:compile
spring-data-jpa-4.1.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-jpa High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name data Highest Vendor jar package name jpa Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.jpa Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-jpa Highest Vendor pom artifactid spring-data-jpa Low Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data JPA High Vendor pom parent-artifactid spring-data-jpa-parent Low Vendor pom url https://projects.spring.io/spring-data-jpa Highest Product file name spring-data-jpa High Product jar package name data Highest Product jar package name jpa Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.jpa Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data JPA High Product pom artifactid spring-data-jpa Highest Product pom groupid org.springframework.data Highest Product pom name Spring Data JPA High Product pom parent-artifactid spring-data-jpa-parent Medium Product pom url https://projects.spring.io/spring-data-jpa Medium Version file version 4.1.0 High Version Manifest Implementation-Version 4.1.0 High Version pom version 4.1.0 Highest
Description:
Spring Kafka Support
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/springframework/kafka/spring-kafka/4.1.1/spring-kafka-4.1.1.jar
MD5: 25a459383751519b34687c0b7b8d5acd
SHA1: 776de20398883112a34271200cb7a00b142ba7f9
SHA256: e0434aa0eca7fee4bcb0f39ed19cdc2bce387b60caa53cae9c5021c864ae11a3
Referenced In Project/Scope: RealLifeDeveloper Common:compile
spring-kafka-4.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name spring-kafka High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name kafka Highest Vendor jar package name springframework Highest Vendor jar package name support Highest Vendor Manifest automatic-module-name spring.kafka Medium Vendor Manifest implementation-url https://github.com/spring-projects/spring-kafka Low Vendor Manifest Implementation-Vendor Broadcom Inc. High Vendor Manifest Implementation-Vendor-Id org.springframework.kafka Medium Vendor pom artifactid spring-kafka Highest Vendor pom artifactid spring-kafka Low Vendor pom developer email artem.bilan@broadcom.com Low Vendor pom developer email github@gprussell.net Low Vendor pom developer email soby.chacko@broadcom.com Low Vendor pom developer id artembilan Medium Vendor pom developer id garyrussell Medium Vendor pom developer id sobychacko Medium Vendor pom developer name Artem Bilan Medium Vendor pom developer name Gary Russell Medium Vendor pom developer name Soby Chacko Medium Vendor pom groupid org.springframework.kafka Highest Vendor pom name Spring Kafka Support High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-kafka Medium Vendor pom url spring-projects/spring-kafka Highest Product file name spring-kafka High Product jar package name kafka Highest Product jar package name springframework Highest Product jar package name support Highest Product Manifest automatic-module-name spring.kafka Medium Product Manifest Implementation-Title spring-kafka High Product Manifest implementation-url https://github.com/spring-projects/spring-kafka Low Product pom artifactid spring-kafka Highest Product pom developer email artem.bilan@broadcom.com Low Product pom developer email github@gprussell.net Low Product pom developer email soby.chacko@broadcom.com Low Product pom developer id artembilan Low Product pom developer id garyrussell Low Product pom developer id sobychacko Low Product pom developer name Artem Bilan Low Product pom developer name Gary Russell Low Product pom developer name Soby Chacko Low Product pom groupid org.springframework.kafka Highest Product pom name Spring Kafka Support High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-kafka Low Product pom url spring-projects/spring-kafka High Version file version 4.1.1 High Version Manifest Implementation-Version 4.1.1 High Version pom version 4.1.1 Highest
pkg:maven/org.springframework.kafka/spring-kafka@4.1.1
(Confidence :High)
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/7.1.1/spring-security-core-7.1.1.jar
MD5: e9c072aeb1ab83fb92dd5a0bc556a857
SHA1: c0373b564151af7a3001ccfbea589bf37dd6dc3b
SHA256: 98a5011baa78df36fb184e6ce0e8e086ca9a64fcdd8f161c0a96475a3a0907bd
Referenced In Project/Scope: RealLifeDeveloper Common:compile
spring-security-core-7.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.security.core Medium Vendor pom artifactid spring-security-core Highest Vendor pom artifactid spring-security-core Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-core High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.security.core Medium Product Manifest Implementation-Title spring-security-core High Product pom artifactid spring-security-core Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-core High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 7.1.1 High Version Manifest Implementation-Version 7.1.1 High Version pom version 7.1.1 Highest
Related Dependencies
spring-security-crypto-7.1.1.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/7.1.1/spring-security-crypto-7.1.1.jar
MD5: cd2777efdf4d91dd0b264f608af574ef
SHA1: 5356e8056e4dcb18b12550c422fb12e0c8e742ae
SHA256: 6e8bb2337faccabd30626f917ed1d2bfa9dde982229b6b373b644d1a01635403
pkg:maven/org.springframework.security/spring-security-crypto@7.1.1
Description:
Tomcat JDBC Pool Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jdbc/11.0.25/tomcat-jdbc-11.0.25.jar
MD5: c689c8f3826866a45f2d0efc7a3ebe9d
SHA1: 0d6f94b16d1c776a21c4c9c51565016510520859
SHA256: 02ca9d7056cf2bb03f5c90aa903ed05c32273af32f7c47675b8d8a1832fedbab
Referenced In Project/Scope: RealLifeDeveloper Common:compile
tomcat-jdbc-11.0.25.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.reallifedeveloper/rld-common@3.0.7
Evidence
Type Source Name Value Confidence Vendor file name tomcat-jdbc High Vendor jar package name apache Highest Vendor jar package name jdbc Highest Vendor jar package name pool Highest Vendor jar package name tomcat Highest Vendor Manifest bundle-symbolicname org.apache.tomcat.jdbc Medium Vendor pom artifactid tomcat-jdbc Highest Vendor pom artifactid tomcat-jdbc Low Vendor pom groupid org.apache.tomcat Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-jdbc High Product jar package name apache Highest Product jar package name jdbc Highest Product jar package name pool Highest Product jar package name tomcat Highest Product Manifest Bundle-Name Apache Tomcat JDBC Connection Pool Medium Product Manifest bundle-symbolicname org.apache.tomcat.jdbc Medium Product pom artifactid tomcat-jdbc Highest Product pom groupid org.apache.tomcat Highest Product pom url https://tomcat.apache.org/ Medium Version file version 11.0.25 High Version Manifest Bundle-Version 11.0.25 High Version pom version 11.0.25 Highest
pkg:maven/org.apache.tomcat/tomcat-jdbc@11.0.25
(Confidence :High)
Description:
Tomcat Core Logging Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/11.0.25/tomcat-juli-11.0.25.jar
MD5: b7576d40f48f7b5f083aed6b96bc3477
SHA1: 5941280221132eb2a351b89df94e1bb26f70a9aa
SHA256: 38d05270255ff7ba19507bc9ba0b0c2d4ba312fa084d5c36c7e84cf4bdefa7d1
Referenced In Project/Scope: RealLifeDeveloper Common:compile
tomcat-juli-11.0.25.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-jdbc@11.0.25
Evidence
Type Source Name Value Confidence Vendor file name tomcat-juli High Vendor jar package name apache Highest Vendor jar package name juli Highest Vendor jar package name logging Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-juli Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest specification-vendor Apache Software Foundation Low Vendor pom artifactid tomcat-juli Highest Vendor pom artifactid tomcat-juli Low Vendor pom groupid org.apache.tomcat Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-juli High Product jar package name apache Highest Product jar package name juli Highest Product jar package name logging Highest Product Manifest Bundle-Name tomcat-juli Medium Product Manifest bundle-symbolicname org.apache.tomcat-juli Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest specification-title Apache Tomcat Medium Product pom artifactid tomcat-juli Highest Product pom groupid org.apache.tomcat Highest Product pom url https://tomcat.apache.org/ Medium Version file version 11.0.25 High Version Manifest Bundle-Version 11.0.25 High Version Manifest Implementation-Version 11.0.25 High Version pom version 11.0.25 Highest
pkg:maven/org.apache.tomcat/tomcat-juli@11.0.25
(Confidence :High)
Description:
JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.
License:
BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.6-10/zstd-jni-1.5.6-10.jar
MD5: 93299f5422c91c08b9e4b7c5e401dd56
SHA1: 7e146ecb598af55d1f64d1c118af27569a848558
SHA256: b6c3237e24b8252a5a9c3a0e1ae30ef8f323412e74bd358548b7a9e527d676df
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
zstd-jni-1.5.6-10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.kafka/spring-kafka@4.1.1
Evidence
Type Source Name Value Confidence Vendor file name zstd-jni High Vendor jar package name github Highest Vendor jar package name luben Highest Vendor jar package name zstd Highest Vendor Manifest bundle-nativecode darwin/x86_64/libzstd-jni-1.5.6-10.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.6-10.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.6-10.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.6-10.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.6-10.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.6-10.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.6-10.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.6-10.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=x86,aix/ppc64/libzstd-jni-1.5.6-10.so;osname=AIX;processor=ppc64 Low Vendor Manifest bundle-symbolicname com.github.luben.zstd-jni Medium Vendor Manifest Implementation-Vendor com.github.luben High Vendor Manifest Implementation-Vendor-Id com.github.luben Medium Vendor Manifest specification-vendor com.github.luben Low Vendor pom artifactid zstd-jni Highest Vendor pom artifactid zstd-jni Low Vendor pom developer email karavelov@gmail.com Low Vendor pom developer id karavelov Medium Vendor pom developer name Luben Karavelov Medium Vendor pom developer org com.github.luben Medium Vendor pom developer org URL https://github.com/luben Medium Vendor pom groupid com.github.luben Highest Vendor pom name zstd-jni High Vendor pom organization name com.github.luben High Vendor pom url luben/zstd-jni Highest Product file name zstd-jni High Product jar package name github Highest Product jar package name luben Highest Product jar package name zstd Highest Product Manifest Bundle-Name zstd-jni Medium Product Manifest bundle-nativecode darwin/x86_64/libzstd-jni-1.5.6-10.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.6-10.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.6-10.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.6-10.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.6-10.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.6-10.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.6-10.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.6-10.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.6-10.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.6-10.dll;osname=Win32;processor=x86,aix/ppc64/libzstd-jni-1.5.6-10.so;osname=AIX;processor=ppc64 Low Product Manifest bundle-symbolicname com.github.luben.zstd-jni Medium Product Manifest Implementation-Title zstd-jni High Product Manifest specification-title zstd-jni Medium Product pom artifactid zstd-jni Highest Product pom developer email karavelov@gmail.com Low Product pom developer id karavelov Low Product pom developer name Luben Karavelov Low Product pom developer org com.github.luben Low Product pom developer org URL https://github.com/luben Low Product pom groupid com.github.luben Highest Product pom name zstd-jni High Product pom organization name com.github.luben Low Product pom url luben/zstd-jni High Version Manifest Implementation-Version 1.5.6-10 High Version pom version 1.5.6-10 Highest
pkg:maven/com.github.luben/zstd-jni@1.5.6-10
(Confidence :High)
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.6-10/zstd-jni-1.5.6-10.jar/win/aarch64/libzstd-jni-1.5.6-10.dllMD5: fcca7fbcff1ddc750350750f12d41cb1SHA1: 72dd401e86d3aef67daad672f11349862c054827SHA256: 1e26e1d71a16a8d5416cae974662828893df9e7da333f8602661e2e89a80309b
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name libzstd-jni High Product file name libzstd-jni High Version file name libzstd-jni Medium Version file version 1.5.6.10 High
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.6-10/zstd-jni-1.5.6-10.jar/win/amd64/libzstd-jni-1.5.6-10.dllMD5: ce287e8dea537d3acbda8f2482c2d37dSHA1: 2baab66a170639d4df506decb49029931634a69aSHA256: 35a19029edf45958d22c4d6f2f32a6476115952ec09ffba44e5ab72516f207b4
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name libzstd-jni High Product file name libzstd-jni High Version file name libzstd-jni Medium Version file version 1.5.6.10 High
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.6-10/zstd-jni-1.5.6-10.jar/win/x86/libzstd-jni-1.5.6-10.dllMD5: 27759f91efabb0b8afb562ea4ebfab2cSHA1: 797058d885cb3dbcb10bd46701464035f3ab5183SHA256: b73a69920a6cd97afa0b022402356c61c449129065e26188c9c596d2a85c24b6
Referenced In Project/Scope: RealLifeDeveloper Common:runtime
Evidence
Type Source Name Value Confidence Vendor file name libzstd-jni High Product file name libzstd-jni High Version file name libzstd-jni Medium Version file version 1.5.6.10 High