Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 13.0.0Report Generated On : Tue, 10 Nov 2026 16:22:14 GMTDependencies Scanned : 311 (191 unique)Vulnerable Dependencies : 4 Vulnerabilities Found : 16Vulnerabilities Suppressed : 0
...
NVD API Last Checked : 2026-11-10T16:21:56ZNVD API Last Modified : 2026-11-10T16:21:34Z
Summary
Summary of Vulnerable Dependencies (click to show all)
Description:
This is a Java implementation of the geodesic algorithms from
GeographicLib. This is a self-contained library which makes it
easy to do geodesic computations for an ellipsoid of revolution in
a Java program. It requires Java version 1.1 or later.
License:
The MIT License(MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/net/sf/geographiclib/GeographicLib-Java/1.49/GeographicLib-Java-1.49.jar
MD5: 5536ff35e4bb0b3262c6f62f43105ea4
SHA1: 7ff2164e69fa04e1ef2ca5079e1cee298a936ea1
SHA256: 78c292f7e6910d51a15fc9088c301fac3b4c0a43ac5ae17499f5763b4dd9aca8
Referenced In Project/Scope: Tailormap API:compile
GeographicLib-Java-1.49.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-referencing@35.2
Evidence
Type Source Name Value Confidence Vendor file name GeographicLib-Java High Vendor jar package name geodesic Highest Vendor jar package name geographiclib Highest Vendor jar package name geographiclib Low Vendor jar package name net Highest Vendor jar package name net Low Vendor jar package name sf Highest Vendor jar package name sf Low Vendor pom artifactid GeographicLib-Java Highest Vendor pom artifactid GeographicLib-Java Low Vendor pom developer email charles@karney.com Low Vendor pom developer name Charles Karney Medium Vendor pom developer org URL
https://sourceforge.net/u/karney/profile/
Medium Vendor pom groupid net.sf.geographiclib Highest Vendor pom name Java implementation of GeographicLib High Vendor pom url https://geographiclib.sourceforge.io Highest Product file name GeographicLib-Java High Product jar package name geodesic Highest Product jar package name geographiclib Highest Product jar package name geographiclib Low Product jar package name net Highest Product jar package name sf Highest Product jar package name sf Low Product pom artifactid GeographicLib-Java Highest Product pom developer email charles@karney.com Low Product pom developer name Charles Karney Low Product pom developer org URL
https://sourceforge.net/u/karney/profile/
Low Product pom groupid net.sf.geographiclib Highest Product pom name Java implementation of GeographicLib High Product pom url https://geographiclib.sourceforge.io Medium Version file version 1.49 High Version pom version 1.49 Highest
pkg:maven/net.sf.geographiclib/GeographicLib-Java@1.49
(Confidence :High)
Description:
HdrHistogram supports the recording and analyzing sampled data value
counts across a configurable integer value range with configurable value
precision within the range. Value precision is expressed as the number of
significant digits in the value recording, and provides control over value
quantization behavior across the value range and the subsequent value
resolution at any given level.
License:
Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar
MD5: 41f807bf0c681d6f692c408a6e217eaf
SHA1: 7959933ebcc0f05b2eaa5af0a0c8689fa257b15c
SHA256: 22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8
Referenced In Project/Scope: Tailormap API:runtime
HdrHistogram-2.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name HdrHistogram High Vendor jar package name hdrhistogram Highest Vendor Manifest build-jdk-spec 20 Low Vendor Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium Vendor pom artifactid HdrHistogram Highest Vendor pom artifactid HdrHistogram Low Vendor pom developer id giltene Medium Vendor pom developer name Gil Tene Medium Vendor pom groupid org.hdrhistogram Highest Vendor pom name HdrHistogram High Vendor pom url http://hdrhistogram.github.io/HdrHistogram/ Highest Product file name HdrHistogram High Product jar package name hdrhistogram Highest Product Manifest build-jdk-spec 20 Low Product Manifest Bundle-Name HdrHistogram Medium Product Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium Product pom artifactid HdrHistogram Highest Product pom developer id giltene Low Product pom developer name Gil Tene Low Product pom groupid org.hdrhistogram Highest Product pom name HdrHistogram High Product pom url http://hdrhistogram.github.io/HdrHistogram/ Medium Version file version 2.2.2 High Version Manifest Bundle-Version 2.2.2 High Version pom version 2.2.2 Highest
pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2
(Confidence :High)
Description:
Ultimate JDBC Connection Pool
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/zaxxer/HikariCP/7.0.2/HikariCP-7.0.2.jar
MD5: c36937c742c20cbdc7bcb47019e33151
SHA1: c2b43c946b86a14a96342379e22b004c56c6166d
SHA256: f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095
Referenced In Project/Scope: Tailormap API:compile
HikariCP-7.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name HikariCP High Vendor jar package name hikari Highest Vendor jar package name pool Highest Vendor jar package name zaxxer Highest Vendor Manifest automatic-module-name com.zaxxer.hikari Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://github.com/brettwooldridge Low Vendor Manifest bundle-symbolicname com.zaxxer.HikariCP Medium Vendor pom artifactid HikariCP Highest Vendor pom artifactid HikariCP Low Vendor pom developer email brett.wooldridge@gmail.com Low Vendor pom developer name Brett Wooldridge Medium Vendor pom groupid com.zaxxer Highest Vendor pom name HikariCP High Vendor pom organization name Zaxxer.com High Vendor pom organization url brettwooldridge Medium Vendor pom url brettwooldridge/HikariCP Highest Product file name HikariCP High Product jar package name hikari Highest Product jar package name pool Highest Product jar package name zaxxer Highest Product Manifest automatic-module-name com.zaxxer.hikari Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://github.com/brettwooldridge Low Product Manifest Bundle-Name HikariCP Medium Product Manifest bundle-symbolicname com.zaxxer.HikariCP Medium Product pom artifactid HikariCP Highest Product pom developer email brett.wooldridge@gmail.com Low Product pom developer name Brett Wooldridge Low Product pom groupid com.zaxxer Highest Product pom name HikariCP High Product pom organization name Zaxxer.com Low Product pom url brettwooldridge High Product pom url brettwooldridge/HikariCP High Version file version 7.0.2 High Version Manifest Bundle-Version 7.0.2 High Version pom version 7.0.2 Highest
pkg:maven/com.zaxxer/HikariCP@7.0.2
(Confidence :High)
Description:
An efficient sparse bitset implementation for Java
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/zaxxer/SparseBitSet/1.3/SparseBitSet-1.3.jar
MD5: fbe27bb4c05e8719b7fff5aa71a57364
SHA1: 533eac055afe3d5f614ea95e333afd6c2bde8f26
SHA256: f76b85adb0c00721ae267b7cfde4da7f71d3121cc2160c9fc00c0c89f8c53c8a
Referenced In Project/Scope: Tailormap API:compile
SparseBitSet-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name SparseBitSet High Vendor jar package name sparsebitset Highest Vendor jar package name zaxxer Highest Vendor Manifest automatic-module-name com.zaxxer.sparsebitset Medium Vendor Manifest build-jdk-spec 11 Low Vendor pom artifactid SparseBitSet Highest Vendor pom artifactid SparseBitSet Low Vendor pom developer email brett.wooldridge@gmail.com Low Vendor pom developer name Brett Wooldridge Medium Vendor pom groupid com.zaxxer Highest Vendor pom name SparseBitSet High Vendor pom organization name Zaxxer.com High Vendor pom organization url brettwooldridge/SparseBitSet Medium Vendor pom url brettwooldridge/SparseBitSet Highest Product file name SparseBitSet High Product jar package name sparsebitset Highest Product jar package name zaxxer Highest Product Manifest automatic-module-name com.zaxxer.sparsebitset Medium Product Manifest build-jdk-spec 11 Low Product pom artifactid SparseBitSet Highest Product pom developer email brett.wooldridge@gmail.com Low Product pom developer name Brett Wooldridge Low Product pom groupid com.zaxxer Highest Product pom name SparseBitSet High Product pom organization name Zaxxer.com Low Product pom url brettwooldridge/SparseBitSet High Version file version 1.3 High Version pom version 1.3 Highest
pkg:maven/com.zaxxer/SparseBitSet@1.3
(Confidence :High)
cpe:2.3:a:bit_project:bit:1.3:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.6.0/accessors-smart-2.6.0.jar
MD5: 0ad72639eea293193f68898da9b0b902
SHA1: 2d96f1d9b6ab7f13261aa81b15703574185747a0
SHA256: 222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61
Referenced In Project/Scope: Tailormap API:compile
accessors-smart-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence Vendor file name accessors-smart High Vendor jar package name asm Highest Vendor jar package name minidev Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://urielch.github.io/ Low Vendor Manifest bundle-symbolicname net.minidev.accessors-smart Medium Vendor pom artifactid accessors-smart Highest Vendor pom artifactid accessors-smart Low Vendor pom developer email hezhangjian97gmail.com Low Vendor pom developer email uchemouni@gmail.com Low Vendor pom developer id hezhangjian Medium Vendor pom developer id uriel Medium Vendor pom developer name Uriel Chemouni Medium Vendor pom developer name Zhangjian He Medium Vendor pom groupid net.minidev Highest Vendor pom name ASM based accessors helper used by json-smart High Vendor pom organization name Chemouni Uriel High Vendor pom organization url https://urielch.github.io/ Medium Vendor pom url https://urielch.github.io/ Highest Product file name accessors-smart High Product jar package name asm Highest Product jar package name minidev Highest Product jar package name net Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://urielch.github.io/ Low Product Manifest Bundle-Name accessors-smart Medium Product Manifest bundle-symbolicname net.minidev.accessors-smart Medium Product pom artifactid accessors-smart Highest Product pom developer email hezhangjian97gmail.com Low Product pom developer email uchemouni@gmail.com Low Product pom developer id hezhangjian Low Product pom developer id uriel Low Product pom developer name Uriel Chemouni Low Product pom developer name Zhangjian He Low Product pom groupid net.minidev Highest Product pom name ASM based accessors helper used by json-smart High Product pom organization name Chemouni Uriel Low Product pom organization url https://urielch.github.io/ Low Product pom url https://urielch.github.io/ Medium Version file version 2.6.0 High Version Manifest Bundle-Version 2.6.0 High Version pom version 2.6.0 Highest
pkg:maven/net.minidev/accessors-smart@2.6.0
(Confidence :High)
Description:
Compression algorithms
License:
Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/io/airlift/aircompressor/2.0.3/aircompressor-2.0.3.jar
MD5: 6bc89228727ab2a3ed7df7cecef85158
SHA1: d7032ede4ff2c124d4913807ebd6868af66f1721
SHA256: b86bb66f610079e0bf790d62e2ff68853eb0dc4748a6d68ae28bce92b68094aa
Referenced In Project/Scope: Tailormap API:compile
aircompressor-2.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name aircompressor High Vendor jar package name airlift Highest Vendor jar package name io Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-time 2026-02-24T17:39:14+0000 Low Vendor Manifest git-commit-id b98c7d8d35eb6b294316dbd84067894a6e768df7 Low Vendor pom artifactid aircompressor Highest Vendor pom artifactid aircompressor Low Vendor pom groupid io.airlift Highest Vendor pom name aircompressor High Vendor pom parent-artifactid airbase Low Vendor pom url airlift/aircompressor Highest Product file name aircompressor High Product jar package name airlift Highest Product jar package name io Highest Product Manifest build-jdk-spec 21 Low Product Manifest build-time 2026-02-24T17:39:14+0000 Low Product Manifest git-commit-id b98c7d8d35eb6b294316dbd84067894a6e768df7 Low Product Manifest Implementation-Title aircompressor High Product Manifest specification-title aircompressor Medium Product pom artifactid aircompressor Highest Product pom groupid io.airlift Highest Product pom name aircompressor High Product pom parent-artifactid airbase Medium Product pom url airlift/aircompressor High Version file version 2.0.3 High Version Manifest Implementation-Version 2.0.3 High Version pom parent-version 2.0.3 Low Version pom version 2.0.3 Highest
Description:
Implementation
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar
MD5: ad20392145690b36b4f950fe31a31a2a
SHA1: 7f80607ea5014fef0b1779e6c33d63a88a45a563
SHA256: a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7
Referenced In Project/Scope: Tailormap API:runtime
angus-activation-2.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.15
Evidence
Type Source Name Value Confidence Vendor file name angus-activation High Vendor jar package name activation Highest Vendor jar package name angus Highest Vendor jar package name eclipse Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname angus-activation Medium Vendor Manifest extension-name org.eclipse.angus Medium Vendor Manifest implementation-build-id 2.0.3-RELEASE-6eff4c5 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider" Low Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid angus-activation Highest Vendor pom artifactid angus-activation Low Vendor pom groupid org.eclipse.angus Highest Vendor pom name Angus Activation Registries High Vendor pom parent-artifactid angus-activation-project Low Product file name angus-activation High Product jar package name activation Highest Product jar package name angus Highest Product jar package name eclipse Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Angus Activation Registries Medium Product Manifest bundle-symbolicname angus-activation Medium Product Manifest extension-name org.eclipse.angus Medium Product Manifest implementation-build-id 2.0.3-RELEASE-6eff4c5 Low Product Manifest Implementation-Title Angus Activation Registries High Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider" Low Product Manifest specification-title Jakarta Activation Specification Medium Product pom artifactid angus-activation Highest Product pom groupid org.eclipse.angus Highest Product pom name Angus Activation Registries High Product pom parent-artifactid angus-activation-project Medium Version file version 2.0.3 High Version Manifest Bundle-Version 2.0.3 High Version pom version 2.0.3 Highest
pkg:maven/org.eclipse.angus/angus-activation@2.0.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/angus-core/pom.xmlMD5: 102fa937d3897ac6eb838ff3a716bc80SHA1: 11d1302ad859e7dda8e897ffa278a2135d0d3c7eSHA256: 162bec7f0c7a2c3d461a42ca576e139b80628798f97f274b7dd5759226fc47c1
Referenced In Project/Scope: Tailormap API:runtime
Evidence
Type Source Name Value Confidence Vendor pom artifactid angus-core Low Vendor pom groupid org.eclipse.angus Highest Vendor pom name Angus Mail Core High Vendor pom parent-artifactid all Low Product pom artifactid angus-core Highest Product pom groupid org.eclipse.angus Highest Product pom name Angus Mail Core High Product pom parent-artifactid all Medium Version pom version 2.0.5 Highest
Related Dependencies
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:imap:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/imap/pom.xml
MD5: c031701146f4f9887af1d7348b68e607
SHA1: bd81e3288ab646231bc2d64cedf04fe3c3146bf5
SHA256: 251e848e4c2db58e57e7725434e0498043cd3d554fba21d22d5178e5783e21dd
pkg:maven/org.eclipse.angus/imap@2.0.5
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:pop3:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/pop3/pom.xml
MD5: 0d7646a22486f0de9392d7ea120ff618
SHA1: 4b674f85989e5cc112b93427ec3852ef90359ba3
SHA256: 64b065cc6bec31a1e5fefa9bf47382045cf048d69a9820da4cecc85f34a77a69
pkg:maven/org.eclipse.angus/pop3@2.0.5
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:smtp:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/smtp/pom.xml
MD5: b5281897cc205fa3c8f0a93b58d4ba31
SHA1: c4b330d66629d75d0df7c09739c7ab37ca834011
SHA256: 14923a712a69fb1408452be22fe8e87aa57e45337f0b52ae289d2bbb3d016ec1
pkg:maven/org.eclipse.angus/smtp@2.0.5
pkg:maven/org.eclipse.angus/angus-core@2.0.5
(Confidence :High)
cpe:2.3:a:eclipse:angus_mail:2.0.5:*:*:*:*:*:*:*
(Confidence :Low)
suppress
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/logging-mailhandler/pom.xmlMD5: d4925a2ff344f2fab35fdf31f4813b43SHA1: 53aac2712cc43a3aed66f65536fd91709056aef1SHA256: 869577c24e1abb117bd9cf7dc9228c2643839b75087bfc5d6fed0d328ed9d1f7
Referenced In Project/Scope: Tailormap API:runtime
Evidence
Type Source Name Value Confidence Vendor pom artifactid logging-mailhandler Low Vendor pom groupid org.eclipse.angus Highest Vendor pom name Angus Mail logging handler High Vendor pom parent-artifactid all Low Product pom artifactid logging-mailhandler Highest Product pom groupid org.eclipse.angus Highest Product pom name Angus Mail logging handler High Product pom parent-artifactid all Medium Version pom version 2.0.5 Highest
Description:
Angus Mail Provider
License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar
MD5: e965a2653568c0138457b4c6fc9e5d77
SHA1: 427f6d52ec0782f7efaca0c0732042e347a6cb4f
SHA256: b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a
Referenced In Project/Scope: Tailormap API:runtime
angus-mail-2.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-mail@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name angus-mail High Vendor jar package name angus Highest Vendor jar package name eclipse Highest Vendor jar package name mail Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname org.eclipse.angus.mail Medium Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.mail.util.StreamProvider",osgi.serviceloader;osgi.serviceloader="jakarta.mail.Provider" Low Vendor pom artifactid angus-mail Highest Vendor pom artifactid angus-mail Low Vendor pom groupid org.eclipse.angus Highest Vendor pom name Angus Mail Provider High Vendor pom parent-artifactid all Low Product file name angus-mail High Product jar package name angus Highest Product jar package name eclipse Highest Product jar package name mail Highest Product jar package name util Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Angus Mail Provider Medium Product Manifest bundle-symbolicname org.eclipse.angus.mail Medium Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.mail.util.StreamProvider",osgi.serviceloader;osgi.serviceloader="jakarta.mail.Provider" Low Product pom artifactid angus-mail Highest Product pom groupid org.eclipse.angus Highest Product pom name Angus Mail Provider High Product pom parent-artifactid all Medium Version file version 2.0.5 High Version Manifest Bundle-Version 2.0.5 High Version pom version 2.0.5 Highest
Description:
The ANTLR 4 Runtime
License:
https://www.antlr.org/license.html File Path: /home/runner/.m2/repository/org/antlr/antlr4-runtime/4.13.2/antlr4-runtime-4.13.2.jar
MD5: eecf1908f0cfff10f8bb82878b5ca401
SHA1: fc3db6d844df652a3d5db31c87fa12757f13691d
SHA256: dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7
Referenced In Project/Scope: Tailormap API:compile
antlr4-runtime-4.13.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name antlr4-runtime High Vendor jar package name antlr Highest Vendor jar package name runtime Highest Vendor Manifest automatic-module-name org.antlr.antlr4.runtime Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.antlr.org/ Low Vendor Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium Vendor Manifest Implementation-Vendor ANTLR High Vendor pom artifactid antlr4-runtime Highest Vendor pom artifactid antlr4-runtime Low Vendor pom groupid org.antlr Highest Vendor pom name ANTLR 4 Runtime High Vendor pom parent-artifactid antlr4-master Low Product file name antlr4-runtime High Product jar package name antlr Highest Product jar package name runtime Highest Product Manifest automatic-module-name org.antlr.antlr4.runtime Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.antlr.org/ Low Product Manifest Bundle-Name ANTLR 4 Runtime Medium Product Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium Product Manifest Implementation-Title ANTLR 4 Runtime High Product pom artifactid antlr4-runtime Highest Product pom groupid org.antlr Highest Product pom name ANTLR 4 Runtime High Product pom parent-artifactid antlr4-master Medium Version file version 4.13.2 High Version Manifest Bundle-Version 4.13.2 High Version Manifest Implementation-Version 4.13.2 High Version pom version 4.13.2 Highest
pkg:maven/org.antlr/antlr4-runtime@4.13.2
(Confidence :High)
Description:
@API Guardian
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256: b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: Tailormap API:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3
Evidence
Type Source Name Value Confidence Vendor file name apiguardian-api High Vendor jar package name api Highest Vendor jar package name apiguardian Highest Vendor Manifest build-date 2021-06-27 Low Vendor Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low Vendor Manifest build-time 14:53:10.089+0200 Low Vendor Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low Vendor Manifest bundle-symbolicname org.apiguardian.api Medium Vendor Manifest Implementation-Vendor apiguardian.org High Vendor Manifest specification-vendor apiguardian.org Low Vendor pom artifactid apiguardian-api Highest Vendor pom artifactid apiguardian-api Low Vendor pom developer email team@apiguardian.org Low Vendor pom developer id apiguardian Medium Vendor pom developer name @API Guardian Team Medium Vendor pom groupid org.apiguardian Highest Vendor pom name org.apiguardian:apiguardian-api High Vendor pom url apiguardian-team/apiguardian Highest Product file name apiguardian-api High Product jar package name api Highest Product jar package name apiguardian Highest Product Manifest build-date 2021-06-27 Low Product Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low Product Manifest build-time 14:53:10.089+0200 Low Product Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low Product Manifest Bundle-Name apiguardian-api Medium Product Manifest bundle-symbolicname org.apiguardian.api Medium Product Manifest Implementation-Title apiguardian-api High Product Manifest specification-title apiguardian-api Medium Product pom artifactid apiguardian-api Highest Product pom developer email team@apiguardian.org Low Product pom developer id apiguardian Low Product pom developer name @API Guardian Team Low Product pom groupid org.apiguardian Highest Product pom name org.apiguardian:apiguardian-api High Product pom url apiguardian-team/apiguardian High Version file version 1.1.2 High Version Manifest Bundle-Version 1.1.2 High Version Manifest Implementation-Version 1.1.2 High Version pom version 1.1.2 Highest
pkg:maven/org.apiguardian/apiguardian-api@1.1.2
(Confidence :High)
Description:
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar
MD5: e2cdd32d198ad31427d298eee9d39d8d
SHA1: f0ed132a49244b042cd0e15702ab9f2ce3cc8436
SHA256: 8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281
Referenced In Project/Scope: Tailormap API:compile
asm-9.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence Vendor file name asm High Vendor jar package name asm Highest Vendor jar package name objectweb Highest Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Vendor pom artifactid asm Highest Vendor pom artifactid asm Low Vendor pom developer email ebruneton@free.fr Low Vendor pom developer email eu@javatx.org Low Vendor pom developer email forax@univ-mlv.fr Low Vendor pom developer id ebruneton Medium Vendor pom developer id eu Medium Vendor pom developer id forax Medium Vendor pom developer name Eric Bruneton Medium Vendor pom developer name Eugene Kuleshov Medium Vendor pom developer name Remi Forax Medium Vendor pom groupid org.ow2.asm Highest Vendor pom name asm High Vendor pom organization name OW2 High Vendor pom organization url http://www.ow2.org/ Medium Vendor pom parent-artifactid ow2 Low Vendor pom parent-groupid org.ow2 Medium Vendor pom url http://asm.ow2.io/ Highest Product file name asm High Product jar package name asm Highest Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.ow2.org Low Product Manifest Bundle-Name org.objectweb.asm Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High Product pom artifactid asm Highest Product pom developer email ebruneton@free.fr Low Product pom developer email eu@javatx.org Low Product pom developer email forax@univ-mlv.fr Low Product pom developer id ebruneton Low Product pom developer id eu Low Product pom developer id forax Low Product pom developer name Eric Bruneton Low Product pom developer name Eugene Kuleshov Low Product pom developer name Remi Forax Low Product pom groupid org.ow2.asm Highest Product pom name asm High Product pom organization name OW2 Low Product pom organization url http://www.ow2.org/ Low Product pom parent-artifactid ow2 Medium Product pom parent-groupid org.ow2 Medium Product pom url http://asm.ow2.io/ Medium Version file version 9.7.1 High Version Manifest Bundle-Version 9.7.1 High Version Manifest Implementation-Version 9.7.1 High Version pom parent-version 9.7.1 Low Version pom version 9.7.1 Highest
pkg:maven/org.ow2.asm/asm@9.7.1
(Confidence :High)
Description:
The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
weaving (LTW) during class-loading and also contains the AspectJ runtime classes.
License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/aspectj/aspectjweaver/1.9.25.1/aspectjweaver-1.9.25.1.jar
MD5: 7a88f606f52185a15a1527c968f55dfb
SHA1: a713c790da4d794c7dfb542b550d4e44898d5e23
SHA256: 4fe86fdc18faea571f29129c70eaad5d121363504a06d7907be88f6c60ba3116
Referenced In Project/Scope: Tailormap API:compile
aspectjweaver-1.9.25.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name aspectjweaver High Vendor jar package name agent Highest Vendor jar package name and Highest Vendor jar package name aspectj Highest Vendor jar package name aspects Highest Vendor jar package name ltw Highest Vendor jar package name org Highest Vendor jar package name runtime Highest Vendor jar package name weaver Highest Vendor Manifest automatic-module-name org.aspectj.weaver Medium Vendor Manifest can-redefine-classes true Low Vendor manifest: org/aspectj/weaver/ Implementation-Vendor https://www.eclipse.org/aspectj/ Medium Vendor pom artifactid aspectjweaver Highest Vendor pom artifactid aspectjweaver Low Vendor pom developer email aclement@vmware.com Low Vendor pom developer email kriegaex@aspectj.dev Low Vendor pom developer id aclement Medium Vendor pom developer id kriegaex Medium Vendor pom developer name Alexander Kriegisch Medium Vendor pom developer name Andy Clement Medium Vendor pom groupid org.aspectj Highest Vendor pom name AspectJ Weaver High Vendor pom url https://www.eclipse.org/aspectj/ Highest Product file name aspectjweaver High Product jar package name agent Highest Product jar package name and Highest Product jar package name aspectj Highest Product jar package name aspects Highest Product jar package name ltw Highest Product jar package name org Highest Product jar package name runtime Highest Product jar package name weaver Highest Product Manifest automatic-module-name org.aspectj.weaver Medium Product Manifest can-redefine-classes true Low Product manifest: org/aspectj/weaver/ Implementation-Title org.aspectj.weaver Medium Product manifest: org/aspectj/weaver/ Specification-Title AspectJ Weaver Classes Medium Product pom artifactid aspectjweaver Highest Product pom developer email aclement@vmware.com Low Product pom developer email kriegaex@aspectj.dev Low Product pom developer id aclement Low Product pom developer id kriegaex Low Product pom developer name Alexander Kriegisch Low Product pom developer name Andy Clement Low Product pom groupid org.aspectj Highest Product pom name AspectJ Weaver High Product pom url https://www.eclipse.org/aspectj/ Medium Version file version 1.9.25.1 High Version manifest: org/aspectj/weaver/ Implementation-Version 1.9.25.1 Medium Version pom version 1.9.25.1 Highest
pkg:maven/org.aspectj/aspectjweaver@1.9.25.1
(Confidence :High)
Description:
A class to beat the crap out of BigInteger!
File Path: /home/runner/.m2/repository/org/huldra/math/bigint/0.7.1/bigint-0.7.1.jarMD5: aeb3ae291891403a2d5c23e2fd5aacdeSHA1: beb4ba7ca91d7f3875ef77f69052ceb37f5b3db2SHA256: aae42edfa250950238c856ca4c723bdf116b1ae61115708a36da12af444a8824
Referenced In Project/Scope: Tailormap API:compile
bigint-0.7.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name bigint High Vendor jar package name bigint Highest Vendor jar package name huldra Highest Vendor jar package name huldra Low Vendor jar package name math Highest Vendor jar package name math Low Vendor pom artifactid bigint Highest Vendor pom artifactid bigint Low Vendor pom groupid org.huldra.math Highest Vendor pom name BigInt High Vendor pom url http://maven.apache.org Highest Product file name bigint High Product jar package name bigint Highest Product jar package name huldra Highest Product jar package name math Highest Product jar package name math Low Product pom artifactid bigint Highest Product pom groupid org.huldra.math Highest Product pom name BigInt High Product pom url http://maven.apache.org Medium Version file version 0.7.1 High Version pom version 0.7.1 Highest
pkg:maven/org.huldra.math/bigint@0.7.1
(Confidence :High)
Description:
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.18.15/byte-buddy-1.18.15.jar
MD5: 36ebf60bade91fd4f25c187cf590937a
SHA1: ffff83d2b122d612acecd92029df4ed9b0472ffe
SHA256: e64ed8697df67cbce8158a6e926cbe841f97d01719d719b7b84784826a9b2b27
Referenced In Project/Scope: Tailormap API:runtime
byte-buddy-1.18.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Highest Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.18.15 High Version Manifest Bundle-Version 1.18.15 High Version pom version 1.18.15 Highest
pkg:maven/net.bytebuddy/byte-buddy@1.18.15
(Confidence :High)
Description:
Library for introspecting types with full generic information
including resolving of field and method types.
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar
MD5: d1a4a85ab782827adfa82772e3b5f483
SHA1: f61c7e7b81e9249b0f6a05914eff9d54fb09f4a0
SHA256: 75fbda45456f123fb6e2028a6189442d8d0730b357adce4c0a6d7e789f70669b
Referenced In Project/Scope: Tailormap API:compile
classmate-1.7.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name classmate High Vendor jar package name classmate Highest Vendor jar package name fasterxml Highest Vendor jar package name types Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/java-classmate Low Vendor Manifest bundle-symbolicname com.fasterxml.classmate Medium Vendor Manifest Implementation-Vendor fasterxml.com High Vendor Manifest Implementation-Vendor-Id com.fasterxml Medium Vendor Manifest specification-vendor fasterxml.com Low Vendor pom artifactid classmate Highest Vendor pom artifactid classmate Low Vendor pom developer email blangel@ocheyedan.net Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id blangel Medium Vendor pom developer id tatu Medium Vendor pom developer name Brian Langel Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid com.fasterxml Highest Vendor pom name ClassMate High Vendor pom organization name fasterxml.com High Vendor pom organization url https://fasterxml.com Medium Vendor pom parent-artifactid oss-parent Low Vendor pom url FasterXML/java-classmate Highest Product file name classmate High Product jar package name classmate Highest Product jar package name fasterxml Highest Product jar package name types Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/java-classmate Low Product Manifest Bundle-Name ClassMate Medium Product Manifest bundle-symbolicname com.fasterxml.classmate Medium Product Manifest Implementation-Title ClassMate High Product Manifest specification-title ClassMate Medium Product pom artifactid classmate Highest Product pom developer email blangel@ocheyedan.net Low Product pom developer email tatu@fasterxml.com Low Product pom developer id blangel Low Product pom developer id tatu Low Product pom developer name Brian Langel Low Product pom developer name Tatu Saloranta Low Product pom groupid com.fasterxml Highest Product pom name ClassMate High Product pom organization name fasterxml.com Low Product pom organization url https://fasterxml.com Low Product pom parent-artifactid oss-parent Medium Product pom url FasterXML/java-classmate High Version file version 1.7.3 High Version Manifest Bundle-Version 1.7.3 High Version Manifest Implementation-Version 1.7.3 High Version pom parent-version 1.7.3 Low Version pom version 1.7.3 Highest
pkg:maven/com.fasterxml/classmate@1.7.3
(Confidence :High)
Description:
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256: 9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Project/Scope: Tailormap API:compile
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-csv@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-beanutils High Vendor jar package name apache Highest Vendor jar package name beanutils Highest Vendor jar package name commons Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-beanutils Highest Vendor pom artifactid commons-beanutils Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email craigmcc@apache.org Low Vendor pom developer email dion@apache.org Low Vendor pom developer email epugh@apache.org Low Vendor pom developer email geirm@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jcarman@apache.org Low Vendor pom developer email jconlon@apache.org Low Vendor pom developer email jstrachan@apache.org Low Vendor pom developer email morgand@apache.org Low Vendor pom developer email mvdb@apache.org Low Vendor pom developer email niallp@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer email scolebourne@apache.org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer email stain@apache.org Low Vendor pom developer email tobrien@apache.org Low Vendor pom developer email yoavs@apache.org Low Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dion Medium Vendor pom developer id epugh Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id jconlon Medium Vendor pom developer id jstrachan Medium Vendor pom developer id morgand Medium Vendor pom developer id mvdb Medium Vendor pom developer id niallp Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id scolebourne Medium Vendor pom developer id skitching Medium Vendor pom developer id stain Medium Vendor pom developer id tobrien Medium Vendor pom developer id yoavs Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Eric Pugh Medium Vendor pom developer name Dion Gillard Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Jr. Medium Vendor pom developer name James Carman Medium Vendor pom developer name James Strachan Medium Vendor pom developer name John E. Conlon Medium Vendor pom developer name Martin van den Bemt Medium Vendor pom developer name Morgan James Delagrange Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Stian Soiland-Reyes Medium Vendor pom developer name Tim O'Brien Medium Vendor pom developer name Yoav Shapira Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-beanutils Highest Vendor pom name Apache Commons BeanUtils High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-beanutils Highest Product file name commons-beanutils High Product jar package name apache Highest Product jar package name beanutils Highest Product jar package name commons Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low Product Manifest Bundle-Name Apache Commons BeanUtils Medium Product Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium Product Manifest Implementation-Title Apache Commons BeanUtils High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons BeanUtils Medium Product pom artifactid commons-beanutils Highest Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email craigmcc@apache.org Low Product pom developer email dion@apache.org Low Product pom developer email epugh@apache.org Low Product pom developer email geirm@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email jcarman@apache.org Low Product pom developer email jconlon@apache.org Low Product pom developer email jstrachan@apache.org Low Product pom developer email morgand@apache.org Low Product pom developer email mvdb@apache.org Low Product pom developer email niallp@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer email scolebourne@apache.org Low Product pom developer email skitching@apache.org Low Product pom developer email stain@apache.org Low Product pom developer email tobrien@apache.org Low Product pom developer email yoavs@apache.org Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id craigmcc Low Product pom developer id dion Low Product pom developer id epugh Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id jconlon Low Product pom developer id jstrachan Low Product pom developer id morgand Low Product pom developer id mvdb Low Product pom developer id niallp Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id scolebourne Low Product pom developer id skitching Low Product pom developer id stain Low Product pom developer id tobrien Low Product pom developer id yoavs Low Product pom developer name Benedikt Ritter Low Product pom developer name Craig McClanahan Low Product pom developer name David Eric Pugh Low Product pom developer name Dion Gillard Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Jr. Low Product pom developer name James Carman Low Product pom developer name James Strachan Low Product pom developer name John E. Conlon Low Product pom developer name Martin van den Bemt Low Product pom developer name Morgan James Delagrange Low Product pom developer name Niall Pemberton Low Product pom developer name Rob Tompkins Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer name Stephen Colebourne Low Product pom developer name Stian Soiland-Reyes Low Product pom developer name Tim O'Brien Low Product pom developer name Yoav Shapira Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-beanutils Highest Product pom name Apache Commons BeanUtils High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-beanutils Medium Version file version 1.11.0 High Version Manifest Bundle-Version 1.11.0 High Version Manifest Implementation-Version 1.11.0 High Version pom parent-version 1.11.0 Low Version pom version 1.11.0 Highest
Description:
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.22.1/commons-codec-1.22.1.jar
MD5: 7bfd10447817907ffd7f14fbc6493940
SHA1: da09bcdb330deef7cfee70f30c6889fda70d5ebf
SHA256: 78a5d732fbd715e2d10bd7150d2f8030bae57267f8aacc5c88f642cb6c2e5d3f
Referenced In Project/Scope: Tailormap API:compile
commons-codec-1.22.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name commons-codec High Vendor jar package name apache Highest Vendor jar package name codec Highest Vendor jar package name commons Highest Vendor jar package name digest Highest Vendor Manifest automatic-module-name org.apache.commons.codec Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-codec Highest Vendor pom artifactid commons-codec Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email dgraham@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jon@collab.net Low Vendor pom developer email julius@apache.org Low Vendor pom developer email mattsicker@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@totalsync.com Low Vendor pom developer email tn@apache.org Low Vendor pom developer email tobrien@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id chtompki Medium Vendor pom developer id dgraham Medium Vendor pom developer id dlr Medium Vendor pom developer id ggregory Medium Vendor pom developer id jon Medium Vendor pom developer id julius Medium Vendor pom developer id mattsicker Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id tn Medium Vendor pom developer id tobrien Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name David Graham Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jon S. Stevens Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Matt Sicker Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer name Tim OBrien Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://juliusdavies.ca/ Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-codec Highest Vendor pom name Apache Commons Codec High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-codec/ Highest Product file name commons-codec High Product jar package name apache Highest Product jar package name codec Highest Product jar package name commons Highest Product jar package name digest Highest Product Manifest automatic-module-name org.apache.commons.codec Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low Product Manifest Bundle-Name Apache Commons Codec Medium Product Manifest bundle-symbolicname org.apache.commons.commons-codec Medium Product Manifest Implementation-Title Apache Commons Codec High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Codec Medium Product pom artifactid commons-codec Highest Product pom developer email bayard@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email dgraham@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory at apache.org Low Product pom developer email jon@collab.net Low Product pom developer email julius@apache.org Low Product pom developer email mattsicker@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@totalsync.com Low Product pom developer email tn@apache.org Low Product pom developer email tobrien@apache.org Low Product pom developer id bayard Low Product pom developer id chtompki Low Product pom developer id dgraham Low Product pom developer id dlr Low Product pom developer id ggregory Low Product pom developer id jon Low Product pom developer id julius Low Product pom developer id mattsicker Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id tn Low Product pom developer id tobrien Low Product pom developer name Daniel Rall Low Product pom developer name David Graham Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jon S. Stevens Low Product pom developer name Julius Davies Low Product pom developer name Matt Sicker Low Product pom developer name Rob Tompkins Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Thomas Neidhart Low Product pom developer name Tim OBrien Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://juliusdavies.ca/ Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-codec Highest Product pom name Apache Commons Codec High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-codec/ Medium Version file version 1.22.1 High Version Manifest Bundle-Version 1.22.1 High Version Manifest Implementation-Version 1.22.1 High Version pom parent-version 1.22.1 Low Version pom version 1.22.1 Highest
pkg:maven/commons-codec/commons-codec@1.22.1
(Confidence :High)
Description:
Types that extend and augment the Java Collections Framework.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256: eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: Tailormap API:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-csv@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-collections High Vendor jar package name apache Highest Vendor jar package name collections Highest Vendor jar package name commons Highest Vendor Manifest bundle-docurl http://commons.apache.org/collections/ Low Vendor Manifest bundle-symbolicname org.apache.commons.collections Medium Vendor Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low Vendor Manifest implementation-url http://commons.apache.org/collections/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-collections Highest Vendor pom artifactid commons-collections Low Vendor pom developer id amamment Medium Vendor pom developer id bayard Medium Vendor pom developer id craigmcc Medium Vendor pom developer id geirm Medium Vendor pom developer id jcarman Medium Vendor pom developer id matth Medium Vendor pom developer id morgand Medium Vendor pom developer id psteitz Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id scolebourne Medium Vendor pom developer name Arun M. Thomas Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom groupid commons-collections Highest Vendor pom name Apache Commons Collections High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/collections/ Highest Product file name commons-collections High Product jar package name apache Highest Product jar package name collections Highest Product jar package name commons Highest Product Manifest bundle-docurl http://commons.apache.org/collections/ Low Product Manifest Bundle-Name Apache Commons Collections Medium Product Manifest bundle-symbolicname org.apache.commons.collections Medium Product Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low Product Manifest Implementation-Title Apache Commons Collections High Product Manifest implementation-url http://commons.apache.org/collections/ Low Product Manifest specification-title Apache Commons Collections Medium Product pom artifactid commons-collections Highest Product pom developer id amamment Low Product pom developer id bayard Low Product pom developer id craigmcc Low Product pom developer id geirm Low Product pom developer id jcarman Low Product pom developer id matth Low Product pom developer id morgand Low Product pom developer id psteitz Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id scolebourne Low Product pom developer name Arun M. Thomas Low Product pom developer name Craig McClanahan Low Product pom developer name Geir Magnusson Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Matthew Hawthorne Low Product pom developer name Morgan Delagrange Low Product pom developer name Phil Steitz Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Stephen Colebourne Low Product pom groupid commons-collections Highest Product pom name Apache Commons Collections High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/collections/ Medium Version file version 3.2.2 High Version Manifest Bundle-Version 3.2.2 High Version Manifest Implementation-Version 3.2.2 High Version pom parent-version 3.2.2 Low Version pom version 3.2.2 Highest
Description:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-collections4/4.5.0/commons-collections4-4.5.0.jar
MD5: d564105594035b363b193d8ce3c18b98
SHA1: e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a
SHA256: 00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845
Referenced In Project/Scope: Tailormap API:compile
commons-collections4-4.5.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-xml@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-collections4 High Vendor jar package name apache Highest Vendor jar package name collections4 Highest Vendor jar package name commons Highest Vendor Manifest automatic-module-name org.apache.commons.collections4 Medium Vendor Manifest build-jdk-spec 23 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-collections4 Highest Vendor pom artifactid commons-collections4 Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer id adriannistor Medium Vendor pom developer id amamment Medium Vendor pom developer id bayard Medium Vendor pom developer id chtompki Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dlaha Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id luc Medium Vendor pom developer id matth Medium Vendor pom developer id mbenson Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id scolebourne Medium Vendor pom developer id tn Medium Vendor pom developer name Adrian Nistor Medium Vendor pom developer name Arun M. Thomas Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dipanjan Laha Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Luc Maisonobe Medium Vendor pom developer name Matt Benson Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Collections High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-collections/ Highest Product file name commons-collections4 High Product jar package name apache Highest Product jar package name collections4 Highest Product jar package name commons Highest Product Manifest automatic-module-name org.apache.commons.collections4 Medium Product Manifest build-jdk-spec 23 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low Product Manifest Bundle-Name Apache Commons Collections Medium Product Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium Product Manifest Implementation-Title Apache Commons Collections High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Collections Medium Product pom artifactid commons-collections4 Highest Product pom developer email ggregory at apache.org Low Product pom developer id adriannistor Low Product pom developer id amamment Low Product pom developer id bayard Low Product pom developer id chtompki Low Product pom developer id craigmcc Low Product pom developer id dlaha Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id luc Low Product pom developer id matth Low Product pom developer id mbenson Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id scolebourne Low Product pom developer id tn Low Product pom developer name Adrian Nistor Low Product pom developer name Arun M. Thomas Low Product pom developer name Craig McClanahan Low Product pom developer name Dipanjan Laha Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Luc Maisonobe Low Product pom developer name Matt Benson Low Product pom developer name Matthew Hawthorne Low Product pom developer name Morgan Delagrange Low Product pom developer name Rob Tompkins Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Stephen Colebourne Low Product pom developer name Thomas Neidhart Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Collections High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-collections/ Medium Version file version 4.5.0 High Version Manifest Bundle-Version 4.5.0 High Version Manifest Implementation-Version 4.5.0 High Version pom parent-version 4.5.0 Low Version pom version 4.5.0 Highest
Description:
Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar
MD5: f33efe616d561f8281ef7bf9f2576ad0
SHA1: e482f2c7a88dac3c497e96aa420b6a769f59c8d7
SHA256: e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca
Referenced In Project/Scope: Tailormap API:compile
commons-compress-1.28.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-compress High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name compress Highest Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Vendor Manifest extension-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 6.0.0 Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-compress Highest Vendor pom artifactid commons-compress Low Vendor pom developer email bodewig at apache.org Low Vendor pom developer email chtompki at apache.org Low Vendor pom developer email damjan at apache.org Low Vendor pom developer email ebourg at apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email grobmeier at apache.org Low Vendor pom developer email julius at apache.org Low Vendor pom developer email peterlee at apache.org Low Vendor pom developer email sebb at apache.org Low Vendor pom developer email tcurdt at apache.org Low Vendor pom developer id bodewig Medium Vendor pom developer id chtompki Medium Vendor pom developer id damjan Medium Vendor pom developer id ebourg Medium Vendor pom developer id ggregory Medium Vendor pom developer id grobmeier Medium Vendor pom developer id julius Medium Vendor pom developer id peterlee Medium Vendor pom developer id sebb Medium Vendor pom developer id tcurdt Medium Vendor pom developer name Christian Grobmeier Medium Vendor pom developer name Damjan Jovanovic Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Peter Alfred Lee Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Sebastian Bazley Medium Vendor pom developer name Stefan Bodewig Medium Vendor pom developer name Torsten Curdt Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Compress High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-compress/ Highest Product file name commons-compress High Product jar package name apache Highest Product jar package name commons Highest Product jar package name compress Highest Product Manifest automatic-module-name org.apache.commons.compress Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Product Manifest Bundle-Name Apache Commons Compress Medium Product Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Product Manifest extension-name org.apache.commons.compress Medium Product Manifest Implementation-Title Apache Commons Compress High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 6.0.0 Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Product pom developer email bodewig at apache.org Low Product pom developer email chtompki at apache.org Low Product pom developer email damjan at apache.org Low Product pom developer email ebourg at apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email grobmeier at apache.org Low Product pom developer email julius at apache.org Low Product pom developer email peterlee at apache.org Low Product pom developer email sebb at apache.org Low Product pom developer email tcurdt at apache.org Low Product pom developer id bodewig Low Product pom developer id chtompki Low Product pom developer id damjan Low Product pom developer id ebourg Low Product pom developer id ggregory Low Product pom developer id grobmeier Low Product pom developer id julius Low Product pom developer id peterlee Low Product pom developer id sebb Low Product pom developer id tcurdt Low Product pom developer name Christian Grobmeier Low Product pom developer name Damjan Jovanovic Low Product pom developer name Emmanuel Bourg Low Product pom developer name Gary Gregory Low Product pom developer name Julius Davies Low Product pom developer name Peter Alfred Lee Low Product pom developer name Rob Tompkins Low Product pom developer name Sebastian Bazley Low Product pom developer name Stefan Bodewig Low Product pom developer name Torsten Curdt Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Compress High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-compress/ Medium Version file version 1.28.0 High Version Manifest Bundle-Version 1.28.0 High Version Manifest Implementation-Version 1.28.0 High Version pom parent-version 1.28.0 Low Version pom version 1.28.0 Highest
Description:
Commons Database Connection Pooling
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-dbcp/commons-dbcp/1.4/commons-dbcp-1.4.jar
MD5: b004158fab904f37f5831860898b3cd9
SHA1: 30be73c965cc990b153a100aaaaafcf239f82d39
SHA256: a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6
Referenced In Project/Scope: Tailormap API:compile
commons-dbcp-1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-jdbc@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-dbcp High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name dbcp Highest Vendor Manifest bundle-docurl http://commons.apache.org/dbcp/ Low Vendor Manifest bundle-symbolicname org.apache.commons.dbcp Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-dbcp Highest Vendor pom artifactid commons-dbcp Low Vendor pom developer email joerg.schaible@gmx.de Low Vendor pom developer email markt@apache.org Low Vendor pom developer email mpoeschl@marmot.at Low Vendor pom developer email yoavs@apache.org Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id jmcnally Medium Vendor pom developer id joehni Medium Vendor pom developer id markt Medium Vendor pom developer id morgand Medium Vendor pom developer id mpoeschl Medium Vendor pom developer id psteitz Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id yoavs Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Jörg Schaible Medium Vendor pom developer name John McNally Medium Vendor pom developer name Mark Thomas Medium Vendor pom developer name Martin Poeschl Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Yoav Shapira Medium Vendor pom developer org Apache Software Foundation Medium Vendor pom developer org tucana.at Medium Vendor pom groupid commons-dbcp Highest Vendor pom name Commons DBCP High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/dbcp/ Highest Product file name commons-dbcp High Product jar package name apache Highest Product jar package name commons Highest Product jar package name dbcp Highest Product Manifest bundle-docurl http://commons.apache.org/dbcp/ Low Product Manifest Bundle-Name Commons DBCP Medium Product Manifest bundle-symbolicname org.apache.commons.dbcp Medium Product Manifest Implementation-Title Commons DBCP High Product Manifest specification-title Commons DBCP Medium Product pom artifactid commons-dbcp Highest Product pom developer email joerg.schaible@gmx.de Low Product pom developer email markt@apache.org Low Product pom developer email mpoeschl@marmot.at Low Product pom developer email yoavs@apache.org Low Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id jmcnally Low Product pom developer id joehni Low Product pom developer id markt Low Product pom developer id morgand Low Product pom developer id mpoeschl Low Product pom developer id psteitz Low Product pom developer id rwaldhoff Low Product pom developer id yoavs Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Geir Magnusson Low Product pom developer name Jörg Schaible Low Product pom developer name John McNally Low Product pom developer name Mark Thomas Low Product pom developer name Martin Poeschl Low Product pom developer name Morgan Delagrange Low Product pom developer name Phil Steitz Low Product pom developer name Rodney Waldhoff Low Product pom developer name Yoav Shapira Low Product pom developer org Apache Software Foundation Low Product pom developer org tucana.at Low Product pom groupid commons-dbcp Highest Product pom name Commons DBCP High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/dbcp/ Medium Version file version 1.4 High Version Manifest Bundle-Version 1.4 High Version Manifest Implementation-Version 1.4 High Version pom parent-version 1.4 Low Version pom version 1.4 Highest
pkg:maven/commons-dbcp/commons-dbcp@1.4
(Confidence :High)
Description:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-io/commons-io/2.22.0/commons-io-2.22.0.jar
MD5: f91d54bd47c42456b4a5ae62eed85565
SHA1: 5b1e18bc0ad651ed878029d83f88d9c8189fd51e
SHA256: 2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
Referenced In Project/Scope: Tailormap API:compile
commons-io-2.22.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name commons-io High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name file Highest Vendor jar package name io Highest Vendor Manifest automatic-module-name org.apache.commons.io Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-io Medium Vendor Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-io Highest Vendor pom artifactid commons-io Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email dion@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jeremias@apache.org Low Vendor pom developer email jochen.wiedmann@gmail.com Low Vendor pom developer email krosenvold@apache.org Low Vendor pom developer email martinc@apache.org Low Vendor pom developer email matth@apache.org Low Vendor pom developer email nicolaken@apache.org Low Vendor pom developer email roxspring@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id dion Medium Vendor pom developer id ggregory Medium Vendor pom developer id jeremias Medium Vendor pom developer id jochen Medium Vendor pom developer id jukka Medium Vendor pom developer id krosenvold Medium Vendor pom developer id martinc Medium Vendor pom developer id matth Medium Vendor pom developer id niallp Medium Vendor pom developer id nicolaken Medium Vendor pom developer id roxspring Medium Vendor pom developer id sanders Medium Vendor pom developer id scolebourne Medium Vendor pom developer name dIon Gillard Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jeremias Maerki Medium Vendor pom developer name Jochen Wiedmann Medium Vendor pom developer name Jukka Zitting Medium Vendor pom developer name Kristian Rosenvold Medium Vendor pom developer name Martin Cooper Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Nicola Ken Barozzi Medium Vendor pom developer name Rob Oxspring Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-io Highest Vendor pom name Apache Commons IO High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-io/ Highest Product file name commons-io High Product jar package name apache Highest Product jar package name commons Highest Product jar package name file Highest Product jar package name io Highest Product Manifest automatic-module-name org.apache.commons.io Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low Product Manifest Bundle-Name Apache Commons IO Medium Product Manifest bundle-symbolicname org.apache.commons.commons-io Medium Product Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low Product Manifest Implementation-Title Apache Commons IO High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons IO Medium Product pom artifactid commons-io Highest Product pom developer email bayard@apache.org Low Product pom developer email dion@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email jeremias@apache.org Low Product pom developer email jochen.wiedmann@gmail.com Low Product pom developer email krosenvold@apache.org Low Product pom developer email martinc@apache.org Low Product pom developer email matth@apache.org Low Product pom developer email nicolaken@apache.org Low Product pom developer email roxspring@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer id bayard Low Product pom developer id dion Low Product pom developer id ggregory Low Product pom developer id jeremias Low Product pom developer id jochen Low Product pom developer id jukka Low Product pom developer id krosenvold Low Product pom developer id martinc Low Product pom developer id matth Low Product pom developer id niallp Low Product pom developer id nicolaken Low Product pom developer id roxspring Low Product pom developer id sanders Low Product pom developer id scolebourne Low Product pom developer name dIon Gillard Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Jeremias Maerki Low Product pom developer name Jochen Wiedmann Low Product pom developer name Jukka Zitting Low Product pom developer name Kristian Rosenvold Low Product pom developer name Martin Cooper Low Product pom developer name Matthew Hawthorne Low Product pom developer name Niall Pemberton Low Product pom developer name Nicola Ken Barozzi Low Product pom developer name Rob Oxspring Low Product pom developer name Scott Sanders Low Product pom developer name Stephen Colebourne Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-io Highest Product pom name Apache Commons IO High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-io/ Medium Version file version 2.22.0 High Version Manifest Bundle-Version 2.22.0 High Version Manifest Implementation-Version 2.22.0 High Version pom parent-version 2.22.0 Low Version pom version 2.22.0 Highest
Description:
A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-jxpath/commons-jxpath/1.4.0/commons-jxpath-1.4.0.jar
MD5: 0f59e33e5a2e7265155b51a1fb592fa4
SHA1: f61af30d8db727b7bb53d285fe074f89d8b68951
SHA256: 226cb33a644995b084b3bdd42f2eb861509e6db71d7a343d411ee321387b0860
Referenced In Project/Scope: Tailormap API:compile
commons-jxpath-1.4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-jxpath High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name jxpath Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-jxpath/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-jxpath Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-jxpath Highest Vendor pom artifactid commons-jxpath Low Vendor pom developer email Craig.McClanahan@eng.sun.com Low Vendor pom developer email dmitri@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email mbenson@apache.org Low Vendor pom developer id craigmcc Medium Vendor pom developer id dmitri Medium Vendor pom developer id ggregory Medium Vendor pom developer id mbenson Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dmitri Plotnikov Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Matt Benson Medium Vendor pom developer org Sun Microsystems Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-jxpath Highest Vendor pom name Apache Commons JXPath High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-jxpath/ Highest Product file name commons-jxpath High Product jar package name apache Highest Product jar package name commons Highest Product jar package name jxpath Highest Product jar package name xml Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-jxpath/ Low Product Manifest Bundle-Name Apache Commons JXPath Medium Product Manifest bundle-symbolicname org.apache.commons.commons-jxpath Medium Product Manifest Implementation-Title Apache Commons JXPath High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons JXPath Medium Product pom artifactid commons-jxpath Highest Product pom developer email Craig.McClanahan@eng.sun.com Low Product pom developer email dmitri@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email mbenson@apache.org Low Product pom developer id craigmcc Low Product pom developer id dmitri Low Product pom developer id ggregory Low Product pom developer id mbenson Low Product pom developer name Craig McClanahan Low Product pom developer name Dmitri Plotnikov Low Product pom developer name Gary Gregory Low Product pom developer name Matt Benson Low Product pom developer org Sun Microsystems Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-jxpath Highest Product pom name Apache Commons JXPath High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-jxpath/ Medium Version file version 1.4.0 High Version Manifest Bundle-Version 1.4.0 High Version Manifest Implementation-Version 1.4.0 High Version pom parent-version 1.4.0 Low Version pom version 1.4.0 Highest
Description:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
The code is tested using the latest revision of the JDK for supported
LTS releases: 8, 11, 17, 21 and 25 currently.
See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
Please ensure your build environment is up-to-date and kindly report any build issues.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256: 69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: Tailormap API:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name commons-lang3 High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name lang3 Highest Vendor Manifest automatic-module-name org.apache.commons.lang3 Medium Vendor Manifest build-jdk-spec 25 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Highest Vendor pom artifactid commons-lang3 Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email djones@apache.org Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email jcarman@apache.org Low Vendor pom developer email joerg.schaible@gmx.de Low Vendor pom developer email lguibert@apache.org Low Vendor pom developer email oheger@apache.org Low Vendor pom developer email pbenedict@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email scolebourne@joda.org Low Vendor pom developer email stevencaswell@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id djones Medium Vendor pom developer id dlr Medium Vendor pom developer id fredrik Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id joehni Medium Vendor pom developer id lguibert Medium Vendor pom developer id mbenson Medium Vendor pom developer id niallp Medium Vendor pom developer id oheger Medium Vendor pom developer id pbenedict Medium Vendor pom developer id rdonkin Medium Vendor pom developer id scaswell Medium Vendor pom developer id scolebourne Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name Duncan Jones Medium Vendor pom developer name Fredrik Westermarck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Joerg Schaible Medium Vendor pom developer name Loic Guibert Medium Vendor pom developer name Matt Benson Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Oliver Heger Medium Vendor pom developer name Paul Benedict Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Steven Caswell Medium Vendor pom developer org Carman Consulting, Inc. Medium Vendor pom developer org CollabNet, Inc. Medium Vendor pom developer org SITA ATS Ltd Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Lang High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-lang/ Highest Product file name commons-lang3 High Product jar package name apache Highest Product jar package name commons Highest Product jar package name lang3 Highest Product Manifest automatic-module-name org.apache.commons.lang3 Medium Product Manifest build-jdk-spec 25 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low Product Manifest Bundle-Name Apache Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product Manifest Implementation-Title Apache Commons Lang High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Lang Medium Product pom artifactid commons-lang3 Highest Product pom developer email bayard@apache.org Low Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email djones@apache.org Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ggregory at apache.org Low Product pom developer email jcarman@apache.org Low Product pom developer email joerg.schaible@gmx.de Low Product pom developer email lguibert@apache.org Low Product pom developer email oheger@apache.org Low Product pom developer email pbenedict@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email scolebourne@joda.org Low Product pom developer email stevencaswell@apache.org Low Product pom developer id bayard Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id djones Low Product pom developer id dlr Low Product pom developer id fredrik Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id joehni Low Product pom developer id lguibert Low Product pom developer id mbenson Low Product pom developer id niallp Low Product pom developer id oheger Low Product pom developer id pbenedict Low Product pom developer id rdonkin Low Product pom developer id scaswell Low Product pom developer id scolebourne Low Product pom developer name Benedikt Ritter Low Product pom developer name Daniel Rall Low Product pom developer name Duncan Jones Low Product pom developer name Fredrik Westermarck Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Joerg Schaible Low Product pom developer name Loic Guibert Low Product pom developer name Matt Benson Low Product pom developer name Niall Pemberton Low Product pom developer name Oliver Heger Low Product pom developer name Paul Benedict Low Product pom developer name Rob Tompkins Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Stephen Colebourne Low Product pom developer name Steven Caswell Low Product pom developer org Carman Consulting, Inc. Low Product pom developer org CollabNet, Inc. Low Product pom developer org SITA ATS Ltd Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Lang High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-lang/ Medium Version file version 3.20.0 High Version Manifest Bundle-Version 3.20.0 High Version Manifest Implementation-Version 3.20.0 High Version pom parent-version 3.20.0 Low Version pom version 3.20.0 Highest
Description:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.6/commons-logging-1.3.6.jar
MD5: fe0ccbe8971fed954a0ad6528fe3ef24
SHA1: 63e78ca6cd446c0ad166d14f03ed99e7efb3896d
SHA256: f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357
Referenced In Project/Scope: Tailormap API:compile
commons-logging-1.3.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.3
Evidence
Type Source Name Value Confidence Vendor file name commons-logging High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name logging Highest Vendor Manifest automatic-module-name org.apache.commons.logging Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-logging Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-logging Highest Vendor pom artifactid commons-logging Low Vendor pom developer email baliuka@apache.org Low Vendor pom developer email costin@apache.org Low Vendor pom developer email craigmcc@apache.org Low Vendor pom developer email dennisl@apache.org Low Vendor pom developer email donaldp@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email morgand@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email rsitze@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer email tn@apache.org Low Vendor pom developer id baliuka Medium Vendor pom developer id bstansberry Medium Vendor pom developer id costin Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dennisl Medium Vendor pom developer id donaldp Medium Vendor pom developer id ggregory Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rsitze Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id skitching Medium Vendor pom developer id tn Medium Vendor pom developer name Brian Stansberry Medium Vendor pom developer name Costin Manolache Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dennis Lundberg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Juozas Baliuka Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Peter Donald Medium Vendor pom developer name Richard Sitze Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer org Apache Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid commons-logging Highest Vendor pom name Apache Commons Logging High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-logging/ Highest Product file name commons-logging High Product jar package name apache Highest Product jar package name commons Highest Product jar package name logging Highest Product Manifest automatic-module-name org.apache.commons.logging Medium Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low Product Manifest Bundle-Name Apache Commons Logging Medium Product Manifest bundle-symbolicname org.apache.commons.commons-logging Medium Product Manifest Implementation-Title Apache Commons Logging High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Logging Medium Product pom artifactid commons-logging Highest Product pom developer email baliuka@apache.org Low Product pom developer email costin@apache.org Low Product pom developer email craigmcc@apache.org Low Product pom developer email dennisl@apache.org Low Product pom developer email donaldp@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email morgand@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email rsitze@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer email skitching@apache.org Low Product pom developer email tn@apache.org Low Product pom developer id baliuka Low Product pom developer id bstansberry Low Product pom developer id costin Low Product pom developer id craigmcc Low Product pom developer id dennisl Low Product pom developer id donaldp Low Product pom developer id ggregory Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rsitze Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id skitching Low Product pom developer id tn Low Product pom developer name Brian Stansberry Low Product pom developer name Costin Manolache Low Product pom developer name Craig McClanahan Low Product pom developer name Dennis Lundberg Low Product pom developer name Gary Gregory Low Product pom developer name Juozas Baliuka Low Product pom developer name Morgan Delagrange Low Product pom developer name Peter Donald Low Product pom developer name Richard Sitze Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer name Thomas Neidhart Low Product pom developer org Apache Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid commons-logging Highest Product pom name Apache Commons Logging High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-logging/ Medium Version file version 1.3.6 High Version Manifest Bundle-Version 1.3.6 High Version Manifest Implementation-Version 1.3.6 High Version pom parent-version 1.3.6 Low Version pom version 1.3.6 Highest
pkg:maven/commons-logging/commons-logging@1.3.6
(Confidence :High)
Description:
The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-math3/3.6.1/commons-math3-3.6.1.jar
MD5: 5b730d97e4e6368069de1983937c508e
SHA1: e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf
SHA256: 1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308
Referenced In Project/Scope: Tailormap API:compile
commons-math3-3.6.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-math3 High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name math3 Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Vendor Manifest bundle-symbolicname org.apache.commons.math3 Medium Vendor Manifest implementation-build 16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-math/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-math3 Highest Vendor pom artifactid commons-math3 Low Vendor pom developer email achou at apache dot org Low Vendor pom developer email billbarker at apache dot org Low Vendor pom developer email brentworden at apache dot org Low Vendor pom developer email celestin at apache dot org Low Vendor pom developer email dimpbx at apache dot org Low Vendor pom developer email erans at apache dot org Low Vendor pom developer email evanward at apache dot org Low Vendor pom developer email gregs at apache dot org Low Vendor pom developer email j3322ptm at yahoo dot de Low Vendor pom developer email luc at apache dot org Low Vendor pom developer email mdiggory at apache dot org Low Vendor pom developer email mikl at apache dot org Low Vendor pom developer email oertl at apache dot org Low Vendor pom developer email rdonkin at apache dot org Low Vendor pom developer email tn at apache dot org Low Vendor pom developer email tobrien at apache dot org Low Vendor pom developer id achou Medium Vendor pom developer id billbarker Medium Vendor pom developer id brentworden Medium Vendor pom developer id celestin Medium Vendor pom developer id dimpbx Medium Vendor pom developer id erans Medium Vendor pom developer id evanward Medium Vendor pom developer id gregs Medium Vendor pom developer id luc Medium Vendor pom developer id mdiggory Medium Vendor pom developer id mikl Medium Vendor pom developer id oertl Medium Vendor pom developer id pietsch Medium Vendor pom developer id rdonkin Medium Vendor pom developer id tn Medium Vendor pom developer id tobrien Medium Vendor pom developer name Albert Davidson Chou Medium Vendor pom developer name Bill Barker Medium Vendor pom developer name Brent Worden Medium Vendor pom developer name Dimitri Pourbaix Medium Vendor pom developer name Evan Ward Medium Vendor pom developer name Gilles Sadowski Medium Vendor pom developer name Greg Sterijevski Medium Vendor pom developer name J. Pietschmann Medium Vendor pom developer name Luc Maisonobe Medium Vendor pom developer name Mark Diggory Medium Vendor pom developer name Mikkel Meyer Andersen Medium Vendor pom developer name Otmar Ertl Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Sébastien Brisard Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer name Tim O'Brien Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Math High Vendor pom parent-artifactid commons-parent Low Vendor pom url http://commons.apache.org/proper/commons-math/ Highest Product file name commons-math3 High Product jar package name apache Highest Product jar package name commons Highest Product jar package name math3 Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Product Manifest Bundle-Name Apache Commons Math Medium Product Manifest bundle-symbolicname org.apache.commons.math3 Medium Product Manifest implementation-build 16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400 Low Product Manifest Implementation-Title Apache Commons Math High Product Manifest implementation-url http://commons.apache.org/proper/commons-math/ Low Product Manifest specification-title Apache Commons Math Medium Product pom artifactid commons-math3 Highest Product pom developer email achou at apache dot org Low Product pom developer email billbarker at apache dot org Low Product pom developer email brentworden at apache dot org Low Product pom developer email celestin at apache dot org Low Product pom developer email dimpbx at apache dot org Low Product pom developer email erans at apache dot org Low Product pom developer email evanward at apache dot org Low Product pom developer email gregs at apache dot org Low Product pom developer email j3322ptm at yahoo dot de Low Product pom developer email luc at apache dot org Low Product pom developer email mdiggory at apache dot org Low Product pom developer email mikl at apache dot org Low Product pom developer email oertl at apache dot org Low Product pom developer email rdonkin at apache dot org Low Product pom developer email tn at apache dot org Low Product pom developer email tobrien at apache dot org Low Product pom developer id achou Low Product pom developer id billbarker Low Product pom developer id brentworden Low Product pom developer id celestin Low Product pom developer id dimpbx Low Product pom developer id erans Low Product pom developer id evanward Low Product pom developer id gregs Low Product pom developer id luc Low Product pom developer id mdiggory Low Product pom developer id mikl Low Product pom developer id oertl Low Product pom developer id pietsch Low Product pom developer id rdonkin Low Product pom developer id tn Low Product pom developer id tobrien Low Product pom developer name Albert Davidson Chou Low Product pom developer name Bill Barker Low Product pom developer name Brent Worden Low Product pom developer name Dimitri Pourbaix Low Product pom developer name Evan Ward Low Product pom developer name Gilles Sadowski Low Product pom developer name Greg Sterijevski Low Product pom developer name J. Pietschmann Low Product pom developer name Luc Maisonobe Low Product pom developer name Mark Diggory Low Product pom developer name Mikkel Meyer Andersen Low Product pom developer name Otmar Ertl Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Sébastien Brisard Low Product pom developer name Thomas Neidhart Low Product pom developer name Tim O'Brien Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Math High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-math/ Medium Version file version 3.6.1 High Version Manifest Bundle-Version 3.6.1 High Version Manifest Implementation-Version 3.6.1 High Version pom parent-version 3.6.1 Low Version pom version 3.6.1 Highest
pkg:maven/org.apache.commons/commons-math3@3.6.1
(Confidence :High)
Description:
Commons Object Pooling Library
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.6/commons-pool-1.6.jar
MD5: 5ca02245c829422176d23fa530e919cc
SHA1: 4572d589699f09d866a226a14b7f4323c6d8f040
SHA256: 46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc
Referenced In Project/Scope: Tailormap API:compile
commons-pool-1.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-pool High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name pool Highest Vendor Manifest bundle-docurl http://commons.apache.org/pool/ Low Vendor Manifest bundle-symbolicname org.apache.commons.pool Medium Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-pool Highest Vendor pom artifactid commons-pool Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sandymac Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Sandy McArthur Medium Vendor pom developer org Apache Software Foundation Medium Vendor pom groupid commons-pool Highest Vendor pom name Commons Pool High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/pool/ Highest Product file name commons-pool High Product jar package name apache Highest Product jar package name commons Highest Product jar package name pool Highest Product Manifest bundle-docurl http://commons.apache.org/pool/ Low Product Manifest Bundle-Name Commons Pool Medium Product Manifest bundle-symbolicname org.apache.commons.pool Medium Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low Product Manifest Implementation-Title Commons Pool High Product Manifest specification-title Commons Pool Medium Product pom artifactid commons-pool Highest Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sandymac Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Morgan Delagrange Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Sandy McArthur Low Product pom developer org Apache Software Foundation Low Product pom groupid commons-pool Highest Product pom name Commons Pool High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/pool/ Medium Version file version 1.6 High Version Manifest Implementation-Version 1.6 High Version pom parent-version 1.6 Low Version pom version 1.6 Highest
pkg:maven/commons-pool/commons-pool@1.6
(Confidence :High)
Description:
Apache Commons Text is a set of utility functions and reusable components for processing
and manipulating text in a Java environment.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.15.0/commons-text-1.15.0.jar
MD5: 756b7c5438d89a0c311d811c1a06d19a
SHA1: 9899093aa40f0199d6c39b131b8f087cdb37e399
SHA256: 58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6
Referenced In Project/Scope: Tailormap API:compile
commons-text-1.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@35.2
Evidence
Type Source Name Value Confidence Vendor file name commons-text High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name text Highest Vendor Manifest automatic-module-name org.apache.commons.text Medium Vendor Manifest build-jdk-spec 25 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low Vendor Manifest bundle-symbolicname org.apache.commons.text Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-text Highest Vendor pom artifactid commons-text Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email djones@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email kinow@apache.org Low Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id djones Medium Vendor pom developer id ggregory Medium Vendor pom developer id kinow Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Bruno P. Kinoshita Medium Vendor pom developer name Duncan Jones Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Text High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-text Highest Product file name commons-text High Product jar package name apache Highest Product jar package name commons Highest Product jar package name text Highest Product Manifest automatic-module-name org.apache.commons.text Medium Product Manifest build-jdk-spec 25 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low Product Manifest Bundle-Name Apache Commons Text Medium Product Manifest bundle-symbolicname org.apache.commons.text Medium Product Manifest Implementation-Title Apache Commons Text High Product Manifest multi-release true Low Product Manifest specification-title Apache Commons Text Medium Product pom artifactid commons-text Highest Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email djones@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email kinow@apache.org Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id djones Low Product pom developer id ggregory Low Product pom developer id kinow Low Product pom developer name Benedikt Ritter Low Product pom developer name Bruno P. Kinoshita Low Product pom developer name Duncan Jones Low Product pom developer name Gary Gregory Low Product pom developer name Rob Tompkins Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Text High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-text Medium Version file version 1.15.0 High Version Manifest Bundle-Version 1.15.0 High Version Manifest Implementation-Version 1.15.0 High Version pom parent-version 1.15.0 Low Version pom version 1.15.0 Highest
Description:
Java library for Content (Media) Type representation
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/content-type/2.3/content-type-2.3.jar
MD5: f0fc0d6be73e838863e2197c03a27c3f
SHA1: e3aa0be212d7a42839a8f3f506f5b990bcce0222
SHA256: 60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895
Referenced In Project/Scope: Tailormap API:compile
content-type-2.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name content-type High Vendor jar package name nimbusds Highest Vendor Manifest build-date ${timestamp} Low Vendor Manifest build-jdk-spec 11 Low Vendor Manifest build-number ${buildNumber} Low Vendor Manifest build-tag 2.3 Low Vendor Manifest bundle-docurl https://connect2id.com Low Vendor Manifest bundle-symbolicname com.nimbusds.content-type Medium Vendor Manifest implementation-url https://bitbucket.org/connect2id/nimbus-content-type Low Vendor Manifest Implementation-Vendor Connect2id Ltd. High Vendor Manifest Implementation-Vendor-Id com.nimbusds Medium Vendor Manifest specification-vendor Connect2id Ltd. Low Vendor pom artifactid content-type Highest Vendor pom artifactid content-type Low Vendor pom developer email vladimir@dzhuvinov.com Low Vendor pom developer id vdzhuvinov Medium Vendor pom developer name Vladimir Dzhuvinov Medium Vendor pom groupid com.nimbusds Highest Vendor pom name Nimbus Content Type High Vendor pom organization name Connect2id Ltd. High Vendor pom organization url https://connect2id.com Medium Vendor pom url https://bitbucket.org/connect2id/nimbus-content-type Highest Product file name content-type High Product jar package name nimbusds Highest Product Manifest build-date ${timestamp} Low Product Manifest build-jdk-spec 11 Low Product Manifest build-number ${buildNumber} Low Product Manifest build-tag 2.3 Low Product Manifest bundle-docurl https://connect2id.com Low Product Manifest Bundle-Name Nimbus Content Type Medium Product Manifest bundle-symbolicname com.nimbusds.content-type Medium Product Manifest Implementation-Title Nimbus Content Type High Product Manifest implementation-url https://bitbucket.org/connect2id/nimbus-content-type Low Product Manifest specification-title Nimbus Content Type Medium Product pom artifactid content-type Highest Product pom developer email vladimir@dzhuvinov.com Low Product pom developer id vdzhuvinov Low Product pom developer name Vladimir Dzhuvinov Low Product pom groupid com.nimbusds Highest Product pom name Nimbus Content Type High Product pom organization name Connect2id Ltd. Low Product pom organization url https://connect2id.com Low Product pom url https://bitbucket.org/connect2id/nimbus-content-type Medium Version file version 2.3 High Version Manifest build-tag 2.3 Low Version Manifest Implementation-Version 2.3 High Version pom version 2.3 Highest
pkg:maven/com.nimbusds/content-type@2.3
(Confidence :High)
Description:
Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS.
License:
BSD License: http://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/com/github/virtuald/curvesapi/1.08/curvesapi-1.08.jar
MD5: fc3aed90346691e7c79da06bb6606beb
SHA1: 3d3d36568154059825089b289dcfca481fe44e2c
SHA256: ad95b08b8bbf9d7d17e5e00814898fa23324f32bc5b62f1a37801e6a56ce0079
Referenced In Project/Scope: Tailormap API:compile
curvesapi-1.08.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name curvesapi High Vendor Manifest automatic-module-name com.github.virtuald.curvesapi Medium Vendor pom artifactid curvesapi Highest Vendor pom artifactid curvesapi Low Vendor pom developer id stormdollar Medium Vendor pom developer id virtuald Medium Vendor pom developer name Dustin Spicuzza Medium Vendor pom developer name stormdollar Medium Vendor pom groupid com.github.virtuald Highest Vendor pom name curvesapi High Vendor pom url virtuald/curvesapi Highest Product file name curvesapi High Product Manifest automatic-module-name com.github.virtuald.curvesapi Medium Product pom artifactid curvesapi Highest Product pom developer id stormdollar Low Product pom developer id virtuald Low Product pom developer name Dustin Spicuzza Low Product pom developer name stormdollar Low Product pom groupid com.github.virtuald Highest Product pom name curvesapi High Product pom url virtuald/curvesapi High Version file version 1.08 High Version pom version 1.08 Highest
pkg:maven/com.github.virtuald/curvesapi@1.08
(Confidence :High)
Description:
Conversant Disruptor - very high throughput Java BlockingQueue
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/conversantmedia/disruptor/1.2.15/disruptor-1.2.15.jar
MD5: 9b66d90caa2794c624e4cc0cd6c0468b
SHA1: 21924297eb54dfd8a390c3e08cc9e7a457dff358
SHA256: bd3154a3fb41594b02950ad52bcd9b775a45577bd4d6ef1bee66ea6885c9f39e
Referenced In Project/Scope: Tailormap API:compile
disruptor-1.2.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-wms@35.2
Evidence
Type Source Name Value Confidence Vendor file name disruptor High Vendor jar package name concurrent Low Vendor jar package name conversantmedia Highest Vendor jar package name conversantmedia Low Vendor jar package name util Low Vendor pom artifactid disruptor Highest Vendor pom artifactid disruptor Low Vendor pom developer email john@2ad.com Low Vendor pom developer name John Cairns Medium Vendor pom developer org URL https://github.com/jac18281828 Medium Vendor pom groupid com.conversantmedia Highest Vendor pom name : High Vendor pom organization name Conversant Engineering High Vendor pom organization url http://engineering.conversantmedia.com Medium Vendor pom url conversant/disruptor Highest Product file name disruptor High Product jar package name concurrent Low Product jar package name conversantmedia Highest Product jar package name util Low Product pom artifactid disruptor Highest Product pom developer email john@2ad.com Low Product pom developer name John Cairns Low Product pom developer org URL https://github.com/jac18281828 Low Product pom groupid com.conversantmedia Highest Product pom name : High Product pom organization name Conversant Engineering Low Product pom organization url http://engineering.conversantmedia.com Low Product pom url conversant/disruptor High Version file version 1.2.15 High Version pom version 1.2.15 Highest
pkg:maven/com.conversantmedia/disruptor@1.2.15
(Confidence :High)
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-core/0.41/ejml-core-0.41.jar
MD5: 200146f623a8eb87196bbc35cae6c2b1
SHA1: 92ac2bee332a5697c42e576b94d563ba8c25877c
SHA256: 8d36469e8414d79c875defc0af3b980525d384761c9471d15a4f365b936dd1d5
Referenced In Project/Scope: Tailormap API:compile
ejml-core-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@35.2
Evidence
Type Source Name Value Confidence Vendor file name ejml-core High Vendor jar package name ejml Highest Vendor jar package name ejml Low Vendor jar package name matrix Highest Vendor jar package name sparse Highest Vendor pom artifactid ejml-core Highest Vendor pom artifactid ejml-core Low Vendor pom developer email peter.abeles@gmail.com Low Vendor pom developer id pabeles Medium Vendor pom developer name Peter Abeles Medium Vendor pom groupid org.ejml Highest Vendor pom name EJML High Vendor pom url http://ejml.org/ Highest Product file name ejml-core High Product jar package name ejml Highest Product jar package name matrix Highest Product jar package name sparse Highest Product pom artifactid ejml-core Highest Product pom developer email peter.abeles@gmail.com Low Product pom developer id pabeles Low Product pom developer name Peter Abeles Low Product pom groupid org.ejml Highest Product pom name EJML High Product pom url http://ejml.org/ Medium Version file version 0.41 High Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-core@0.41
(Confidence :High)
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-ddense/0.41/ejml-ddense-0.41.jar
MD5: 2128d09683d0ed77429fac23f64e42c7
SHA1: 782c80d4c3c8a3432c4641f24c177f336a360f9c
SHA256: 355347e9cac7e96d5d724d331a9b04bb14a8a02e1d111f1ac51c79f25d937123
Referenced In Project/Scope: Tailormap API:compile
ejml-ddense-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@35.2
Evidence
Type Source Name Value Confidence Vendor file name ejml-ddense High Vendor jar package name dense Highest Vendor jar package name dense Low Vendor jar package name ejml Highest Vendor jar package name ejml Low Vendor jar package name row Low Vendor pom artifactid ejml-ddense Highest Vendor pom artifactid ejml-ddense Low Vendor pom developer email peter.abeles@gmail.com Low Vendor pom developer id pabeles Medium Vendor pom developer name Peter Abeles Medium Vendor pom groupid org.ejml Highest Vendor pom name EJML High Vendor pom url http://ejml.org/ Highest Product file name ejml-ddense High Product jar package name dense Highest Product jar package name dense Low Product jar package name ejml Highest Product jar package name row Low Product pom artifactid ejml-ddense Highest Product pom developer email peter.abeles@gmail.com Low Product pom developer id pabeles Low Product pom developer name Peter Abeles Low Product pom groupid org.ejml Highest Product pom name EJML High Product pom url http://ejml.org/ Medium Version file version 0.41 High Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-ddense@0.41
(Confidence :High)
Description:
Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.
License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.41.0/error_prone_annotations-2.41.0.jar
MD5: 75e3b25da8b8a2136463c4674f5e49bf
SHA1: 4381275efdef6ddfae38f002c31e84cd001c97f0
SHA256: a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc
Referenced In Project/Scope: Tailormap API:compile
error_prone_annotations-2.41.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name error_prone_annotations High Vendor jar package name annotations Highest Vendor jar package name errorprone Highest Vendor jar package name google Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Vendor Manifest bundle-symbolicname com.google.errorprone.annotations Medium Vendor Manifest multi-release true Low Vendor pom artifactid error_prone_annotations Highest Vendor pom artifactid error_prone_annotations Low Vendor pom groupid com.google.errorprone Highest Vendor pom name error-prone annotations High Vendor pom parent-artifactid error_prone_parent Low Product file name error_prone_annotations High Product jar package name annotations Highest Product jar package name errorprone Highest Product jar package name google Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Product Manifest Bundle-Name error-prone annotations Medium Product Manifest bundle-symbolicname com.google.errorprone.annotations Medium Product Manifest multi-release true Low Product pom artifactid error_prone_annotations Highest Product pom groupid com.google.errorprone Highest Product pom name error-prone annotations High Product pom parent-artifactid error_prone_parent Medium Version file version 2.41.0 High Version Manifest Bundle-Version 2.41.0 High Version pom version 2.41.0 Highest
pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0
(Confidence :High)
Description:
Evo Inflector implements English pluralization algorithm.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/atteo/evo-inflector/1.3/evo-inflector-1.3.jar
MD5: 3ef7ac615df62834f49f2c29c57fe329
SHA1: 4cf8b5f363c60e63f8b7688ac053590460f2768e
SHA256: ac0192fd110a0363732b17ea94fd1ce8cfd85790c8e1551e14f866908b5d80e1
Referenced In Project/Scope: Tailormap API:compile
evo-inflector-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.1.2
Evidence
Type Source Name Value Confidence Vendor file name evo-inflector High Vendor jar package name atteo Highest Vendor jar package name english Highest Vendor jar package name evo Highest Vendor jar package name inflector Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid evo-inflector Highest Vendor pom artifactid evo-inflector Low Vendor pom developer email sentinel@atteo.com Low Vendor pom developer id sentinel Medium Vendor pom developer name SÅ‚awek Piotrowski Medium Vendor pom groupid org.atteo Highest Vendor pom name Evo Inflector High Vendor pom parent-artifactid parent Low Vendor pom url http://atteo.org/static/evo-inflector Highest Product file name evo-inflector High Product jar package name atteo Highest Product jar package name english Highest Product jar package name evo Highest Product jar package name inflector Highest Product Manifest build-jdk-spec 1.8 Low Product pom artifactid evo-inflector Highest Product pom developer email sentinel@atteo.com Low Product pom developer id sentinel Low Product pom developer name SÅ‚awek Piotrowski Low Product pom groupid org.atteo Highest Product pom name Evo Inflector High Product pom parent-artifactid parent Medium Product pom url http://atteo.org/static/evo-inflector Medium Version file version 1.3 High Version pom parent-version 1.3 Low Version pom version 1.3 Highest
pkg:maven/org.atteo/evo-inflector@1.3
(Confidence :High)
Description:
Contains
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
InternalFutures. Most users will never need to use this artifact. Its
classes are conceptually a part of Guava, but they're in this separate
artifact so that Android libraries can use them without pulling in all of
Guava (just as they can use ListenableFuture by depending on the
listenablefuture artifact).
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256: cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: Tailormap API:compile
failureaccess-1.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name failureaccess High Vendor jar package name common Highest Vendor jar package name concurrent Highest Vendor jar package name google Highest Vendor jar package name util Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor Manifest bundle-symbolicname com.google.guava.failureaccess Medium Vendor Manifest multi-release true Low Vendor pom artifactid failureaccess Highest Vendor pom artifactid failureaccess Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava InternalFutureFailureAccess and InternalFutures High Vendor pom parent-artifactid guava-parent Low Product file name failureaccess High Product jar package name common Highest Product jar package name concurrent Highest Product jar package name google Highest Product jar package name util Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://github.com/google/guava/ Low Product Manifest Bundle-Name Guava InternalFutureFailureAccess and InternalFutures Medium Product Manifest bundle-symbolicname com.google.guava.failureaccess Medium Product Manifest multi-release true Low Product pom artifactid failureaccess Highest Product pom groupid com.google.guava Highest Product pom name Guava InternalFutureFailureAccess and InternalFutures High Product pom parent-artifactid guava-parent Medium Version file version 1.0.3 High Version Manifest Bundle-Version 1.0.3 High Version pom parent-version 1.0.3 Low Version pom version 1.0.3 Highest
pkg:maven/com.google.guava/failureaccess@1.0.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/flywaydb/flyway-core/13.3.0/flyway-core-13.3.0.jarMD5: 399d4863a2a78840fd08173a4c80a8b0SHA1: b44208fa43b38077eff5e592df0c16ad585f237bSHA256: a2892437063f8808be72432c74dd429add4f414e50018d0ea4674ff36fbcbe41
Referenced In Project/Scope: Tailormap API:compile
flyway-core-13.3.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name flyway-core High Vendor jar package name core Highest Vendor jar package name flyway Highest Vendor jar package name flywaydb Highest Vendor Manifest build-jdk-spec 21 Low Vendor pom artifactid flyway-core Highest Vendor pom artifactid flyway-core Low Vendor pom groupid org.flywaydb Highest Vendor pom name ${project.artifactId} High Vendor pom parent-artifactid flyway-parent Low Product file name flyway-core High Product jar package name core Highest Product jar package name flyway Highest Product jar package name flywaydb Highest Product Manifest build-jdk-spec 21 Low Product pom artifactid flyway-core Highest Product pom groupid org.flywaydb Highest Product pom name ${project.artifactId} High Product pom parent-artifactid flyway-parent Medium Version file version 13.3.0 High Version pom version 13.3.0 Highest
pkg:maven/org.flywaydb/flyway-core@13.3.0
(Confidence :High)
File Path: /home/runner/.m2/repository/org/flywaydb/flyway-database-postgresql/13.3.0/flyway-database-postgresql-13.3.0.jarMD5: d3dbdd96f75263000ee37d1b60b18999SHA1: 107a25ab977e5aed3dd4c7e8123c6fd5005c6281SHA256: 1ed6265a16b10aef4298be0238e685415e1dac27247ed6bda078ef69f009d6a2
Referenced In Project/Scope: Tailormap API:compile
flyway-database-postgresql-13.3.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name flyway-database-postgresql High Vendor jar package name database Highest Vendor jar package name flywaydb Highest Vendor jar package name postgresql Highest Vendor Manifest build-jdk-spec 21 Low Vendor pom artifactid flyway-database-postgresql Highest Vendor pom artifactid flyway-database-postgresql Low Vendor pom groupid org.flywaydb Highest Vendor pom name ${project.artifactId} High Vendor pom parent-artifactid flyway-parent Low Product file name flyway-database-postgresql High Product jar package name database Highest Product jar package name flywaydb Highest Product jar package name postgresql Highest Product Manifest build-jdk-spec 21 Low Product pom artifactid flyway-database-postgresql Highest Product pom groupid org.flywaydb Highest Product pom name ${project.artifactId} High Product pom parent-artifactid flyway-parent Medium Version file version 13.3.0 High Version pom version 13.3.0 Highest
pkg:maven/org.flywaydb/flyway-database-postgresql@13.3.0
(Confidence :High)
Description:
GTXML Schema Driven Parser
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/gt-xml/35.2/gt-xml-35.2.jar
MD5: 044a7968c36eba76388d19fc9f60bb26
SHA1: 200939a3487462633e892d2045ddcb1891326a03
SHA256: 89dfd6fcbd259c72a020c704342e1ee063955e655fa3c747dfbb83a614ea73a5
Referenced In Project/Scope: Tailormap API:compile
gt-xml-35.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name gt-xml High Vendor jar package name geotools Highest Vendor jar package name schema Highest Vendor jar package name xml Highest Vendor Manifest automatic-module-name org.geotools.xml Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-timestamp 16-Oct-2026 01:58 Low Vendor Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Vendor pom artifactid gt-xml Highest Vendor pom artifactid gt-xml Low Vendor pom developer email jdeolive@users.sourceforge.net Low Vendor pom developer email jive@users.sourceforge.net Low Vendor pom developer name Jody Garnett Medium Vendor pom developer name Justin Deoliveira Medium Vendor pom developer org Refractions Research Medium Vendor pom developer org The Open Planning Project Medium Vendor pom groupid org.geotools Highest Vendor pom name XML Parsing Support High Vendor pom parent-artifactid library Low Product file name gt-xml High Product jar package name geotools Highest Product jar package name schema Highest Product jar package name xml Highest Product Manifest automatic-module-name org.geotools.xml Medium Product Manifest build-jdk-spec 17 Low Product Manifest build-timestamp 16-Oct-2026 01:58 Low Product Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Product pom artifactid gt-xml Highest Product pom developer email jdeolive@users.sourceforge.net Low Product pom developer email jive@users.sourceforge.net Low Product pom developer name Jody Garnett Low Product pom developer name Justin Deoliveira Low Product pom developer org Refractions Research Low Product pom developer org The Open Planning Project Low Product pom groupid org.geotools Highest Product pom name XML Parsing Support High Product pom parent-artifactid library Medium Version file version 35.2 High Version Manifest project-version 35.2 Medium Version pom version 35.2 Highest
Related Dependencies
gt-jdbc-oracle-35.2.jar
File Path: /home/runner/.m2/repository/org/geotools/jdbc/gt-jdbc-oracle/35.2/gt-jdbc-oracle-35.2.jar
MD5: 1867717fe196824085ecb56430de0ec8
SHA1: 2be9ff5f383bfde10723087381c25c3a2023bf6b
SHA256: 98b9d8eb4d52a7293c579a170034fe62ee9d3a5a5003e739bcf9c052413b449a
pkg:maven/org.geotools.jdbc/gt-jdbc-oracle@35.2
gt-jdbc-postgis-35.2.jar
File Path: /home/runner/.m2/repository/org/geotools/jdbc/gt-jdbc-postgis/35.2/gt-jdbc-postgis-35.2.jar
MD5: 49e10f6f5e44b606eeef75ac473b00f9
SHA1: b31c854555c16877ca189edaad412537d09f8fc6
SHA256: c545ffe388d0d9e47a2bbf34ed1af78d43f47c82566b2a7b3308695b414862cd
pkg:maven/org.geotools.jdbc/gt-jdbc-postgis@35.2
Description:
Schema based xml parsing. This module contains tools for creating
bindings from xml types to java types. Schema modelling is based
on Eclipse XSD.
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/xsd/gt-xsd-core/35.2/gt-xsd-core-35.2.jar
MD5: d452f381cf41c319a2ec6708d27f8a6d
SHA1: e0f6d7d25721eb49e43a21b3b96708706d14fb4d
SHA256: 18c368a596cfd71037f8ed6e02940af094078f59e38269703fd56641a5969535
Referenced In Project/Scope: Tailormap API:compile
gt-xsd-core-35.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name gt-xsd-core High Vendor jar package name bindings Highest Vendor jar package name geotools Highest Vendor jar package name xml Highest Vendor jar package name xsd Highest Vendor Manifest automatic-module-name org.geotools.xsd.xsd_core Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-timestamp 16-Oct-2026 01:58 Low Vendor Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Vendor pom artifactid gt-xsd-core Highest Vendor pom artifactid gt-xsd-core Low Vendor pom developer email jdeolive@users.sourceforge.net Low Vendor pom developer email jive@users.sourceforge.net Low Vendor pom developer id jdeolive Medium Vendor pom developer id jive Medium Vendor pom developer name Jody Garnett Medium Vendor pom developer name Justin Deoliveira Medium Vendor pom developer org Refractions Research Medium Vendor pom developer org The Open Planning Project Medium Vendor pom groupid org.geotools.xsd Highest Vendor pom name XML Parsing High Vendor pom parent-artifactid xsd Low Product file name gt-xsd-core High Product jar package name bindings Highest Product jar package name geotools Highest Product jar package name xml Highest Product jar package name xsd Highest Product Manifest automatic-module-name org.geotools.xsd.xsd_core Medium Product Manifest build-jdk-spec 17 Low Product Manifest build-timestamp 16-Oct-2026 01:58 Low Product Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Product pom artifactid gt-xsd-core Highest Product pom developer email jdeolive@users.sourceforge.net Low Product pom developer email jive@users.sourceforge.net Low Product pom developer id jdeolive Low Product pom developer id jive Low Product pom developer name Jody Garnett Low Product pom developer name Justin Deoliveira Low Product pom developer org Refractions Research Low Product pom developer org The Open Planning Project Low Product pom groupid org.geotools.xsd Highest Product pom name XML Parsing High Product pom parent-artifactid xsd Medium Version file version 35.2 High Version Manifest project-version 35.2 Medium Version pom version 35.2 Highest
Related Dependencies
Description:
Guava is a suite of core and expanded libraries that include
utility classes, Google's collections, I/O classes, and
much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256: 1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: Tailormap API:compile
guava-33.5.0-jre.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name guava High Vendor jar package name google Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor Manifest multi-release true Low Vendor pom artifactid guava Highest Vendor pom artifactid guava Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor pom parent-artifactid guava-parent Low Vendor pom url google/guava Highest Product file name guava High Product jar package name google Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://github.com/google/guava/ Low Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product Manifest bundle-symbolicname com.google.guava Medium Product Manifest multi-release true Low Product pom artifactid guava Highest Product pom groupid com.google.guava Highest Product pom name Guava: Google Core Libraries for Java High Product pom parent-artifactid guava-parent Medium Product pom url google/guava High Version pom version 33.5.0-jre Highest
Description:
Hibernate's core ORM functionality
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-core/7.4.15.Final/hibernate-core-7.4.15.Final.jar
MD5: 925795854db379504d39a0b3047673be
SHA1: fbe1b6ce0a570f775926ade888d2f7dcac31258b
SHA256: 96a19d4eda45753a0018593c9aa370498de0d03a88eb66cc713490da4fced9e0
Referenced In Project/Scope: Tailormap API:compile
hibernate-core-7.4.15.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name hibernate-core High Vendor hint analyzer vendor redhat Highest Vendor jar package name hibernate Highest Vendor Manifest automatic-module-name org.hibernate.orm.core Medium Vendor Manifest bundle-docurl https://hibernate.org/orm/releases/7.4 Low Vendor Manifest bundle-symbolicname org.hibernate.orm.core Medium Vendor Manifest implementation-url https://hibernate.org/orm Low Vendor Manifest Implementation-Vendor Hibernate.org High Vendor Manifest Implementation-Vendor-Id org.hibernate Medium Vendor Manifest specification-vendor Hibernate.org Low Vendor pom artifactid hibernate-core Highest Vendor pom artifactid hibernate-core Low Vendor pom developer id hibernate-team Medium Vendor pom developer name The Hibernate Development Team Medium Vendor pom developer org Hibernate.org Medium Vendor pom developer org URL https://hibernate.org Medium Vendor pom groupid org.hibernate.orm Highest Vendor pom name Hibernate ORM - hibernate-core High Vendor pom organization name Hibernate.org High Vendor pom organization url https://hibernate.org Medium Vendor pom url https://hibernate.org/orm Highest Product file name hibernate-core High Product jar package name hibernate Highest Product Manifest automatic-module-name org.hibernate.orm.core Medium Product Manifest bundle-docurl https://hibernate.org/orm/releases/7.4 Low Product Manifest Bundle-Name hibernate-core Medium Product Manifest bundle-symbolicname org.hibernate.orm.core Medium Product Manifest Implementation-Title hibernate-core High Product Manifest implementation-url https://hibernate.org/orm Low Product Manifest specification-title hibernate-core Medium Product pom artifactid hibernate-core Highest Product pom developer id hibernate-team Low Product pom developer name The Hibernate Development Team Low Product pom developer org Hibernate.org Low Product pom developer org URL https://hibernate.org Low Product pom groupid org.hibernate.orm Highest Product pom name Hibernate ORM - hibernate-core High Product pom organization name Hibernate.org Low Product pom organization url https://hibernate.org Low Product pom url https://hibernate.org/orm Medium Version Manifest Bundle-Version 7.4.15.Final High Version Manifest Implementation-Version 7.4.15.Final High Version pom version 7.4.15.Final Highest
Related Dependencies
hibernate-envers-7.4.15.Final.jar
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-envers/7.4.15.Final/hibernate-envers-7.4.15.Final.jar
MD5: ed41c599d88a81dcd4d5dd597c63e553
SHA1: 642c67e426704567db2e98a92fee001ea249499b
SHA256: e3c0e838a7b3d547d5e50441934936227454fcf3bcb6ddfc52c44876db5eb954
pkg:maven/org.hibernate.orm/hibernate-envers@7.4.15.Final
hibernate-micrometer-7.4.15.Final.jar
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-micrometer/7.4.15.Final/hibernate-micrometer-7.4.15.Final.jar
MD5: 1cfd5467d54aaa84663d653099058015
SHA1: 8f87731c16c5767ebb0ab84d322a35bfe1d83f40
SHA256: 640b7ae18a27f776ef7732deca61d109852e8a385fdceb399cc2625a469c3f92
pkg:maven/org.hibernate.orm/hibernate-micrometer@7.4.15.Final
Description:
A de-typed abstraction over reflection and annotations
License:
Apache License Version 2.0: http://www.apache.org/licenses/
File Path: /home/runner/.m2/repository/org/hibernate/models/hibernate-models/1.1.2/hibernate-models-1.1.2.jar
MD5: 786565fb8a20b8d011bc46bcef7cef89
SHA1: 18a67ce600ace529fc1b08cd88bda38667bffeb8
SHA256: d683d70e2592b23c5f2fbc3510d2e087aa61f2ac399a9090b941a1a42d3f3a98
Referenced In Project/Scope: Tailormap API:runtime
hibernate-models-1.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name hibernate-models High Vendor hint analyzer vendor redhat Highest Vendor jar package name hibernate Highest Vendor jar package name models Highest Vendor Manifest automatic-module-name org.hibernate.models Medium Vendor pom artifactid hibernate-models Highest Vendor pom artifactid hibernate-models Low Vendor pom developer id hibernate-team Medium Vendor pom developer name The Hibernate Development Team Medium Vendor pom developer org Hibernate.org Medium Vendor pom developer org URL https://hibernate.org Medium Vendor pom groupid org.hibernate.models Highest Vendor pom name Hibernate Models High Vendor pom organization name Hibernate.org High Vendor pom organization url https://hibernate.org Medium Vendor pom url hibernate/hibernate-models Highest Product file name hibernate-models High Product jar package name hibernate Highest Product jar package name models Highest Product Manifest automatic-module-name org.hibernate.models Medium Product pom artifactid hibernate-models Highest Product pom developer id hibernate-team Low Product pom developer name The Hibernate Development Team Low Product pom developer org Hibernate.org Low Product pom developer org URL https://hibernate.org Low Product pom groupid org.hibernate.models Highest Product pom name Hibernate Models High Product pom organization name Hibernate.org Low Product pom organization url https://hibernate.org Low Product pom url hibernate/hibernate-models High Version file version 1.1.2 High Version pom version 1.1.2 Highest
pkg:maven/org.hibernate.models/hibernate-models@1.1.2
(Confidence :High)
Description:
Hibernate's Jakarta Validation reference implementation.
License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/hibernate/validator/hibernate-validator/9.1.5.Final/hibernate-validator-9.1.5.Final.jar
MD5: a05b1e56d8e20424d318ed88e19a925d
SHA1: 9765ed23b29abe5e5156e5222b418035add8d00e
SHA256: 1e2c1f63050a6863613d910555a81e850a6aa313e4e5f526984512cfd2946dea
Referenced In Project/Scope: Tailormap API:compile
hibernate-validator-9.1.5.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name hibernate-validator High Vendor hint analyzer vendor redhat Highest Vendor jar package name engine Highest Vendor jar package name hibernate Highest Vendor jar package name validator Highest Vendor Manifest build-jdk-spec 25 Low Vendor Manifest bundle-symbolicname org.hibernate.validator Medium Vendor Manifest implementation-url https://hibernate.org/validator/ Low Vendor Manifest Implementation-Vendor org.hibernate.validator High Vendor Manifest Implementation-Vendor-Id org.hibernate.validator Medium Vendor pom artifactid hibernate-validator Highest Vendor pom artifactid hibernate-validator Low Vendor pom developer email davide@hibernate.org Low Vendor pom developer email emmanuel@hibernate.org Low Vendor pom developer email guillaume.smet@hibernate.org Low Vendor pom developer email gunnar@hibernate.org Low Vendor pom developer email hferents@redhat.com Low Vendor pom developer email kevin.pollet@serli.com Low Vendor pom developer email marko@hibernate.org Low Vendor pom developer id davide.dalto Medium Vendor pom developer id epbernard Medium Vendor pom developer id guillaume.smet Medium Vendor pom developer id gunnar.morling Medium Vendor pom developer id hardy.ferentschik Medium Vendor pom developer id kevinpollet Medium Vendor pom developer id marko.bekhta Medium Vendor pom developer name Davide D'Alto Medium Vendor pom developer name Emmanuel Bernard Medium Vendor pom developer name Guillaume Smet Medium Vendor pom developer name Gunnar Morling Medium Vendor pom developer name Hardy Ferentschik Medium Vendor pom developer name Kevin Pollet Medium Vendor pom developer name Marko Bekhta Medium Vendor pom developer org Red Hat, Inc. Medium Vendor pom developer org SERLI Medium Vendor pom groupid org.hibernate.validator Highest Vendor pom name Hibernate Validator Engine High Vendor pom url https://hibernate.org/validator Highest Product file name hibernate-validator High Product jar package name engine Highest Product jar package name hibernate Highest Product jar package name validator Highest Product Manifest build-jdk-spec 25 Low Product Manifest Bundle-Name Hibernate Validator Engine Medium Product Manifest bundle-symbolicname org.hibernate.validator Medium Product Manifest Implementation-Title hibernate-validator High Product Manifest implementation-url https://hibernate.org/validator/ Low Product Manifest specification-title Jakarta Validation Medium Product pom artifactid hibernate-validator Highest Product pom developer email davide@hibernate.org Low Product pom developer email emmanuel@hibernate.org Low Product pom developer email guillaume.smet@hibernate.org Low Product pom developer email gunnar@hibernate.org Low Product pom developer email hferents@redhat.com Low Product pom developer email kevin.pollet@serli.com Low Product pom developer email marko@hibernate.org Low Product pom developer id davide.dalto Low Product pom developer id epbernard Low Product pom developer id guillaume.smet Low Product pom developer id gunnar.morling Low Product pom developer id hardy.ferentschik Low Product pom developer id kevinpollet Low Product pom developer id marko.bekhta Low Product pom developer name Davide D'Alto Low Product pom developer name Emmanuel Bernard Low Product pom developer name Guillaume Smet Low Product pom developer name Gunnar Morling Low Product pom developer name Hardy Ferentschik Low Product pom developer name Kevin Pollet Low Product pom developer name Marko Bekhta Low Product pom developer org Red Hat, Inc. Low Product pom developer org SERLI Low Product pom groupid org.hibernate.validator Highest Product pom name Hibernate Validator Engine High Product pom url https://hibernate.org/validator Medium Version Manifest Bundle-Version 9.1.5.Final High Version Manifest Implementation-Version 9.1.5.Final High Version pom version 9.1.5.Final Highest
Description:
HSQLDB - Lightweight 100% Java SQL Database Engine
License:
HSQLDB License, a BSD open source license: http://hsqldb.org/web/hsqlLicense.html
File Path: /home/runner/.m2/repository/org/hsqldb/hsqldb/2.7.3/hsqldb-2.7.3.jar
MD5: 724301ab61ff54755deec86c7a724505
SHA1: 85b49338b36f3051d217295596cf92beb92e4bfb
SHA256: 6f2f77eedbe75cfbe26bf30d73b13de0cc57fb7cdb27a92ed8c1a012f0e2363a
Referenced In Project/Scope: Tailormap API:compile
hsqldb-2.7.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-epsg-hsql@35.2
Evidence
Type Source Name Value Confidence Vendor file name hsqldb High Vendor jar package name database Highest Vendor jar package name hsqldb Highest Vendor jar package name java Highest Vendor Manifest bundle-symbolicname org.hsqldb.hsqldb Medium Vendor Manifest originally-created-by 11.0.21+9 (Eclipse Adoptium) Low Vendor Manifest specification-vendor The HSQL Development Group Low Vendor pom artifactid hsqldb Highest Vendor pom artifactid hsqldb Low Vendor pom developer email blaine.simpson@admc.com Low Vendor pom developer email ft@cluedup.com Low Vendor pom developer id fredt Medium Vendor pom developer id unsaved Medium Vendor pom developer name Blaine Simpson Medium Vendor pom developer name Fred Toussi Medium Vendor pom groupid org.hsqldb Highest Vendor pom name HyperSQL Database High Vendor pom organization name The HSQL Development Group High Vendor pom organization url http://hsqldb.org Medium Vendor pom url http://hsqldb.org Highest Product file name hsqldb High Product jar package name database Highest Product jar package name hsqldb Highest Product jar package name java Highest Product Manifest Bundle-Name HSQLDB Medium Product Manifest bundle-symbolicname org.hsqldb.hsqldb Medium Product Manifest Implementation-Title Standard runtime High Product Manifest originally-created-by 11.0.21+9 (Eclipse Adoptium) Low Product Manifest specification-title HSQLDB Medium Product pom artifactid hsqldb Highest Product pom developer email blaine.simpson@admc.com Low Product pom developer email ft@cluedup.com Low Product pom developer id fredt Low Product pom developer id unsaved Low Product pom developer name Blaine Simpson Low Product pom developer name Fred Toussi Low Product pom groupid org.hsqldb Highest Product pom name HyperSQL Database High Product pom organization name The HSQL Development Group Low Product pom organization url http://hsqldb.org Low Product pom url http://hsqldb.org Medium Version file version 2.7.3 High Version Manifest Bundle-Version 2.7.3 High Version Manifest Implementation-Version 2.7.3 High Version pom version 2.7.3 Highest
pkg:maven/org.hsqldb/hsqldb@2.7.3
(Confidence :High)
cpe:2.3:a:hsqldb:hypersql_database:2.7.3:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
Apache HttpComponents Client
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/client5/httpclient5/5.6.5/httpclient5-5.6.5.jarMD5: d8cc8b781781dc447050138b9cd7bf68SHA1: 4540cf4269d2e4a713a434a01e195af29e1ef9e1SHA256: a10b555f7c85a720d1011a086d679d854b155816cde91a40198cc98c2b0867e8
Referenced In Project/Scope: Tailormap API:compile
httpclient5-5.6.5.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name httpclient5 High Vendor jar package name apache Highest Vendor jar package name client5 Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.client5.httpclient5 Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest implementation-url https://hc.apache.org/httpcomponents-client-5.6.x/5.6.5/httpclient5/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid httpclient5 Highest Vendor pom artifactid httpclient5 Low Vendor pom groupid org.apache.httpcomponents.client5 Highest Vendor pom name Apache HttpClient High Vendor pom parent-artifactid httpclient5-parent Low Product file name httpclient5 High Product jar package name apache Highest Product jar package name client5 Highest Product jar package name hc Highest Product Manifest automatic-module-name org.apache.httpcomponents.client5.httpclient5 Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Apache HttpClient High Product Manifest implementation-url https://hc.apache.org/httpcomponents-client-5.6.x/5.6.5/httpclient5/ Low Product Manifest specification-title Apache HttpClient Medium Product pom artifactid httpclient5 Highest Product pom groupid org.apache.httpcomponents.client5 Highest Product pom name Apache HttpClient High Product pom parent-artifactid httpclient5-parent Medium Version file version 5.6.5 High Version Manifest Implementation-Version 5.6.5 High Version pom version 5.6.5 Highest
Description:
Apache HttpComponents HTTP/1.1 core components
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/core5/httpcore5/5.4.4/httpcore5-5.4.4.jarMD5: 1d7150db6792387e1f39dd626060c746SHA1: fb236f682f1eaae1abec9b60e940158ac369f15bSHA256: b08e3c3a440fec2029e89980134c7c787dd6796454641ad1eafb81478d7e8b0b
Referenced In Project/Scope: Tailormap API:compile
httpcore5-5.4.4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name httpcore5 High Vendor jar package name apache Highest Vendor jar package name core5 Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.core5.httpcore5 Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest implementation-url https://hc.apache.org/httpcomponents-core-5.4.x/5.4.4/httpcore5/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid httpcore5 Highest Vendor pom artifactid httpcore5 Low Vendor pom groupid org.apache.httpcomponents.core5 Highest Vendor pom name Apache HttpComponents Core HTTP/1.1 High Vendor pom parent-artifactid httpcore5-parent Low Product file name httpcore5 High Product jar package name apache Highest Product jar package name core5 Highest Product jar package name hc Highest Product Manifest automatic-module-name org.apache.httpcomponents.core5.httpcore5 Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Apache HttpComponents Core HTTP/1.1 High Product Manifest implementation-url https://hc.apache.org/httpcomponents-core-5.4.x/5.4.4/httpcore5/ Low Product Manifest specification-title Apache HttpComponents Core HTTP/1.1 Medium Product pom artifactid httpcore5 Highest Product pom groupid org.apache.httpcomponents.core5 Highest Product pom name Apache HttpComponents Core HTTP/1.1 High Product pom parent-artifactid httpcore5-parent Medium Version file version 5.4.4 High Version Manifest Implementation-Version 5.4.4 High Version pom version 5.4.4 Highest
Related Dependencies
httpcore5-h2-5.4.4.jar
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/core5/httpcore5-h2/5.4.4/httpcore5-h2-5.4.4.jar
MD5: 8f56560c50101d9422ca597c48973c9b
SHA1: 90c30ff56e226bdb96cf5c987aebc42e1a8a9f45
SHA256: 9a61441889f9b222ce99581977cc549b4dfca7ac9d2841582c1e57a31fa65b48
pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.4
Description:
A Java library for generating Time-Sorted Unique Identifiers (TSID).
License:
MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/io/hypersistence/hypersistence-tsid/2.1.4/hypersistence-tsid-2.1.4.jar
MD5: 0d491b7d018a59bc04d8236086ddb2e8
SHA1: 7837057227aae89e4a9abf0e4cba6d4ac68041d0
SHA256: e4087fce815d7cf91e3f62ee8d1058a822264e6bf210a163abf5aff43831f059
Referenced In Project/Scope: Tailormap API:compile
hypersistence-tsid-2.1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name hypersistence-tsid High Vendor jar package name hypersistence Highest Vendor jar package name io Highest Vendor jar package name tsid Highest Vendor Manifest automatic-module-name io.hypersistence.tsid Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.hypersistence.tsid Medium Vendor pom artifactid hypersistence-tsid Highest Vendor pom artifactid hypersistence-tsid Low Vendor pom developer name Fabio Lima Medium Vendor pom developer name Vlad Mihalcea Medium Vendor pom groupid io.hypersistence Highest Vendor pom name hypersistence-tsid High Vendor pom url vladmihalcea/hypersistence-tsid Highest Product file name hypersistence-tsid High Product jar package name hypersistence Highest Product jar package name io Highest Product jar package name tsid Highest Product Manifest automatic-module-name io.hypersistence.tsid Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name hypersistence-tsid Medium Product Manifest bundle-symbolicname io.hypersistence.tsid Medium Product pom artifactid hypersistence-tsid Highest Product pom developer name Fabio Lima Low Product pom developer name Vlad Mihalcea Low Product pom groupid io.hypersistence Highest Product pom name hypersistence-tsid High Product pom url vladmihalcea/hypersistence-tsid High Version file version 2.1.4 High Version Manifest Bundle-Version 2.1.4 High Version pom version 2.1.4 Highest
pkg:maven/io.hypersistence/hypersistence-tsid@2.1.4
(Confidence :High)
File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-geocore/2.1.4/imageio-ext-geocore-2.1.4.jarMD5: 519b6fba92d9f56c664c80a2a9583ac0SHA1: 4d381dc94bac52a70da611526c840103f726184eSHA256: 30814c123af04954140951fb86cfc4cf40744b89ea603952e03254fd0d4908d8
Referenced In Project/Scope: Tailormap API:compile
imageio-ext-geocore-2.1.4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imageio-ext-geocore High Vendor jar package name geosolutions Highest Vendor jar package name imageio Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imageio-ext-geocore Highest Vendor pom artifactid imageio-ext-geocore Low Vendor pom groupid it.geosolutions.imageio-ext Highest Vendor pom name Image I/O-Extensions - GeoCore High Vendor pom parent-artifactid imageio-ext-library Low Product file name imageio-ext-geocore High Product jar package name geosolutions Highest Product jar package name imageio Highest Product jar package name it Highest Product Manifest build-jdk-spec 17 Low Product pom artifactid imageio-ext-geocore Highest Product pom groupid it.geosolutions.imageio-ext Highest Product pom name Image I/O-Extensions - GeoCore High Product pom parent-artifactid imageio-ext-library Medium Version file version 2.1.4 High Version pom version 2.1.4 Highest
pkg:maven/it.geosolutions.imageio-ext/imageio-ext-geocore@2.1.4
(Confidence :High)
File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-streams/2.1.4/imageio-ext-streams-2.1.4.jarMD5: 201423463fd55e147b22658e786c1809SHA1: 19c0d0166d8a8dbc3b4a9258fe0a543971c2a14eSHA256: 9f5cc6f30a667407db951bdcd23d5409246e600e8df94c3c1dab094e660d8976
Referenced In Project/Scope: Tailormap API:compile
imageio-ext-streams-2.1.4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imageio-ext-streams High Vendor jar package name geosolutions Highest Vendor jar package name imageio Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imageio-ext-streams Highest Vendor pom artifactid imageio-ext-streams Low Vendor pom groupid it.geosolutions.imageio-ext Highest Vendor pom name Image I/O-Extensions - Custom Streams High Vendor pom parent-artifactid imageio-ext-library Low Product file name imageio-ext-streams High Product jar package name geosolutions Highest Product jar package name imageio Highest Product jar package name it Highest Product Manifest build-jdk-spec 17 Low Product pom artifactid imageio-ext-streams Highest Product pom groupid it.geosolutions.imageio-ext Highest Product pom name Image I/O-Extensions - Custom Streams High Product pom parent-artifactid imageio-ext-library Medium Version file version 2.1.4 High Version pom version 2.1.4 Highest
pkg:maven/it.geosolutions.imageio-ext/imageio-ext-streams@2.1.4
(Confidence :High)
File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-tiff/2.1.4/imageio-ext-tiff-2.1.4.jarMD5: 67a0907e5dcf3b68d62c6fde49608a3bSHA1: 5bba411e6982ec508b235b82ad7c1e704061ec9bSHA256: 7aa837fd218f1eb3970b951059e3eea19bf4e1981a05ac6974a762ed0237afa3
Referenced In Project/Scope: Tailormap API:compile
imageio-ext-tiff-2.1.4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imageio-ext-tiff High Vendor jar package name geosolutions Highest Vendor jar package name imageio Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imageio-ext-tiff Highest Vendor pom artifactid imageio-ext-tiff Low Vendor pom groupid it.geosolutions.imageio-ext Highest Vendor pom name Improved TIFF Plugin High Vendor pom parent-artifactid imageio-ext-plugin Low Product file name imageio-ext-tiff High Product jar package name geosolutions Highest Product jar package name imageio Highest Product jar package name it Highest Product Manifest build-jdk-spec 17 Low Product pom artifactid imageio-ext-tiff Highest Product pom groupid it.geosolutions.imageio-ext Highest Product pom name Improved TIFF Plugin High Product pom parent-artifactid imageio-ext-plugin Medium Version file version 2.1.4 High Version pom version 2.1.4 Highest
pkg:maven/it.geosolutions.imageio-ext/imageio-ext-tiff@2.1.4
(Confidence :High)
File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-utilities/2.1.4/imageio-ext-utilities-2.1.4.jarMD5: 7063a19c41f64669baed3b26aea3c917SHA1: e62ca7ae79aef732d08c04350882fb77ff4c343bSHA256: 1d177e7fba42c671878eec7af4921689009c6c92e62404324f420a5c48ec7e41
Referenced In Project/Scope: Tailormap API:compile
imageio-ext-utilities-2.1.4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imageio-ext-utilities High Vendor jar package name geosolutions Highest Vendor jar package name imageio Highest Vendor jar package name it Highest Vendor jar package name utilities Highest Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imageio-ext-utilities Highest Vendor pom artifactid imageio-ext-utilities Low Vendor pom groupid it.geosolutions.imageio-ext Highest Vendor pom name Image I/O-Extensions - utilities classes and methods High Vendor pom parent-artifactid imageio-ext-library Low Product file name imageio-ext-utilities High Product jar package name geosolutions Highest Product jar package name imageio Highest Product jar package name it Highest Product jar package name utilities Highest Product Manifest build-jdk-spec 17 Low Product pom artifactid imageio-ext-utilities Highest Product pom groupid it.geosolutions.imageio-ext Highest Product pom name Image I/O-Extensions - utilities classes and methods High Product pom parent-artifactid imageio-ext-library Medium Version file version 2.1.4 High Version pom version 2.1.4 Highest
pkg:maven/it.geosolutions.imageio-ext/imageio-ext-utilities@2.1.4
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-affine/0.9.3/imagen-affine-0.9.3.jarMD5: a831757a91e4e535f35c90bfd37bab48SHA1: 5d336fefb12fb469c59a7e0045018edfe097aee1SHA256: d0d3ef250b8d5b7fcc3e778a4a31daf8d9d14b534b3e4f4983ccfa938fb1ce74
Referenced In Project/Scope: Tailormap API:compile
imagen-affine-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-affine High Vendor jar package name affine Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.affine Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-affine Highest Vendor pom artifactid imagen-affine Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-affine High Product jar package name affine Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.affine Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-affine Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
CVE-2026-21853 suppress
AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click remote code execution vulnerability. This vulnerability can be exploited by embedding a specially crafted affine: URL on a website. An attacker can trigger the vulnerability in two common scenarios: 1/ A victim visits a malicious website controlled by the attacker and the website redirect to the URL automatically, or 2/ A victim clicks on a crafted link embedded on a legitimate website (e.g., in user-generated content). In both cases, the browser invokes AFFiNE custom URL handler, which launches the AFFiNE app and processes the crafted URL. This results in arbitrary code execution on the victim’s machine, without further interaction. This issue has been patched in version 0.25.4.
CWE-94 Improper Control of Generation of Code ('Code Injection')
CVSSv3:
Base Score: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-25477 suppress
AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regular Expression allows an attacker to bypass the whitelist by using malicious domains that end with a trusted string. This issue has been patched in version 0.26.0.
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
CVSSv4:
Base Score: MEDIUM (6.9)
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (6.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-algebra/0.9.3/imagen-algebra-0.9.3.jarMD5: 0076e22e8c0021c6ca95bbcf44085aacSHA1: af88e4cef830719f5339020fff52aba3c727b042SHA256: d05a600009c4a19c27a8a37a17957bcc035d2d56a2e40f284066ff634ebea1d7
Referenced In Project/Scope: Tailormap API:compile
imagen-algebra-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-algebra High Vendor jar package name algebra Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.algebra Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-algebra Highest Vendor pom artifactid imagen-algebra Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-algebra High Product jar package name algebra Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.algebra Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-algebra Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-algebra@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-bandcombine/0.9.3/imagen-bandcombine-0.9.3.jarMD5: 33d07e1dd0f78904d1e07111090e4615SHA1: 7848d928114a8bdf477caa03878e7ee4433c6d2bSHA256: 48bfe066562b58d73f61fa48cc027bc36341edb5448882be9c732e86f43eef14
Referenced In Project/Scope: Tailormap API:compile
imagen-bandcombine-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-bandcombine High Vendor jar package name bandcombine Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.bandcombine Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-bandcombine Highest Vendor pom artifactid imagen-bandcombine Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-bandcombine High Product jar package name bandcombine Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.bandcombine Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-bandcombine Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-bandcombine@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-bandmerge/0.9.3/imagen-bandmerge-0.9.3.jarMD5: 9d4c730b95b00d63d631004c2fbfc0d2SHA1: d4887d495ce885ad45d78088213e2948f770543bSHA256: 34074cb26ca0ea10e9409019275db47d51237eb3da68dfb8f6f0a4870519dd03
Referenced In Project/Scope: Tailormap API:compile
imagen-bandmerge-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-bandmerge High Vendor jar package name bandmerge Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.bandmerge Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-bandmerge Highest Vendor pom artifactid imagen-bandmerge Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-bandmerge High Product jar package name bandmerge Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.bandmerge Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-bandmerge Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-bandmerge@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-bandselect/0.9.3/imagen-bandselect-0.9.3.jarMD5: b93481e6fa6a595e38e71e995ccdec4dSHA1: b02375141773b87d00bcf6b1447864faa23f785eSHA256: 7eea5901de641e7d0046c9c4a60f1ed396acf90e1f855226d1000a4bec90b75e
Referenced In Project/Scope: Tailormap API:compile
imagen-bandselect-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-bandselect High Vendor jar package name bandselect Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.bandselect Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-bandselect Highest Vendor pom artifactid imagen-bandselect Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-bandselect High Product jar package name bandselect Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.bandselect Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-bandselect Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-bandselect@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-binarize/0.9.3/imagen-binarize-0.9.3.jarMD5: b84e172efc42bbd0438d87f2ce928041SHA1: e2df7ba3e3ab9eefb72fcd70876a88d58dbf5416SHA256: c070b6a376f36f4981d8b97e1f0c64a4f9e4781b615fd60ddfd62b8945e136fd
Referenced In Project/Scope: Tailormap API:compile
imagen-binarize-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-binarize High Vendor jar package name binarize Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.binarize Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-binarize Highest Vendor pom artifactid imagen-binarize Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-binarize High Product jar package name binarize Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.binarize Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-binarize Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-binarize@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-border/0.9.3/imagen-border-0.9.3.jarMD5: fcf4a9f2b8d623c53a3686cdda04e781SHA1: cd2461faed9828977d8c73c2145e59c6d4a14ee0SHA256: 28fb51f690d12bcfec75749615866ab914bc6d778859f2846093d230d9bdaa2c
Referenced In Project/Scope: Tailormap API:compile
imagen-border-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-border High Vendor jar package name border Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.border Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-border Highest Vendor pom artifactid imagen-border Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-border High Product jar package name border Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.border Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-border Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-border@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-buffer/0.9.3/imagen-buffer-0.9.3.jarMD5: b0f611d3773c03e4622b2239661c49f8SHA1: 37ac7116f4159b321671107508d34a0e9389f6fdSHA256: e9f45cff63e86eb50ac663a6fdf38aad94dec8032d7d55127442b2f2934f7e0e
Referenced In Project/Scope: Tailormap API:compile
imagen-buffer-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-buffer High Vendor jar package name buffer Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.buffer Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-buffer Highest Vendor pom artifactid imagen-buffer Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-buffer High Product jar package name buffer Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.buffer Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-buffer Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-buffer@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-classifier/0.9.3/imagen-classifier-0.9.3.jarMD5: 0ef0ed560377df5bf39535bb316c4499SHA1: 9534f25bf268750f790496f823954b65932ac73fSHA256: 00100297fd26704840e83fd6ae68559ead65538ae505abdc36eb03dae2d15b6a
Referenced In Project/Scope: Tailormap API:compile
imagen-classifier-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-classifier High Vendor jar package name classifier Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.classifier Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-classifier Highest Vendor pom artifactid imagen-classifier Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-classifier High Product jar package name classifier Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.classifier Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-classifier Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-classifier@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-colorconvert/0.9.3/imagen-colorconvert-0.9.3.jarMD5: 632e183643ebef5972468c4654c9745dSHA1: b4766087a1a323ad03c5f5282900089db093663cSHA256: 31d87c3b3b4ceacd9181a37378203bfb8c9c731f9110becfb1b475a169be1cf5
Referenced In Project/Scope: Tailormap API:compile
imagen-colorconvert-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-colorconvert High Vendor jar package name colorconvert Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.colorconvert Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-colorconvert Highest Vendor pom artifactid imagen-colorconvert Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-colorconvert High Product jar package name colorconvert Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.colorconvert Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-colorconvert Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-colorconvert@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-colorindexer/0.9.3/imagen-colorindexer-0.9.3.jarMD5: ec44f2e75a15daaf2222b32cb14efb97SHA1: 0c96286a715983235ccca6b5e8af4cbffda9aeb8SHA256: 57a512971135e4d0895194720f65a7d6f9d8dc6dc71b6ee9a2a45497d0d64860
Referenced In Project/Scope: Tailormap API:compile
imagen-colorindexer-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-colorindexer High Vendor jar package name colorindexer Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.colorindexer Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-colorindexer Highest Vendor pom artifactid imagen-colorindexer Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-colorindexer High Product jar package name colorindexer Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.colorindexer Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-colorindexer Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-colorindexer@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-convolve/0.9.3/imagen-convolve-0.9.3.jarMD5: ae750ba8c0c506476cc2c150a5b93a91SHA1: 0a9adc11713ab65345ab7c225f09441fdcfcee16SHA256: c8a2a80877398f86b22c0387a234862010241faafd4d014e1aa98855205c66b9
Referenced In Project/Scope: Tailormap API:compile
imagen-convolve-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-convolve High Vendor jar package name convolve Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.convolve Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-convolve Highest Vendor pom artifactid imagen-convolve Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-convolve High Product jar package name convolve Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.convolve Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-convolve Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-convolve@0.9.3
(Confidence :High)
Description:
ImageN core interfaces
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-core/0.9.3/imagen-core-0.9.3.jarMD5: 60c97c8507715df5fcc7b8281a7f4210SHA1: 633fa8830aef02cb4f6e9bbd36c3b23149da9e1cSHA256: a983e3a48b49815034f657876fc3bdb7fb269c136017a0e1642e75ac9e508ad5
Referenced In Project/Scope: Tailormap API:compile
imagen-core-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-core High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor Manifest automatic-module-name org.eclipse.imagen.core Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-core Highest Vendor pom artifactid imagen-core Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-core High Product jar package name eclipse Highest Product jar package name imagen Highest Product Manifest automatic-module-name org.eclipse.imagen.core Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-core Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-core@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-crop/0.9.3/imagen-crop-0.9.3.jarMD5: e994bfcaca9cc9b591e19a9387617788SHA1: 0d03079a7221accc602643f929266e978ece14a2SHA256: bb46f4f53ca999d67ff966f8c5c9d7d4d62ff97504ab2e1d889ce28c18d05f46
Referenced In Project/Scope: Tailormap API:compile
imagen-crop-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-crop High Vendor jar package name crop Highest Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.crop Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-crop Highest Vendor pom artifactid imagen-crop Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-crop High Product jar package name crop Highest Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.crop Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-crop Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-crop@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-errordiffusion/0.9.3/imagen-errordiffusion-0.9.3.jarMD5: 1d839a3a9724c8cde02d232248f3f858SHA1: 7f74e51cffff3ecf12fabf1ca97fe591921268abSHA256: 94614d7a27ee53a1e74045279360500943875bd4a3d4f0228e4ff6edd4da003a
Referenced In Project/Scope: Tailormap API:compile
imagen-errordiffusion-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-errordiffusion High Vendor jar package name eclipse Highest Vendor jar package name errordiffusion Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.errordiffusion Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-errordiffusion Highest Vendor pom artifactid imagen-errordiffusion Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-errordiffusion High Product jar package name eclipse Highest Product jar package name errordiffusion Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.errordiffusion Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-errordiffusion Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-errordiffusion@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-format/0.9.3/imagen-format-0.9.3.jarMD5: c3df19b8326970450e29fd45a9f6c96dSHA1: beb18857a146990fafca93e14e4dfe08328dc264SHA256: ada9f7bb48a5d814b75b7121b90004b7ae5e1b8ee061cfb909e36fc35e4c2260
Referenced In Project/Scope: Tailormap API:compile
imagen-format-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-format High Vendor jar package name eclipse Highest Vendor jar package name format Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.format Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-format Highest Vendor pom artifactid imagen-format Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-format High Product jar package name eclipse Highest Product jar package name format Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.format Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-format Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-format@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-imagefunction/0.9.3/imagen-imagefunction-0.9.3.jarMD5: 995d4cba87aaba405e58f09e95fb3627SHA1: 6c940e1365248d9e993d1766223faf73a410f36fSHA256: 7e7d6f3c90d6cf917159c10a802facbd30a544186a1244f8caffaab7fe79994c
Referenced In Project/Scope: Tailormap API:compile
imagen-imagefunction-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-imagefunction High Vendor jar package name eclipse Highest Vendor jar package name imagefunction Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.imagefunction Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-imagefunction Highest Vendor pom artifactid imagen-imagefunction Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-imagefunction High Product jar package name eclipse Highest Product jar package name imagefunction Highest Product jar package name imagen Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.imagefunction Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-imagefunction Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-imagefunction@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-imageread/0.9.3/imagen-imageread-0.9.3.jarMD5: 579e61e7df2977397eaa0e926d682bceSHA1: 6ab1343d20a95b89382274b9999c583619f7bde1SHA256: e2870e6399f12a2935f80cbf2610ee1cdc71a3a026a078088a8b86b24f18cba7
Referenced In Project/Scope: Tailormap API:compile
imagen-imageread-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-imageread High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name imageread Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.imageread Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-imageread Highest Vendor pom artifactid imagen-imageread Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-imageread High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name imageread Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.imageread Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-imageread Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-imageread@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-iterators/0.9.3/imagen-iterators-0.9.3.jarMD5: a29741803dce4966a236ebb833e98847SHA1: 1f51df7c4404114f7332359bf4e01dbeee694923SHA256: 592c60568db42fe04a6cd31036e9b2d777cb4f42d4b85b174b35ff52ee78df24
Referenced In Project/Scope: Tailormap API:compile
imagen-iterators-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-iterators High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name iterators Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.iterators Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-iterators Highest Vendor pom artifactid imagen-iterators Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-iterators High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name iterators Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.iterators Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-iterators Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-iterators@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-lookup/0.9.3/imagen-lookup-0.9.3.jarMD5: 7631af807517fa4e78d5114ecbcc0507SHA1: d5450626943ab8eae7b84f8ffeea7558593f730fSHA256: c50b2cc0dbcf4349a86afe7b332d93103751640933f98274c0c9ce7074b660c8
Referenced In Project/Scope: Tailormap API:compile
imagen-lookup-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-lookup High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name lookup Highest Vendor jar package name media Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.lookup Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-lookup Highest Vendor pom artifactid imagen-lookup Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-lookup High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name lookup Highest Product jar package name media Highest Product Manifest automatic-module-name org.eclipse.imagen.media.lookup Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-lookup Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-lookup@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-mosaic/0.9.3/imagen-mosaic-0.9.3.jarMD5: e96e9e4c20407c99eabb3de6ecabe2b1SHA1: 1295f1b45a43dc4b49bee51153fcc7f5f183be12SHA256: 9ed68f8b23543f41650eb0df2b8f30004030aab76741d123a4366bb95e1a8ae4
Referenced In Project/Scope: Tailormap API:compile
imagen-mosaic-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-mosaic High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name mosaic Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.mosaic Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-mosaic Highest Vendor pom artifactid imagen-mosaic Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-mosaic High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name mosaic Highest Product Manifest automatic-module-name org.eclipse.imagen.media.mosaic Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-mosaic Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-nullop/0.9.3/imagen-nullop-0.9.3.jarMD5: d01126ef0d12f3bdbeeed11a86909246SHA1: 1bf5703b233938f936d097477e2db04ec2114962SHA256: 0df9e31c8f5f50fd9a0a84e2ab49d9a4794e50e95f83412211ecea569a2717ca
Referenced In Project/Scope: Tailormap API:compile
imagen-nullop-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-nullop High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name nullop Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.nullop Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-nullop Highest Vendor pom artifactid imagen-nullop Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-nullop High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name nullop Highest Product Manifest automatic-module-name org.eclipse.imagen.media.nullop Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-nullop Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-nullop@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-orderdither/0.9.3/imagen-orderdither-0.9.3.jarMD5: f44175cba337ff3e2a9ac553b9044178SHA1: 07ac26bca4d3ad1e407f52f79f942bf3e1ac0a7aSHA256: 1ea397ced2ce441452df717cfd40b2030ddcc9d435cae61f0d2cd97f571401f4
Referenced In Project/Scope: Tailormap API:compile
imagen-orderdither-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-orderdither High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name orderdither Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.orderdither Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-orderdither Highest Vendor pom artifactid imagen-orderdither Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-orderdither High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name orderdither Highest Product Manifest automatic-module-name org.eclipse.imagen.media.orderdither Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-orderdither Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-orderdither@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-piecewise/0.9.3/imagen-piecewise-0.9.3.jarMD5: 5a12bf4505d38548e2a92c6ede1cae60SHA1: 176db332661aa17e4de20a7ec743e665d471f256SHA256: c3ec690c52751b29c0228fef2960b6dcd010b581dd6accf54148277ab5188979
Referenced In Project/Scope: Tailormap API:compile
imagen-piecewise-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-piecewise High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name piecewise Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.piecewise Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-piecewise Highest Vendor pom artifactid imagen-piecewise Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-piecewise High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name piecewise Highest Product Manifest automatic-module-name org.eclipse.imagen.media.piecewise Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-piecewise Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-piecewise@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-rendered-image-browser/0.9.3/imagen-rendered-image-browser-0.9.3.jarMD5: 97dc680f29b1c3194e7bfe70dc989b96SHA1: da286ad1a85f7dbb8eb76468ee528494a6a90662SHA256: ed5475071609b5f60fda3a9f1fc7f172253a359533a89e3eea335b16134c2fe7
Referenced In Project/Scope: Tailormap API:compile
imagen-rendered-image-browser-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-rendered-image-browser High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name viewer Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.viewer Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-rendered-image-browser Highest Vendor pom artifactid imagen-rendered-image-browser Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-rendered-image-browser High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name viewer Highest Product Manifest automatic-module-name org.eclipse.imagen.media.viewer Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-rendered-image-browser Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-rendered-image-browser@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-rescale/0.9.3/imagen-rescale-0.9.3.jarMD5: fd48863487cd1feda223eed99d2ef49fSHA1: ccb23e13e6f8f6b75b424277d67b8776212d29e9SHA256: 60793878013d8aa6e47073a4f6ec2ae674ffbf833d066d539b799b355b9f801e
Referenced In Project/Scope: Tailormap API:compile
imagen-rescale-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-rescale High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name rescale Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.rescale Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-rescale Highest Vendor pom artifactid imagen-rescale Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-rescale High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name rescale Highest Product Manifest automatic-module-name org.eclipse.imagen.media.rescale Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-rescale Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-rescale@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-rlookup/0.9.3/imagen-rlookup-0.9.3.jarMD5: 9953cde5ee72838a0f4d0930d098d985SHA1: b55749be53fe1d62760c0f23a84e0327e64cdc69SHA256: b8d87fc9ec533bc7c1cd28953081d564a5d1c56607be9fb84b956992cec872ea
Referenced In Project/Scope: Tailormap API:compile
imagen-rlookup-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-rlookup High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name rlookup Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.rlookup Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-rlookup Highest Vendor pom artifactid imagen-rlookup Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-rlookup High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name rlookup Highest Product Manifest automatic-module-name org.eclipse.imagen.media.rlookup Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-rlookup Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-rlookup@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-scale/0.9.3/imagen-scale-0.9.3.jarMD5: 4dffffbf6e591d318624ca29d36cc710SHA1: bc5f53c62163ba282b588346b4f88c01a8da526dSHA256: ac35162e2788649cfccebad9dbc75e445fd91977797fecb2fea74aeeb2d31be2
Referenced In Project/Scope: Tailormap API:compile
imagen-scale-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-scale High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name scale Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.scale Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-scale Highest Vendor pom artifactid imagen-scale Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-scale High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name scale Highest Product Manifest automatic-module-name org.eclipse.imagen.media.scale Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-scale Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-scale@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-scale2/0.9.3/imagen-scale2-0.9.3.jarMD5: 1d4bf197ddaf41e46bf4bbac392618d2SHA1: 28e348bd7bd83f9eb9f396253380925116b83b94SHA256: b3b51b962d92ab3da0519d8d22fe327dcdc22fd737b63a4eba6e63e52514a80d
Referenced In Project/Scope: Tailormap API:compile
imagen-scale2-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-scale2 High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name scale2 Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.scale2 Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-scale2 Highest Vendor pom artifactid imagen-scale2 Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-scale2 High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name scale2 Highest Product Manifest automatic-module-name org.eclipse.imagen.media.scale2 Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-scale2 Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-scale2@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-shadedrelief/0.9.3/imagen-shadedrelief-0.9.3.jarMD5: c46059cda9eda2ce76f2f3a156a4c69dSHA1: 3cc92c63dcfc14f1f4844d93550f2d05d9f94885SHA256: e7c8b59a7d62e019adaffad67f9be875021e6ea52169ba739bf445d763331587
Referenced In Project/Scope: Tailormap API:compile
imagen-shadedrelief-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-shadedrelief High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name shadedrelief Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.shadedrelief Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-shadedrelief Highest Vendor pom artifactid imagen-shadedrelief Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-shadedrelief High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name shadedrelief Highest Product Manifest automatic-module-name org.eclipse.imagen.media.shadedrelief Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-shadedrelief Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-shadedrelief@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-stats/0.9.3/imagen-stats-0.9.3.jarMD5: ff8449d6dc49d78c55b36e16f2ca261dSHA1: 9c2fa108bfedf00bbc1c7865fc8e6590e3d294c6SHA256: 250b360b72d25fa82dc0bbe03241fc42fc98e6ec3f002016945c6faed5476141
Referenced In Project/Scope: Tailormap API:compile
imagen-stats-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-stats High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name stats Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.stats Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-stats Highest Vendor pom artifactid imagen-stats Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-stats High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name stats Highest Product Manifest automatic-module-name org.eclipse.imagen.media.stats Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-stats Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-stats@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-translate/0.9.3/imagen-translate-0.9.3.jarMD5: 087808427a9c54a854321a8cc5b1eda5SHA1: 4b7be83640aea6cf2439305e22d3958ffb5a1dffSHA256: 306d65cc5e673bdd926889267c1658bda7e3ed2ed1a1d68fb61ef226e3ddd585
Referenced In Project/Scope: Tailormap API:compile
imagen-translate-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-translate High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name translate Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.translate Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-translate Highest Vendor pom artifactid imagen-translate Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-translate High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name translate Highest Product Manifest automatic-module-name org.eclipse.imagen.media.translate Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-translate Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-translate@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-utilities/0.9.3/imagen-utilities-0.9.3.jarMD5: 970404e5cefec1f8c1d22d887f0ca594SHA1: 8642bba5312834514ea9806dcc55a743553bac91SHA256: 0d5ff9f89b97bb5222e802e456bfd174cbb83b411400523be80d0af25ffaaae9
Referenced In Project/Scope: Tailormap API:compile
imagen-utilities-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-utilities High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name utilities Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.utilities Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-utilities Highest Vendor pom artifactid imagen-utilities Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-utilities High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name utilities Highest Product Manifest automatic-module-name org.eclipse.imagen.media.utilities Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-utilities Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-utilities@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-vectorbin/0.9.3/imagen-vectorbin-0.9.3.jarMD5: 224232b36bba308f64fafdd27b71210eSHA1: fde7011c74b77610a7888543eb60e2331db2a57dSHA256: 932f5119f8139d115b01b685e134fdcc8b6f2380f8edac453bee079b02b1bb92
Referenced In Project/Scope: Tailormap API:compile
imagen-vectorbin-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-vectorbin High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name vectorbin Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.vectorbin Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-vectorbin Highest Vendor pom artifactid imagen-vectorbin Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-vectorbin High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name vectorbin Highest Product Manifest automatic-module-name org.eclipse.imagen.media.vectorbin Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-vectorbin Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-vectorbin@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-warp/0.9.3/imagen-warp-0.9.3.jarMD5: f18600f97a2dac1c39226fc984b7776aSHA1: 5d13d5ec26227f977a530229e2fd65c5e829ce1dSHA256: 577d7a16f0f747dfbad4672857016345a795498cb520b8413bceb9eca7129af6
Referenced In Project/Scope: Tailormap API:compile
imagen-warp-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-warp High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name warp Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.warp Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-warp Highest Vendor pom artifactid imagen-warp Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-warp High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name warp Highest Product Manifest automatic-module-name org.eclipse.imagen.media.warp Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-warp Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-warp@0.9.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-zonal/0.9.3/imagen-zonal-0.9.3.jarMD5: e5d82279e8c3f7625cebee9d52807e96SHA1: 09e89ab411d1708e14886f3d8464e8e68fa053a8SHA256: 93ec87b29cbb5830956c79b9e3aeba86bf11a462e7e64ea575facc481f57b0f0
Referenced In Project/Scope: Tailormap API:compile
imagen-zonal-0.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name imagen-zonal High Vendor jar package name eclipse Highest Vendor jar package name imagen Highest Vendor jar package name media Highest Vendor jar package name zonal Highest Vendor Manifest automatic-module-name org.eclipse.imagen.media.zonal Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid imagen-zonal Highest Vendor pom artifactid imagen-zonal Low Vendor pom groupid org.eclipse.imagen Highest Vendor pom name : High Vendor pom parent-artifactid imagen-modules Low Product file name imagen-zonal High Product jar package name eclipse Highest Product jar package name imagen Highest Product jar package name media Highest Product jar package name zonal Highest Product Manifest automatic-module-name org.eclipse.imagen.media.zonal Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid imagen-zonal Highest Product pom groupid org.eclipse.imagen Highest Product pom name : High Product pom parent-artifactid imagen-modules Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
pkg:maven/org.eclipse.imagen/imagen-zonal@0.9.3
(Confidence :High)
Description:
Unit Standard (JSR 385) Reference Implementation.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/tech/units/indriya/2.2/indriya-2.2.jar
MD5: cefa3a26996e4c70071d27a0c36603ea
SHA1: 647a0e06d60346f3f3c48284f66d34b28ff83340
SHA256: 5b61eafd63fd235898dea0e5e614e9636c9d7783705a0c9f1794dd07e3a84b35
Referenced In Project/Scope: Tailormap API:compile
indriya-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name indriya High Vendor jar package name indriya Highest Vendor jar package name tech Highest Vendor jar package name unit Highest Vendor jar package name units Highest Vendor Manifest automatic-module-name tech.units.indriya Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low Vendor Manifest bundle-symbolicname tech.units.indriya Medium Vendor Manifest implementation-url http://units.tech Low Vendor Manifest Implementation-Vendor Units of Measurement project High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low Vendor pom artifactid indriya Highest Vendor pom artifactid indriya Low Vendor pom developer email jean-marie@dautelle.com Low Vendor pom developer email martin.desruisseaux@geomatys.com Low Vendor pom developer email otaviopolianasantana@gmail.com Low Vendor pom developer email werner.keil@gmx.net Low Vendor pom developer id dautelle Medium Vendor pom developer id desruisseaux Medium Vendor pom developer id keilw Medium Vendor pom developer id otaviojava Medium Vendor pom developer name Jean-Marie Dautelle Medium Vendor pom developer name Martin Desruisseaux Medium Vendor pom developer name Otávio Gonçalves de Santana Medium Vendor pom developer name Werner Keil Medium Vendor pom developer org Airbus Medium Vendor pom developer org Creative Arts & Technologies Medium Vendor pom developer org Geomatys Medium Vendor pom developer org Individual / SouJava Medium Vendor pom developer org URL http://www.airbus.com Medium Vendor pom developer org URL http://www.catmedia.us Medium Vendor pom developer org URL http://www.geomatys.com Medium Vendor pom groupid tech.units Highest Vendor pom name Units of Measurement Reference Implementation High Vendor pom organization name Units of Measurement project High Vendor pom organization url http://unitsofmeasurement.github.io Medium Vendor pom parent-artifactid uom-parent Low Vendor pom parent-groupid tech.uom Medium Vendor pom url http://units.tech Highest Product file name indriya High Product jar package name indriya Highest Product jar package name tech Highest Product jar package name unit Highest Product jar package name units Highest Product Manifest automatic-module-name tech.units.indriya Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low Product Manifest Bundle-Name Units of Measurement Reference Implementation Medium Product Manifest bundle-symbolicname tech.units.indriya Medium Product Manifest Implementation-Title Units of Measurement Reference Implementation High Product Manifest implementation-url http://units.tech Low Product Manifest multi-release true Low Product Manifest specification-title Unit API Medium Product pom artifactid indriya Highest Product pom developer email jean-marie@dautelle.com Low Product pom developer email martin.desruisseaux@geomatys.com Low Product pom developer email otaviopolianasantana@gmail.com Low Product pom developer email werner.keil@gmx.net Low Product pom developer id dautelle Low Product pom developer id desruisseaux Low Product pom developer id keilw Low Product pom developer id otaviojava Low Product pom developer name Jean-Marie Dautelle Low Product pom developer name Martin Desruisseaux Low Product pom developer name Otávio Gonçalves de Santana Low Product pom developer name Werner Keil Low Product pom developer org Airbus Low Product pom developer org Creative Arts & Technologies Low Product pom developer org Geomatys Low Product pom developer org Individual / SouJava Low Product pom developer org URL http://www.airbus.com Low Product pom developer org URL http://www.catmedia.us Low Product pom developer org URL http://www.geomatys.com Low Product pom groupid tech.units Highest Product pom name Units of Measurement Reference Implementation High Product pom organization name Units of Measurement project Low Product pom organization url http://unitsofmeasurement.github.io Low Product pom parent-artifactid uom-parent Medium Product pom parent-groupid tech.uom Medium Product pom url http://units.tech Medium Version file version 2.2 High Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest
pkg:maven/tech.units/indriya@2.2
(Confidence :High)
Description:
istack common utility code
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar
MD5: 535154ef647af2a52478c4debec93659
SHA1: 18ec117c85f3ba0ac65409136afa8e42bc74e739
SHA256: 7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee
Referenced In Project/Scope: Tailormap API:runtime
istack-commons-runtime-4.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name istack-commons-runtime High Vendor jar package name istack Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Vendor Manifest implementation-build-id 4.1.2 - 343a28e Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id com.sun.istack Medium Vendor pom artifactid istack-commons-runtime Highest Vendor pom artifactid istack-commons-runtime Low Vendor pom groupid com.sun.istack Highest Vendor pom name istack common utility code runtime High Vendor pom parent-artifactid istack-commons Low Product file name istack-commons-runtime High Product jar package name istack Highest Product jar package name sun Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name istack common utility code runtime Medium Product Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Product Manifest implementation-build-id 4.1.2 - 343a28e Low Product pom artifactid istack-commons-runtime Highest Product pom groupid com.sun.istack Highest Product pom name istack common utility code runtime High Product pom parent-artifactid istack-commons Medium Version file version 4.1.2 High Version Manifest Bundle-Version 4.1.2 High Version Manifest implementation-build-id 4.1.2 Low Version pom version 4.1.2 Highest
pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2
(Confidence :High)
Description:
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256: 84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: Tailormap API:compile
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name j2objc-annotations High Vendor jar package name annotations Highest Vendor jar package name google Highest Vendor jar package name j2objc Highest Vendor Manifest build-jdk-spec 22 Low Vendor Manifest multi-release true Low Vendor pom artifactid j2objc-annotations Highest Vendor pom artifactid j2objc-annotations Low Vendor pom developer email tball@google.com Low Vendor pom developer id tomball Medium Vendor pom developer name Tom Ball Medium Vendor pom developer org Google Medium Vendor pom developer org URL https://www.google.com Medium Vendor pom groupid com.google.j2objc Highest Vendor pom name J2ObjC Annotations High Vendor pom url google/j2objc/ Highest Product file name j2objc-annotations High Product jar package name annotations Highest Product jar package name google Highest Product jar package name j2objc Highest Product Manifest build-jdk-spec 22 Low Product Manifest multi-release true Low Product pom artifactid j2objc-annotations Highest Product pom developer email tball@google.com Low Product pom developer id tomball Low Product pom developer name Tom Ball Low Product pom developer org Google Low Product pom developer org URL https://www.google.com Low Product pom groupid com.google.j2objc Highest Product pom name J2ObjC Annotations High Product pom url google/j2objc/ High Version file version 3.1 High Version pom version 3.1 Highest
pkg:maven/com.google.j2objc/j2objc-annotations@3.1
(Confidence :High)
Description:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar
MD5: e0d0c3e7300954f73e43c67d933aaea4
SHA1: b1bc1868bf02dc0bd6c7836257a036a331005309
SHA256: 53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b
Referenced In Project/Scope: Tailormap API:compile
jackson-annotations-2.21.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jackson-annotations High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-annotations Highest Vendor pom artifactid jackson-annotations Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-annotations High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-annotations High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name Jackson-annotations Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product Manifest Implementation-Title Jackson-annotations High Product Manifest specification-title Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-annotations High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.21 High Version Manifest Implementation-Version 2.21 High Version pom version 2.21 Highest
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.21.7/jackson-core-2.21.7.jar
MD5: 3b91b1c736a66b115e5a09378f418016
SHA1: 5abfb904683e642f4a5458f2a78ab9308c7c5a46
SHA256: 8c5623b98f32d5f7e1287ff61ed50e08ab7b11381e991fff89327faabba42261
Referenced In Project/Scope: Tailormap API:runtime
jackson-core-2.21.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name jackson-core High Vendor jar package name base Highest Vendor jar package name com Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Highest Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name com Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.21.7 High Version Manifest Bundle-Version 2.21.7 High Version Manifest Implementation-Version 2.21.7 High Version pom version 2.21.7 Highest
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-core/3.1.7/jackson-core-3.1.7.jar
MD5: 4dcb2a5b488b0e020f6546a2973c0a28
SHA1: a2b54921d5528a9df7f014222d2d519a14858801
SHA256: 7608c367fd8a92666d28711519599543c180298259963184ce04d2947a8f71e7
Referenced In Project/Scope: Tailormap API:compile
jackson-core-3.1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jackson-core High Vendor jar package name base Highest Vendor jar package name core Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Highest Vendor pom artifactid jackson-core Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id cowtowncoder Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid tools.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid tools.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product jar package name 21 Highest Product jar package name base Highest Product jar package name core Highest Product jar package name jackson Highest Product jar package name json Highest Product jar package name tools Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id cowtowncoder Low Product pom developer name Tatu Saloranta Low Product pom groupid tools.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid tools.jackson Medium Product pom url FasterXML/jackson-core High Version file version 3.1.7 High Version Manifest Bundle-Version 3.1.7 High Version Manifest Implementation-Version 3.1.7 High Version pom version 3.1.7 Highest
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.21.7/jackson-databind-2.21.7.jar
MD5: 71abb795e3c9beff91198f789d2572e9
SHA1: a2ebbc72e3092323f0f3defa786ff3bb0c47218c
SHA256: 1290c2795e93e8a6861a6c4d9ff0d844d32f5ea178362cb2721edf5561e828b1
Referenced In Project/Scope: Tailormap API:runtime
jackson-databind-2.21.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name jackson-databind High Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Highest Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.21.7 High Version Manifest Bundle-Version 2.21.7 High Version Manifest Implementation-Version 2.21.7 High Version pom version 2.21.7 Highest
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-databind/3.1.7/jackson-databind-3.1.7.jar
MD5: bd36876c84ba73520f0633336ca2f93a
SHA1: 1f45f7dd68639c962435fae38ca100a70ccc0971
SHA256: 48c781de87e2016e1f0d973748a27130f11643e7ac080173f40e2d9669d84be3
Referenced In Project/Scope: Tailormap API:compile
jackson-databind-3.1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jackson-databind High Vendor jar package name databind Highest Vendor jar package name jackson Highest Vendor jar package name tools Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Highest Vendor pom artifactid jackson-databind Low Vendor pom groupid tools.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid tools.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product jar package name databind Highest Product jar package name jackson Highest Product jar package name tools Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid tools.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid tools.jackson Medium Product pom url FasterXML/jackson High Version file version 3.1.7 High Version Manifest Bundle-Version 3.1.7 High Version Manifest Implementation-Version 3.1.7 High Version pom version 3.1.7 Highest
Description:
Specification
License:
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar
MD5: bc1602eee7bc61a0b86f14bbbb0cc794
SHA1: 9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8
SHA256: c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004
Referenced In Project/Scope: Tailormap API:compile
jakarta.activation-api-2.1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.15
Evidence
Type Source Name Value Confidence Vendor file name jakarta.activation-api High Vendor jar package name activation Highest Vendor jar package name jakarta Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.activation-api Medium Vendor Manifest extension-name jakarta.activation Medium Vendor Manifest implementation-build-id 3dad341 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.activation-api Highest Vendor pom artifactid jakarta.activation-api Low Vendor pom developer email bill.shannon@oracle.com Low Vendor pom developer id shannon Medium Vendor pom developer name Bill Shannon Medium Vendor pom developer org Oracle Medium Vendor pom groupid jakarta.activation Highest Vendor pom name Jakarta Activation API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url jakartaee/jaf-api Highest Vendor pom (hint) developer org sun Medium Product file name jakarta.activation-api High Product jar package name activation Highest Product jar package name jakarta Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Activation API Medium Product Manifest bundle-symbolicname jakarta.activation-api Medium Product Manifest extension-name jakarta.activation Medium Product Manifest implementation-build-id 3dad341 Low Product Manifest Implementation-Title Jakarta Activation API High Product Manifest specification-title Jakarta Activation Specification Medium Product pom artifactid jakarta.activation-api Highest Product pom developer email bill.shannon@oracle.com Low Product pom developer id shannon Low Product pom developer name Bill Shannon Low Product pom developer org Oracle Low Product pom groupid jakarta.activation Highest Product pom name Jakarta Activation API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url jakartaee/jaf-api High Version file version 2.1.4 High Version Manifest Bundle-Version 2.1.4 High Version pom parent-version 2.1.4 Low Version pom version 2.1.4 Highest
pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4
(Confidence :High)
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256: b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: Tailormap API:provided
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jakarta.annotation-api High Vendor jar package name annotation Highest Vendor jar package name jakarta Highest Vendor Manifest build-jdk-spec 18 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium Vendor Manifest extension-name jakarta.annotation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.annotation-api Highest Vendor pom artifactid jakarta.annotation-api Low Vendor pom developer name Dmitry Kornilov Medium Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid jakarta.annotation Highest Vendor pom name Jakarta Annotations API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest Product file name jakarta.annotation-api High Product jar package name annotation Highest Product jar package name jakarta Highest Product Manifest build-jdk-spec 18 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Annotations API Medium Product Manifest bundle-symbolicname jakarta.annotation-api Medium Product Manifest extension-name jakarta.annotation Medium Product pom artifactid jakarta.annotation-api Highest Product pom developer name Dmitry Kornilov Low Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid jakarta.annotation Highest Product pom name Jakarta Annotations API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium Version file version 3.0.0 High Version Manifest Bundle-Version 3.0.0 High Version Manifest Implementation-Version 3.0.0 High Version pom parent-version 3.0.0 Low Version pom version 3.0.0 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0
(Confidence :High)
Description:
Jakarta Dependency Injection
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256: f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Project/Scope: Tailormap API:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jakarta.inject-api High Vendor jar package name inject Highest Vendor jar package name jakarta Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium Vendor pom artifactid jakarta.inject-api Highest Vendor pom artifactid jakarta.inject-api Low Vendor pom developer email asd[at]redhat[dot]com Low Vendor pom developer email manovotn[at]redhat[dot]com Low Vendor pom developer email mkouba[at]redhat[dot]com Low Vendor pom developer email tremes[at]redhat[dot]com Low Vendor pom developer id asabotdu Medium Vendor pom developer id manovotn Medium Vendor pom developer id mkouba Medium Vendor pom developer id tremes Medium Vendor pom developer name Antoine Sabot-Durand Medium Vendor pom developer name Martin Kouba Medium Vendor pom developer name Matej Novotny Medium Vendor pom developer name Tomas Remes Medium Vendor pom developer org Red Hat Inc. Medium Vendor pom groupid jakarta.inject Highest Vendor pom name Jakarta Dependency Injection High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url eclipse-ee4j/injection-api Highest Product file name jakarta.inject-api High Product jar package name inject Highest Product jar package name jakarta Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Dependency Injection Medium Product Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium Product pom artifactid jakarta.inject-api Highest Product pom developer email asd[at]redhat[dot]com Low Product pom developer email manovotn[at]redhat[dot]com Low Product pom developer email mkouba[at]redhat[dot]com Low Product pom developer email tremes[at]redhat[dot]com Low Product pom developer id asabotdu Low Product pom developer id manovotn Low Product pom developer id mkouba Low Product pom developer id tremes Low Product pom developer name Antoine Sabot-Durand Low Product pom developer name Martin Kouba Low Product pom developer name Matej Novotny Low Product pom developer name Tomas Remes Low Product pom developer org Red Hat Inc. Low Product pom groupid jakarta.inject Highest Product pom name Jakarta Dependency Injection High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url eclipse-ee4j/injection-api High Version file version 2.0.1 High Version Manifest Bundle-Version 2.0.1 High Version pom parent-version 2.0.1 Low Version pom version 2.0.1 Highest
pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1
(Confidence :High)
Description:
Specification API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.5/jakarta.mail-api-2.1.5.jar
MD5: a1872951f46b87594806bb01e342a468
SHA1: be9b3b677ed6083f575c437ebc442a6a4bd2b931
SHA256: aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e
Referenced In Project/Scope: Tailormap API:compile
jakarta.mail-api-2.1.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.15
Evidence
Type Source Name Value Confidence Vendor file name jakarta.mail-api High Vendor jar package name jakarta Highest Vendor jar package name mail Highest Vendor jar package name version Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.mail-api Medium Vendor Manifest extension-name jakarta.mail Medium Vendor Manifest implementation-build-id e187321 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.mail-api Highest Vendor pom artifactid jakarta.mail-api Low Vendor pom groupid jakarta.mail Highest Vendor pom name Jakarta Mail API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Product file name jakarta.mail-api High Product jar package name jakarta Highest Product jar package name mail Highest Product jar package name version Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Mail API Medium Product Manifest bundle-symbolicname jakarta.mail-api Medium Product Manifest extension-name jakarta.mail Medium Product Manifest implementation-build-id e187321 Low Product Manifest Implementation-Title Jakarta Mail API High Product Manifest specification-title Jakarta Mail Specification Medium Product pom artifactid jakarta.mail-api Highest Product pom groupid jakarta.mail Highest Product pom name Jakarta Mail API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Version file version 2.1.5 High Version Manifest Bundle-Version 2.1.5 High Version pom parent-version 2.1.5 Low Version pom version 2.1.5 Highest
Description:
Jakarta Persistence 3.2 API jar
License:
Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.2.0/jakarta.persistence-api-3.2.0.jar
MD5: 79acec18d202797dcba1fff596a47684
SHA1: bb75a113f3fa191c2c7ee7b206d8e674251b3129
SHA256: be8a26b0e75c84c1b7600f759256fbc68d60333d89ec0ce3f784fc3ffa09aa8c
Referenced In Project/Scope: Tailormap API:compile
jakarta.persistence-api-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jakarta.persistence-api High Vendor jar package name jakarta Highest Vendor jar package name persistence Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.persistence-api Medium Vendor Manifest extension-name jakarta.persistence Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.persistence-api Highest Vendor pom artifactid jakarta.persistence-api Low Vendor pom developer id lukasj Medium Vendor pom developer name Lukas Jungmann Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid jakarta.persistence Highest Vendor pom name Jakarta Persistence API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url jakartaee/persistence Highest Product file name jakarta.persistence-api High Product jar package name jakarta Highest Product jar package name persistence Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Persistence API jar Medium Product Manifest bundle-symbolicname jakarta.persistence-api Medium Product Manifest extension-name jakarta.persistence Medium Product pom artifactid jakarta.persistence-api Highest Product pom developer id lukasj Low Product pom developer name Lukas Jungmann Low Product pom developer org Oracle, Inc. Low Product pom groupid jakarta.persistence Highest Product pom name Jakarta Persistence API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url jakartaee/persistence High Version file version 3.2.0 High Version Manifest Bundle-Version 3.2.0 High Version Manifest Implementation-Version 3.2.0 High Version pom parent-version 3.2.0 Low Version pom version 3.2.0 Highest
pkg:maven/jakarta.persistence/jakarta.persistence-api@3.2.0
(Confidence :High)
Description:
Jakarta Transactions
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/transaction/jakarta.transaction-api/2.0.1/jakarta.transaction-api-2.0.1.jar
MD5: 5315974a3935e342b40849478e1c9966
SHA1: 51a520e3fae406abb84e2e1148e6746ce3f80a1a
SHA256: 50c0a7c760c13ae6c042acf182b28f0047413db95b4636fb8879bcffab5ba875
Referenced In Project/Scope: Tailormap API:compile
jakarta.transaction-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jakarta.transaction-api High Vendor jar package name jakarta Highest Vendor jar package name transaction Highest Vendor Manifest automatic-module-name jakarta.transaction Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://github.com/eclipse-ee4j Low Vendor Manifest bundle-symbolicname jakarta.transaction-api Medium Vendor Manifest extension-name jakarta.transaction Medium Vendor Manifest Implementation-Vendor EE4J Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid jakarta.transaction-api Highest Vendor pom artifactid jakarta.transaction-api Low Vendor pom developer id stephen_felts Medium Vendor pom developer name Stephen Felts Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid jakarta.transaction Highest Vendor pom name API High Vendor pom name ${extension.name} API High Vendor pom organization name EE4J Community High Vendor pom organization url eclipse-ee4j Medium Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.jta Highest Product file name jakarta.transaction-api High Product jar package name jakarta Highest Product jar package name transaction Highest Product Manifest automatic-module-name jakarta.transaction Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://github.com/eclipse-ee4j Low Product Manifest Bundle-Name jakarta.transaction API Medium Product Manifest bundle-symbolicname jakarta.transaction-api Medium Product Manifest extension-name jakarta.transaction Medium Product pom artifactid jakarta.transaction-api Highest Product pom developer id stephen_felts Low Product pom developer name Stephen Felts Low Product pom developer org Oracle, Inc. Low Product pom groupid jakarta.transaction Highest Product pom name API High Product pom name ${extension.name} API High Product pom organization name EE4J Community Low Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url eclipse-ee4j High Product pom url https://projects.eclipse.org/projects/ee4j.jta Medium Version file version 2.0.1 High Version Manifest Bundle-Version 2.0.1 High Version Manifest Implementation-Version 2.0.1 High Version pom parent-version 2.0.1 Low Version pom version 2.0.1 Highest
pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1
(Confidence :High)
Description:
Jakarta Validation API
License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/validation/jakarta.validation-api/3.1.1/jakarta.validation-api-3.1.1.jar
MD5: 93ce96e77734f4280157edeffcae44e8
SHA1: ec8622148afc5564235d17af80ea80288d0e7f92
SHA256: 63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab
Referenced In Project/Scope: Tailormap API:compile
jakarta.validation-api-3.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jakarta.validation-api High Vendor jar package name jakarta Highest Vendor jar package name validation Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.validation.jakarta.validation-api Medium Vendor pom artifactid jakarta.validation-api Highest Vendor pom artifactid jakarta.validation-api Low Vendor pom developer email emmanuel@hibernate.org Low Vendor pom developer email guillaume.smet@hibernate.org Low Vendor pom developer email gunnar@hibernate.org Low Vendor pom developer email hferents@redhat.com Low Vendor pom developer id emmanuelbernard Medium Vendor pom developer id epbernard Medium Vendor pom developer id guillaume.smet Medium Vendor pom developer id gunnar.morling Medium Vendor pom developer id hardy.ferentschik Medium Vendor pom developer name Emmanuel Bernard Medium Vendor pom developer name Guillaume Smet Medium Vendor pom developer name Gunnar Morling Medium Vendor pom developer name Hardy Ferentschik Medium Vendor pom developer org Red Hat, Inc. Medium Vendor pom groupid jakarta.validation Highest Vendor pom name Jakarta Validation API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://beanvalidation.org Highest Product file name jakarta.validation-api High Product jar package name jakarta Highest Product jar package name validation Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Validation API Medium Product Manifest bundle-symbolicname jakarta.validation.jakarta.validation-api Medium Product pom artifactid jakarta.validation-api Highest Product pom developer email emmanuel@hibernate.org Low Product pom developer email guillaume.smet@hibernate.org Low Product pom developer email gunnar@hibernate.org Low Product pom developer email hferents@redhat.com Low Product pom developer id emmanuelbernard Low Product pom developer id epbernard Low Product pom developer id guillaume.smet Low Product pom developer id gunnar.morling Low Product pom developer id hardy.ferentschik Low Product pom developer name Emmanuel Bernard Low Product pom developer name Guillaume Smet Low Product pom developer name Gunnar Morling Low Product pom developer name Hardy Ferentschik Low Product pom developer org Red Hat, Inc. Low Product pom groupid jakarta.validation Highest Product pom name Jakarta Validation API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://beanvalidation.org Medium Version file version 3.1.1 High Version Manifest Bundle-Version 3.1.1 High Version pom parent-version 3.1.1 Low Version pom version 3.1.1 Highest
pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1
(Confidence :High)
Description:
Jakarta RESTful Web Services
License:
https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/4.0.0/jakarta.ws.rs-api-4.0.0.jar
MD5: 9b7cc90c000f193157d60d95caf45972
SHA1: c27a67f84ca491efcb3fa68f4df926e8a110069e
SHA256: 6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6
Referenced In Project/Scope: Tailormap API:runtime
jakarta.ws.rs-api-4.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name jakarta.ws.rs-api High Vendor hint analyzer vendor web services Medium Vendor jar package name jakarta Highest Vendor jar package name rs Highest Vendor jar package name ws Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low Vendor Manifest bundle-symbolicname jakarta.ws.rs-api Medium Vendor Manifest extension-name jakarta.ws.rs Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.ws.rs-api Highest Vendor pom artifactid jakarta.ws.rs-api Low Vendor pom groupid jakarta.ws.rs Highest Vendor pom name Jakarta RESTful WS API High Vendor pom parent-artifactid all Low Product file name jakarta.ws.rs-api High Product hint analyzer product web services Medium Product jar package name jakarta Highest Product jar package name rs Highest Product jar package name ws Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low Product Manifest Bundle-Name Jakarta RESTful WS API Medium Product Manifest bundle-symbolicname jakarta.ws.rs-api Medium Product Manifest extension-name jakarta.ws.rs Medium Product pom artifactid jakarta.ws.rs-api Highest Product pom groupid jakarta.ws.rs Highest Product pom name Jakarta RESTful WS API High Product pom parent-artifactid all Medium Version file version 4.0.0 High Version Manifest Bundle-Version 4.0.0 High Version Manifest Implementation-Version 4.0.0 High Version pom version 4.0.0 Highest
pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0
(Confidence :High)
Description:
Jakarta XML Binding API 4.0 Design Specification
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.5/jakarta.xml.bind-api-4.0.5.jar
MD5: 935053b2c792f34c7ea3a238ea96f3ac
SHA1: 161811f36cad3c65991502e80317f2f6703361df
SHA256: 5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216
Referenced In Project/Scope: Tailormap API:compile
jakarta.xml.bind-api-4.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jakarta.xml.bind-api High Vendor jar package name bind Highest Vendor jar package name jakarta Highest Vendor jar package name xml Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.xml.bind-api Medium Vendor Manifest extension-name jakarta.xml.bind Medium Vendor Manifest implementation-build-id 33af600 Low Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.xml.bind-api Highest Vendor pom artifactid jakarta.xml.bind-api Low Vendor pom groupid jakarta.xml.bind Highest Vendor pom name Jakarta XML Binding API High Vendor pom parent-artifactid jakarta.xml.bind-api-parent Low Product file name jakarta.xml.bind-api High Product jar package name bind Highest Product jar package name jakarta Highest Product jar package name xml Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta XML Binding API Medium Product Manifest bundle-symbolicname jakarta.xml.bind-api Medium Product Manifest extension-name jakarta.xml.bind Medium Product Manifest implementation-build-id 33af600 Low Product pom artifactid jakarta.xml.bind-api Highest Product pom groupid jakarta.xml.bind Highest Product pom name Jakarta XML Binding API High Product pom parent-artifactid jakarta.xml.bind-api-parent Medium Version file version 4.0.5 High Version Manifest Bundle-Version 4.0.5 High Version Manifest Implementation-Version 4.0.5 High Version pom version 4.0.5 Highest
pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5
(Confidence :High)
Description:
SmallRye Build Parent POM
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/smallrye/jandex/3.3.2/jandex-3.3.2.jar
MD5: db297711cd5fe4d8f6d2dabe8226f040
SHA1: 5f67f3771987975b64637e78884ab2813acbf1c6
SHA256: b7a214dbb405c11cfa62fd4319810a46e502b633ce86d6e2dea7a5065b932256
Referenced In Project/Scope: Tailormap API:runtime
jandex-3.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-envers@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name jandex High Vendor jar package name jandex Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.smallrye.jandex Medium Vendor Manifest multi-release true Low Vendor pom artifactid jandex Highest Vendor pom artifactid jandex Low Vendor pom groupid io.smallrye Highest Vendor pom name Jandex: Core High Vendor pom parent-artifactid jandex-parent Low Product file name jandex High Product jar package name jandex Highest Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Jandex: Core Medium Product Manifest bundle-symbolicname io.smallrye.jandex Medium Product Manifest multi-release true Low Product pom artifactid jandex Highest Product pom groupid io.smallrye Highest Product pom name Jandex: Core High Product pom parent-artifactid jandex-parent Medium Version file version 3.3.2 High Version Manifest Bundle-Version 3.3.2 High Version pom version 3.3.2 Highest
pkg:maven/io.smallrye/jandex@3.3.2
(Confidence :High)
Description:
The core parser functionality. This may be all you need.
License:
GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/javaparser/javaparser-core/3.28.2/javaparser-core-3.28.2.jar
MD5: ed0802294dbb571f2193546258040190
SHA1: 0f585a590072b20c6b4be3c35291b6e66a88b995
SHA256: b5499a3b1c40b16c0671fabe478c9aafeab38160c6fde74a6c13f42d86716ecd
Referenced In Project/Scope: Tailormap API:provided
javaparser-core-3.28.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name javaparser-core High Vendor jar package name github Highest Vendor jar package name javaparser Highest Vendor Manifest automatic-module-name com.github.javaparser.core Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-developers matozoid;email="hexagonaal@gmail.com";name="Danny van Bruggen","jgesser@gmail.com";email="jgesser@gmail.com";name="Júlio Vilmar Gesser",sebastiankirsch;email="sebastian.kirsch@immobilienscout24.de";name="Sebastian Kirsch",before;name="André Rouél",SmiddyPence;email="smiddypence@gmail.com";name="Nicholas Smith",ftomassetti;email="federico@tomassetti.me";name="Federico Tomassetti",ptitjes;email="ptitjes@free.fr";name="Didier Villevalois",MysterAitch;name="Roger Howell",MysterAitch;name="Roger Howell",jlerbsc;name="Jean Pierre Lerbscher",maartenc;name="Maarten Coene" Low Vendor Manifest bundle-docurl https://javaparser.org Low Vendor Manifest bundle-symbolicname com.github.javaparser.javaparser-core Medium Vendor pom artifactid javaparser-core Highest Vendor pom artifactid javaparser-core Low Vendor pom groupid com.github.javaparser Highest Vendor pom name : High Vendor pom parent-artifactid javaparser-parent Low Vendor pom url javaparser Highest Product file name javaparser-core High Product jar package name github Highest Product jar package name javaparser Highest Product Manifest automatic-module-name com.github.javaparser.core Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-developers matozoid;email="hexagonaal@gmail.com";name="Danny van Bruggen","jgesser@gmail.com";email="jgesser@gmail.com";name="Júlio Vilmar Gesser",sebastiankirsch;email="sebastian.kirsch@immobilienscout24.de";name="Sebastian Kirsch",before;name="André Rouél",SmiddyPence;email="smiddypence@gmail.com";name="Nicholas Smith",ftomassetti;email="federico@tomassetti.me";name="Federico Tomassetti",ptitjes;email="ptitjes@free.fr";name="Didier Villevalois",MysterAitch;name="Roger Howell",MysterAitch;name="Roger Howell",jlerbsc;name="Jean Pierre Lerbscher",maartenc;name="Maarten Coene" Low Product Manifest bundle-docurl https://javaparser.org Low Product Manifest Bundle-Name com.github.javaparser:javaparser-core Medium Product Manifest bundle-symbolicname com.github.javaparser.javaparser-core Medium Product pom artifactid javaparser-core Highest Product pom groupid com.github.javaparser Highest Product pom name : High Product pom parent-artifactid javaparser-parent Medium Product pom url javaparser High Version file version 3.28.2 High Version Manifest Bundle-Version 3.28.2 High Version pom version 3.28.2 Highest
pkg:maven/com.github.javaparser/javaparser-core@3.28.2
(Confidence :High)
Description:
JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-core/4.0.9/jaxb-core-4.0.9.jar
MD5: cfe79c0de53d009f9b171d1320f7879a
SHA1: 3f32ec949d109d666fa30994223d1c25a47b105f
SHA256: 6b014df25d22c8446cc2df0a378c5b2137747f197a731d99eb24c756b26f7e8d
Referenced In Project/Scope: Tailormap API:runtime
jaxb-core-4.0.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jaxb-core High Vendor jar package name core Highest Vendor jar package name glassfish Highest Vendor jar package name jaxb Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname org.glassfish.jaxb.core Medium Vendor Manifest git-revision e155f35 Low Vendor Manifest implementation-build-id 4.0.9 - e155f35 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish.jaxb Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jaxb-core Highest Vendor pom artifactid jaxb-core Low Vendor pom groupid org.glassfish.jaxb Highest Vendor pom name JAXB Core High Vendor pom parent-artifactid jaxb-parent Low Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest Product file name jaxb-core High Product jar package name core Highest Product jar package name glassfish Highest Product jar package name jaxb Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name JAXB Core Medium Product Manifest bundle-symbolicname org.glassfish.jaxb.core Medium Product Manifest git-revision e155f35 Low Product Manifest implementation-build-id 4.0.9 - e155f35 Low Product Manifest Implementation-Title Eclipse Implementation of JAXB High Product Manifest specification-title Jakarta XML Binding Medium Product pom artifactid jaxb-core Highest Product pom groupid org.glassfish.jaxb Highest Product pom name JAXB Core High Product pom parent-artifactid jaxb-parent Medium Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium Version file version 4.0.9 High Version Manifest build-version 4.0.9 Medium Version Manifest Bundle-Version 4.0.9 High Version Manifest implementation-build-id 4.0.9 Low Version pom version 4.0.9 Highest
pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.9
(Confidence :High)
Description:
JAXB (JSR 222) Reference Implementation
License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-runtime/4.0.9/jaxb-runtime-4.0.9.jar
MD5: 5a09f7188a527773fc71f0ac8ca30652
SHA1: 500c199572538675d2819c938fbafe34935d8d6b
SHA256: 93e09b7316b6af68d6e2083e4c297daf28e8957f45d725077af812c0b12c39ab
Referenced In Project/Scope: Tailormap API:runtime
jaxb-runtime-4.0.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jaxb-runtime High Vendor jar package name glassfish Highest Vendor jar package name jaxb Highest Vendor jar package name runtime Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium Vendor Manifest git-revision e155f35 Low Vendor Manifest implementation-build-id 4.0.9 - e155f35 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish.jaxb Medium Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.xml.bind.JAXBContextFactory" Low Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jaxb-runtime Highest Vendor pom artifactid jaxb-runtime Low Vendor pom groupid org.glassfish.jaxb Highest Vendor pom name JAXB Runtime High Vendor pom parent-artifactid jaxb-runtime-parent Low Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest Product file name jaxb-runtime High Product jar package name glassfish Highest Product jar package name jaxb Highest Product jar package name runtime Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name JAXB Runtime Medium Product Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium Product Manifest git-revision e155f35 Low Product Manifest implementation-build-id 4.0.9 - e155f35 Low Product Manifest Implementation-Title Eclipse Implementation of JAXB High Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.xml.bind.JAXBContextFactory" Low Product Manifest specification-title Jakarta XML Binding Medium Product pom artifactid jaxb-runtime Highest Product pom groupid org.glassfish.jaxb Highest Product pom name JAXB Runtime High Product pom parent-artifactid jaxb-runtime-parent Medium Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium Version file version 4.0.9 High Version Manifest build-version 4.0.9 Medium Version Manifest Bundle-Version 4.0.9 High Version Manifest implementation-build-id 4.0.9 Low Version pom version 4.0.9 Highest
pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9
(Confidence :High)
Description:
The JBoss Logging Framework
License:
Apache License 2.0: https://repository.jboss.org/licenses/apache-2.0.txt
File Path: /home/runner/.m2/repository/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar
MD5: b4cf5872f18b3e80e18769d51c7ae9b2
SHA1: 1cc9f976725720bb4a66f80af3e3aa6b9890d969
SHA256: 7c12ee575508f81e22b1db9334b969d0ec54ef0fd1dcba24eeab1a44235fc366
Referenced In Project/Scope: Tailormap API:compile
jboss-logging-3.6.3.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.4.15.Final
Evidence
Type Source Name Value Confidence Vendor file name jboss-logging High Vendor hint analyzer vendor redhat Highest Vendor jar package name jboss Highest Vendor jar package name logging Highest Vendor Manifest build-jdk-spec 25 Low Vendor Manifest bundle-docurl http://www.jboss.org Low Vendor Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium Vendor Manifest implementation-url https://www.jboss.org Low Vendor Manifest Implementation-Vendor JBoss by Red Hat High Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid jboss-logging Highest Vendor pom artifactid jboss-logging Low Vendor pom groupid org.jboss.logging Highest Vendor pom name JBoss Logging 3 High Vendor pom parent-artifactid jboss-parent Low Vendor pom parent-groupid org.jboss Medium Vendor pom url https://www.jboss.org Highest Product file name jboss-logging High Product jar package name jboss Highest Product jar package name logging Highest Product Manifest build-jdk-spec 25 Low Product Manifest bundle-docurl http://www.jboss.org Low Product Manifest Bundle-Name JBoss Logging 3 Medium Product Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium Product Manifest Implementation-Title JBoss Logging 3 High Product Manifest implementation-url https://www.jboss.org Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title JBoss Logging 3 Medium Product pom artifactid jboss-logging Highest Product pom groupid org.jboss.logging Highest Product pom name JBoss Logging 3 High Product pom parent-artifactid jboss-parent Medium Product pom parent-groupid org.jboss Medium Product pom url https://www.jboss.org Medium Version Manifest Bundle-Version 3.6.3.Final High Version Manifest Implementation-Version 3.6.3.Final High Version pom parent-version 3.6.3.Final Low Version pom version 3.6.3.Final Highest
pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final
(Confidence :High)
Description:
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256: 4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: Tailormap API:compile
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name jcip-annotations High Vendor jar package name annotations Highest Vendor jar package name annotations Low Vendor jar package name jcip Highest Vendor jar package name jcip Low Vendor jar package name net Low Vendor pom artifactid jcip-annotations Highest Vendor pom artifactid jcip-annotations Low Vendor pom developer id stephenc Medium Vendor pom developer name Stephen Connolly Medium Vendor pom groupid com.github.stephenc.jcip Highest Vendor pom name JCIP Annotations under Apache License High Vendor pom url http://stephenc.github.com/jcip-annotations Highest Product file name jcip-annotations High Product jar package name annotations Highest Product jar package name annotations Low Product jar package name jcip Highest Product jar package name jcip Low Product pom artifactid jcip-annotations Highest Product pom developer id stephenc Low Product pom developer name Stephen Connolly Low Product pom groupid com.github.stephenc.jcip Highest Product pom name JCIP Annotations under Apache License High Product pom url http://stephenc.github.com/jcip-annotations Medium Version pom version 1.0-1 Highest
pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1
(Confidence :High)
Description:
JCL 1.2 implemented over SLF4J
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.20/jcl-over-slf4j-2.0.20.jar
MD5: 4a2f67a3feba29618916f8ccbd3dab18
SHA1: 7cb2437e20d244474b1c5a50747e4b376e9a2daf
SHA256: 32f95628a4baa60ea8a5b052c8cb6e51d07b0fee3e6092414070874f69daf710
Referenced In Project/Scope: Tailormap API:runtime
jcl-over-slf4j-2.0.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Highest Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.20 High Version Manifest Bundle-Version 2.0.20 High Version Manifest Implementation-Version 2.0.20 High Version pom version 2.0.20 Highest
pkg:maven/org.slf4j/jcl-over-slf4j@2.0.20
(Confidence :High)
File Path: /home/runner/.m2/repository/it/geosolutions/jgridshift/jgridshift-core/1.3/jgridshift-core-1.3.jarMD5: 04a57b57bb0654b3d603eaaa748de563SHA1: 314702a7b6e634e1c74589983a6762974b9c51c8SHA256: 303eb6a6f6f87369f6b9e3dcacefd6f9b0ad55920cd65a7f162ab9a23401c722
Referenced In Project/Scope: Tailormap API:compile
jgridshift-core-1.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name jgridshift-core High Vendor jar package name au Low Vendor jar package name com Low Vendor jar package name jgridshift Highest Vendor jar package name objectix Low Vendor pom artifactid jgridshift-core Highest Vendor pom artifactid jgridshift-core Low Vendor pom groupid it.geosolutions.jgridshift Highest Vendor pom parent-artifactid jgridshift Low Product file name jgridshift-core High Product jar package name com Low Product jar package name jgridshift Highest Product jar package name jgridshift Low Product jar package name objectix Low Product pom artifactid jgridshift-core Highest Product pom groupid it.geosolutions.jgridshift Highest Product pom parent-artifactid jgridshift Medium Version file version 1.3 High Version pom version 1.3 Highest
pkg:maven/it.geosolutions.jgridshift/jgridshift-core@1.3
(Confidence :High)
Description:
A library to query and verify JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/3.0.0/json-path-3.0.0.jar
MD5: 2ab4381a6e940ad027e976902fc42474
SHA1: 053913e54e804386c8e375e567410bb2c86666ad
SHA256: e4e49440701674ace75af44a98840d9e13f53b34aab280446707661318405dc8
Referenced In Project/Scope: Tailormap API:compile
json-path-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name json-path High Vendor jar package name jayway Highest Vendor jar package name json Highest Vendor jar package name jsonpath Highest Vendor jar package name path Highest Vendor Manifest automatic-module-name json.path Medium Vendor Manifest bundle-symbolicname json-path Medium Vendor pom artifactid json-path Highest Vendor pom artifactid json-path Low Vendor pom developer email kalle.stenflo (a) gmail.com Low Vendor pom developer id kalle.stenflo Medium Vendor pom developer name Kalle Stenflo Medium Vendor pom groupid com.jayway.jsonpath Highest Vendor pom name json-path High Vendor pom url jayway/JsonPath Highest Product file name json-path High Product jar package name jayway Highest Product jar package name json Highest Product jar package name jsonpath Highest Product jar package name path Highest Product Manifest automatic-module-name json.path Medium Product Manifest Bundle-Name json-path Medium Product Manifest bundle-symbolicname json-path Medium Product Manifest Implementation-Title json-path High Product pom artifactid json-path Highest Product pom developer email kalle.stenflo (a) gmail.com Low Product pom developer id kalle.stenflo Low Product pom developer name Kalle Stenflo Low Product pom groupid com.jayway.jsonpath Highest Product pom name json-path High Product pom url jayway/JsonPath High Version file version 3.0.0 High Version Manifest Bundle-Version 3.0.0 High Version pom version 3.0.0 Highest
Description:
JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.6.0/json-smart-2.6.0.jar
MD5: fde8981f31c3b972355a5adf26a9ec65
SHA1: 5f858a43a325a8673da6869ab2bc787a1bcb2244
SHA256: 1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b
Referenced In Project/Scope: Tailormap API:compile
json-smart-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence Vendor file name json-smart High Vendor jar package name json Highest Vendor jar package name minidev Highest Vendor jar package name net Highest Vendor jar package name parser Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://urielch.github.io/ Low Vendor Manifest bundle-symbolicname net.minidev.json-smart Medium Vendor pom artifactid json-smart Highest Vendor pom artifactid json-smart Low Vendor pom developer email adoneitan@gmail.com Low Vendor pom developer email hezhangjian97gmail.com Low Vendor pom developer email uchemouni@gmail.com Low Vendor pom developer id erav Medium Vendor pom developer id hezhangjian Medium Vendor pom developer id uriel Medium Vendor pom developer name Eitan Raviv Medium Vendor pom developer name Uriel Chemouni Medium Vendor pom developer name Zhangjian He Medium Vendor pom groupid net.minidev Highest Vendor pom name JSON Small and Fast Parser High Vendor pom organization name Chemouni Uriel High Vendor pom organization url https://urielch.github.io/ Medium Vendor pom url https://urielch.github.io/ Highest Product file name json-smart High Product jar package name json Highest Product jar package name minidev Highest Product jar package name net Highest Product jar package name parser Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://urielch.github.io/ Low Product Manifest Bundle-Name json-smart Medium Product Manifest bundle-symbolicname net.minidev.json-smart Medium Product pom artifactid json-smart Highest Product pom developer email adoneitan@gmail.com Low Product pom developer email hezhangjian97gmail.com Low Product pom developer email uchemouni@gmail.com Low Product pom developer id erav Low Product pom developer id hezhangjian Low Product pom developer id uriel Low Product pom developer name Eitan Raviv Low Product pom developer name Uriel Chemouni Low Product pom developer name Zhangjian He Low Product pom groupid net.minidev Highest Product pom name JSON Small and Fast Parser High Product pom organization name Chemouni Uriel Low Product pom organization url https://urielch.github.io/ Low Product pom url https://urielch.github.io/ Medium Version file version 2.6.0 High Version Manifest Bundle-Version 2.6.0 High Version pom version 2.6.0 Highest
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.1/jspecify-1.0.1.jar
MD5: d4fe1ea4d953b66fcb1d6043c22bffcf
SHA1: 3d60fd98eb8ade73004f4195c37b6317e02cf3d7
SHA256: 070d75f261fe4c5b8202508366715f7f2d4660f88c8ef7e6d3575e48c9683b66
Referenced In Project/Scope: Tailormap API:compile
jspecify-1.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name jspecify High Vendor jar package name annotations Highest Vendor jar package name jspecify Highest Vendor Manifest bundle-docurl https://jspecify.dev/docs/start-here Low Vendor Manifest bundle-symbolicname org.jspecify.jspecify Medium Vendor pom artifactid jspecify Highest Vendor pom artifactid jspecify Low Vendor pom developer email cpovirk@google.com Low Vendor pom developer email dpb@google.com Low Vendor pom developer email kevinb9n@gmail.com Low Vendor pom developer id cpovirk Medium Vendor pom developer id kevinb9n Medium Vendor pom developer id netdpb Medium Vendor pom developer name Chris Povirk Medium Vendor pom developer name David P. Baker Medium Vendor pom developer name Kevin Bourrillion Medium Vendor pom developer org Google Medium Vendor pom groupid org.jspecify Highest Vendor pom name JSpecify annotations High Vendor pom url https://jspecify.dev/ Highest Product file name jspecify High Product jar package name annotations Highest Product jar package name jspecify Highest Product Manifest bundle-docurl https://jspecify.dev/docs/start-here Low Product Manifest Bundle-Name JSpecify annotations Medium Product Manifest bundle-symbolicname org.jspecify.jspecify Medium Product pom artifactid jspecify Highest Product pom developer email cpovirk@google.com Low Product pom developer email dpb@google.com Low Product pom developer email kevinb9n@gmail.com Low Product pom developer id cpovirk Low Product pom developer id kevinb9n Low Product pom developer id netdpb Low Product pom developer name Chris Povirk Low Product pom developer name David P. Baker Low Product pom developer name Kevin Bourrillion Low Product pom developer org Google Low Product pom groupid org.jspecify Highest Product pom name JSpecify annotations High Product pom url https://jspecify.dev/ Medium Version file version 1.0.1 High Version Manifest Bundle-Version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
pkg:maven/org.jspecify/jspecify@1.0.1
(Confidence :High)
cpe:2.3:a:google:gmail:1.0.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
The JTS Topology Suite is an API for 2D linear geometry predicates and functions.
License:
https://github.com/locationtech/jts/blob/master/LICENSE_EPLv2.txt, https://github.com/locationtech/jts/blob/master/LICENSE_EDLv1.txt File Path: /home/runner/.m2/repository/org/locationtech/jts/jts-core/1.20.0/jts-core-1.20.0.jar
MD5: 8de91edea80ac2de00c07226458649fb
SHA1: 25b72c9548a328cb1aea8a6b89d710a31ade5403
SHA256: 6a783d8f9dba3d3cf7265435f134402f63c05838aa6cbcc4297ad3a5b2842baf
Referenced In Project/Scope: Tailormap API:compile
jts-core-1.20.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name jts-core High Vendor jar package name jts Highest Vendor jar package name locationtech Highest Vendor Manifest automatic-module-name org.locationtech.jts Medium Vendor Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium Vendor pom artifactid jts-core Highest Vendor pom artifactid jts-core Low Vendor pom groupid org.locationtech.jts Highest Vendor pom name : High Vendor pom parent-artifactid jts-modules Low Product file name jts-core High Product jar package name geometry Highest Product jar package name jts Highest Product jar package name locationtech Highest Product Manifest automatic-module-name org.locationtech.jts Medium Product Manifest Bundle-Name jts-core Medium Product Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium Product pom artifactid jts-core Highest Product pom groupid org.locationtech.jts Highest Product pom name : High Product pom parent-artifactid jts-modules Medium Version file version 1.20.0 High Version Manifest Bundle-Version 1.20.0 High Version pom version 1.20.0 Highest
pkg:maven/org.locationtech.jts/jts-core@1.20.0
(Confidence :High)
Description:
JUL to SLF4J bridge
License:
https://opensource.org/license/mit File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/2.0.20/jul-to-slf4j-2.0.20.jar
MD5: f853422b1400b2631e79edcee8067833
SHA1: f227b76739ea6a0e014478659d72bdc455fd7fd2
SHA256: 062249d0677a0e08039120a2292a8db064c69d04282bf562af2e54c53ff06976
Referenced In Project/Scope: Tailormap API:compile
jul-to-slf4j-2.0.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-actuator@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name jul-to-slf4j High Vendor jar package name bridge Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor Manifest multi-release true Low Vendor pom artifactid jul-to-slf4j Highest Vendor pom artifactid jul-to-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JUL to SLF4J bridge High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jul-to-slf4j High Product jar package name bridge Highest Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JUL to SLF4J bridge Medium Product Manifest bundle-symbolicname jul.to.slf4j Medium Product Manifest Implementation-Title jul-to-slf4j High Product Manifest multi-release true Low Product pom artifactid jul-to-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JUL to SLF4J bridge High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.20 High Version Manifest Bundle-Version 2.0.20 High Version Manifest Implementation-Version 2.0.20 High Version pom version 2.0.20 Highest
pkg:maven/org.slf4j/jul-to-slf4j@2.0.20
(Confidence :High)
Description:
Java implementation of "Tags for Identifying Languages" (RFC 5646)
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/lang-tag/1.7/lang-tag-1.7.jar
MD5: 31b8a4f76fdbf21f1d667f9d6618e0b2
SHA1: 97c73ecd70bc7e8eefb26c5eea84f251a63f1031
SHA256: e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31
Referenced In Project/Scope: Tailormap API:compile
lang-tag-1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name lang-tag High Vendor jar package name langtag Highest Vendor jar package name nimbusds Highest Vendor Manifest build-date ${timestamp} Low Vendor Manifest build-jdk-spec 11 Low Vendor Manifest build-number ${buildNumber} Low Vendor Manifest build-tag 1.7 Low Vendor Manifest bundle-docurl https://connect2id.com/ Low Vendor Manifest bundle-symbolicname lang-tag Medium Vendor Manifest Implementation-Vendor Connect2id Ltd. High Vendor Manifest Implementation-Vendor-Id com.nimbusds Medium Vendor Manifest specification-vendor Connect2id Ltd. Low Vendor pom artifactid lang-tag Highest Vendor pom artifactid lang-tag Low Vendor pom developer email vladimir@dzhuvinov.com Low Vendor pom developer id vdzhuvinov Medium Vendor pom developer name Vladimir Dzhuvinov Medium Vendor pom groupid com.nimbusds Highest Vendor pom name Nimbus LangTag High Vendor pom organization name Connect2id Ltd. High Vendor pom organization url https://connect2id.com/ Medium Vendor pom url https://bitbucket.org/connect2id/nimbus-language-tags Highest Product file name lang-tag High Product jar package name langtag Highest Product jar package name nimbusds Highest Product Manifest build-date ${timestamp} Low Product Manifest build-jdk-spec 11 Low Product Manifest build-number ${buildNumber} Low Product Manifest build-tag 1.7 Low Product Manifest bundle-docurl https://connect2id.com/ Low Product Manifest Bundle-Name Nimbus LangTag Medium Product Manifest bundle-symbolicname lang-tag Medium Product Manifest Implementation-Title Nimbus LangTag High Product Manifest specification-title Nimbus LangTag Medium Product pom artifactid lang-tag Highest Product pom developer email vladimir@dzhuvinov.com Low Product pom developer id vdzhuvinov Low Product pom developer name Vladimir Dzhuvinov Low Product pom groupid com.nimbusds Highest Product pom name Nimbus LangTag High Product pom organization name Connect2id Ltd. Low Product pom organization url https://connect2id.com/ Low Product pom url https://bitbucket.org/connect2id/nimbus-language-tags Medium Version file version 1.7 High Version Manifest build-tag 1.7 Low Version Manifest Implementation-Version 1.7 High Version pom version 1.7 Highest
pkg:maven/com.nimbusds/lang-tag@1.7
(Confidence :High)
Description:
An empty artifact that Guava depends on to signal that it is providing
ListenableFuture -- but is also available in a second "version" that
contains com.google.common.util.concurrent.ListenableFuture class, without
any other Guava classes. The idea is:
- If users want only ListenableFuture, they depend on listenablefuture-1.0.
- If users want all of Guava, they depend on guava, which, as of Guava
27.0, depends on
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
version number is enough for some build systems (notably, Gradle) to select
that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
conflict with the copy of ListenableFuture in guava itself. If users are
using an older version of Guava or a build system other than Gradle, they
may see class conflicts. If so, they can solve them by manually excluding
the listenablefuture artifact or manually forcing their build systems to
use 9999.0-....
File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarMD5: d094c22570d65e132c19cea5d352e381SHA1: b421526c5f297295adef1c886e5246c39d4ac629SHA256: b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: Tailormap API:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name listenablefuture High Vendor pom artifactid listenablefuture Highest Vendor pom artifactid listenablefuture Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava ListenableFuture only High Vendor pom parent-artifactid guava-parent Low Product file name listenablefuture High Product pom artifactid listenablefuture Highest Product pom groupid com.google.guava Highest Product pom name Guava ListenableFuture only High Product pom parent-artifactid guava-parent Medium Version pom parent-version 9999.0-empty-to-avoid-conflict-with-guava Low Version pom version 9999.0-empty-to-avoid-conflict-with-guava Highest
pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava
(Confidence :High)
Description:
The logging API of the Log4j project.
Library and application code can log through this API.
It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.25.5/log4j-api-2.25.5.jar
MD5: 6da507c0ef11c49576534c1db69e1b99
SHA1: 6c80ea65e41f7858f7e15cb390c98c36167c7b3a
SHA256: 64777f73ea0b3104c04eb82befbdccc30a425a19e83ad06cb2f93aa303511863
Referenced In Project/Scope: Tailormap API:compile
log4j-api-2.25.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name log4j-api High Vendor jar package name apache Highest Vendor jar package name log4j Highest Vendor jar package name logging Highest Vendor jar package name org Highest Vendor jar package name simple Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-symbolicname org.apache.logging.log4j.api Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid log4j-api Highest Vendor pom artifactid log4j-api Low Vendor pom groupid org.apache.logging.log4j Highest Vendor pom name Apache Log4j API High Vendor pom parent-artifactid log4j Low Vendor pom url https://logging.apache.org/log4j/2.x/ Highest Product file name log4j-api High Product jar package name apache Highest Product jar package name log4j Highest Product jar package name logging Highest Product jar package name org Highest Product jar package name simple Highest Product jar package name util Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name Apache Log4j API Medium Product Manifest bundle-symbolicname org.apache.logging.log4j.api Medium Product Manifest Implementation-Title Apache Log4j API High Product Manifest multi-release true Low Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low Product Manifest specification-title Apache Log4j API Medium Product pom artifactid log4j-api Highest Product pom groupid org.apache.logging.log4j Highest Product pom name Apache Log4j API High Product pom parent-artifactid log4j Medium Product pom url https://logging.apache.org/log4j/2.x/ Medium Version file version 2.25.5 High Version Manifest Bundle-Version 2.25.5 High Version Manifest Implementation-Version 2.25.5 High Version pom version 2.25.5 Highest
Related Dependencies
log4j-to-slf4j-2.25.5.jar
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.25.5/log4j-to-slf4j-2.25.5.jar
MD5: 9927bacbf08e748e4c816338658aeb7a
SHA1: bafb12d62913815e040218e34c80d75ad6db09c1
SHA256: b68e8b47342dbc9b35644a14fe2efc0b7bf18da703910cd05ad5501ffe07bba1
pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.5
Description:
logback-core module
License:
https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.38/logback-core-1.5.38.jar
MD5: a065b3893602a19f6f393a42c499c198
SHA1: 7b1d133b29bf42ff268cf3f71d1308b80480fb8d
SHA256: a855a0fc97b1d06f4efb1c3bba5ebd0eb508d8b58e68e89e4bbc23a85135c883
Referenced In Project/Scope: Tailormap API:compile
logback-core-1.5.38.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-actuator@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Highest Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.38 High Version Manifest Bundle-Version 1.5.38 High Version Manifest Implementation-Version 1.5.38 High Version pom version 1.5.38 Highest
Related Dependencies
logback-classic-1.5.38.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.5.38/logback-classic-1.5.38.jar
MD5: 558314a8784c6dd39cc18670303457cf
SHA1: bc5873cb4a7f502ce18ce2977d98ad26b9f96444
SHA256: afb439c61fa287c9e1925523b13baab03617e724406a389d48b61c2c3e46b700
pkg:maven/ch.qos.logback/logback-classic@1.5.38
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.17.1/micrometer-commons-1.17.1.jar
MD5: aa9291ad211473834d3d48453ae05ea1
SHA1: b1c3fdea68c5a81495cf1c16cf2905c5ad9f30d2
SHA256: f2cee6ef046e72eec8128474c7f58c6217173b45ae373c30de0289f2a56ab0fd
Referenced In Project/Scope: Tailormap API:compile
micrometer-commons-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name micrometer-commons High Vendor jar package name common Highest Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor Manifest automatic-module-name micrometer.commons Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-commons Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-commons Highest Vendor pom artifactid micrometer-commons Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-commons High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-commons High Product jar package name common Highest Product jar package name io Highest Product jar package name micrometer Highest Product Manifest automatic-module-name micrometer.commons Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.516694470Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-commons Medium Product Manifest bundle-symbolicname micrometer-commons Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-commons Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-commons High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-commons@1.17.1
(Confidence :High)
Description:
Core module of Micrometer containing instrumentation API and implementation
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-core/1.17.1/micrometer-core-1.17.1.jar
MD5: 512fe405dfbe1caa8e8870af3fc0d8a3
SHA1: 2a9a38d3d0859022fdf2a93743c0d5fe44796a39
SHA256: 9ca47dfa831409b40253c8dc98c17b9d3e050ebbde4d1543c5521dca2b95ad56
Referenced In Project/Scope: Tailormap API:compile
micrometer-core-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name micrometer-core High Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor Manifest automatic-module-name micrometer.core Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.580113236Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-core Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-core Highest Vendor pom artifactid micrometer-core Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-core High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-core High Product jar package name core Highest Product jar package name io Highest Product jar package name micrometer Highest Product Manifest automatic-module-name micrometer.core Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.580113236Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-core Medium Product Manifest bundle-symbolicname micrometer-core Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-core;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-core Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-core High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-core@1.17.1
(Confidence :High)
Description:
Module for Jakarta 9+ based instrumentations
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-jakarta9/1.17.1/micrometer-jakarta9-1.17.1.jar
MD5: bbccd0e1c1e758c80a02847f52bb5c70
SHA1: 6ac099edc69e8f780bfddaa48bcc7a1d4b84e3c7
SHA256: 37fbb0a98ba92e185ae7ebe0804fe6c1394bf7fba7573b204fa6fc3998c2e246
Referenced In Project/Scope: Tailormap API:compile
micrometer-jakarta9-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-actuator@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name micrometer-jakarta9 High Vendor jar package name io Highest Vendor jar package name jakarta9 Highest Vendor jar package name micrometer Highest Vendor Manifest automatic-module-name micrometer.jakarta9 Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.642643406Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-jakarta9 Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-jakarta9 Highest Vendor pom artifactid micrometer-jakarta9 Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-jakarta9 High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-jakarta9 High Product jar package name io Highest Product jar package name jakarta9 Highest Product jar package name micrometer Highest Product Manifest automatic-module-name micrometer.jakarta9 Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.642643406Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-jakarta9 Medium Product Manifest bundle-symbolicname micrometer-jakarta9 Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-jakarta9;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-jakarta9 Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-jakarta9 High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-jakarta9@1.17.1
(Confidence :High)
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.17.1/micrometer-observation-1.17.1.jar
MD5: f63baf5840fb4446b9313a3bd8773da1
SHA1: 24c0b05bc06a9ab6f4e09a48949b6eccc179ca15
SHA256: eb34f0cd84a879393ae5c21160fc06385ccdc74f36a4d1e31b199f59acfdaf71
Referenced In Project/Scope: Tailormap API:compile
micrometer-observation-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/ch.rasc/sse-eventbus@3.3.1
Evidence
Type Source Name Value Confidence Vendor file name micrometer-observation High Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor jar package name observation Highest Vendor Manifest automatic-module-name micrometer.observation Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:39 Low Vendor Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-observation Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-observation Highest Vendor pom artifactid micrometer-observation Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-observation High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-observation High Product jar package name io Highest Product jar package name micrometer Highest Product jar package name observation Highest Product Manifest automatic-module-name micrometer.observation Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:39 Low Product Manifest build-date-utc 2026-08-17T07:25:39.958346319Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-observation Medium Product Manifest bundle-symbolicname micrometer-observation Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-observation Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-observation High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-observation@1.17.1
(Confidence :High)
Description:
MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-registry-prometheus/1.17.1/micrometer-registry-prometheus-1.17.1.jar
MD5: 2d25d73f9a8755694cbf01323649870e
SHA1: fa0a245ad6fee4763264dc76d2b3e0166a5f5e47
SHA256: ac24d43f123e103828a23a86f092a8709d87d309ad3212e798305654e951a8ce
Referenced In Project/Scope: Tailormap API:compile
micrometer-registry-prometheus-1.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name micrometer-registry-prometheus High Vendor jar package name io Highest Vendor jar package name micrometer Highest Vendor Manifest automatic-module-name micrometer.registry.prometheus Medium Vendor Manifest branch release/1.17.1 Low Vendor Manifest build-date 2026-08-17_07:25:40 Low Vendor Manifest build-date-utc 2026-08-17T07:25:40.737685126Z Low Vendor Manifest build-host https://github.com Low Vendor Manifest build-job build-release Low Vendor Manifest build-number 50 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status integration Low Vendor Manifest bundle-symbolicname micrometer-registry-prometheus Medium Vendor Manifest change f1b1924 Low Vendor Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Vendor Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Vendor Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Vendor Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Vendor pom artifactid micrometer-registry-prometheus Highest Vendor pom artifactid micrometer-registry-prometheus Low Vendor pom developer email jivanov@vmware.com Low Vendor pom developer email tludwig@vmware.com Low Vendor pom developer id jonatan-ivanov Medium Vendor pom developer id shakuzen Medium Vendor pom developer name Jonatan Ivanov Medium Vendor pom developer name Tommy Ludwig Medium Vendor pom groupid io.micrometer Highest Vendor pom name micrometer-registry-prometheus High Vendor pom url micrometer-metrics/micrometer-commercial Highest Product file name micrometer-registry-prometheus High Product jar package name io Highest Product jar package name micrometer Highest Product Manifest automatic-module-name micrometer.registry.prometheus Medium Product Manifest branch release/1.17.1 Low Product Manifest build-date 2026-08-17_07:25:40 Low Product Manifest build-date-utc 2026-08-17T07:25:40.737685126Z Low Product Manifest build-host https://github.com Low Product Manifest build-job build-release Low Product Manifest build-number 50 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://github.com/micrometer-metrics/micrometer-commercial/actions/runs/32005692132 Low Product Manifest built-os Linux Low Product Manifest built-status integration Low Product Manifest Bundle-Name micrometer-registry-prometheus Medium Product Manifest bundle-symbolicname micrometer-registry-prometheus Medium Product Manifest change f1b1924 Low Product Manifest full-change f1b1924bc8821adbc841df69eb433c933e17e1a5 Low Product Manifest Implementation-Title io.micrometer#micrometer-registry-prometheus;1.17.1 High Product Manifest module-email tludwig@vmware.com,jivanov@vmware.com Low Product Manifest module-origin https://github.com/micrometer-metrics/micrometer-commercial.git Low Product Manifest module-owner tludwig@vmware.com,jivanov@vmware.com Low Product pom artifactid micrometer-registry-prometheus Highest Product pom developer email jivanov@vmware.com Low Product pom developer email tludwig@vmware.com Low Product pom developer id jonatan-ivanov Low Product pom developer id shakuzen Low Product pom developer name Jonatan Ivanov Low Product pom developer name Tommy Ludwig Low Product pom groupid io.micrometer Highest Product pom name micrometer-registry-prometheus High Product pom url micrometer-metrics/micrometer-commercial High Version file version 1.17.1 High Version Manifest Bundle-Version 1.17.1 High Version Manifest Implementation-Version 1.17.1 High Version pom version 1.17.1 Highest
pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
(Confidence :High)
File Path: /home/runner/.m2/repository/org/gaul/modernizer-maven-annotations/3.5.0/modernizer-maven-annotations-3.5.0.jarMD5: 3bd3749d84e7bdcc0a731ab0316e8f77SHA1: 7f7144a4cf519f13cf6a35f1e16852cfeed04b16SHA256: 765e234f875e80f725fb8724a7f7268df426d3fd35368ae5a5fa503e48f9e7f5
Referenced In Project/Scope: Tailormap API:compile
modernizer-maven-annotations-3.5.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name modernizer-maven-annotations High Vendor jar package name gaul Highest Vendor Manifest build-jdk-spec 25 Low Vendor Manifest multi-release true Low Vendor pom artifactid modernizer-maven-annotations Highest Vendor pom artifactid modernizer-maven-annotations Low Vendor pom groupid org.gaul Highest Vendor pom name Modernizer Maven Plugin annotations High Vendor pom parent-artifactid modernizer-maven-parent Low Product file name modernizer-maven-annotations High Product jar package name gaul Highest Product Manifest build-jdk-spec 25 Low Product Manifest multi-release true Low Product pom artifactid modernizer-maven-annotations Highest Product pom groupid org.gaul Highest Product pom name Modernizer Maven Plugin annotations High Product pom parent-artifactid modernizer-maven-parent Medium Version file version 3.5.0 High Version pom version 3.5.0 Highest
pkg:maven/org.gaul/modernizer-maven-annotations@3.5.0
(Confidence :High)
Description:
Microsoft JDBC Driver for SQL Server.
License:
MIT License: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/com/microsoft/sqlserver/mssql-jdbc/13.6.0.jre11/mssql-jdbc-13.6.0.jre11.jar
MD5: 2a137f850e8f2689cc61e716614a4c0d
SHA1: 9c438510cb1e19d2db0a152e9f719a32f11e1177
SHA256: 4c566e4022c4dcf1489aeb639fe49a0f6ffae3d796fdc2f56b5b8882d4c3bf5a
Referenced In Project/Scope: Tailormap API:compile
mssql-jdbc-13.6.0.jre11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name mssql-jdbc High Vendor jar package name jdbc Highest Vendor jar package name microsoft Highest Vendor jar package name mssql Highest Vendor jar package name sql Highest Vendor jar package name sqlserver Highest Vendor Manifest automatic-module-name com.microsoft.sqlserver.jdbc Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.microsoft.sqlserver.mssql-jdbc Medium Vendor pom artifactid mssql-jdbc Highest Vendor pom artifactid mssql-jdbc Low Vendor pom developer org Microsoft Medium Vendor pom developer org URL http://www.microsoft.com Medium Vendor pom groupid com.microsoft.sqlserver Highest Vendor pom name Microsoft JDBC Driver for SQL Server High Vendor pom organization name Microsoft Corporation High Vendor pom url Microsoft/mssql-jdbc Highest Product file name mssql-jdbc High Product jar package name jdbc Highest Product jar package name microsoft Highest Product jar package name mssql Highest Product jar package name sql Highest Product jar package name sqlserver Highest Product Manifest automatic-module-name com.microsoft.sqlserver.jdbc Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name Microsoft JDBC Driver for SQL Server Medium Product Manifest bundle-symbolicname com.microsoft.sqlserver.mssql-jdbc Medium Product pom artifactid mssql-jdbc Highest Product pom developer org Microsoft Low Product pom developer org URL http://www.microsoft.com Low Product pom groupid com.microsoft.sqlserver Highest Product pom name Microsoft JDBC Driver for SQL Server High Product pom organization name Microsoft Corporation Low Product pom url Microsoft/mssql-jdbc High Version file version 13.6.0.jre11 High Version Manifest Bundle-Version 13.6.0.jre11 High Version pom version 13.6.0.jre11 Highest
pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.6.0
(Confidence :High)
pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.6.0.jre11
(Confidence :High)
cpe:2.3:a:microsoft:jdbc_driver_for_sql_server:13.6.0.jre11:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:www-sql_project:www-sql:13.6.0.jre11:*:*:*:*:*:*:*
(Confidence :Highest)
suppress
Description:
Nbvcxz takes heavy inspiration from the zxcvbn library built by Dropbox, and in a lot of ways is
similar.
I built this library to be heavily extensible for every use case, with sane defaults.
License:
MIT license: https://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/me/gosimple/nbvcxz/1.5.1/nbvcxz-1.5.1.jar
MD5: f6e4f7e6d5b5fe1b8a6f3eb97ca2ea08
SHA1: 50b5bb20fcd6c40a8c6de7e7b52662df8c0c46bd
SHA256: e640b177c1fcc709a01afef8036061e04eac54b6f9024e4b457cc12f973fc93d
Referenced In Project/Scope: Tailormap API:compile
nbvcxz-1.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name nbvcxz High Vendor jar package name gosimple Highest Vendor jar package name me Highest Vendor jar package name nbvcxz Highest Vendor Manifest automatic-module-name me.gosimple.nbvcxz Medium Vendor Manifest build-jdk-spec 19 Low Vendor pom artifactid nbvcxz Highest Vendor pom artifactid nbvcxz Low Vendor pom developer email adambrusselback@gmail.com Low Vendor pom developer name Adam Brusselback Medium Vendor pom developer org GoSimple Medium Vendor pom developer org URL https://blacksmithapplications.com Medium Vendor pom groupid me.gosimple Highest Vendor pom name nbvcxz High Vendor pom url GoSimpleLLC/nbvcxz Highest Product file name nbvcxz High Product jar package name gosimple Highest Product jar package name me Highest Product jar package name nbvcxz Highest Product Manifest automatic-module-name me.gosimple.nbvcxz Medium Product Manifest build-jdk-spec 19 Low Product pom artifactid nbvcxz Highest Product pom developer email adambrusselback@gmail.com Low Product pom developer name Adam Brusselback Low Product pom developer org GoSimple Low Product pom developer org URL https://blacksmithapplications.com Low Product pom groupid me.gosimple Highest Product pom name nbvcxz High Product pom url GoSimpleLLC/nbvcxz High Version file version 1.5.1 High Version pom version 1.5.1 Highest
Description:
Filter Encoding Specification Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.fes/35.2/net.opengis.fes-35.2.jarMD5: 3e33ad99e12924418bc048e3b6789a26SHA1: 79f910a041c3ef8bc175915208ee895b24c2d403SHA256: 96fd71d197c0189d2279279ced162b48a200aa2848137aca72cbc17fa5aa03b1
Referenced In Project/Scope: Tailormap API:compile
net.opengis.fes-35.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name net.opengis.fes High Vendor jar package name net Highest Vendor jar package name opengis Highest Vendor Manifest automatic-module-name org.geotools.ogc.net.opengis.fes Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-timestamp 16-Oct-2026 01:58 Low Vendor Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Vendor pom artifactid net.opengis.fes Highest Vendor pom artifactid net.opengis.fes Low Vendor pom groupid org.geotools.ogc Highest Vendor pom name Filter Encoding Specification Model High Vendor pom parent-artifactid ogc Low Vendor pom parent-groupid org.geotools Medium Product file name net.opengis.fes High Product jar package name net Highest Product jar package name opengis Highest Product Manifest automatic-module-name org.geotools.ogc.net.opengis.fes Medium Product Manifest build-jdk-spec 17 Low Product Manifest build-timestamp 16-Oct-2026 01:58 Low Product Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Product pom artifactid net.opengis.fes Highest Product pom groupid org.geotools.ogc Highest Product pom name Filter Encoding Specification Model High Product pom parent-artifactid ogc Medium Product pom parent-groupid org.geotools Medium Version file version 35.2 High Version Manifest project-version 35.2 Medium Version pom version 35.2 Highest
Related Dependencies
net.opengis.ows-35.2.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.ows/35.2/net.opengis.ows-35.2.jar
MD5: a1c8a45b0ae01429a44343eeeda5a1c6
SHA1: b189384566ded874c23248651c915e7a1088a82b
SHA256: 214481e9713512618b6a45d73699cc6da215e5b351cf81382bbb57dbef310825
pkg:maven/org.geotools.ogc/net.opengis.ows@35.2
net.opengis.wfs-35.2.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.wfs/35.2/net.opengis.wfs-35.2.jar
MD5: ac9ada55f4b0a8716a4651b267f633cb
SHA1: 813b5091cb4fe551958871c4cb6637961b7c3d98
SHA256: 3a0c272433e47bb581e9d28002bc716fe85939491d274181c9b32383b2b23e0d
pkg:maven/org.geotools.ogc/net.opengis.wfs@35.2
net.opengis.wmts-35.2.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.wmts/35.2/net.opengis.wmts-35.2.jar
MD5: cda1b3ffbe0500a903da79333260bd08
SHA1: 96adbb49eaa0f4a8ab0fa50891ae49d6b7ed1f48
SHA256: 99548e50388591f4f817cc0311aa63e70d9f4f4635228b6970c6deaa1ffa4d52
pkg:maven/org.geotools.ogc/net.opengis.wmts@35.2
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/10.9.1/nimbus-jose-jwt-10.9.1.jar/META-INF/maven/com.google.code.gson/gson/pom.xml
MD5: dcd6122810df12e276edc375730f7a9b
SHA1: 75c68fafbbc6c1abc95a60a5953cac165e102d5a
SHA256: c0f65722d75c0e58cd1835b3046046f606b5da699904161f8db6b78feb9b401a
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version pom version 2.13.1 Highest
Description:
Java library for Javascript Object Signing and Encryption (JOSE) and
JSON Web Tokens (JWT)
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/10.9.1/nimbus-jose-jwt-10.9.1.jar
MD5: 2dcec009745fe5ba876b5c5d8ac71caf
SHA1: 82ab15c57686545d989dd2c82cbec5b6b6f1c860
SHA256: 33152ea83ec50d22706fdaf3b07acbcd716f9a68edcabdd7c4d02843cbdcdcf6
Referenced In Project/Scope: Tailormap API:compile
nimbus-jose-jwt-10.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name nimbus-jose-jwt High Vendor jar package name jose Highest Vendor jar package name jwt Highest Vendor jar package name nimbusds Highest Vendor Manifest build-date ${timestamp} Low Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-number ${buildNumber} Low Vendor Manifest build-tag 10.9.1 Low Vendor Manifest bundle-docurl https://connect2id.com Low Vendor Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium Vendor Manifest Implementation-Vendor Connect2id Ltd. High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor Connect2id Ltd. Low Vendor pom artifactid nimbus-jose-jwt Highest Vendor pom artifactid nimbus-jose-jwt Low Vendor pom developer email vladimir@dzhuvinov.com Low Vendor pom developer id vdzhuvinov Medium Vendor pom developer name Vladimir Dzhuvinov Medium Vendor pom groupid com.nimbusds Highest Vendor pom name Nimbus JOSE+JWT High Vendor pom organization name Connect2id Ltd. High Vendor pom organization url https://connect2id.com Medium Vendor pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Highest Product file name nimbus-jose-jwt High Product jar package name 9 Highest Product jar package name jose Highest Product jar package name jwt Highest Product jar package name nimbusds Highest Product Manifest build-date ${timestamp} Low Product Manifest build-jdk-spec 17 Low Product Manifest build-number ${buildNumber} Low Product Manifest build-tag 10.9.1 Low Product Manifest bundle-docurl https://connect2id.com Low Product Manifest Bundle-Name Nimbus JOSE+JWT Medium Product Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium Product Manifest Implementation-Title Nimbus JOSE+JWT High Product Manifest multi-release true Low Product Manifest specification-title Nimbus JOSE+JWT Medium Product pom artifactid nimbus-jose-jwt Highest Product pom developer email vladimir@dzhuvinov.com Low Product pom developer id vdzhuvinov Low Product pom developer name Vladimir Dzhuvinov Low Product pom groupid com.nimbusds Highest Product pom name Nimbus JOSE+JWT High Product pom organization name Connect2id Ltd. Low Product pom organization url https://connect2id.com Low Product pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Medium Version file version 10.9.1 High Version Manifest build-tag 10.9.1 Low Version Manifest Bundle-Version 10.9.1 High Version Manifest Implementation-Version 10.9.1 High Version pom version 10.9.1 Highest
Description:
OAuth 2.0 SDK with OpenID Connect and Federation extensions for
developing client and server applications.
License:
Apache License, version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/nimbusds/oauth2-oidc-sdk/11.38.2/oauth2-oidc-sdk-11.38.2.jar
MD5: 38e046019e13d821b2c4bc17b0aa7bb1
SHA1: 633504f3430c148cc583d9d481f5f4e48e29cccf
SHA256: 30e63220c15bd93006c557bd0d614bb57a5f00232188693577c222383ea4bbe7
Referenced In Project/Scope: Tailormap API:compile
oauth2-oidc-sdk-11.38.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name oauth2-oidc-sdk High Vendor jar package name client Highest Vendor jar package name connect Highest Vendor jar package name nimbusds Highest Vendor jar package name oauth2 Highest Vendor jar package name openid Highest Vendor jar package name sdk Highest Vendor Manifest build-date 20260721.120702.209 Low Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-number ececabbfb73263bd61ed034613c394aead564e2c Low Vendor Manifest build-tag 11.38.2 Low Vendor Manifest bundle-developers vdzhuvinov;email="vd@connect2id.com";name="Vladimir Dzhuvinov" Low Vendor Manifest bundle-docurl https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Low Vendor Manifest bundle-symbolicname oauth2-oidc-sdk Medium Vendor Manifest Implementation-Vendor Connect2id Ltd. High Vendor Manifest specification-vendor Connect2id Ltd. Low Vendor pom artifactid oauth2-oidc-sdk Highest Vendor pom artifactid oauth2-oidc-sdk Low Vendor pom developer email vd@connect2id.com Low Vendor pom developer id vdzhuvinov Medium Vendor pom developer name Vladimir Dzhuvinov Medium Vendor pom groupid com.nimbusds Highest Vendor pom name OAuth 2.0 SDK with OpenID Connect and Federation extensions High Vendor pom organization name Connect2id Ltd. High Vendor pom organization url https://connect2id.com Medium Vendor pom url https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Highest Product file name oauth2-oidc-sdk High Product jar package name client Highest Product jar package name connect Highest Product jar package name nimbusds Highest Product jar package name oauth2 Highest Product jar package name openid Highest Product jar package name sdk Highest Product Manifest build-date 20260721.120702.209 Low Product Manifest build-jdk-spec 17 Low Product Manifest build-number ececabbfb73263bd61ed034613c394aead564e2c Low Product Manifest build-tag 11.38.2 Low Product Manifest bundle-developers vdzhuvinov;email="vd@connect2id.com";name="Vladimir Dzhuvinov" Low Product Manifest bundle-docurl https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Low Product Manifest Bundle-Name OAuth 2.0 SDK with OpenID Connect and Federation extensions Medium Product Manifest bundle-symbolicname oauth2-oidc-sdk Medium Product Manifest Implementation-Title OAuth 2.0 SDK with OpenID Connect and Federation extensions High Product Manifest specification-title OAuth 2.0 SDK with OpenID Connect and Federation extensions Medium Product pom artifactid oauth2-oidc-sdk Highest Product pom developer email vd@connect2id.com Low Product pom developer id vdzhuvinov Low Product pom developer name Vladimir Dzhuvinov Low Product pom groupid com.nimbusds Highest Product pom name OAuth 2.0 SDK with OpenID Connect and Federation extensions High Product pom organization name Connect2id Ltd. Low Product pom organization url https://connect2id.com Low Product pom url https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Medium Version file version 11.38.2 High Version Manifest build-tag 11.38.2 Low Version Manifest Bundle-Version 11.38.2 High Version Manifest Implementation-Version 11.38.2 High Version pom version 11.38.2 Highest
pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2
(Confidence :High)
Description:
Oracle JDBC Driver compatible with JDK17, JDK19, and JDK21
License:
Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
File Path: /home/runner/.m2/repository/com/oracle/database/jdbc/ojdbc17/23.26.3.0.0/ojdbc17-23.26.3.0.0.jar
MD5: 679472d9fde0179b0d2cc05a1184057a
SHA1: 490f9b74ae39c190c6033e3e056164497737ba18
SHA256: 17ad1c2d5242432cc4db9e2a7f67762bc8a4086cbcb3cd81f6ffaa2a510c41d8
Referenced In Project/Scope: Tailormap API:compile
ojdbc17-23.26.3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name ojdbc17 High Vendor jar package name driver Highest Vendor jar package name jdbc Highest Vendor jar package name oracle Highest Vendor jar (hint) package name sun Highest Vendor Manifest automatic-module-name com.oracle.database.jdbc Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor Manifest repository-id JAVAVM_23.0.0.0.0_LINUX.X64_260620 Low Vendor Manifest specification-vendor Sun Microsystems Inc. Low Vendor pom artifactid ojdbc17 Highest Vendor pom artifactid ojdbc17 Low Vendor pom developer org Oracle America, Inc. Medium Vendor pom developer org URL http://www.oracle.com Medium Vendor pom groupid com.oracle.database.jdbc Highest Vendor pom name ojdbc17 High Vendor pom url https://www.oracle.com/database/technologies/maven-central-guide.html Highest Product file name ojdbc17 High Product jar package name driver Highest Product jar package name jdbc Highest Product jar package name oracle Highest Product Manifest automatic-module-name com.oracle.database.jdbc Medium Product Manifest Implementation-Title JDBC High Product Manifest repository-id JAVAVM_23.0.0.0.0_LINUX.X64_260620 Low Product Manifest specification-title JDBC Medium Product pom artifactid ojdbc17 Highest Product pom developer org Oracle America, Inc. Low Product pom developer org URL http://www.oracle.com Low Product pom groupid com.oracle.database.jdbc Highest Product pom name ojdbc17 High Product pom url https://www.oracle.com/database/technologies/maven-central-guide.html Medium Version file version 23.26.3.0.0 High Version Manifest Implementation-Version 23.26.3.0.0 High Version pom version 23.26.3.0.0 Highest
Description:
A simple library for reading and writing CSV in Java
License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/opencsv/opencsv/5.12.0/opencsv-5.12.0.jar
MD5: c7424a4784e6845911daf7ed7f3a4a23
SHA1: bc55d53c0961f8b191c96276e778a9ec67f7dd58
SHA256: f1c55d80a92c8ecfe3f15fb71785d5b156f3674cb5b9ad55dcfd378ffeed2960
Referenced In Project/Scope: Tailormap API:compile
opencsv-5.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-csv@35.2
Evidence
Type Source Name Value Confidence Vendor file name opencsv High Vendor jar package name opencsv Highest Vendor Manifest automatic-module-name com.opencsv Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname com.opencsv Medium Vendor pom artifactid opencsv Highest Vendor pom artifactid opencsv Low Vendor pom developer email arjones@t-online.de Low Vendor pom developer email sconway@users.sourceforge.net Low Vendor pom developer id aruckerjones Medium Vendor pom developer id scott_conway Medium Vendor pom developer name Andrew Rucker Jones Medium Vendor pom developer name Scott Conway Medium Vendor pom groupid com.opencsv Highest Vendor pom name opencsv High Vendor pom url http://opencsv.sf.net Highest Product file name opencsv High Product jar package name opencsv Highest Product Manifest automatic-module-name com.opencsv Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name opencsv Medium Product Manifest bundle-symbolicname com.opencsv Medium Product pom artifactid opencsv Highest Product pom developer email arjones@t-online.de Low Product pom developer email sconway@users.sourceforge.net Low Product pom developer id aruckerjones Low Product pom developer id scott_conway Low Product pom developer name Andrew Rucker Jones Low Product pom developer name Scott Conway Low Product pom groupid com.opencsv Highest Product pom name opencsv High Product pom url http://opencsv.sf.net Medium Version file version 5.12.0 High Version Manifest Bundle-Version 5.12.0 High Version pom version 5.12.0 Highest
pkg:maven/com.opencsv/opencsv@5.12.0
(Confidence :High)
Description:
EMF Common
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.common/2.15.0/org.eclipse.emf.common-2.15.0.jar
MD5: aa878b3e47b671ebc182108e6b4986c6
SHA1: e0f1608a9855651e899d609b106ae78f903a2f04
SHA256: bdb51f83b2daa51446b4ae5d606464e4b22fb7ef98f0477ac95de72551e2978a
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.common-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@35.2
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.emf.common High Vendor jar package name common Highest Vendor jar package name eclipse Highest Vendor jar package name emf Highest Vendor Manifest automatic-module-name org.eclipse.emf.common Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium Vendor Manifest eclipse-buddypolicy dependent Low Vendor Manifest eclipse-lazystart true Low Vendor pom artifactid eclipse.emf.common Low Vendor pom artifactid org.eclipse.emf.common Highest Vendor pom developer email info@eclipse.org Low Vendor pom developer id eclipse Medium Vendor pom developer name Eclipse.org Medium Vendor pom groupid org.eclipse.emf Highest Vendor pom name org.eclipse.emf.common High Vendor pom parent-artifactid org.eclipse.emf.plugins Low Vendor pom url http://www.eclipse.org/emf Highest Product file name org.eclipse.emf.common High Product jar package name common Highest Product jar package name eclipse Highest Product jar package name emf Highest Product Manifest automatic-module-name org.eclipse.emf.common Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium Product Manifest eclipse-buddypolicy dependent Low Product Manifest eclipse-lazystart true Low Product pom artifactid eclipse.emf.common Highest Product pom artifactid org.eclipse.emf.common Highest Product pom developer email info@eclipse.org Low Product pom developer id eclipse Low Product pom developer name Eclipse.org Low Product pom groupid org.eclipse.emf Highest Product pom name org.eclipse.emf.common High Product pom parent-artifactid org.eclipse.emf.plugins Medium Product pom url http://www.eclipse.org/emf Medium Version file version 2.15.0 High Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0-SNAPSHOT
(Confidence :High)
Description:
EMF Ecore
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0.jar
MD5: 566797e186b122fb2cb64a699b1c2d2b
SHA1: ccfc09c8b6a0d4fadde09216d8a07678d38998de
SHA256: d5e3c25344fe27f14f514f5d6deb6e9cc3f6153fa462361261a8d49a3dfe9bbf
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.ecore-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@35.2
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.emf.ecore High Vendor jar package name eclipse Highest Vendor jar package name ecore Highest Vendor jar package name emf Highest Vendor Manifest automatic-module-name org.eclipse.emf.ecore Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium Vendor Manifest eclipse-buddypolicy dependent Low Vendor Manifest eclipse-lazystart true Low Vendor pom artifactid eclipse.emf.ecore Low Vendor pom artifactid org.eclipse.emf.ecore Highest Vendor pom developer email info@eclipse.org Low Vendor pom developer id eclipse Medium Vendor pom developer name Eclipse.org Medium Vendor pom groupid org.eclipse.emf Highest Vendor pom name org.eclipse.emf.ecore High Vendor pom parent-artifactid org.eclipse.emf.plugins Low Vendor pom url http://www.eclipse.org/emf Highest Product file name org.eclipse.emf.ecore High Product jar package name eclipse Highest Product jar package name ecore Highest Product jar package name emf Highest Product jar package name plugin Highest Product Manifest automatic-module-name org.eclipse.emf.ecore Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium Product Manifest eclipse-buddypolicy dependent Low Product Manifest eclipse-lazystart true Low Product pom artifactid eclipse.emf.ecore Highest Product pom artifactid org.eclipse.emf.ecore Highest Product pom developer email info@eclipse.org Low Product pom developer id eclipse Low Product pom developer name Eclipse.org Low Product pom groupid org.eclipse.emf Highest Product pom name org.eclipse.emf.ecore High Product pom parent-artifactid org.eclipse.emf.plugins Medium Product pom url http://www.eclipse.org/emf Medium Version file version 2.15.0 High Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0-SNAPSHOT
(Confidence :High)
Description:
EMF XML/XMI Persistence
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore.xmi/2.15.0/org.eclipse.emf.ecore.xmi-2.15.0.jar
MD5: 7ac89d5bf958f0a2cfab049690f2e68c
SHA1: 9aa1a584be1df1eb0ef8fae7123784af6e51f47a
SHA256: 712ff33fef916d2fa4d838992fccae85c4817a71639a9a5933fc44568ed6dc57
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.ecore.xmi-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@35.2
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.emf.ecore.xmi High Vendor jar package name eclipse Highest Vendor jar package name ecore Highest Vendor jar package name emf Highest Vendor jar package name xmi Highest Vendor Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium Vendor Manifest eclipse-lazystart true Low Vendor pom artifactid eclipse.emf.ecore.xmi Low Vendor pom artifactid org.eclipse.emf.ecore.xmi Highest Vendor pom developer email info@eclipse.org Low Vendor pom developer id eclipse Medium Vendor pom developer name Eclipse.org Medium Vendor pom groupid org.eclipse.emf Highest Vendor pom name org.eclipse.emf.ecore.xmi High Vendor pom parent-artifactid org.eclipse.emf.plugins Low Vendor pom url http://www.eclipse.org/emf Highest Product file name org.eclipse.emf.ecore.xmi High Product jar package name eclipse Highest Product jar package name ecore Highest Product jar package name emf Highest Product jar package name xmi Highest Product Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium Product Manifest eclipse-lazystart true Low Product pom artifactid eclipse.emf.ecore.xmi Highest Product pom artifactid org.eclipse.emf.ecore.xmi Highest Product pom developer email info@eclipse.org Low Product pom developer id eclipse Low Product pom developer name Eclipse.org Low Product pom groupid org.eclipse.emf Highest Product pom name org.eclipse.emf.ecore.xmi High Product pom parent-artifactid org.eclipse.emf.plugins Medium Product pom url http://www.eclipse.org/emf Medium Version file version 2.15.0 High Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0-SNAPSHOT
(Confidence :High)
Description:
http://www.eclipse.org
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/xsd/org.eclipse.xsd/2.12.0/org.eclipse.xsd-2.12.0.jar
MD5: 75fa52ffcf1c5d0d9f85ca9aa7a0e3de
SHA1: 1d4c0da59535d3b79e73a91b1f161c97d3103668
SHA256: 0cbded7b090a2205c367b6d08f6ab32dc6857265b87673a4e51b77301ef1b953
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.xsd-2.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@35.2
Evidence
Type Source Name Value Confidence Vendor file name org.eclipse.xsd High Vendor jar package name eclipse Highest Vendor jar package name xsd Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-localization plugin Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.xsd; singleton:=true Medium Vendor Manifest eclipse-lazystart true Low Vendor pom artifactid eclipse.xsd Low Vendor pom artifactid org.eclipse.xsd Highest Vendor pom developer email info@eclipse.org Low Vendor pom developer id eclipse Medium Vendor pom developer name Eclipse.org Medium Vendor pom groupid org.eclipse.xsd Highest Vendor pom name org.eclipse.xsd High Vendor pom url http://www.eclipse.org/emf Highest Product file name org.eclipse.xsd High Product jar package name eclipse Highest Product jar package name xsd Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-localization plugin Low Product Manifest Bundle-Name %pluginName Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.xsd; singleton:=true Medium Product Manifest eclipse-lazystart true Low Product pom artifactid eclipse.xsd Highest Product pom artifactid org.eclipse.xsd Highest Product pom developer email info@eclipse.org Low Product pom developer id eclipse Low Product pom developer name Eclipse.org Low Product pom groupid org.eclipse.xsd Highest Product pom name org.eclipse.xsd High Product pom url http://www.eclipse.org/emf Medium Version file version 2.12.0 High Version pom version 2.12.0 Highest
pkg:maven/org.eclipse.xsd/org.eclipse.xsd@2.12.0
(Confidence :High)
Description:
Xlink Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/org.w3.xlink/35.2/org.w3.xlink-35.2.jarMD5: 147468184b10b80966eaac52e58559e4SHA1: 496a9fb9b2ca26c72eb0526943c7923517660706SHA256: 69a8506f7b7d8adc01bf43c08fe76e90745e23c6192d8e85b98e1466d2f088bb
Referenced In Project/Scope: Tailormap API:compile
org.w3.xlink-35.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name org.w3.xlink High Vendor jar package name w3 Highest Vendor jar package name xlink Highest Vendor Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest build-timestamp 16-Oct-2026 01:58 Low Vendor Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Vendor pom artifactid org.w3.xlink Highest Vendor pom artifactid w3.xlink Low Vendor pom groupid org.geotools.ogc Highest Vendor pom name Xlink Model High Vendor pom parent-artifactid ogc Low Vendor pom parent-groupid org.geotools Medium Product file name org.w3.xlink High Product jar package name w3 Highest Product jar package name xlink Highest Product Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium Product Manifest build-jdk-spec 17 Low Product Manifest build-timestamp 16-Oct-2026 01:58 Low Product Manifest git-revision b38c801a7c5aaa5755661c7b8cbef89430a4491d Low Product pom artifactid org.w3.xlink Highest Product pom artifactid w3.xlink Highest Product pom groupid org.geotools.ogc Highest Product pom name Xlink Model High Product pom parent-artifactid ogc Medium Product pom parent-groupid org.geotools Medium Version file version 35.2 High Version Manifest project-version 35.2 Medium Version pom version 35.2 Highest
Description:
Please refer to the main website for documentation.
File Path: /home/runner/.m2/repository/picocontainer/picocontainer/1.2/picocontainer-1.2.jarMD5: 3e2dea8daea96da71724cae35da4cc0cSHA1: c55e869dcdddd735acd8789b74863cde8d15d444SHA256: d729282e385ed351684e649e261b5b02399327c4713c6b100f122942f923412f
Referenced In Project/Scope: Tailormap API:compile
picocontainer-1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name picocontainer High Vendor jar package name picocontainer Highest Vendor Manifest extension-name picocontainer Medium Vendor Manifest Implementation-Vendor Codehaus High Vendor Manifest specification-vendor Codehaus Low Vendor pom artifactid picocontainer Highest Vendor pom artifactid picocontainer Low Vendor pom groupid picocontainer Highest Vendor pom name PicoContainer Core High Vendor pom organization name Codehaus High Vendor pom organization url http://codehaus.org/ Medium Vendor pom url http://www.picocontainer.org/ Highest Product file name picocontainer High Product jar package name picocontainer Highest Product Manifest extension-name picocontainer Medium Product Manifest Implementation-Title org.picocontainer High Product Manifest specification-title Small footprint Dependency Injection container Medium Product pom artifactid picocontainer Highest Product pom groupid picocontainer Highest Product pom name PicoContainer Core High Product pom organization name Codehaus Low Product pom organization url http://codehaus.org/ Low Product pom url http://www.picocontainer.org/ Medium Version file version 1.2 High Version Manifest Implementation-Version 1.2 High Version pom version 1.2 Highest
pkg:maven/picocontainer/picocontainer@1.2
(Confidence :High)
Description:
Apache POI - Java API To Access Microsoft Format Files
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/poi/poi/5.5.1/poi-5.5.1.jar
MD5: fdac1ddef941df501e3bc138c6eb2fea
SHA1: 613d253b6f5f0849dd68fed043a7fb4b005e63a0
SHA256: 6c52e876ca75775a11b56e4b36a7541f682827f56406725fcd87560b792ee3d8
Referenced In Project/Scope: Tailormap API:compile
poi-5.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name poi High Vendor jar package name apache Highest Vendor jar package name common Highest Vendor jar package name format Highest Vendor jar package name poi Highest Vendor Manifest automatic-module-name org.apache.poi.poi Medium Vendor Manifest Implementation-Vendor org.apache.poi High Vendor Manifest Implementation-Vendor-Id The Apache Software Foundation Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid poi Highest Vendor pom artifactid poi Low Vendor pom groupid org.apache.poi Highest Vendor pom name Apache POI - Common High Vendor pom organization name Apache Software Foundation High Vendor pom organization url https://www.apache.org/ Medium Vendor pom url https://poi.apache.org/ Highest Product file name poi High Product jar package name apache Highest Product jar package name common Highest Product jar package name format Highest Product jar package name poi Highest Product Manifest automatic-module-name org.apache.poi.poi Medium Product Manifest Implementation-Title Apache POI High Product Manifest multi-release true Low Product Manifest specification-title Apache POI Medium Product pom artifactid poi Highest Product pom groupid org.apache.poi Highest Product pom name Apache POI - Common High Product pom organization name Apache Software Foundation Low Product pom organization url https://www.apache.org/ Low Product pom url https://poi.apache.org/ Medium Version file version 5.5.1 High Version Manifest Implementation-Version 5.5.1 High Version pom version 5.5.1 Highest
Related Dependencies
poi-ooxml-5.5.1.jar
File Path: /home/runner/.m2/repository/org/apache/poi/poi-ooxml/5.5.1/poi-ooxml-5.5.1.jar
MD5: a1637f824cfb0e9a55d89de2521ffdd2
SHA1: ff561a9cab46bfe95667d5085580fefb2353fdaf
SHA256: bd7be2fdfe3fd2c1684fa813351c2798fd636b44f6236e0674500d4f8ff1c2f9
pkg:maven/org.apache.poi/poi-ooxml@5.5.1
poi-ooxml-lite-5.5.1.jar
File Path: /home/runner/.m2/repository/org/apache/poi/poi-ooxml-lite/5.5.1/poi-ooxml-lite-5.5.1.jar
MD5: 8be7c2c3e972d20038aaacc2e3c39cf2
SHA1: 2e8c1fbeb661a8c15b033c4b03b2907e9bd0857b
SHA256: e6e37adeb6d6ee8b40ec491ad955d934d8f99827ab050f105b18286e59b1d9e7
pkg:maven/org.apache.poi/poi-ooxml-lite@5.5.1
Description:
PostgreSQL JDBC Driver Postgresql
License:
BSD-2-Clause: https://jdbc.postgresql.org/about/license.html
File Path: /home/runner/.m2/repository/org/postgresql/postgresql/42.7.13/postgresql-42.7.13.jar
MD5: 52ba042322b750121222bd57423003b5
SHA1: a6e1bd21b412d6ffb3df23cd13d507bc2cc9e37d
SHA256: 6e0e4cc2d8cae902084f8a2b18728b073a6fd9d1f87c9d8bff8f298c18185b93
Referenced In Project/Scope: Tailormap API:compile
postgresql-42.7.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name postgresql High Vendor jar package name driver Highest Vendor jar package name jdbc Highest Vendor jar package name org Highest Vendor jar package name postgresql Highest Vendor Manifest automatic-module-name org.postgresql.jdbc Medium Vendor Manifest bundle-copyright Copyright (c) 2003-2024, PostgreSQL Global Development Group Low Vendor Manifest bundle-docurl https://jdbc.postgresql.org/ Low Vendor Manifest bundle-symbolicname org.postgresql.jdbc Medium Vendor Manifest Implementation-Vendor PostgreSQL Global Development Group High Vendor Manifest Implementation-Vendor-Id org.postgresql Medium Vendor Manifest multi-release true Low Vendor Manifest provide-capability osgi.service;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver";effective:=active Low Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid postgresql Highest Vendor pom artifactid postgresql Low Vendor pom developer id bokken Medium Vendor pom developer id davecramer Medium Vendor pom developer id jurka Medium Vendor pom developer id oliver Medium Vendor pom developer id ringerc Medium Vendor pom developer id sehrope Medium Vendor pom developer id vlsi Medium Vendor pom developer name Brett Okken Medium Vendor pom developer name Craig Ringer Medium Vendor pom developer name Dave Cramer Medium Vendor pom developer name Kris Jurka Medium Vendor pom developer name Oliver Jowett Medium Vendor pom developer name Sehrope Sarkuni Medium Vendor pom developer name Vladimir Sitnikov Medium Vendor pom groupid org.postgresql Highest Vendor pom name PostgreSQL JDBC Driver High Vendor pom organization name PostgreSQL Global Development Group High Vendor pom organization url https://jdbc.postgresql.org/ Medium Vendor pom url https://jdbc.postgresql.org Highest Product file name postgresql High Product hint analyzer product pgjdbc Highest Product hint analyzer product postgresql_jdbc_driver Highest Product jar package name driver Highest Product jar package name jdbc Highest Product jar package name org Highest Product jar package name osgi Highest Product jar package name postgresql Highest Product Manifest automatic-module-name org.postgresql.jdbc Medium Product Manifest bundle-copyright Copyright (c) 2003-2024, PostgreSQL Global Development Group Low Product Manifest bundle-docurl https://jdbc.postgresql.org/ Low Product Manifest Bundle-Name PostgreSQL JDBC Driver Medium Product Manifest bundle-symbolicname org.postgresql.jdbc Medium Product Manifest Implementation-Title PostgreSQL JDBC Driver High Product Manifest multi-release true Low Product Manifest provide-capability osgi.service;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver";effective:=active Low Product Manifest specification-title JDBC Medium Product pom artifactid postgresql Highest Product pom developer id bokken Low Product pom developer id davecramer Low Product pom developer id jurka Low Product pom developer id oliver Low Product pom developer id ringerc Low Product pom developer id sehrope Low Product pom developer id vlsi Low Product pom developer name Brett Okken Low Product pom developer name Craig Ringer Low Product pom developer name Dave Cramer Low Product pom developer name Kris Jurka Low Product pom developer name Oliver Jowett Low Product pom developer name Sehrope Sarkuni Low Product pom developer name Vladimir Sitnikov Low Product pom groupid org.postgresql Highest Product pom name PostgreSQL JDBC Driver High Product pom organization name PostgreSQL Global Development Group Low Product pom organization url https://jdbc.postgresql.org/ Low Product pom url https://jdbc.postgresql.org Medium Version file version 42.7.13 High Version Manifest Bundle-Version 42.7.13 High Version Manifest Implementation-Version 42.7.13 High Version pom version 42.7.13 Highest
pkg:maven/org.postgresql/postgresql@42.7.13
(Confidence :High)
cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.7.13:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
Configuration for Prometheus metrics and exposition formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-config/1.7.0/prometheus-metrics-config-1.7.0.jar
MD5: dbf028406bdbb052ad97d9af6f610c2b
SHA1: 739329fa28a2372515f14c875d4012b32e17df09
SHA256: bc9455f938df76ec4add13fe31903a5bb583c605679a16a779d6a6c2b21218f2
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-config-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-config High Vendor jar package name config Highest Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name prometheus Highest Vendor Manifest automatic-module-name io.prometheus.metrics.config Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-config Medium Vendor pom artifactid prometheus-metrics-config Highest Vendor pom artifactid prometheus-metrics-config Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Config High Vendor pom parent-artifactid client_java Low Product file name prometheus-metrics-config High Product jar package name config Highest Product jar package name io Highest Product jar package name metrics Highest Product jar package name prometheus Highest Product Manifest automatic-module-name io.prometheus.metrics.config Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Config Medium Product Manifest bundle-symbolicname io.prometheus.metrics-config Medium Product pom artifactid prometheus-metrics-config Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Config High Product pom parent-artifactid client_java Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-config@1.7.0
(Confidence :High)
Description:
Core Prometheus metric types
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-core/1.7.0/prometheus-metrics-core-1.7.0.jar
MD5: 649c2e0c6952f28a7d0062f8be03ec4c
SHA1: 04779014a044c3c300d8ec36eb2a51ecb7541887
SHA256: f9e5f1c8a20073347c88941d43e8c64ae6810afe0a61cbfe9c2f4efffe72808b
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-core-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-core High Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name prometheus Highest Vendor Manifest automatic-module-name io.prometheus.metrics.core Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-core Medium Vendor pom artifactid prometheus-metrics-core Highest Vendor pom artifactid prometheus-metrics-core Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Core High Vendor pom parent-artifactid client_java Low Product file name prometheus-metrics-core High Product jar package name core Highest Product jar package name io Highest Product jar package name metrics Highest Product jar package name prometheus Highest Product Manifest automatic-module-name io.prometheus.metrics.core Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Core Medium Product Manifest bundle-symbolicname io.prometheus.metrics-core Medium Product pom artifactid prometheus-metrics-core Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Core High Product pom parent-artifactid client_java Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-core@1.7.0
(Confidence :High)
Description:
Prometheus exposition formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-formats/1.7.0/prometheus-metrics-exposition-formats-1.7.0.jar
MD5: 8335ee920c112f79fe7ff452f95fd09c
SHA1: e1023556dc6cdcb7142c2635b586782610fdab10
SHA256: 7352ca8b50e861eca3567ceb332e9590a06742a9d177cff54e52c8cff4c4fb90
Referenced In Project/Scope: Tailormap API:runtime
prometheus-metrics-exposition-formats-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-exposition-formats High Vendor jar package name expositionformats Highest Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name prometheus Highest Vendor Manifest automatic-module-name io.prometheus.metrics.expositionformats Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-exposition-formats Medium Vendor pom artifactid prometheus-metrics-exposition-formats Highest Vendor pom artifactid prometheus-metrics-exposition-formats Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Exposition Formats High Vendor pom parent-artifactid client_java Low Product file name prometheus-metrics-exposition-formats High Product jar package name expositionformats Highest Product jar package name io Highest Product jar package name metrics Highest Product jar package name prometheus Highest Product Manifest automatic-module-name io.prometheus.metrics.expositionformats Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Exposition Formats Medium Product Manifest bundle-symbolicname io.prometheus.metrics-exposition-formats Medium Product pom artifactid prometheus-metrics-exposition-formats Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Exposition Formats High Product pom parent-artifactid client_java Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.7.0
(Confidence :High)
Description:
Prometheus exposition text formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-textformats/1.7.0/prometheus-metrics-exposition-textformats-1.7.0.jar
MD5: 04c4272da97621f935f4c844fac2b5e5
SHA1: c94fc72615c1943e01e4bf4a8451a9c7e91ac213
SHA256: 7e49065895a35181c57f2c3c6d07b7b3f9b5754cd6422e0a7bd793f20a29c28a
Referenced In Project/Scope: Tailormap API:runtime
prometheus-metrics-exposition-textformats-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-exposition-textformats High Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name prometheus Highest Vendor Manifest automatic-module-name io.prometheus.writer.text Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-exposition-textformats Medium Vendor pom artifactid prometheus-metrics-exposition-textformats Highest Vendor pom artifactid prometheus-metrics-exposition-textformats Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Exposition Text Formats High Vendor pom parent-artifactid client_java Low Product file name prometheus-metrics-exposition-textformats High Product jar package name io Highest Product jar package name metrics Highest Product jar package name prometheus Highest Product Manifest automatic-module-name io.prometheus.writer.text Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Exposition Text Formats Medium Product Manifest bundle-symbolicname io.prometheus.metrics-exposition-textformats Medium Product pom artifactid prometheus-metrics-exposition-textformats Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Exposition Text Formats High Product pom parent-artifactid client_java Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.7.0
(Confidence :High)
Description:
Data model for read-only immutable Prometheus metrics snapshots.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-model/1.7.0/prometheus-metrics-model-1.7.0.jar
MD5: f0aaf83b956c7cc7bdbcbdd217830a1a
SHA1: d953f718cf1f62af34f7bf2545645c1f6f4698d5
SHA256: e6d94538f8735c4161c36a660298f3a0fa8e4b281ceaf209723aaf9e212d292d
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-model-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-model High Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name model Highest Vendor jar package name prometheus Highest Vendor Manifest automatic-module-name io.prometheus.metrics.model Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-model Medium Vendor pom artifactid prometheus-metrics-model Highest Vendor pom artifactid prometheus-metrics-model Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Model High Vendor pom parent-artifactid client_java Low Product file name prometheus-metrics-model High Product jar package name io Highest Product jar package name metrics Highest Product jar package name model Highest Product jar package name prometheus Highest Product Manifest automatic-module-name io.prometheus.metrics.model Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Model Medium Product Manifest bundle-symbolicname io.prometheus.metrics-model Medium Product pom artifactid prometheus-metrics-model Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Model High Product pom parent-artifactid client_java Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-model@1.7.0
(Confidence :High)
Description:
Common Module for Prometheus integrations with distributed tracing libraries.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-tracer-common/1.7.0/prometheus-metrics-tracer-common-1.7.0.jar
MD5: f017e9534666d792d219959180da4a3f
SHA1: 2feee6463c9ad7a6ef142020c3379835ffeb6701
SHA256: b7e8699032f0f1501556eeafd20fcfdd89b355f5d22b6d8361d723d467d88ed4
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-tracer-common-1.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.1
Evidence
Type Source Name Value Confidence Vendor file name prometheus-metrics-tracer-common High Vendor jar package name io Highest Vendor jar package name metrics Highest Vendor jar package name prometheus Highest Vendor jar package name tracer Highest Vendor Manifest automatic-module-name io.prometheus.metrics.tracer.common Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-symbolicname io.prometheus.metrics-tracer-common Medium Vendor pom artifactid prometheus-metrics-tracer-common Highest Vendor pom artifactid prometheus-metrics-tracer-common Low Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Metrics Tracer Common High Vendor pom parent-artifactid prometheus-metrics-tracer Low Product file name prometheus-metrics-tracer-common High Product jar package name io Highest Product jar package name metrics Highest Product jar package name prometheus Highest Product jar package name tracer Highest Product Manifest automatic-module-name io.prometheus.metrics.tracer.common Medium Product Manifest build-jdk-spec 21 Low Product Manifest Bundle-Name Prometheus Metrics Tracer Common Medium Product Manifest bundle-symbolicname io.prometheus.metrics-tracer-common Medium Product pom artifactid prometheus-metrics-tracer-common Highest Product pom groupid io.prometheus Highest Product pom name Prometheus Metrics Tracer Common High Product pom parent-artifactid prometheus-metrics-tracer Medium Version file version 1.7.0 High Version Manifest Bundle-Version 1.7.0 High Version pom version 1.7.0 Highest
pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.7.0
(Confidence :High)
Description:
Quartz Enterprise Job Scheduler
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/quartz-scheduler/quartz/2.5.2/quartz-2.5.2.jar
MD5: b8ed3623018a763841145b5afce13230
SHA1: 2c3a3d8dc34774607e73370352bb1c1beb82b71a
SHA256: 452e418739c0da1bff255f7c1343dd3a92e1fdd3ceb126b185939edae9922091
Referenced In Project/Scope: Tailormap API:compile
quartz-2.5.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name quartz High Vendor hint analyzer vendor softwareag Highest Vendor jar package name job Highest Vendor jar package name quartz Highest Vendor jar package name scheduler Highest Vendor Manifest automatic-module-name org.quartz Medium Vendor Manifest bundle-symbolicname quartz Medium Vendor Manifest Implementation-Vendor-Id org.quartz-scheduler Medium Vendor pom artifactid quartz Highest Vendor pom artifactid quartz Low Vendor pom developer email tc-oss@wwpdl.vnet.ibm.com Low Vendor pom developer name Terracotta Engineers Medium Vendor pom developer org IBM Corp. Medium Vendor pom developer org URL http://www.quartz-scheduler.org/ Medium Vendor pom groupid org.quartz-scheduler Highest Vendor pom name quartz High Vendor pom url https://www.quartz-scheduler.org/ Highest Product file name quartz High Product jar package name job Highest Product jar package name quartz Highest Product jar package name scheduler Highest Product Manifest automatic-module-name org.quartz Medium Product Manifest Bundle-Name quartz Medium Product Manifest bundle-symbolicname quartz Medium Product Manifest Implementation-Title quartz High Product pom artifactid quartz Highest Product pom developer email tc-oss@wwpdl.vnet.ibm.com Low Product pom developer name Terracotta Engineers Low Product pom developer org IBM Corp. Low Product pom developer org URL http://www.quartz-scheduler.org/ Low Product pom groupid org.quartz-scheduler Highest Product pom name quartz High Product pom url https://www.quartz-scheduler.org/ Medium Version file version 2.5.2 High Version Manifest Bundle-Version 2.5.2 High Version Manifest Implementation-Version 2.5.2 High Version pom version 2.5.2 Highest
Description:
Linear time regular expressions for Java
License:
Go License: https://golang.org/LICENSE
File Path: /home/runner/.m2/repository/com/google/re2j/re2j/1.8/re2j-1.8.jar
MD5: 4240e655caa938c61ddbec8b92bfb061
SHA1: 12c25e923e9e4fb1575a7640a2698745c6f19a94
SHA256: 7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7
Referenced In Project/Scope: Tailormap API:compile
re2j-1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@35.2
Evidence
Type Source Name Value Confidence Vendor file name re2j High Vendor jar package name google Highest Vendor jar package name google Low Vendor jar package name re2 Highest Vendor jar package name re2j Highest Vendor jar package name re2j Low Vendor pom artifactid re2j Highest Vendor pom artifactid re2j Low Vendor pom developer email re2j-discuss@googlegroups.com Low Vendor pom developer id dev Medium Vendor pom developer name The RE2/J Contributors Medium Vendor pom groupid com.google.re2j Highest Vendor pom name RE2/J High Vendor pom url http://github.com/google/re2j Highest Product file name re2j High Product jar package name google Highest Product jar package name re2 Highest Product jar package name re2j Highest Product jar package name re2j Low Product pom artifactid re2j Highest Product pom developer email re2j-discuss@googlegroups.com Low Product pom developer id dev Low Product pom developer name The RE2/J Contributors Low Product pom groupid com.google.re2j Highest Product pom name RE2/J High Product pom url http://github.com/google/re2j Medium Version file version 1.8 High Version pom version 1.8 Highest
pkg:maven/com.google.re2j/re2j@1.8
(Confidence :High)
Description:
Semantic versioning for Java apps.
License:
The MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/semver4j/semver4j/6.0.0/semver4j-6.0.0.jar
MD5: fbedac2197067c12480b9307d80b010d
SHA1: 995a8afc0b9d9a700c7858843a36ece815852d72
SHA256: 43d5e02f60e2b1f8ff0c92139f612a547691a1debe6bea32b0a70ba5a3bcbdd7
Referenced In Project/Scope: Tailormap API:runtime
semver4j-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name semver4j High Vendor jar package name semver4j Highest Vendor Manifest automatic-module-name org.semver4j Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid semver4j Highest Vendor pom artifactid semver4j Low Vendor pom developer email piotroo89@gmail.com Low Vendor pom developer name Piotr Olaszewski Medium Vendor pom groupid org.semver4j Highest Vendor pom name semver4j High Vendor pom url semver4j/semver4j Highest Product file name semver4j High Product jar package name semver4j Highest Product Manifest automatic-module-name org.semver4j Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid semver4j Highest Product pom developer email piotroo89@gmail.com Low Product pom developer name Piotr Olaszewski Low Product pom groupid org.semver4j Highest Product pom name semver4j High Product pom url semver4j/semver4j High Version file version 6.0.0 High Version pom version 6.0.0 Highest
pkg:maven/org.semver4j/semver4j@6.0.0
(Confidence :High)
Description:
Units of Measurement SI (Système International d'Unités)
License:
https://opensource.org/licenses/BSD-3-Clause File Path: /home/runner/.m2/repository/si/uom/si-quantity/2.1/si-quantity-2.1.jar
MD5: 79685f60efca0051a6c579e1f1522542
SHA1: 5617d2cf30898ffcc760807009fe947483bd867b
SHA256: 2cdcfd3e5395db5576f5efc0f224b5bbd0731f3ec7552afee6ee7b63a4f65820
Referenced In Project/Scope: Tailormap API:compile
si-quantity-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name si-quantity High Vendor jar package name quantity Highest Vendor jar package name si Highest Vendor jar package name uom Highest Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low Vendor Manifest bundle-symbolicname si.uom.si-quantity Medium Vendor pom artifactid si-quantity Highest Vendor pom artifactid si-quantity Low Vendor pom groupid si.uom Highest Vendor pom name SI Quantities High Vendor pom parent-artifactid si-parent Low Product file name si-quantity High Product jar package name quantity Highest Product jar package name si Highest Product jar package name uom Highest Product Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low Product Manifest Bundle-Name SI Quantities Medium Product Manifest bundle-symbolicname si.uom.si-quantity Medium Product pom artifactid si-quantity Highest Product pom groupid si.uom Highest Product pom name SI Quantities High Product pom parent-artifactid si-parent Medium Version file version 2.1 High Version pom version 2.1 Highest
pkg:maven/si.uom/si-quantity@2.1
(Confidence :High)
Description:
"Units of Measurement SI (Système International d'Unités)"
License:
"BSD 3-Clause";link="https://opensource.org/licenses/BSD-3-Clause"
File Path: /home/runner/.m2/repository/si/uom/si-units/2.1/si-units-2.1.jar
MD5: 43abf4b896da58d8bca0e87f412a8457
SHA1: 7e812192ff1abbef6c79123249840c42b4e145d4
SHA256: 491ed9956ddf4b2e30180b087e1f6fb51debccb6d46785ae0d52026342013c51
Referenced In Project/Scope: Tailormap API:compile
si-units-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name si-units High Vendor jar package name si Highest Vendor jar package name uom Highest Vendor Manifest build-jdk-spec 14 Low Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low Vendor Manifest bundle-symbolicname si-units Medium Vendor Manifest implementation-url https://unitsofmeasurement.github.io/ Low Vendor Manifest Implementation-Vendor Units of Measurement contributors High Vendor Manifest specification-vendor Units of Measurement Low Vendor pom artifactid si-units Highest Vendor pom artifactid si-units Low Vendor pom groupid si.uom Highest Vendor pom name SI Units High Vendor pom parent-artifactid si-parent Low Product file name si-units High Product jar package name si Highest Product jar package name uom Highest Product Manifest build-jdk-spec 14 Low Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Product Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low Product Manifest Bundle-Name SI Units Medium Product Manifest bundle-symbolicname si-units Medium Product Manifest Implementation-Title SI Units High Product Manifest implementation-url https://unitsofmeasurement.github.io/ Low Product Manifest specification-title International System of Units Medium Product pom artifactid si-units Highest Product pom groupid si.uom Highest Product pom name SI Units High Product pom parent-artifactid si-parent Medium Version file version 2.1 High Version Manifest Implementation-Version 2.1 High Version pom version 2.1 Highest
pkg:maven/si.uom/si-units@2.1
(Confidence :High)
Description:
The slf4j API
License:
https://opensource.org/license/mit File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.20/slf4j-api-2.0.20.jar
MD5: a7a6798aa78b29152479f89565f57446
SHA1: 7fea9d92ba67e9b3c8f03515fb202b86a1fe44f6
SHA256: 7e1446499b359675d8aabe6af2de86b85e72ae8a2a932c0b40d0e5ba57097439
Referenced In Project/Scope: Tailormap API:compile
slf4j-api-2.0.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Highest Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.20 High Version Manifest Bundle-Version 2.0.20 High Version Manifest Implementation-Version 2.0.20 High Version pom version 2.0.20 Highest
pkg:maven/org.slf4j/slf4j-api@2.0.20
(Confidence :High)
Description:
YAML 1.1 parser and emitter for Java
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.6/snakeyaml-2.6.jar
MD5: d8bd94536cee962cfff39730bffdb8da
SHA1: 2bc14918a2f8d5414749ab12d0c590cd3198b8c1
SHA256: c8f7a98e7394adda02f6317249710e4d1b4c7a25aa8c7eace0c2eea52eb8bf85
Referenced In Project/Scope: Tailormap API:compile
snakeyaml-2.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-actuator@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name snakeyaml High Vendor jar package name emitter Highest Vendor jar package name org Highest Vendor jar package name parser Highest Vendor jar package name snakeyaml Highest Vendor jar package name yaml Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor Manifest multi-release true Low Vendor pom artifactid snakeyaml Highest Vendor pom artifactid snakeyaml Low Vendor pom developer email alexander.maslov@gmail.com Low Vendor pom developer email public.somov@gmail.com Low Vendor pom developer id asomov Medium Vendor pom developer id maslovalex Medium Vendor pom developer name Alexander Maslov Medium Vendor pom developer name Andrey Somov Medium Vendor pom groupid org.yaml Highest Vendor pom name SnakeYAML High Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest Product file name snakeyaml High Product jar package name emitter Highest Product jar package name org Highest Product jar package name parser Highest Product jar package name snakeyaml Highest Product jar package name yaml Highest Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product Manifest multi-release true Low Product pom artifactid snakeyaml Highest Product pom developer email alexander.maslov@gmail.com Low Product pom developer email public.somov@gmail.com Low Product pom developer id asomov Low Product pom developer id maslovalex Low Product pom developer name Alexander Maslov Low Product pom developer name Andrey Somov Low Product pom groupid org.yaml Highest Product pom name SnakeYAML High Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium Version file version 2.6 High Version pom version 2.6 Highest
Description:
Apache Solr (module: api)
License:
Apache 2: https://apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/solr/solr-api/10.0.0/solr-api-10.0.0.jar
MD5: bffdb9ee0d33fdd17eaf022986fc17b7
SHA1: c865e60dae5851259af260a1d6704dd7b5438cbe
SHA256: eba144a935fb4a200420a302c50e22b90d779f86281a0de73c1ba1173d576aee
Referenced In Project/Scope: Tailormap API:compile
solr-api-10.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name solr-api High Vendor jar package name apache Highest Vendor jar package name api Highest Vendor jar package name solr Highest Vendor Manifest extension-name org.apache.solr Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest x-build-os Mac OS X aarch64 26.2 Low Vendor pom artifactid solr-api Highest Vendor pom artifactid solr-api Low Vendor pom groupid org.apache.solr Highest Vendor pom name Apache Solr (module: api) High Vendor pom url https://solr.apache.org/ Highest Product file name solr-api High Product jar package name apache Highest Product jar package name api Highest Product jar package name solr Highest Product Manifest extension-name org.apache.solr Medium Product Manifest Implementation-Title org.apache.solr High Product Manifest specification-title Apache Solr Search Server: api Medium Product Manifest x-build-os Mac OS X aarch64 26.2 Low Product pom artifactid solr-api Highest Product pom groupid org.apache.solr Highest Product pom name Apache Solr (module: api) High Product pom url https://solr.apache.org/ Medium Version file version 10.0.0 High Version pom version 10.0.0 Highest
Related Dependencies
solr-solrj-10.0.0.jar
File Path: /home/runner/.m2/repository/org/apache/solr/solr-solrj/10.0.0/solr-solrj-10.0.0.jar
MD5: 626dd026b61a66802b0b69f87c6c9a74
SHA1: 14bc98a779223cb982b86744ca3eab5a5d5d0a25
SHA256: 59178b49e43ffed3d4845b73c0b3302bd77e1b0e3c10c5c4550ba8499bdb3fac
pkg:maven/org.apache.solr/solr-solrj@10.0.0
CVE-2026-44825 suppress
Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials installed silently alongside the user-specified account.
As an immediate workaround without upgrading, delete the template users (superadmin, admin, search, index) from security.json or change their passwords.
The future, not yet released, versions 9.11.0 and 10.1.0 will not be vulnerable, and it will be enough to upgrade to solve the issue.
Not affected:
* Clusters where bin/solr auth enable was not used to bootstrap BasicAuth
* Clusters where template users have been assigned strong passwords after bootstrap
CWE-1188 Insecure Default Initialization of Resource, CWE-798 Use of Hard-coded Credentials
CVSSv3:
Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Boot Data REST
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-data-rest/4.1.2/spring-boot-data-rest-4.1.2.jar
MD5: 6bcee4966971bcb2a8b5d4880bcaa974
SHA1: efc28e88b59b500d5f2eff9e57583699e4139982
SHA256: 52bb831e6ac808f68f2b0f27b3db1855d2222f4b313675f7bcc6009e7aeed918
Referenced In Project/Scope: Tailormap API:compile
spring-boot-data-rest-4.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name spring-boot-data-rest High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name boot Highest Vendor jar package name data Highest Vendor jar package name rest Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.boot.data.rest Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid spring-boot-data-rest Highest Vendor pom artifactid spring-boot-data-rest Low Vendor pom developer email ask@spring.io Low Vendor pom developer name Spring Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.boot Highest Vendor pom name spring-boot-data-rest High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-boot Highest Product file name spring-boot-data-rest High Product jar package name boot Highest Product jar package name data Highest Product jar package name rest Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.boot.data.rest Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot Data REST High Product pom artifactid spring-boot-data-rest Highest Product pom developer email ask@spring.io Low Product pom developer name Spring Low Product pom developer org VMware, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.boot Highest Product pom name spring-boot-data-rest High Product pom organization name VMware, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-boot Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
CVE-2026-47849 suppress
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch (application/json-patch+json) requests.
Spring Data REST 5.1.0
Spring Data REST 5.0.0 - 5.0.6
Spring Data REST 4.5.0 - 4.5.12
Spring Data REST 4.0.0 - 4.4.15
Spring Data REST 3.7.20 and earlier
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVSSv3:
Base Score: HIGH (7.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2026-47850 suppress
Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type.
Spring Data REST 5.1.0
Spring Data REST 5.0.0 - 5.0.6
Spring Data REST 4.5.0 - 4.5.12
Spring Data REST 4.0.0 - 4.4.15
Spring Data REST 3.7.20 and earlier
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVSSv3:
Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Boot SQL
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-sql/4.1.2/spring-boot-sql-4.1.2.jar
MD5: 502829538bf86b81431edbf739cbe62d
SHA1: 23a71818b078e4d45e537c986a06a7596eb18900
SHA256: 6055db3a7e6f9b59814aac0a346a604d54a8638beff8a145273415b263936d45
Referenced In Project/Scope: Tailormap API:compile
spring-boot-sql-4.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name spring-boot-sql High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name boot Highest Vendor jar package name springframework Highest Vendor jar package name sql Highest Vendor Manifest automatic-module-name spring.boot.sql Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid spring-boot-sql Highest Vendor pom artifactid spring-boot-sql Low Vendor pom developer email ask@spring.io Low Vendor pom developer name Spring Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.boot Highest Vendor pom name spring-boot-sql High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-boot Highest Product file name spring-boot-sql High Product jar package name boot Highest Product jar package name springframework Highest Product jar package name sql Highest Product Manifest automatic-module-name spring.boot.sql Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot SQL High Product pom artifactid spring-boot-sql Highest Product pom developer email ask@spring.io Low Product pom developer name Spring Low Product pom developer org VMware, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.boot Highest Product pom name spring-boot-sql High Product pom organization name VMware, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-boot Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
Related Dependencies
spring-boot-data-jpa-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-data-jpa/4.1.2/spring-boot-data-jpa-4.1.2.jar
MD5: f1d999f9b57533921cab10c6a8f2276e
SHA1: d15efbebcd38aa463bdcdfc38af218c2d96591f3
SHA256: 6909515bee2b23daf6a5fa134f7d5720af54eb61a18507f6e9fe8d2f09335712
pkg:maven/org.springframework.boot/spring-boot-data-jpa@4.1.2
spring-boot-security-oauth2-client-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-security-oauth2-client/4.1.2/spring-boot-security-oauth2-client-4.1.2.jar
MD5: d1f580a39033507a2f589909365ef327
SHA1: 3da7e8ba4033a2df74afab163c91c02b5d2e8ebd
SHA256: e6cb44e293d024858896f09823ad008ef665856ff9e504594e73f7b42fa4acfa
pkg:maven/org.springframework.boot/spring-boot-security-oauth2-client@4.1.2
spring-boot-session-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-session/4.1.2/spring-boot-session-4.1.2.jar
MD5: 8c25f7040dd99eeb9b747906b5e3e966
SHA1: 31ddbd794e67f051ebbb304de68fa21dea1e64ed
SHA256: 61144a364e6dc67084c64b9bd8c1e0074df93edb71e1d78357fca7e6a031eb5b
pkg:maven/org.springframework.boot/spring-boot-session@4.1.2
spring-boot-session-jdbc-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-session-jdbc/4.1.2/spring-boot-session-jdbc-4.1.2.jar
MD5: e72ef54393cf415ae0fe0eb638310be0
SHA1: bf8515bc43638209856df9c149b4dff04f1f0442
SHA256: d1ece0b6d717dd61f571e315495532af41a989172c732bf8a049e59d3ecd1ad7
pkg:maven/org.springframework.boot/spring-boot-session-jdbc@4.1.2
spring-boot-starter-data-jpa-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-data-jpa/4.1.2/spring-boot-starter-data-jpa-4.1.2.jar
MD5: 0aefa1cd9675a1243101347ed3f202a7
SHA1: 9f478b86b302b44ece97e237351e92b7071302e7
SHA256: d44924035f3fd27b7aa81b7d868eb84a03fe0264088a1641a434a1d04dd7846e
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.1.2
spring-boot-starter-session-jdbc-4.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-session-jdbc/4.1.2/spring-boot-starter-session-jdbc-4.1.2.jar
MD5: 6b59d45d2d34158b9ce3f1eec8a3b26b
SHA1: 375169243f965176e0b2a9e278ad4a20a71a33d9
SHA256: a311166003c4662bcfdf34d1712161c51ee3025e8e5ef2fb8cc5e4509f6ee04a
pkg:maven/org.springframework.boot/spring-boot-starter-session-jdbc@4.1.2
Description:
Spring Boot Web Server
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-web-server/4.1.2/spring-boot-web-server-4.1.2.jar
MD5: fed87b861e05598de55c811cf1fc277a
SHA1: 2cd935942854e2383f32b74c641c3731f7d84688
SHA256: e5b2fa7222baf36621566a2d0f7d924aa92a8462680f8e67d972f965ef18356a
Referenced In Project/Scope: Tailormap API:compile
spring-boot-web-server-4.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-webmvc-test@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name spring-boot-web-server High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name boot Highest Vendor jar package name server Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.boot.web.server Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid spring-boot-web-server Highest Vendor pom artifactid spring-boot-web-server Low Vendor pom developer email ask@spring.io Low Vendor pom developer name Spring Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.boot Highest Vendor pom name spring-boot-web-server High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-boot Highest Product file name spring-boot-web-server High Product jar package name boot Highest Product jar package name server Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.boot.web.server Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot Web Server High Product pom artifactid spring-boot-web-server Highest Product pom developer email ask@spring.io Low Product pom developer name Spring Low Product pom developer org VMware, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.boot Highest Product pom name spring-boot-web-server High Product pom organization name VMware, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-boot Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
Related Dependencies
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.10/spring-core-7.0.10.jar
MD5: d0f471a1d80bd6dfffefe621b2e56755
SHA1: 0746da81d290cf89a64b9659596cc851af34f60a
SHA256: a236f31a7c07e3a1a8e7839ec5c0d47b5cc75709132db50416d5dad320341f12
Referenced In Project/Scope: Tailormap API:compile
spring-core-7.0.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.3
Evidence
Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name org Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.core Medium Vendor Manifest build-jdk-spec 25 Low Vendor Manifest multi-release true Low Vendor pom artifactid spring-core Highest Vendor pom artifactid spring-core Low Vendor pom developer email juergen.hoeller@broadcom.com Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name io Highest Product jar package name org Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.core Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title spring-core High Product Manifest multi-release true Low Product pom artifactid spring-core Highest Product pom developer email juergen.hoeller@broadcom.com Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Core High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 7.0.10 High Version Manifest Implementation-Version 7.0.10 High Version pom version 7.0.10 Highest
Related Dependencies
spring-aop-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.10/spring-aop-7.0.10.jar
MD5: 3543c36c67fdc19a613df5ccb16e2b42
SHA1: 411df71572415eef4f1223c0d536d15e30c269b1
SHA256: babf50a645f4f788e1267078cf891e472f657cabf65518055cf5214220574e3f
pkg:maven/org.springframework/spring-aop@7.0.10
spring-aspects-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aspects/7.0.10/spring-aspects-7.0.10.jar
MD5: 9ff35e06175c6e18e2aba470abaaacef
SHA1: e73760046e5d2ca6a6f01cfa4b5565c4eb32c9dc
SHA256: 8c119546615b14dc0f9d12d5cd0e4eae4163f51f00fba205ce83bbecac5ed3de
pkg:maven/org.springframework/spring-aspects@7.0.10
spring-beans-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.10/spring-beans-7.0.10.jar
MD5: 3ad5531cabea3d24ecd883aab0c9e122
SHA1: ce7f7a9662191a18a4ce8abd40c604e98a2ebdc3
SHA256: bd67c6fc887afa30cbcb489ff4f82bf19f818e79ab1cf1bef98dff8a289108ec
pkg:maven/org.springframework/spring-beans@7.0.10
spring-context-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.10/spring-context-7.0.10.jar
MD5: 2d5a1cd0ef2f6cb79f92487f0ba697fe
SHA1: d2ed91fdb563586a7e4185eeb7cf806d846bc12d
SHA256: f0065166b6a5101a871ab8702d6c4011cf39faed370a64e7ef14a3ad2bf2a99a
pkg:maven/org.springframework/spring-context@7.0.10
spring-context-support-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context-support/7.0.10/spring-context-support-7.0.10.jar
MD5: d0e8f9f0c1738ea258b14e8851f74019
SHA1: 04a9d84ea56357fdc1676a299735ade99e092cdb
SHA256: 7fe3d85f5a5e20ef2476d964ff6f42bf94b447ba99550e1d404d577427e5260c
pkg:maven/org.springframework/spring-context-support@7.0.10
spring-expression-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.10/spring-expression-7.0.10.jar
MD5: 0ea71236844f7d2548889556d1b162e6
SHA1: 0cd3ae7f5f9e6c6a3ea4b1721f5cfa92949af1bb
SHA256: 12067b66548f7613fa8938ca6051a6d1dd8c397bf478e0bb1adb9936358ec81d
pkg:maven/org.springframework/spring-expression@7.0.10
spring-jdbc-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-jdbc/7.0.10/spring-jdbc-7.0.10.jar
MD5: 1f74ec8c1e83a4e754706422194e1f95
SHA1: d90307edeb17fada16c1a68714ea81a98b688f89
SHA256: bc4ba6bd242f2db2642938960ae27589b53dd6a611d700a260af7b3383cd0c6c
pkg:maven/org.springframework/spring-jdbc@7.0.10
spring-orm-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-orm/7.0.10/spring-orm-7.0.10.jar
MD5: 25ef24f7dec413138a2d8ac73af29333
SHA1: dd4a7a40394e896558e1a31ca283b5f0bf2f9288
SHA256: a158aabfbd760abd7d50ed352b46421affa46595321e09fe91bec048f2c3b54c
pkg:maven/org.springframework/spring-orm@7.0.10
spring-test-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-test/7.0.10/spring-test-7.0.10.jar
MD5: 53be7f482902ca2ea7675392bf0e60f3
SHA1: b817b8a10b8cbda6dd6b39d3c1eaade09fa843cc
SHA256: 73c18292b63e814c415c1c470fcc47be1e21442b80ee31a0bcd949e53d0c49bd
pkg:maven/org.springframework/spring-test@7.0.10
spring-tx-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-tx/7.0.10/spring-tx-7.0.10.jar
MD5: d88b9552163a118a45b343fd5b7f6078
SHA1: 7a8de75d63e1ddce96c68030736ac069d2cded5f
SHA256: 9442610a8ed3d44e70fa97f49896ea810c831da62620101450f0feb522edb4cd
pkg:maven/org.springframework/spring-tx@7.0.10
spring-web-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/7.0.10/spring-web-7.0.10.jar
MD5: b378481a10aad2fed0b11802c87a962c
SHA1: 0148e4d1a46b72daabe3e2d227b3e6f1d37e9574
SHA256: 76ddb03d236547f6852def8cb303e1cf2cd2c1954dec5bf2abd87d11b89dfee7
pkg:maven/org.springframework/spring-web@7.0.10
spring-webmvc-7.0.10.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/7.0.10/spring-webmvc-7.0.10.jar
MD5: cd7affe0b899991d0b78f971e71d8eaa
SHA1: 469ee866c3e50af3450ae4f22ca4c8e3cf322167
SHA256: 8ad0e813999d0ef1c65b8d5e55c21e4a6c0d6895cd3df32a33f9cc57bf9d226a
pkg:maven/org.springframework/spring-webmvc@7.0.10
Description:
Core Spring concepts underpinning every Spring Data module.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-commons/4.1.2/spring-data-commons-4.1.2.jarMD5: 941395f823a50945ba3b5cd176ebe669SHA1: 383b920f98ac25a4425ab56ae5fef7e40bc03e84SHA256: b751e9fc2153dc73af94ba3d6b23ff1078231b61e3af14818243e5c37f6c8868
Referenced In Project/Scope: Tailormap API:compile
spring-data-commons-4.1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-commons High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name data Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.commons Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-commons Highest Vendor pom artifactid spring-data-commons Low Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data Core High Vendor pom parent-artifactid spring-data-parent Low Vendor pom parent-groupid org.springframework.data.build Medium Vendor pom url https://spring.io/projects/spring-data Highest Product file name spring-data-commons High Product jar package name core Highest Product jar package name data Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.commons Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data Core High Product pom artifactid spring-data-commons Highest Product pom groupid org.springframework.data Highest Product pom name Spring Data Core High Product pom parent-artifactid spring-data-parent Medium Product pom parent-groupid org.springframework.data.build Medium Product pom url https://spring.io/projects/spring-data Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
pkg:maven/org.springframework.data/spring-data-commons@4.1.2
(Confidence :High)
Description:
Spring Data extension to work with Hibernate Envers
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-envers/4.1.2/spring-data-envers-4.1.2.jarMD5: 0ce64103afdc8acb839a3fce5ea53a6eSHA1: 291e7a4e9250ead4cfd8a7a2c43cedf60e5e70d7SHA256: cefd00d0d4291888cb439de79ad6d6d28d2e742e57c2043bbad05cfa36c431a6
Referenced In Project/Scope: Tailormap API:compile
spring-data-envers-4.1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-envers High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name data Highest Vendor jar package name envers Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.envers Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-envers Highest Vendor pom artifactid spring-data-envers Low Vendor pom developer email jschauder@vmware.com Low Vendor pom developer email michael.igler@forward-tech.de Low Vendor pom developer email ogierke@pivotal.io Low Vendor pom developer email philip.huegelmeyer@ble.de Low Vendor pom developer name Jens Schauder Medium Vendor pom developer name Michael Igler Medium Vendor pom developer name Oliver Gierke Medium Vendor pom developer name Philip Huegelmeyer Medium Vendor pom developer org BLE Medium Vendor pom developer org Freelancer Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL www.ble.de Medium Vendor pom developer org URL www.spring.io Medium Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data Envers High Vendor pom parent-artifactid spring-data-jpa-parent Low Product file name spring-data-envers High Product jar package name data Highest Product jar package name envers Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.envers Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data Envers High Product pom artifactid spring-data-envers Highest Product pom developer email jschauder@vmware.com Low Product pom developer email michael.igler@forward-tech.de Low Product pom developer email ogierke@pivotal.io Low Product pom developer email philip.huegelmeyer@ble.de Low Product pom developer name Jens Schauder Low Product pom developer name Michael Igler Low Product pom developer name Oliver Gierke Low Product pom developer name Philip Huegelmeyer Low Product pom developer org BLE Low Product pom developer org Freelancer Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org VMware, Inc. Low Product pom developer org URL www.ble.de Low Product pom developer org URL www.spring.io Low Product pom groupid org.springframework.data Highest Product pom name Spring Data Envers High Product pom parent-artifactid spring-data-jpa-parent Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
pkg:maven/org.springframework.data/spring-data-envers@4.1.2
(Confidence :High)
cpe:2.3:a:pivotal_software:spring_data_jpa:4.1.2:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:vmware:spring_data_jpa:4.1.2:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
Spring Data module for JPA repositories.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-jpa/4.1.2/spring-data-jpa-4.1.2.jarMD5: 04cc0a03b45fc44fb794d4b4ea450989SHA1: c9489bf3367752fabb7eb20cb93c8e9f128c11a9SHA256: 5d5bf9f644da7fe300c160533783e4b292a3996c6fd7d2afc931b740a1394439
Referenced In Project/Scope: Tailormap API:compile
spring-data-jpa-4.1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-jpa High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name data Highest Vendor jar package name jpa Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.jpa Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-jpa Highest Vendor pom artifactid spring-data-jpa Low Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data JPA High Vendor pom parent-artifactid spring-data-jpa-parent Low Vendor pom url https://projects.spring.io/spring-data-jpa Highest Product file name spring-data-jpa High Product jar package name data Highest Product jar package name jpa Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.jpa Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data JPA High Product pom artifactid spring-data-jpa Highest Product pom groupid org.springframework.data Highest Product pom name Spring Data JPA High Product pom parent-artifactid spring-data-jpa-parent Medium Product pom url https://projects.spring.io/spring-data-jpa Medium Version file version 4.1.2 High Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest
Description:
Spring Data REST - Core
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-rest-core/5.1.2/spring-data-rest-core-5.1.2.jarMD5: 8d6851be506908018b2769c519057f29SHA1: 3c2df2b4b4f0632357ca82c30ac54a0672cfd6dfSHA256: f6ca3cf1f9d73e02e7b3049a186023071e9f03c79199a70acc95018424f56fda
Referenced In Project/Scope: Tailormap API:compile
spring-data-rest-core-5.1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name spring-data-rest-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name data Highest Vendor jar package name rest Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.data.rest.core Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-data-rest-core Highest Vendor pom artifactid spring-data-rest-core Low Vendor pom groupid org.springframework.data Highest Vendor pom name Spring Data REST - Core High Vendor pom parent-artifactid spring-data-rest-parent Low Product file name spring-data-rest-core High Product jar package name core Highest Product jar package name data Highest Product jar package name rest Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.data.rest.core Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title Spring Data REST - Core High Product pom artifactid spring-data-rest-core Highest Product pom groupid org.springframework.data Highest Product pom name Spring Data REST - Core High Product pom parent-artifactid spring-data-rest-parent Medium Version file version 5.1.2 High Version Manifest Implementation-Version 5.1.2 High Version pom version 5.1.2 Highest
Related Dependencies
spring-data-rest-webmvc-5.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-rest-webmvc/5.1.2/spring-data-rest-webmvc-5.1.2.jar
MD5: ac8664b554a05d26cdda14056f7e388a
SHA1: 551bcf84a8144f195c4e01e78613cf97c17122b7
SHA256: b2323164d5f7aafd45527872324d889c6607cefdc95fe16bb5b06e68cd76961f
pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.1.2
Description:
Library to support implementing representations for
hyper-text driven REST web services.
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/3.1.3/spring-hateoas-3.1.3.jar
MD5: 0e955d64446fdf49b5f5c0b8d57500be
SHA1: 070de4f6a6b5ba9a06d13cc30bad0dcfdef1f0a4
SHA256: 850bf3d6452dbc7669ff27e7f2a8f9cb2d5391561a88c920af5bfda7a1e3778b
Referenced In Project/Scope: Tailormap API:compile
spring-hateoas-3.1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name spring-hateoas High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name hateoas Highest Vendor jar package name springframework Highest Vendor jar package name support Highest Vendor Manifest automatic-module-name spring.hateoas Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid spring-hateoas Highest Vendor pom artifactid spring-hateoas Low Vendor pom developer email gturnquist(at)vmware.com Low Vendor pom developer email odrotbohm(at)vmware.com Low Vendor pom developer id gturnquist Medium Vendor pom developer id odrotbohm Medium Vendor pom developer name Greg Turnquist Medium Vendor pom developer name Oliver Drotbohm Medium Vendor pom developer org VMware, Inc. Medium Vendor pom groupid org.springframework.hateoas Highest Vendor pom name Spring HATEOAS High Vendor pom organization name Pivotal, Inc. High Vendor pom organization url https://www.spring.io Medium Vendor pom url spring-projects/spring-hateoas Highest Product file name spring-hateoas High Product jar package name hateoas Highest Product jar package name springframework Highest Product jar package name support Highest Product Manifest automatic-module-name spring.hateoas Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring HATEOAS High Product pom artifactid spring-hateoas Highest Product pom developer email gturnquist(at)vmware.com Low Product pom developer email odrotbohm(at)vmware.com Low Product pom developer id gturnquist Low Product pom developer id odrotbohm Low Product pom developer name Greg Turnquist Low Product pom developer name Oliver Drotbohm Low Product pom developer org VMware, Inc. Low Product pom groupid org.springframework.hateoas Highest Product pom name Spring HATEOAS High Product pom organization name Pivotal, Inc. Low Product pom organization url https://www.spring.io Low Product pom url spring-projects/spring-hateoas High Version file version 3.1.3 High Version Manifest Implementation-Version 3.1.3 High Version pom version 3.1.3 Highest
Description:
Core plugin infrastructure
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/4.1.0/spring-plugin-core-4.1.0.jar
MD5: 4f594ebd9908b2ede14b854ef189ca72
SHA1: 3eac8574979ecfbcaca747835d3b1bbd86368bbe
SHA256: 7e48dac2e47dded5e6fa2cdf37786c5ba3f09dcf44000770e4513a47e63da6fe
Referenced In Project/Scope: Tailormap API:compile
spring-plugin-core-4.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.1.3
Evidence
Type Source Name Value Confidence Vendor file name spring-plugin-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name plugin Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.plugin.core Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid spring-plugin-core Highest Vendor pom artifactid spring-plugin-core Low Vendor pom developer email odrotbohm@vmware.com Low Vendor pom developer id drotbohm Medium Vendor pom developer name Oliver Drotbohm Medium Vendor pom developer org VMware Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.plugin Highest Vendor pom name Spring Plugin - Core High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://www.vmware.com Medium Vendor pom url spring-projects/spring-plugin/spring-plugin-core Highest Product file name spring-plugin-core High Product jar package name core Highest Product jar package name plugin Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.plugin.core Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Plugin - Core High Product pom artifactid spring-plugin-core Highest Product pom developer email odrotbohm@vmware.com Low Product pom developer id drotbohm Low Product pom developer name Oliver Drotbohm Low Product pom developer org VMware Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.plugin Highest Product pom name Spring Plugin - Core High Product pom organization name VMware, Inc. Low Product pom organization url https://www.vmware.com Low Product pom url spring-projects/spring-plugin/spring-plugin-core High Version file version 4.1.0 High Version Manifest Implementation-Version 4.1.0 High Version pom version 4.1.0 Highest
pkg:maven/org.springframework.plugin/spring-plugin-core@4.1.0
(Confidence :High)
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/7.1.2/spring-security-core-7.1.2.jar
MD5: be8c7708d1771ff982279b90e537feaf
SHA1: e6a67effd955f61e28e381514e1ec72b1517043e
SHA256: 39df3dc77436d3e9308f89056c1a42605e08f0ad9ad208f7e34c4b16102886e1
Referenced In Project/Scope: Tailormap API:compile
spring-security-core-7.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.security/spring-security-test@7.1.2
Evidence
Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.security.core Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-security-core Highest Vendor pom artifactid spring-security-core Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-core High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.security.core Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title spring-security-core High Product pom artifactid spring-security-core Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-core High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 7.1.2 High Version Manifest Implementation-Version 7.1.2 High Version pom version 7.1.2 Highest
Related Dependencies
spring-security-config-7.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-config/7.1.2/spring-security-config-7.1.2.jar
MD5: 8840402fed20a1a9f3852f3ad17b496d
SHA1: de8b7492536be961db7449e66641a8bec61951c9
SHA256: 826af4e79495d54b761a5f0313774a07d36359e83dd5518d57d69bacd7bbf478
pkg:maven/org.springframework.security/spring-security-config@7.1.2
spring-security-crypto-7.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/7.1.2/spring-security-crypto-7.1.2.jar
MD5: 1e8d1e2c82d4cf4833f4b73fd442a8c6
SHA1: 1a803854736530804e7b56c578508a5eb5c34dd7
SHA256: 4aaa60bb612d5fece004c07f893b3a8d707c207bbd8585d10e0015b5301cd864
pkg:maven/org.springframework.security/spring-security-crypto@7.1.2
spring-security-web-7.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.1.2/spring-security-web-7.1.2.jar
MD5: 04bf5ceee4d4c36e5c25f381177ec3f3
SHA1: 6e660188c895e9844c4f1f812c8b322db7966a9f
SHA256: fc36d37695462dbe4fb32bd6820043afbf83ebcffce4974929bf79a29fcb5e73
pkg:maven/org.springframework.security/spring-security-web@7.1.2
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-core/7.1.2/spring-security-oauth2-core-7.1.2.jar
MD5: 756b2317d5dafe27315b06a971930908
SHA1: 57433e48769e4fc428cc435c1dd783185ffa06d5
SHA256: aa50c141cb303bae1b87d761f9459930d75af280c43e80b7488d50e62dd1e216
Referenced In Project/Scope: Tailormap API:compile
spring-security-oauth2-core-7.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name spring-security-oauth2-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name oauth2 Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.security.oauth2.core Medium Vendor Manifest build-jdk-spec 25 Low Vendor pom artifactid spring-security-oauth2-core Highest Vendor pom artifactid spring-security-oauth2-core Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-oauth2-core High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-oauth2-core High Product jar package name core Highest Product jar package name oauth2 Highest Product jar package name security Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.security.oauth2.core Medium Product Manifest build-jdk-spec 25 Low Product Manifest Implementation-Title spring-security-oauth2-core High Product pom artifactid spring-security-oauth2-core Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-oauth2-core High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 7.1.2 High Version Manifest Implementation-Version 7.1.2 High Version pom version 7.1.2 Highest
Related Dependencies
spring-security-oauth2-client-7.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-client/7.1.2/spring-security-oauth2-client-7.1.2.jar
MD5: 2de683232844b3c33920d9ad1dd98add
SHA1: 46c29f76001485f370ed81795088cd12700d5d1f
SHA256: a9177d2d68ceec14181643944787b2707f19a6ff09eae8f720dcfc7e15fc6282
pkg:maven/org.springframework.security/spring-security-oauth2-client@7.1.2
spring-security-oauth2-jose-7.1.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-jose/7.1.2/spring-security-oauth2-jose-7.1.2.jar
MD5: 79b82bd8490c9fee0cd888713bd57819
SHA1: 032c1f272ee23adb67f71bc679ede76130ed0fd5
SHA256: e956dcaf0342699b967b5ca301d628d0808e97c7e6614b822fe832f6eba762dc
pkg:maven/org.springframework.security/spring-security-oauth2-jose@7.1.2
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.1.2/spring-security-web-7.1.2.jar/org/springframework/security/spring-security-webauthn.jsMD5: d8d90d854a23d021c2e758b3eebce213SHA1: 7814ccd3adc2388f52b2658bf5fc30b457949ab6SHA256: 044a2b8d7e995bff815565678631a2d3a5cc0aa96ef8ac35cfacb579307f77a9
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
Description:
Spring Session
License:
Broadcom Foundation License
File Path: /home/runner/.m2/repository/org/springframework/session/spring-session-core/4.1.1/spring-session-core-4.1.1.jar
MD5: cc145d050009bd4e38fab2397d08935d
SHA1: 93ce6dadf296deaead4e91091ccbd41a657be7ca
SHA256: 01b836bfcc5b64f7039c3430980878112a10db5066eda4274a1d3eb874e49733
Referenced In Project/Scope: Tailormap API:compile
spring-session-core-4.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.session/spring-session-jdbc@4.1.1
Evidence
Type Source Name Value Confidence Vendor file name spring-session-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name session Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.session.core Medium Vendor pom artifactid spring-session-core Highest Vendor pom artifactid spring-session-core Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.session Highest Vendor pom name spring-session-core High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-session Highest Product file name spring-session-core High Product jar package name session Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.session.core Medium Product Manifest Implementation-Title spring-session-core High Product pom artifactid spring-session-core Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.session Highest Product pom name spring-session-core High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-session Medium Version file version 4.1.1 High Version Manifest Implementation-Version 4.1.1 High Version pom version 4.1.1 Highest
Related Dependencies
spring-session-jdbc-4.1.1.jar
File Path: /home/runner/.m2/repository/org/springframework/session/spring-session-jdbc/4.1.1/spring-session-jdbc-4.1.1.jar
MD5: 0a321766519e9edc6948d15bf5cf8311
SHA1: 012ba9200d149037afe924f0433fe91f77959f96
SHA256: 669e4388684949edb0c5aef0a7f4e15af86d6c87ffb90df3145f073746870529
pkg:maven/org.springframework.session/spring-session-jdbc@4.1.1
Description:
SQLite JDBC library
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/xerial/sqlite-jdbc/3.53.2.0/sqlite-jdbc-3.53.2.0.jar
MD5: 91dfaa15397ec9170ab7614530fe54f1
SHA1: 22d97e2ee9f10e2701aa7d7b4b13a42805dcd641
SHA256: dc320e4102884c135ccc30c3c6fc3fb190b750e1586a100e3aba3be783cf33a9
Referenced In Project/Scope: Tailormap API:compile
sqlite-jdbc-3.53.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-geopkg@35.2
Evidence
Type Source Name Value Confidence Vendor file name sqlite-jdbc High Vendor jar package name jdbc Highest Vendor jar package name org Highest Vendor jar package name sqlite Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname org.xerial.sqlite-jdbc;singleton:=true Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid sqlite-jdbc Highest Vendor pom artifactid sqlite-jdbc Low Vendor pom developer email leo@xerial.org Low Vendor pom developer id leo Medium Vendor pom developer name Taro L. Saito Medium Vendor pom developer org Xerial Project Medium Vendor pom groupid org.xerial Highest Vendor pom name SQLite JDBC High Vendor pom url xerial/sqlite-jdbc Highest Product file name sqlite-jdbc High Product jar package name 9 Highest Product jar package name jdbc Highest Product jar package name org Highest Product jar package name sqlite Highest Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name SQLite JDBC Medium Product Manifest bundle-symbolicname org.xerial.sqlite-jdbc;singleton:=true Medium Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid sqlite-jdbc Highest Product pom developer email leo@xerial.org Low Product pom developer id leo Low Product pom developer name Taro L. Saito Low Product pom developer org Xerial Project Low Product pom groupid org.xerial Highest Product pom name SQLite JDBC High Product pom url xerial/sqlite-jdbc High Version file version 3.53.2.0 High Version Manifest Bundle-Version 3.53.2.0 High Version pom version 3.53.2.0 Highest
CVE-2026-119373 suppress
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.
CWE-787 Out-of-bounds Write
CVSSv4:
Base Score: HIGH (8.5)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119374 suppress
SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.
CWE-787 Out-of-bounds Write
CVSSv4:
Base Score: HIGH (8.5)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119379 suppress
SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.
CWE-787 Out-of-bounds Write
CVSSv4:
Base Score: HIGH (8.5)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119586 suppress
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
CVSSv4:
Base Score: HIGH (8.5)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119371 suppress
SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an untrusted database file, causing unbounded selectExpander() recursion that crashes the process.
CWE-674 Uncontrolled Recursion
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119372 suppress
SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process.
CWE-416 Use After Free
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119375 suppress
SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers.
CWE-908 Use of Uninitialized Resource
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119376 suppress
SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion in sqlite3WalkExprNN() and crash the process.
CWE-674 Uncontrolled Recursion
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119378 suppress
SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits.
CWE-416 Use After Free
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119591 suppress
SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.
CWE-674 Uncontrolled Recursion
CVSSv4:
Base Score: MEDIUM (6.8)
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2026-119377 suppress
SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions.
CWE-863 Incorrect Authorization
CVSSv4:
Base Score: LOW (2.0)
Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSSv3:
Base Score: LOW (3.3)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A References:
Vulnerable Software & Versions:
File Path: /home/runner/.m2/repository/org/xerial/sqlite-jdbc/3.53.2.0/sqlite-jdbc-3.53.2.0.jar/org/sqlite/native/Windows/aarch64/sqlitejdbc.dllMD5: 42a80c8c56493dae68f7ccdecd4eb90bSHA1: dbf170c73e6a3e52eab0a4331669d63b300c415fSHA256: a787685333653fee2b50000333dacbf90b6a35402ed13b8d904f52e0f9658b58
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence Vendor file name sqlitejdbc High Product file name sqlitejdbc High
File Path: /home/runner/.m2/repository/org/xerial/sqlite-jdbc/3.53.2.0/sqlite-jdbc-3.53.2.0.jar/org/sqlite/native/Windows/armv7/sqlitejdbc.dllMD5: bf9fd5c7a321d1fa5c8a3a3f51e1e8ccSHA1: a99aeebb282eab18f0b541133e0ab16011b8945aSHA256: 05ec98383fb2cebf1d32c1bc609d56960c448122585bc0d8feae607cc31eef03
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence Vendor file name sqlitejdbc High Product file name sqlitejdbc High
File Path: /home/runner/.m2/repository/org/xerial/sqlite-jdbc/3.53.2.0/sqlite-jdbc-3.53.2.0.jar/org/sqlite/native/Windows/x86/sqlitejdbc.dllMD5: 713580e699966404099ca6c9b7f420bfSHA1: d0e1fd0409c38b2bc12310d8e4fb0201df0d91b9SHA256: 8bc91b5fdd561fa0a115cf236508a114cba9962ce2baacb226a978f7025ca3f8
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence Vendor file name sqlitejdbc High Product file name sqlitejdbc High
File Path: /home/runner/.m2/repository/org/xerial/sqlite-jdbc/3.53.2.0/sqlite-jdbc-3.53.2.0.jar/org/sqlite/native/Windows/x86_64/sqlitejdbc.dllMD5: e7c071298e8dee127cb4613a0a8153b1SHA1: cf369422e3f33057458c6f4e0b55946d758c7f9aSHA256: 7d3281c7adbf3d2fe6b07462dee9cb310194c302154175f172ced3aac05c91c3
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence Vendor file name sqlitejdbc High Product file name sqlitejdbc High
Description:
A simple eventbus library to track connected sse clients and broadcast messages
License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/ch/rasc/sse-eventbus/3.3.1/sse-eventbus-3.3.1.jar
MD5: c16160bf318e0fb097baf67514faa080
SHA1: ca4fb761367b8b476d4b383be8141b93a435f307
SHA256: 6ffeeb0789208eb3237e98e58e51584a0151d8c93ac9fab87997593cd47ff9de
Referenced In Project/Scope: Tailormap API:compile
sse-eventbus-3.3.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name sse-eventbus High Vendor jar package name ch Highest Vendor jar package name eventbus Highest Vendor jar package name rasc Highest Vendor jar package name sse Highest Vendor Manifest automatic-module-name ch.rasc.sse.eventbus Medium Vendor Manifest build-jdk-spec 17 Low Vendor pom artifactid sse-eventbus Highest Vendor pom artifactid sse-eventbus Low Vendor pom developer email ralphschaer@gmail.com Low Vendor pom developer name Ralph Schaer Medium Vendor pom groupid ch.rasc Highest Vendor pom name Sse Eventbus Library High Vendor pom url ralscha/sse-eventbus/ Highest Product file name sse-eventbus High Product jar package name ch Highest Product jar package name eventbus Highest Product jar package name rasc Highest Product jar package name sse Highest Product Manifest automatic-module-name ch.rasc.sse.eventbus Medium Product Manifest build-jdk-spec 17 Low Product pom artifactid sse-eventbus Highest Product pom developer email ralphschaer@gmail.com Low Product pom developer name Ralph Schaer Low Product pom groupid ch.rasc Highest Product pom name Sse Eventbus Library High Product pom url ralscha/sse-eventbus/ High Version file version 3.3.1 High Version pom version 3.3.1 Highest
pkg:maven/ch.rasc/sse-eventbus@3.3.1
(Confidence :High)
Description:
swagger-annotations
License:
Apache License 2.0;link="http://www.apache.org/licenses/LICENSE-2.0.html"
File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations/3.0.0/swagger-annotations-3.0.0.jar
MD5: 2da1ea2a5584439b874d647fed135d89
SHA1: 737eb69a30831c0a41b552c8a6116db484cdb405
SHA256: 74abdeba223f8038a0708c85b99596334bfb244393a7157c504bf404dfc0350b
Referenced In Project/Scope: Tailormap API:compile
swagger-annotations-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.9.5-SNAPSHOT
Evidence
Type Source Name Value Confidence Vendor file name swagger-annotations High Vendor jar package name io Highest Vendor jar package name oas Highest Vendor jar package name swagger Highest Vendor jar package name v3 Highest Vendor Manifest automatic-module-name io.swagger.v3.oas.annotations Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low Vendor Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Vendor Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations Medium Vendor Manifest mode development Low Vendor Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Vendor pom artifactid swagger-annotations Highest Vendor pom artifactid swagger-annotations Low Vendor pom groupid io.swagger.core.v3 Highest Vendor pom name swagger-annotations High Vendor pom parent-artifactid swagger-project Low Product file name swagger-annotations High Product jar package name io Highest Product jar package name oas Highest Product jar package name swagger Highest Product jar package name v3 Highest Product Manifest automatic-module-name io.swagger.v3.oas.annotations Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low Product Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Product Manifest Bundle-Name swagger-annotations Medium Product Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations Medium Product Manifest mode development Low Product Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Product pom artifactid swagger-annotations Highest Product pom groupid io.swagger.core.v3 Highest Product pom name swagger-annotations High Product pom parent-artifactid swagger-project Medium Version file version 3.0.0 High Version Manifest Bundle-Version 3.0.0 High Version Manifest implementation-version 3.0.0 High Version pom version 3.0.0 Highest
pkg:maven/io.swagger.core.v3/swagger-annotations@3.0.0
(Confidence :High)
cpe:2.3:a:http-swagger_project:http-swagger:3.0.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
swagger-annotations-jakarta
License:
"Apache License 2.0";link="http://www.apache.org/licenses/LICENSE-2.0.html"
File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations-jakarta/2.2.22/swagger-annotations-jakarta-2.2.22.jar
MD5: 0df4a41a0f292514d219439f9a20f3a3
SHA1: 1efc0b0af32fce629f0786062c89e8b117abe120
SHA256: f2caefc17f7989a59aea59785f746201ea88635cb5c440c582d9a8ebdbf2a96f
Referenced In Project/Scope: Tailormap API:compile
swagger-annotations-jakarta-2.2.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence Vendor file name swagger-annotations-jakarta High Vendor jar package name io Highest Vendor jar package name oas Highest Vendor jar package name swagger Highest Vendor jar package name v3 Highest Vendor Manifest automatic-module-name io.swagger.v3.oas.annotations Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low Vendor Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Vendor Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations.jakarta Medium Vendor Manifest mode development Low Vendor Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Vendor pom artifactid swagger-annotations-jakarta Highest Vendor pom artifactid swagger-annotations-jakarta Low Vendor pom groupid io.swagger.core.v3 Highest Vendor pom name swagger-annotations-jakarta High Vendor pom parent-artifactid swagger-project-jakarta Low Product file name swagger-annotations-jakarta High Product jar package name io Highest Product jar package name oas Highest Product jar package name swagger Highest Product jar package name v3 Highest Product Manifest automatic-module-name io.swagger.v3.oas.annotations Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low Product Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Product Manifest Bundle-Name swagger-annotations Jakarta Medium Product Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations.jakarta Medium Product Manifest mode development Low Product Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low Product pom artifactid swagger-annotations-jakarta Highest Product pom groupid io.swagger.core.v3 Highest Product pom name swagger-annotations-jakarta High Product pom parent-artifactid swagger-project-jakarta Medium Version file version 2.2.22 High Version Manifest Bundle-Version 2.2.22 High Version Manifest implementation-version 2.2.22 High Version pom version 2.2.22 Highest
pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.22
(Confidence :High)
cpe:2.3:a:http-swagger_project:http-swagger:2.2.22:*:*:*:*:*:*:*
(Confidence :Low)
suppress
Description:
Parent POM for Unit Systems
License:
BSD;link=LICENSE
File Path: /home/runner/.m2/repository/systems/uom/systems-common/2.1/systems-common-2.1.jar
MD5: 8c3a56e267bbd26bb947c826e51bee2b
SHA1: a173cc6f1fedc8b32498d6cc9599251baa72de27
SHA256: b3cc1f3e604dcd18d3bba266db5fd01744bbd6b02f147377d4016585ba375cff
Referenced In Project/Scope: Tailormap API:compile
systems-common-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name systems-common High Vendor jar package name common Highest Vendor jar package name systems Highest Vendor jar package name uom Highest Vendor Manifest automatic-module-name systems.uom.common Medium Vendor Manifest build-jdk-spec 14 Low Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Vendor Manifest bundle-docurl http://www.uom.systems/systems-common Low Vendor Manifest bundle-symbolicname systems-common Medium Vendor Manifest implementation-url http://uom.technology Low Vendor Manifest Implementation-Vendor Units of Measurement contributors High Vendor Manifest specification-vendor Units of Measurement project Low Vendor pom artifactid systems-common Highest Vendor pom artifactid systems-common Low Vendor pom groupid systems.uom Highest Vendor pom name Units of Measurement Common Unit Systems High Vendor pom parent-artifactid systems-parent Low Product file name systems-common High Product jar package name common Highest Product jar package name systems Highest Product jar package name uom Highest Product Manifest automatic-module-name systems.uom.common Medium Product Manifest build-jdk-spec 14 Low Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Product Manifest bundle-docurl http://www.uom.systems/systems-common Low Product Manifest Bundle-Name Units of Measurement Common Unit Systems Medium Product Manifest bundle-symbolicname systems-common Medium Product Manifest Implementation-Title Units of Measurement Common Unit Systems High Product Manifest implementation-url http://uom.technology Low Product Manifest specification-title Units of Measurement Systems Medium Product pom artifactid systems-common Highest Product pom groupid systems.uom Highest Product pom name Units of Measurement Common Unit Systems High Product pom parent-artifactid systems-parent Medium Version file version 2.1 High Version Manifest Implementation-Version 2.1 High Version pom version 2.1 Highest
pkg:maven/systems.uom/systems-common@2.1
(Confidence :High)
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/11.0.25/tomcat-embed-core-11.0.25.jar
MD5: c8cf49bb321cc30b3af3c9a40ae65c9e
SHA1: d4f3c448998c6cf8267fb5077b7eeeb0980cd37d
SHA256: 282b65b9fe43647b1459c0df11101f8599a58de5832075acff485c3705ba4894
Referenced In Project/Scope: Tailormap API:compile
tomcat-embed-core-11.0.25.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-webmvc@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name tomcat-embed-core High Vendor jar package name apache Highest Vendor jar package name core Highest Vendor jar package name tomcat Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: jakarta/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid tomcat-embed-core Highest Vendor pom artifactid tomcat-embed-core Low Vendor pom groupid org.apache.tomcat.embed Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-embed-core High Product jar package name annotation Highest Product jar package name apache Highest Product jar package name auth Highest Product jar package name core Highest Product jar package name descriptor Highest Product jar package name http Highest Product jar package name jakarta Highest Product jar package name message Highest Product jar package name security Highest Product jar package name servlet Highest Product jar package name tomcat Highest Product Manifest Bundle-Name tomcat-embed-core Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: jakarta/security/auth/message/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/callback/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/callback/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/config/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/config/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/module/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/module/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium Product pom artifactid tomcat-embed-core Highest Product pom groupid org.apache.tomcat.embed Highest Product pom url https://tomcat.apache.org/ Medium Version file version 11.0.25 High Version Manifest Bundle-Version 11.0.25 High Version Manifest Implementation-Version 11.0.25 High Version pom version 11.0.25 Highest
Related Dependencies
tomcat-embed-websocket-11.0.25.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/11.0.25/tomcat-embed-websocket-11.0.25.jar
MD5: 1456dc1f3a10127075d7fdfffa40d4aa
SHA1: 855e2e8777a08c1c8c95aedb937f5742f022e0f9
SHA256: 7d05c8cac38f39e2e0ac6e6d7d0920823372b3f9dc4fac53aaea96727107601a
pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.25
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/11.0.25/tomcat-embed-el-11.0.25.jar
MD5: 5bf54a11dee87604bdc08b96158a0049
SHA1: ee9244d0c6a0ff7d066c5fe3b0642f201891cbc1
SHA256: 5f84c660ff9a8f85b1c28e1ebe75bb2df486f2457d00257c823888a2e964a793
Referenced In Project/Scope: Tailormap API:compile
tomcat-embed-el-11.0.25.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.1.2
Evidence
Type Source Name Value Confidence Vendor file name tomcat-embed-el High Vendor jar package name apache Highest Vendor jar package name el Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid tomcat-embed-el Highest Vendor pom artifactid tomcat-embed-el Low Vendor pom groupid org.apache.tomcat.embed Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-embed-el High Product jar package name apache Highest Product jar package name el Highest Product jar package name expression Highest Product jar package name expressionfactory Highest Product jar package name expressionfactoryimpl Highest Product jar package name jakarta Highest Product Manifest Bundle-Name tomcat-embed-jasper-el Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: jakarta/el/ Implementation-Title jakarta.annotation Medium Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium Product pom artifactid tomcat-embed-el Highest Product pom groupid org.apache.tomcat.embed Highest Product pom url https://tomcat.apache.org/ Medium Version file version 11.0.25 High Version Manifest Bundle-Version 11.0.25 High Version Manifest Implementation-Version 11.0.25 High Version pom version 11.0.25 Highest
pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@11.0.25
(Confidence :High)
Description:
TXW is a library that allows you to write XML documents.
File Path: /home/runner/.m2/repository/org/glassfish/jaxb/txw2/4.0.9/txw2-4.0.9.jarMD5: 09ca7799e2d1a5b484e1290db7bb9344SHA1: 70325ebdebca3e7aae1dfa395fd41fc25d8a6f4eSHA256: d6343e5945d87266ca4e8974a0a2a876e1bd147a00fb65ed3f2e1a3a00f3a82a
Referenced In Project/Scope: Tailormap API:runtime
txw2-4.0.9.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name txw2 High Vendor jar package name txw Highest Vendor jar package name txw2 Highest Vendor jar package name xml Highest Vendor Manifest git-revision e155f35 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.eclipse Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid txw2 Highest Vendor pom artifactid txw2 Low Vendor pom groupid org.glassfish.jaxb Highest Vendor pom name TXW2 Runtime High Vendor pom parent-artifactid jaxb-txw-parent Low Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest Product file name txw2 High Product jar package name txw Highest Product jar package name txw2 Highest Product jar package name xml Highest Product Manifest git-revision e155f35 Low Product Manifest Implementation-Title Eclipse Implementation of JAXB High Product Manifest specification-title Jakarta XML Binding Medium Product pom artifactid txw2 Highest Product pom groupid org.glassfish.jaxb Highest Product pom name TXW2 Runtime High Product pom parent-artifactid jaxb-txw-parent Medium Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium Version file version 4.0.9 High Version Manifest build-version 4.0.9 Medium Version pom version 4.0.9 Highest
pkg:maven/org.glassfish.jaxb/txw2@4.0.9
(Confidence :High)
Description:
Units of Measurement Standard - This JSR specifies Java
packages for modeling and working with measurement values, quantities
and their corresponding units.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/javax/measure/unit-api/2.2/unit-api-2.2.jar
MD5: 6cbc2bae2cb63cb4f85c5a187ee7dda2
SHA1: 2b624f7334b94a82c74cb954ede9fb1179b8d30c
SHA256: 667487e1ee57298cdc767885f00b86c899b2fe7e72dc00b6560a6aa64f2bc9c4
Referenced In Project/Scope: Tailormap API:compile
unit-api-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name unit-api High Vendor jar package name javax Highest Vendor jar package name measure Highest Vendor jar package name unit Highest Vendor Manifest automatic-module-name java.measure Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low Vendor Manifest bundle-symbolicname javax.measure.unit-api Medium Vendor Manifest Implementation-Vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana High Vendor Manifest multi-release true Low Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low Vendor pom artifactid unit-api Highest Vendor pom artifactid unit-api Low Vendor pom developer email daniel.dias.analistati@gmail.com Low Vendor pom developer email jean-marie@dautelle.com Low Vendor pom developer email martin.desruisseaux@geomatys.com Low Vendor pom developer email otaviopolianasantana@gmail.com Low Vendor pom developer email thodoris.bais@gmail.com Low Vendor pom developer email werner.keil@gmx.net Low Vendor pom developer id Daniel-Dos Medium Vendor pom developer id dautelle Medium Vendor pom developer id desruisseaux Medium Vendor pom developer id jhg023 Medium Vendor pom developer id keilw Medium Vendor pom developer id magesh678 Medium Vendor pom developer id mohalmo Medium Vendor pom developer id otaviojava Medium Vendor pom developer id thodorisbais Medium Vendor pom developer name Daniel Dias Medium Vendor pom developer name Jacob Glickman Medium Vendor pom developer name Jean-Marie Dautelle Medium Vendor pom developer name Magesh Kasthuri Medium Vendor pom developer name Martin Desruisseaux Medium Vendor pom developer name Mohammed Al-Moayed Medium Vendor pom developer name Otávio Gonçalves de Santana Medium Vendor pom developer name Thodoris Bais Medium Vendor pom developer name Werner Keil Medium Vendor pom developer org Airbus Medium Vendor pom developer org Creative Arts & Technologies Medium Vendor pom developer org Geomatys Medium Vendor pom developer org Individual Medium Vendor pom developer org Individual / SouJava Medium Vendor pom developer org Individual / Utrecht JUG Medium Vendor pom developer org URL http://www.airbus.com Medium Vendor pom developer org URL http://www.catmedia.us Medium Vendor pom developer org URL http://www.geomatys.com Medium Vendor pom groupid javax.measure Highest Vendor pom name Units of Measurement API High Vendor pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana High Vendor pom organization url http://unitsofmeasurement.github.io Medium Vendor pom parent-artifactid uom-parent Low Vendor pom parent-groupid tech.uom Medium Vendor pom url https://unitsofmeasurement.github.io/unit-api/ Highest Product file name unit-api High Product jar package name javax Highest Product jar package name measure Highest Product jar package name unit Highest Product Manifest automatic-module-name java.measure Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low Product Manifest Bundle-Name Units of Measurement API Medium Product Manifest bundle-symbolicname javax.measure.unit-api Medium Product Manifest Implementation-Title Units of Measurement API High Product Manifest multi-release true Low Product Manifest specification-title Units of Measurement API Medium Product pom artifactid unit-api Highest Product pom developer email daniel.dias.analistati@gmail.com Low Product pom developer email jean-marie@dautelle.com Low Product pom developer email martin.desruisseaux@geomatys.com Low Product pom developer email otaviopolianasantana@gmail.com Low Product pom developer email thodoris.bais@gmail.com Low Product pom developer email werner.keil@gmx.net Low Product pom developer id Daniel-Dos Low Product pom developer id dautelle Low Product pom developer id desruisseaux Low Product pom developer id jhg023 Low Product pom developer id keilw Low Product pom developer id magesh678 Low Product pom developer id mohalmo Low Product pom developer id otaviojava Low Product pom developer id thodorisbais Low Product pom developer name Daniel Dias Low Product pom developer name Jacob Glickman Low Product pom developer name Jean-Marie Dautelle Low Product pom developer name Magesh Kasthuri Low Product pom developer name Martin Desruisseaux Low Product pom developer name Mohammed Al-Moayed Low Product pom developer name Otávio Gonçalves de Santana Low Product pom developer name Thodoris Bais Low Product pom developer name Werner Keil Low Product pom developer org Airbus Low Product pom developer org Creative Arts & Technologies Low Product pom developer org Geomatys Low Product pom developer org Individual Low Product pom developer org Individual / SouJava Low Product pom developer org Individual / Utrecht JUG Low Product pom developer org URL http://www.airbus.com Low Product pom developer org URL http://www.catmedia.us Low Product pom developer org URL http://www.geomatys.com Low Product pom groupid javax.measure Highest Product pom name Units of Measurement API High Product pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana Low Product pom organization url http://unitsofmeasurement.github.io Low Product pom parent-artifactid uom-parent Medium Product pom parent-groupid tech.uom Medium Product pom url https://unitsofmeasurement.github.io/unit-api/ Medium Version file version 2.2 High Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest
pkg:maven/javax.measure/unit-api@2.2
(Confidence :High)
Description:
Units Common Library
License:
BSD: LICENSE
File Path: /home/runner/.m2/repository/tech/uom/lib/uom-lib-common/2.2/uom-lib-common-2.2.jar
MD5: eb6a1296ea160f731ac81ab8a2c7fed7
SHA1: 94a52abfdad3935c3769b4caab3ce9d384d8fb4e
SHA256: a01ece1c236b7b15a431b0383bdddf06dc6d7a85290e9a62b63904e1e4e0dc0d
Referenced In Project/Scope: Tailormap API:compile
uom-lib-common-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@35.2
Evidence
Type Source Name Value Confidence Vendor file name uom-lib-common High Vendor jar package name common Highest Vendor jar package name lib Highest Vendor jar package name tech Highest Vendor jar package name uom Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low Vendor Manifest bundle-symbolicname uom-lib-common Medium Vendor Manifest implementation-url https://unitsofmeasurement.github.io Low Vendor Manifest Implementation-Vendor Units of Measurement contributors High Vendor Manifest specification-vendor Units of Measurement project Low Vendor pom artifactid uom-lib-common Highest Vendor pom artifactid uom-lib-common Low Vendor pom groupid tech.uom.lib Highest Vendor pom name Units of Measurement Common Library for Java High Vendor pom organization name Units of Measurement project High Vendor pom organization url https://unitsofmeasurement.github.io Medium Vendor pom parent-artifactid uom-lib Low Vendor pom url https://unitsofmeasurement.github.io/uom-lib Highest Product file name uom-lib-common High Product jar package name common Highest Product jar package name lib Highest Product jar package name tech Highest Product jar package name uom Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low Product Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low Product Manifest Bundle-Name Units of Measurement Common Library for Java Medium Product Manifest bundle-symbolicname uom-lib-common Medium Product Manifest Implementation-Title Units of Measurement Common Library for Java High Product Manifest implementation-url https://unitsofmeasurement.github.io Low Product Manifest specification-title Units of Measurement Medium Product pom artifactid uom-lib-common Highest Product pom groupid tech.uom.lib Highest Product pom name Units of Measurement Common Library for Java High Product pom organization name Units of Measurement project Low Product pom organization url https://unitsofmeasurement.github.io Low Product pom parent-artifactid uom-lib Medium Product pom url https://unitsofmeasurement.github.io/uom-lib Medium Version file version 2.2 High Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest
pkg:maven/tech.uom.lib/uom-lib-common@2.2
(Confidence :High)
Description:
Compile time annotations and compile time annotation processor to generate consistent value object using
either abstract class, interface or annotation as a base.
File Path: /home/runner/.m2/repository/org/immutables/value/2.12.3/value-2.12.3.jarMD5: 06a3e7abbda9de688f725bd58cdb480bSHA1: e8a048aadd4c2d69d6a0be2c788ab2a379ad57c2SHA256: d4b7e3ddfe415d61cd75a145771319ccfcbbdbff6f462b2d38d6f1b3b27b9706
Referenced In Project/Scope: Tailormap API:compile
value-2.12.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name value High Vendor jar package name immutables Highest Vendor jar package name processor Highest Vendor jar package name value Highest Vendor Manifest automatic-module-name org.immutables.value Medium Vendor Manifest build-jdk-spec 21 Low Vendor pom artifactid value Highest Vendor pom artifactid value Low Vendor pom groupid org.immutables Highest Vendor pom name ${project.groupId}.${project.artifactId} High Vendor pom parent-artifactid immutables Low Vendor pom url immutables/immutables/tree/value Highest Product file name value High Product jar package name immutables Highest Product jar package name processor Highest Product jar package name value Highest Product Manifest automatic-module-name org.immutables.value Medium Product Manifest build-jdk-spec 21 Low Product pom artifactid value Highest Product pom groupid org.immutables Highest Product pom name ${project.groupId}.${project.artifactId} High Product pom parent-artifactid immutables Medium Product pom url immutables/immutables/tree/value High Version file version 2.12.3 High Version pom version 2.12.3 Highest
pkg:maven/org.immutables/value@2.12.3
(Confidence :High)
File Path: /home/runner/.m2/repository/org/apache/xml/xml-commons-resolver/1.2/xml-commons-resolver-1.2.jarMD5: 706c533146c1f4ee46b66659ea14583aSHA1: 3d0f97750b3a03e0971831566067754ba4bfd68cSHA256: 47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1
Referenced In Project/Scope: Tailormap API:compile
xml-commons-resolver-1.2.jar is in the transitive dependency tree of the listed items. Included by:
Evidence
Type Source Name Value Confidence Vendor file name xml-commons-resolver High Vendor jar package name apache Highest Vendor jar package name resolver Highest Vendor jar package name xml Highest Vendor manifest: org/apache/xml/resolver Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid xml-commons-resolver Highest Vendor pom artifactid xml-commons-resolver Low Vendor pom groupid org.apache.xml Highest Product file name xml-commons-resolver High Product jar package name apache Highest Product jar package name catalog Highest Product jar package name resolver Highest Product jar package name xml Highest Product manifest: org/apache/xml/resolver Implementation-Title org.apache.xml.resolver.Catalog Medium Product pom artifactid xml-commons-resolver Highest Product pom groupid org.apache.xml Highest Version file version 1.2 High Version manifest: org/apache/xml/resolver Implementation-Version 1.2 Medium Version pom version 1.2 Highest
pkg:maven/org.apache.xml/xml-commons-resolver@1.2
(Confidence :High)
Description:
XmlBeans main jar
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/xmlbeans/xmlbeans/5.3.0/xmlbeans-5.3.0.jar
MD5: 8d5b1d80cafc2d3feae8526ce1f45cb0
SHA1: f93c3ba820d7240b7fec4ec5bc35e7223cc6fc1f
SHA256: 6cc69da3b4d35b83c5e477cd4daba204e44109833e34af2b9a8a2c8788289917
Referenced In Project/Scope: Tailormap API:compile
xmlbeans-5.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-excel-writer@35.2
Evidence
Type Source Name Value Confidence Vendor file name xmlbeans High Vendor jar package name apache Highest Vendor jar package name org Highest Vendor jar package name xmlbeans Highest Vendor Manifest multi-release true Low Vendor manifest: org/apache/xmlbeans/ Implementation-Vendor org.apache.xmlbeans Medium Vendor pom artifactid xmlbeans Highest Vendor pom artifactid xmlbeans Low Vendor pom developer email user@poi.apache.org Low Vendor pom developer id poi Medium Vendor pom developer name POI Team Medium Vendor pom developer org Apache POI Medium Vendor pom groupid org.apache.xmlbeans Highest Vendor pom name XmlBeans High Vendor pom organization name XmlBeans High Vendor pom organization url https://xmlbeans.apache.org/ Medium Vendor pom url https://xmlbeans.apache.org/ Highest Product file name xmlbeans High Product jar package name apache Highest Product jar package name org Highest Product jar package name xmlbeans Highest Product Manifest multi-release true Low Product manifest: org/apache/xmlbeans/ Implementation-Title Apache XmlBeans Medium Product manifest: org/apache/xmlbeans/ Specification-Title Apache XmlBeans Medium Product pom artifactid xmlbeans Highest Product pom developer email user@poi.apache.org Low Product pom developer id poi Low Product pom developer name POI Team Low Product pom developer org Apache POI Low Product pom groupid org.apache.xmlbeans Highest Product pom name XmlBeans High Product pom organization name XmlBeans Low Product pom organization url https://xmlbeans.apache.org/ Low Product pom url https://xmlbeans.apache.org/ Medium Version file version 5.3.0 High Version manifest: org/apache/xmlbeans/ Implementation-Version 5.3.0 Medium Version pom version 5.3.0 Highest