Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 12.2.1
Report Generated On : Sun, 26 Apr 2026 23:43:20 GMT
Dependencies Scanned : 257 (152 unique)
Vulnerable Dependencies : 2
Vulnerabilities Found : 8
Vulnerabilities Suppressed : 0
...
NVD API Last Checked : 2026-04-26T23:43:02Z
NVD API Last Modified : 2026-04-26T23:16:21Z
Summary
Summary of Vulnerable Dependencies (click to show all)
GeographicLib-Java-1.49.jar
Description:
This is a Java implementation of the geodesic algorithms from
GeographicLib. This is a self-contained library which makes it
easy to do geodesic computations for an ellipsoid of revolution in
a Java program. It requires Java version 1.1 or later.
License:
The MIT License(MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/net/sf/geographiclib/GeographicLib-Java/1.49/GeographicLib-Java-1.49.jar
MD5: 5536ff35e4bb0b3262c6f62f43105ea4
SHA1: 7ff2164e69fa04e1ef2ca5079e1cee298a936ea1
SHA256: 78c292f7e6910d51a15fc9088c301fac3b4c0a43ac5ae17499f5763b4dd9aca8
Referenced In Project/Scope: Tailormap API:compile
GeographicLib-Java-1.49.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-referencing@34.3
Evidence
Type Source Name Value Confidence
Vendor file name GeographicLib-Java High
Vendor jar package name geodesic Highest
Vendor jar package name geographiclib Highest
Vendor jar package name geographiclib Low
Vendor jar package name net Highest
Vendor jar package name net Low
Vendor jar package name sf Highest
Vendor jar package name sf Low
Vendor pom artifactid GeographicLib-Java Highest
Vendor pom artifactid GeographicLib-Java Low
Vendor pom developer email charles@karney.com Low
Vendor pom developer name Charles Karney Medium
Vendor pom developer org URL
https://sourceforge.net/u/karney/profile/
Medium
Vendor pom groupid net.sf.geographiclib Highest
Vendor pom name Java implementation of GeographicLib High
Vendor pom url https://geographiclib.sourceforge.io Highest
Product file name GeographicLib-Java High
Product jar package name geodesic Highest
Product jar package name geographiclib Highest
Product jar package name geographiclib Low
Product jar package name net Highest
Product jar package name sf Highest
Product jar package name sf Low
Product pom artifactid GeographicLib-Java Highest
Product pom developer email charles@karney.com Low
Product pom developer name Charles Karney Low
Product pom developer org URL
https://sourceforge.net/u/karney/profile/
Low
Product pom groupid net.sf.geographiclib Highest
Product pom name Java implementation of GeographicLib High
Product pom url https://geographiclib.sourceforge.io Medium
Version file version 1.49 High
Version pom version 1.49 Highest
pkg:maven/net.sf.geographiclib/GeographicLib-Java@1.49
(Confidence :High)
HdrHistogram-2.2.2.jar
Description:
HdrHistogram supports the recording and analyzing sampled data value
counts across a configurable integer value range with configurable value
precision within the range. Value precision is expressed as the number of
significant digits in the value recording, and provides control over value
quantization behavior across the value range and the subsequent value
resolution at any given level.
License:
Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar
MD5: 41f807bf0c681d6f692c408a6e217eaf
SHA1: 7959933ebcc0f05b2eaa5af0a0c8689fa257b15c
SHA256: 22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8
Referenced In Project/Scope: Tailormap API:runtime
HdrHistogram-2.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name HdrHistogram High
Vendor jar package name hdrhistogram Highest
Vendor Manifest build-jdk-spec 20 Low
Vendor Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium
Vendor pom artifactid HdrHistogram Highest
Vendor pom artifactid HdrHistogram Low
Vendor pom developer id giltene Medium
Vendor pom developer name Gil Tene Medium
Vendor pom groupid org.hdrhistogram Highest
Vendor pom name HdrHistogram High
Vendor pom url http://hdrhistogram.github.io/HdrHistogram/ Highest
Product file name HdrHistogram High
Product jar package name hdrhistogram Highest
Product Manifest build-jdk-spec 20 Low
Product Manifest Bundle-Name HdrHistogram Medium
Product Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium
Product pom artifactid HdrHistogram Highest
Product pom developer id giltene Low
Product pom developer name Gil Tene Low
Product pom groupid org.hdrhistogram Highest
Product pom name HdrHistogram High
Product pom url http://hdrhistogram.github.io/HdrHistogram/ Medium
Version file version 2.2.2 High
Version Manifest Bundle-Version 2.2.2 High
Version pom version 2.2.2 Highest
pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2
(Confidence :High)
HikariCP-7.0.2.jar
Description:
Ultimate JDBC Connection Pool
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/zaxxer/HikariCP/7.0.2/HikariCP-7.0.2.jar
MD5: c36937c742c20cbdc7bcb47019e33151
SHA1: c2b43c946b86a14a96342379e22b004c56c6166d
SHA256: f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095
Referenced In Project/Scope: Tailormap API:compile
HikariCP-7.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name HikariCP High
Vendor jar package name hikari Highest
Vendor jar package name pool Highest
Vendor jar package name zaxxer Highest
Vendor Manifest automatic-module-name com.zaxxer.hikari Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://github.com/brettwooldridge Low
Vendor Manifest bundle-symbolicname com.zaxxer.HikariCP Medium
Vendor pom artifactid HikariCP Highest
Vendor pom artifactid HikariCP Low
Vendor pom developer email brett.wooldridge@gmail.com Low
Vendor pom developer name Brett Wooldridge Medium
Vendor pom groupid com.zaxxer Highest
Vendor pom name HikariCP High
Vendor pom organization name Zaxxer.com High
Vendor pom organization url brettwooldridge Medium
Vendor pom url brettwooldridge/HikariCP Highest
Product file name HikariCP High
Product jar package name hikari Highest
Product jar package name pool Highest
Product jar package name zaxxer Highest
Product Manifest automatic-module-name com.zaxxer.hikari Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://github.com/brettwooldridge Low
Product Manifest Bundle-Name HikariCP Medium
Product Manifest bundle-symbolicname com.zaxxer.HikariCP Medium
Product pom artifactid HikariCP Highest
Product pom developer email brett.wooldridge@gmail.com Low
Product pom developer name Brett Wooldridge Low
Product pom groupid com.zaxxer Highest
Product pom name HikariCP High
Product pom organization name Zaxxer.com Low
Product pom url brettwooldridge High
Product pom url brettwooldridge/HikariCP High
Version file version 7.0.2 High
Version Manifest Bundle-Version 7.0.2 High
Version pom version 7.0.2 Highest
pkg:maven/com.zaxxer/HikariCP@7.0.2
(Confidence :High)
LatencyUtils-2.0.3.jar
Description:
LatencyUtils is a package that provides latency recording and reporting utilities.
License:
Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
File Path: /home/runner/.m2/repository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar
MD5: 2ad12e1ef7614cecfb0483fa9ac6da73
SHA1: 769c0b82cb2421c8256300e907298a9410a2a3d3
SHA256: a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec
Referenced In Project/Scope: Tailormap API:runtime
LatencyUtils-2.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name LatencyUtils High
Vendor jar package name latencyutils Highest
Vendor jar package name latencyutils Low
Vendor pom artifactid LatencyUtils Highest
Vendor pom artifactid LatencyUtils Low
Vendor pom developer id giltene Medium
Vendor pom developer name Gil Tene Medium
Vendor pom groupid org.latencyutils Highest
Vendor pom name LatencyUtils High
Vendor pom url http://latencyutils.github.io/LatencyUtils/ Highest
Product file name LatencyUtils High
Product jar package name latencyutils Highest
Product pom artifactid LatencyUtils Highest
Product pom developer id giltene Low
Product pom developer name Gil Tene Low
Product pom groupid org.latencyutils Highest
Product pom name LatencyUtils High
Product pom url http://latencyutils.github.io/LatencyUtils/ Medium
Version file version 2.0.3 High
Version pom version 2.0.3 Highest
accessors-smart-2.6.0.jar
Description:
Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.6.0/accessors-smart-2.6.0.jar
MD5: 0ad72639eea293193f68898da9b0b902
SHA1: 2d96f1d9b6ab7f13261aa81b15703574185747a0
SHA256: 222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61
Referenced In Project/Scope: Tailormap API:compile
accessors-smart-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence
Vendor file name accessors-smart High
Vendor jar package name asm Highest
Vendor jar package name minidev Highest
Vendor jar package name net Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://urielch.github.io/ Low
Vendor Manifest bundle-symbolicname net.minidev.accessors-smart Medium
Vendor pom artifactid accessors-smart Highest
Vendor pom artifactid accessors-smart Low
Vendor pom developer email hezhangjian97gmail.com Low
Vendor pom developer email uchemouni@gmail.com Low
Vendor pom developer id hezhangjian Medium
Vendor pom developer id uriel Medium
Vendor pom developer name Uriel Chemouni Medium
Vendor pom developer name Zhangjian He Medium
Vendor pom groupid net.minidev Highest
Vendor pom name ASM based accessors helper used by json-smart High
Vendor pom organization name Chemouni Uriel High
Vendor pom organization url https://urielch.github.io/ Medium
Vendor pom url https://urielch.github.io/ Highest
Product file name accessors-smart High
Product jar package name asm Highest
Product jar package name minidev Highest
Product jar package name net Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://urielch.github.io/ Low
Product Manifest Bundle-Name accessors-smart Medium
Product Manifest bundle-symbolicname net.minidev.accessors-smart Medium
Product pom artifactid accessors-smart Highest
Product pom developer email hezhangjian97gmail.com Low
Product pom developer email uchemouni@gmail.com Low
Product pom developer id hezhangjian Low
Product pom developer id uriel Low
Product pom developer name Uriel Chemouni Low
Product pom developer name Zhangjian He Low
Product pom groupid net.minidev Highest
Product pom name ASM based accessors helper used by json-smart High
Product pom organization name Chemouni Uriel Low
Product pom organization url https://urielch.github.io/ Low
Product pom url https://urielch.github.io/ Medium
Version file version 2.6.0 High
Version Manifest Bundle-Version 2.6.0 High
Version pom version 2.6.0 Highest
pkg:maven/net.minidev/accessors-smart@2.6.0
(Confidence :High)
angus-activation-2.0.3.jar
Description:
Implementation
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.3/angus-activation-2.0.3.jar
MD5: ad20392145690b36b4f950fe31a31a2a
SHA1: 7f80607ea5014fef0b1779e6c33d63a88a45a563
SHA256: a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7
Referenced In Project/Scope: Tailormap API:runtime
angus-activation-2.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.8
Evidence
Type Source Name Value Confidence
Vendor file name angus-activation High
Vendor jar package name activation Highest
Vendor jar package name angus Highest
Vendor jar package name eclipse Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname angus-activation Medium
Vendor Manifest extension-name org.eclipse.angus Medium
Vendor Manifest implementation-build-id 2.0.3-RELEASE-6eff4c5 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider" Low
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid angus-activation Highest
Vendor pom artifactid angus-activation Low
Vendor pom groupid org.eclipse.angus Highest
Vendor pom name Angus Activation Registries High
Vendor pom parent-artifactid angus-activation-project Low
Product file name angus-activation High
Product jar package name activation Highest
Product jar package name angus Highest
Product jar package name eclipse Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Angus Activation Registries Medium
Product Manifest bundle-symbolicname angus-activation Medium
Product Manifest extension-name org.eclipse.angus Medium
Product Manifest implementation-build-id 2.0.3-RELEASE-6eff4c5 Low
Product Manifest Implementation-Title Angus Activation Registries High
Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider" Low
Product Manifest specification-title Jakarta Activation Specification Medium
Product pom artifactid angus-activation Highest
Product pom groupid org.eclipse.angus Highest
Product pom name Angus Activation Registries High
Product pom parent-artifactid angus-activation-project Medium
Version file version 2.0.3 High
Version Manifest Bundle-Version 2.0.3 High
Version pom version 2.0.3 Highest
pkg:maven/org.eclipse.angus/angus-activation@2.0.3
(Confidence :High)
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:angus-core:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/angus-core/pom.xml
MD5: 102fa937d3897ac6eb838ff3a716bc80
SHA1: 11d1302ad859e7dda8e897ffa278a2135d0d3c7e
SHA256: 162bec7f0c7a2c3d461a42ca576e139b80628798f97f274b7dd5759226fc47c1
Referenced In Project/Scope: Tailormap API:runtime
Evidence
Type Source Name Value Confidence
Vendor pom artifactid angus-core Low
Vendor pom groupid org.eclipse.angus Highest
Vendor pom name Angus Mail Core High
Vendor pom parent-artifactid all Low
Product pom artifactid angus-core Highest
Product pom groupid org.eclipse.angus Highest
Product pom name Angus Mail Core High
Product pom parent-artifactid all Medium
Version pom version 2.0.5 Highest
Related Dependencies
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:imap:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/imap/pom.xml
MD5: c031701146f4f9887af1d7348b68e607
SHA1: bd81e3288ab646231bc2d64cedf04fe3c3146bf5
SHA256: 251e848e4c2db58e57e7725434e0498043cd3d554fba21d22d5178e5783e21dd
pkg:maven/org.eclipse.angus/imap@2.0.5
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:pop3:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/pop3/pom.xml
MD5: 0d7646a22486f0de9392d7ea120ff618
SHA1: 4b674f85989e5cc112b93427ec3852ef90359ba3
SHA256: 64b065cc6bec31a1e5fefa9bf47382045cf048d69a9820da4cecc85f34a77a69
pkg:maven/org.eclipse.angus/pop3@2.0.5
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:smtp:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/smtp/pom.xml
MD5: b5281897cc205fa3c8f0a93b58d4ba31
SHA1: c4b330d66629d75d0df7c09739c7ab37ca834011
SHA256: 14923a712a69fb1408452be22fe8e87aa57e45337f0b52ae289d2bbb3d016ec1
pkg:maven/org.eclipse.angus/smtp@2.0.5
pkg:maven/org.eclipse.angus/angus-core@2.0.5
(Confidence :High)
cpe:2.3:a:eclipse:angus_mail:2.0.5:*:*:*:*:*:*:*
(Confidence :Low)
suppress
angus-mail-2.0.5.jar (shaded: org.eclipse.angus:logging-mailhandler:2.0.5)
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar/META-INF/maven/org.eclipse.angus/logging-mailhandler/pom.xml
MD5: d4925a2ff344f2fab35fdf31f4813b43
SHA1: 53aac2712cc43a3aed66f65536fd91709056aef1
SHA256: 869577c24e1abb117bd9cf7dc9228c2643839b75087bfc5d6fed0d328ed9d1f7
Referenced In Project/Scope: Tailormap API:runtime
Evidence
Type Source Name Value Confidence
Vendor pom artifactid logging-mailhandler Low
Vendor pom groupid org.eclipse.angus Highest
Vendor pom name Angus Mail logging handler High
Vendor pom parent-artifactid all Low
Product pom artifactid logging-mailhandler Highest
Product pom groupid org.eclipse.angus Highest
Product pom name Angus Mail logging handler High
Product pom parent-artifactid all Medium
Version pom version 2.0.5 Highest
angus-mail-2.0.5.jar
Description:
Angus Mail Provider
License:
http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.5/angus-mail-2.0.5.jar
MD5: e965a2653568c0138457b4c6fc9e5d77
SHA1: 427f6d52ec0782f7efaca0c0732042e347a6cb4f
SHA256: b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a
Referenced In Project/Scope: Tailormap API:runtime
angus-mail-2.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-mail@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name angus-mail High
Vendor jar package name angus Highest
Vendor jar package name eclipse Highest
Vendor jar package name mail Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.eclipse.angus.mail Medium
Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.mail.util.StreamProvider",osgi.serviceloader;osgi.serviceloader="jakarta.mail.Provider" Low
Vendor pom artifactid angus-mail Highest
Vendor pom artifactid angus-mail Low
Vendor pom groupid org.eclipse.angus Highest
Vendor pom name Angus Mail Provider High
Vendor pom parent-artifactid all Low
Product file name angus-mail High
Product jar package name angus Highest
Product jar package name eclipse Highest
Product jar package name mail Highest
Product jar package name util Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Angus Mail Provider Medium
Product Manifest bundle-symbolicname org.eclipse.angus.mail Medium
Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.mail.util.StreamProvider",osgi.serviceloader;osgi.serviceloader="jakarta.mail.Provider" Low
Product pom artifactid angus-mail Highest
Product pom groupid org.eclipse.angus Highest
Product pom name Angus Mail Provider High
Product pom parent-artifactid all Medium
Version file version 2.0.5 High
Version Manifest Bundle-Version 2.0.5 High
Version pom version 2.0.5 Highest
antlr4-runtime-4.13.2.jar
Description:
The ANTLR 4 Runtime
License:
https://www.antlr.org/license.html
File Path: /home/runner/.m2/repository/org/antlr/antlr4-runtime/4.13.2/antlr4-runtime-4.13.2.jar
MD5: eecf1908f0cfff10f8bb82878b5ca401
SHA1: fc3db6d844df652a3d5db31c87fa12757f13691d
SHA256: dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7
Referenced In Project/Scope: Tailormap API:compile
antlr4-runtime-4.13.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name antlr4-runtime High
Vendor jar package name antlr Highest
Vendor jar package name runtime Highest
Vendor Manifest automatic-module-name org.antlr.antlr4.runtime Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.antlr.org/ Low
Vendor Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium
Vendor Manifest Implementation-Vendor ANTLR High
Vendor pom artifactid antlr4-runtime Highest
Vendor pom artifactid antlr4-runtime Low
Vendor pom groupid org.antlr Highest
Vendor pom name ANTLR 4 Runtime High
Vendor pom parent-artifactid antlr4-master Low
Product file name antlr4-runtime High
Product jar package name antlr Highest
Product jar package name runtime Highest
Product Manifest automatic-module-name org.antlr.antlr4.runtime Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.antlr.org/ Low
Product Manifest Bundle-Name ANTLR 4 Runtime Medium
Product Manifest bundle-symbolicname org.antlr.antlr4-runtime Medium
Product Manifest Implementation-Title ANTLR 4 Runtime High
Product pom artifactid antlr4-runtime Highest
Product pom groupid org.antlr Highest
Product pom name ANTLR 4 Runtime High
Product pom parent-artifactid antlr4-master Medium
Version file version 4.13.2 High
Version Manifest Bundle-Version 4.13.2 High
Version Manifest Implementation-Version 4.13.2 High
Version pom version 4.13.2 Highest
pkg:maven/org.antlr/antlr4-runtime@4.13.2
(Confidence :High)
apiguardian-api-1.1.2.jar
Description:
@API Guardian
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256: b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: Tailormap API:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.0.3
Evidence
Type Source Name Value Confidence
Vendor file name apiguardian-api High
Vendor jar package name api Highest
Vendor jar package name apiguardian Highest
Vendor Manifest build-date 2021-06-27 Low
Vendor Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low
Vendor Manifest build-time 14:53:10.089+0200 Low
Vendor Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low
Vendor Manifest bundle-symbolicname org.apiguardian.api Medium
Vendor Manifest Implementation-Vendor apiguardian.org High
Vendor Manifest specification-vendor apiguardian.org Low
Vendor pom artifactid apiguardian-api Highest
Vendor pom artifactid apiguardian-api Low
Vendor pom developer email team@apiguardian.org Low
Vendor pom developer id apiguardian Medium
Vendor pom developer name @API Guardian Team Medium
Vendor pom groupid org.apiguardian Highest
Vendor pom name org.apiguardian:apiguardian-api High
Vendor pom url apiguardian-team/apiguardian Highest
Product file name apiguardian-api High
Product jar package name api Highest
Product jar package name apiguardian Highest
Product Manifest build-date 2021-06-27 Low
Product Manifest build-revision aa952a1b9d5b4e9cc0af853e2c140c2455b397be Low
Product Manifest build-time 14:53:10.089+0200 Low
Product Manifest bundle-docurl https://github.com/apiguardian-team/apiguardian Low
Product Manifest Bundle-Name apiguardian-api Medium
Product Manifest bundle-symbolicname org.apiguardian.api Medium
Product Manifest Implementation-Title apiguardian-api High
Product Manifest specification-title apiguardian-api Medium
Product pom artifactid apiguardian-api Highest
Product pom developer email team@apiguardian.org Low
Product pom developer id apiguardian Low
Product pom developer name @API Guardian Team Low
Product pom groupid org.apiguardian Highest
Product pom name org.apiguardian:apiguardian-api High
Product pom url apiguardian-team/apiguardian High
Version file version 1.1.2 High
Version Manifest Bundle-Version 1.1.2 High
Version Manifest Implementation-Version 1.1.2 High
Version pom version 1.1.2 Highest
pkg:maven/org.apiguardian/apiguardian-api@1.1.2
(Confidence :High)
asm-9.7.1.jar
Description:
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar
MD5: e2cdd32d198ad31427d298eee9d39d8d
SHA1: f0ed132a49244b042cd0e15702ab9f2ce3cc8436
SHA256: 8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281
Referenced In Project/Scope: Tailormap API:compile
asm-9.7.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence
Vendor file name asm High
Vendor jar package name asm Highest
Vendor jar package name objectweb Highest
Vendor Manifest bundle-docurl http://asm.ow2.org Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.objectweb.asm Medium
Vendor pom artifactid asm Highest
Vendor pom artifactid asm Low
Vendor pom developer email ebruneton@free.fr Low
Vendor pom developer email eu@javatx.org Low
Vendor pom developer email forax@univ-mlv.fr Low
Vendor pom developer id ebruneton Medium
Vendor pom developer id eu Medium
Vendor pom developer id forax Medium
Vendor pom developer name Eric Bruneton Medium
Vendor pom developer name Eugene Kuleshov Medium
Vendor pom developer name Remi Forax Medium
Vendor pom groupid org.ow2.asm Highest
Vendor pom name asm High
Vendor pom organization name OW2 High
Vendor pom organization url http://www.ow2.org/ Medium
Vendor pom parent-artifactid ow2 Low
Vendor pom parent-groupid org.ow2 Medium
Vendor pom url http://asm.ow2.io/ Highest
Product file name asm High
Product jar package name asm Highest
Product jar package name objectweb Highest
Product Manifest bundle-docurl http://asm.ow2.org Low
Product Manifest Bundle-Name org.objectweb.asm Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.objectweb.asm Medium
Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High
Product pom artifactid asm Highest
Product pom developer email ebruneton@free.fr Low
Product pom developer email eu@javatx.org Low
Product pom developer email forax@univ-mlv.fr Low
Product pom developer id ebruneton Low
Product pom developer id eu Low
Product pom developer id forax Low
Product pom developer name Eric Bruneton Low
Product pom developer name Eugene Kuleshov Low
Product pom developer name Remi Forax Low
Product pom groupid org.ow2.asm Highest
Product pom name asm High
Product pom organization name OW2 Low
Product pom organization url http://www.ow2.org/ Low
Product pom parent-artifactid ow2 Medium
Product pom parent-groupid org.ow2 Medium
Product pom url http://asm.ow2.io/ Medium
Version file version 9.7.1 High
Version Manifest Bundle-Version 9.7.1 High
Version Manifest Implementation-Version 9.7.1 High
Version pom parent-version 9.7.1 Low
Version pom version 9.7.1 Highest
pkg:maven/org.ow2.asm/asm@9.7.1
(Confidence :High)
aspectjweaver-1.9.25.1.jar
Description:
The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
weaving (LTW) during class-loading and also contains the AspectJ runtime classes.
License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/aspectj/aspectjweaver/1.9.25.1/aspectjweaver-1.9.25.1.jar
MD5: 7a88f606f52185a15a1527c968f55dfb
SHA1: a713c790da4d794c7dfb542b550d4e44898d5e23
SHA256: 4fe86fdc18faea571f29129c70eaad5d121363504a06d7907be88f6c60ba3116
Referenced In Project/Scope: Tailormap API:compile
aspectjweaver-1.9.25.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name aspectjweaver High
Vendor jar package name agent Highest
Vendor jar package name and Highest
Vendor jar package name aspectj Highest
Vendor jar package name aspects Highest
Vendor jar package name ltw Highest
Vendor jar package name org Highest
Vendor jar package name runtime Highest
Vendor jar package name weaver Highest
Vendor Manifest automatic-module-name org.aspectj.weaver Medium
Vendor Manifest can-redefine-classes true Low
Vendor manifest: org/aspectj/weaver/ Implementation-Vendor https://www.eclipse.org/aspectj/ Medium
Vendor pom artifactid aspectjweaver Highest
Vendor pom artifactid aspectjweaver Low
Vendor pom developer email aclement@vmware.com Low
Vendor pom developer email kriegaex@aspectj.dev Low
Vendor pom developer id aclement Medium
Vendor pom developer id kriegaex Medium
Vendor pom developer name Alexander Kriegisch Medium
Vendor pom developer name Andy Clement Medium
Vendor pom groupid org.aspectj Highest
Vendor pom name AspectJ Weaver High
Vendor pom url https://www.eclipse.org/aspectj/ Highest
Product file name aspectjweaver High
Product jar package name agent Highest
Product jar package name and Highest
Product jar package name aspectj Highest
Product jar package name aspects Highest
Product jar package name ltw Highest
Product jar package name org Highest
Product jar package name runtime Highest
Product jar package name weaver Highest
Product Manifest automatic-module-name org.aspectj.weaver Medium
Product Manifest can-redefine-classes true Low
Product manifest: org/aspectj/weaver/ Implementation-Title org.aspectj.weaver Medium
Product manifest: org/aspectj/weaver/ Specification-Title AspectJ Weaver Classes Medium
Product pom artifactid aspectjweaver Highest
Product pom developer email aclement@vmware.com Low
Product pom developer email kriegaex@aspectj.dev Low
Product pom developer id aclement Low
Product pom developer id kriegaex Low
Product pom developer name Alexander Kriegisch Low
Product pom developer name Andy Clement Low
Product pom groupid org.aspectj Highest
Product pom name AspectJ Weaver High
Product pom url https://www.eclipse.org/aspectj/ Medium
Version file version 1.9.25.1 High
Version manifest: org/aspectj/weaver/ Implementation-Version 1.9.25.1 Medium
Version pom version 1.9.25.1 Highest
pkg:maven/org.aspectj/aspectjweaver@1.9.25.1
(Confidence :High)
byte-buddy-1.17.8.jar
Description:
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.17.8/byte-buddy-1.17.8.jar
MD5: ac7292226046cb7206b349e21affecfe
SHA1: af5735f63d00ca47a9375fae5c7471a36331c6ed
SHA256: 2b5ddc8c1f4234bdb7cb45338a8e10a13e0e3ca473e91d5d821d681127ea8ba1
Referenced In Project/Scope: Tailormap API:runtime
byte-buddy-1.17.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name byte-buddy High
Vendor jar package name asm Highest
Vendor jar package name build Highest
Vendor jar package name bytebuddy Highest
Vendor jar package name net Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid byte-buddy Highest
Vendor pom artifactid byte-buddy Low
Vendor pom groupid net.bytebuddy Highest
Vendor pom name Byte Buddy (without dependencies) High
Vendor pom parent-artifactid byte-buddy-parent Low
Product file name byte-buddy High
Product jar package name asm Highest
Product jar package name build Highest
Product jar package name bytebuddy Highest
Product jar package name net Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium
Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium
Product Manifest multi-release true Low
Product pom artifactid byte-buddy Highest
Product pom groupid net.bytebuddy Highest
Product pom name Byte Buddy (without dependencies) High
Product pom parent-artifactid byte-buddy-parent Medium
Version file version 1.17.8 High
Version Manifest Bundle-Version 1.17.8 High
Version pom version 1.17.8 Highest
pkg:maven/net.bytebuddy/byte-buddy@1.17.8
(Confidence :High)
classgraph-4.8.173.jar
Description:
The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.
License:
The MIT License (MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/io/github/classgraph/classgraph/4.8.173/classgraph-4.8.173.jar
MD5: 8e98dcc3eb5d91bd92a03415d64caa2a
SHA1: 236e1b4360bf078142902c6c3ca80a03bfa95d5d
SHA256: 699841fd9028af0124e9b66067e0e543211611971a8a066ae212690888a5aaee
Referenced In Project/Scope: Tailormap API:compile
classgraph-4.8.173.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.webjars/webjars-locator-core@0.59
Evidence
Type Source Name Value Confidence
Vendor file name classgraph High
Vendor jar package name classgraph Highest
Vendor jar package name github Highest
Vendor jar package name io Highest
Vendor jar package name scanner Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-category Utilities Low
Vendor Manifest bundle-symbolicname io.github.classgraph.classgraph Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid classgraph Highest
Vendor pom artifactid classgraph Low
Vendor pom developer email luke.hutch@gmail.com Low
Vendor pom developer name Luke Hutchison Medium
Vendor pom developer org ClassGraph Medium
Vendor pom developer org URL https://github.com/classgraph Medium
Vendor pom groupid io.github.classgraph Highest
Vendor pom name ClassGraph High
Vendor pom url classgraph/classgraph Highest
Product file name classgraph High
Product jar package name classgraph Highest
Product jar package name github Highest
Product jar package name io Highest
Product jar package name scanner Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-category Utilities Low
Product Manifest Bundle-Name ClassGraph Medium
Product Manifest bundle-symbolicname io.github.classgraph.classgraph Medium
Product Manifest Implementation-Title ClassGraph High
Product Manifest multi-release true Low
Product Manifest specification-title ClassGraph Medium
Product pom artifactid classgraph Highest
Product pom developer email luke.hutch@gmail.com Low
Product pom developer name Luke Hutchison Low
Product pom developer org ClassGraph Low
Product pom developer org URL https://github.com/classgraph Low
Product pom groupid io.github.classgraph Highest
Product pom name ClassGraph High
Product pom url classgraph/classgraph High
Version file version 4.8.173 High
Version Manifest Bundle-Version 4.8.173 High
Version Manifest Implementation-Version 4.8.173 High
Version pom version 4.8.173 Highest
pkg:maven/io.github.classgraph/classgraph@4.8.173
(Confidence :High)
classmate-1.7.3.jar
Description:
Library for introspecting types with full generic information
including resolving of field and method types.
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/classmate/1.7.3/classmate-1.7.3.jar
MD5: d1a4a85ab782827adfa82772e3b5f483
SHA1: f61c7e7b81e9249b0f6a05914eff9d54fb09f4a0
SHA256: 75fbda45456f123fb6e2028a6189442d8d0730b357adce4c0a6d7e789f70669b
Referenced In Project/Scope: Tailormap API:compile
classmate-1.7.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name classmate High
Vendor jar package name classmate Highest
Vendor jar package name fasterxml Highest
Vendor jar package name types Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/java-classmate Low
Vendor Manifest bundle-symbolicname com.fasterxml.classmate Medium
Vendor Manifest Implementation-Vendor fasterxml.com High
Vendor Manifest Implementation-Vendor-Id com.fasterxml Medium
Vendor Manifest specification-vendor fasterxml.com Low
Vendor pom artifactid classmate Highest
Vendor pom artifactid classmate Low
Vendor pom developer email blangel@ocheyedan.net Low
Vendor pom developer email tatu@fasterxml.com Low
Vendor pom developer id blangel Medium
Vendor pom developer id tatu Medium
Vendor pom developer name Brian Langel Medium
Vendor pom developer name Tatu Saloranta Medium
Vendor pom groupid com.fasterxml Highest
Vendor pom name ClassMate High
Vendor pom organization name fasterxml.com High
Vendor pom organization url https://fasterxml.com Medium
Vendor pom parent-artifactid oss-parent Low
Vendor pom url FasterXML/java-classmate Highest
Product file name classmate High
Product jar package name classmate Highest
Product jar package name fasterxml Highest
Product jar package name types Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/java-classmate Low
Product Manifest Bundle-Name ClassMate Medium
Product Manifest bundle-symbolicname com.fasterxml.classmate Medium
Product Manifest Implementation-Title ClassMate High
Product Manifest specification-title ClassMate Medium
Product pom artifactid classmate Highest
Product pom developer email blangel@ocheyedan.net Low
Product pom developer email tatu@fasterxml.com Low
Product pom developer id blangel Low
Product pom developer id tatu Low
Product pom developer name Brian Langel Low
Product pom developer name Tatu Saloranta Low
Product pom groupid com.fasterxml Highest
Product pom name ClassMate High
Product pom organization name fasterxml.com Low
Product pom organization url https://fasterxml.com Low
Product pom parent-artifactid oss-parent Medium
Product pom url FasterXML/java-classmate High
Version file version 1.7.3 High
Version Manifest Bundle-Version 1.7.3 High
Version Manifest Implementation-Version 1.7.3 High
Version pom parent-version 1.7.3 Low
Version pom version 1.7.3 Highest
pkg:maven/com.fasterxml/classmate@1.7.3
(Confidence :High)
commons-codec-1.21.0.jar
Description:
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.21.0/commons-codec-1.21.0.jar
MD5: c49977029838babaf8a71485aa9aaef8
SHA1: d95f998db5f89900fe895daf6cd2cddcb2f1d64b
SHA256: 4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f
Referenced In Project/Scope: Tailormap API:compile
commons-codec-1.21.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name commons-codec High
Vendor jar package name apache Highest
Vendor jar package name codec Highest
Vendor jar package name commons Highest
Vendor jar package name digest Highest
Vendor Manifest automatic-module-name org.apache.commons.codec Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-codec Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-codec Highest
Vendor pom artifactid commons-codec Low
Vendor pom developer email bayard@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email dgraham@apache.org Low
Vendor pom developer email dlr@finemaltcoding.com Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jon@collab.net Low
Vendor pom developer email julius@apache.org Low
Vendor pom developer email mattsicker@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@totalsync.com Low
Vendor pom developer email tn@apache.org Low
Vendor pom developer email tobrien@apache.org Low
Vendor pom developer id bayard Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id dgraham Medium
Vendor pom developer id dlr Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jon Medium
Vendor pom developer id julius Medium
Vendor pom developer id mattsicker Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id tn Medium
Vendor pom developer id tobrien Medium
Vendor pom developer name Daniel Rall Medium
Vendor pom developer name David Graham Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name Jon S. Stevens Medium
Vendor pom developer name Julius Davies Medium
Vendor pom developer name Matt Sicker Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom developer name Tim OBrien Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://juliusdavies.ca/ Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-codec Highest
Vendor pom name Apache Commons Codec High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-codec/ Highest
Product file name commons-codec High
Product jar package name apache Highest
Product jar package name codec Highest
Product jar package name commons Highest
Product jar package name digest Highest
Product Manifest automatic-module-name org.apache.commons.codec Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-codec/ Low
Product Manifest Bundle-Name Apache Commons Codec Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-codec Medium
Product Manifest Implementation-Title Apache Commons Codec High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Codec Medium
Product pom artifactid commons-codec Highest
Product pom developer email bayard@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email dgraham@apache.org Low
Product pom developer email dlr@finemaltcoding.com Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jon@collab.net Low
Product pom developer email julius@apache.org Low
Product pom developer email mattsicker@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@totalsync.com Low
Product pom developer email tn@apache.org Low
Product pom developer email tobrien@apache.org Low
Product pom developer id bayard Low
Product pom developer id chtompki Low
Product pom developer id dgraham Low
Product pom developer id dlr Low
Product pom developer id ggregory Low
Product pom developer id jon Low
Product pom developer id julius Low
Product pom developer id mattsicker Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id tn Low
Product pom developer id tobrien Low
Product pom developer name Daniel Rall Low
Product pom developer name David Graham Low
Product pom developer name Gary Gregory Low
Product pom developer name Henri Yandell Low
Product pom developer name Jon S. Stevens Low
Product pom developer name Julius Davies Low
Product pom developer name Matt Sicker Low
Product pom developer name Rob Tompkins Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Thomas Neidhart Low
Product pom developer name Tim OBrien Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://juliusdavies.ca/ Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-codec Highest
Product pom name Apache Commons Codec High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-codec/ Medium
Version file version 1.21.0 High
Version Manifest Bundle-Version 1.21.0 High
Version Manifest Implementation-Version 1.21.0 High
Version pom parent-version 1.21.0 Low
Version pom version 1.21.0 Highest
pkg:maven/commons-codec/commons-codec@1.21.0
(Confidence :High)
commons-collections4-4.4.jar
Description:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar
MD5: 4a37023740719b391f10030362c86be6
SHA1: 62ebe7544cb7164d87e0637a2a6a2bdc981395e8
SHA256: 1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1
Referenced In Project/Scope: Tailormap API:compile
commons-collections4-4.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-xml@34.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-collections4 High
Vendor jar package name apache Highest
Vendor jar package name collections4 Highest
Vendor jar package name commons Highest
Vendor Manifest automatic-module-name org.apache.commons.collections4 Medium
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium
Vendor Manifest implementation-url https://commons.apache.org/proper/commons-collections/ Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache.commons Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-collections4 Highest
Vendor pom artifactid commons-collections4 Low
Vendor pom developer id adriannistor Medium
Vendor pom developer id amamment Medium
Vendor pom developer id bayard Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dlaha Medium
Vendor pom developer id geirm Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id luc Medium
Vendor pom developer id matth Medium
Vendor pom developer id mbenson Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer id tn Medium
Vendor pom developer name Adrian Nistor Medium
Vendor pom developer name Arun M. Thomas Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dipanjan Laha Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name Luc Maisonobe Medium
Vendor pom developer name Matt Benson Medium
Vendor pom developer name Matthew Hawthorne Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Collections High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-collections/ Highest
Product file name commons-collections4 High
Product jar package name apache Highest
Product jar package name collections4 Highest
Product jar package name commons Highest
Product Manifest automatic-module-name org.apache.commons.collections4 Medium
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-collections/ Low
Product Manifest Bundle-Name Apache Commons Collections Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium
Product Manifest Implementation-Title Apache Commons Collections High
Product Manifest implementation-url https://commons.apache.org/proper/commons-collections/ Low
Product Manifest specification-title Apache Commons Collections Medium
Product pom artifactid commons-collections4 Highest
Product pom developer id adriannistor Low
Product pom developer id amamment Low
Product pom developer id bayard Low
Product pom developer id chtompki Low
Product pom developer id craigmcc Low
Product pom developer id dlaha Low
Product pom developer id geirm Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id luc Low
Product pom developer id matth Low
Product pom developer id mbenson Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id scolebourne Low
Product pom developer id tn Low
Product pom developer name Adrian Nistor Low
Product pom developer name Arun M. Thomas Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dipanjan Laha Low
Product pom developer name Gary Gregory Low
Product pom developer name Geir Magnusson Low
Product pom developer name Henri Yandell Low
Product pom developer name James Carman Low
Product pom developer name Luc Maisonobe Low
Product pom developer name Matt Benson Low
Product pom developer name Matthew Hawthorne Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Thomas Neidhart Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Collections High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-collections/ Medium
Version file version 4.4 High
Version Manifest Implementation-Version 4.4 High
Version pom parent-version 4.4 Low
Version pom version 4.4 Highest
commons-dbcp-1.4.jar
Description:
Commons Database Connection Pooling
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-dbcp/commons-dbcp/1.4/commons-dbcp-1.4.jar
MD5: b004158fab904f37f5831860898b3cd9
SHA1: 30be73c965cc990b153a100aaaaafcf239f82d39
SHA256: a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6
Referenced In Project/Scope: Tailormap API:compile
commons-dbcp-1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-jdbc@34.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-dbcp High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name dbcp Highest
Vendor Manifest bundle-docurl http://commons.apache.org/dbcp/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.dbcp Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-dbcp Highest
Vendor pom artifactid commons-dbcp Low
Vendor pom developer email joerg.schaible@gmx.de Low
Vendor pom developer email markt@apache.org Low
Vendor pom developer email mpoeschl@marmot.at Low
Vendor pom developer email yoavs@apache.org Low
Vendor pom developer id craigmcc Medium
Vendor pom developer id dirkv Medium
Vendor pom developer id dweinr1 Medium
Vendor pom developer id geirm Medium
Vendor pom developer id jmcnally Medium
Vendor pom developer id joehni Medium
Vendor pom developer id markt Medium
Vendor pom developer id morgand Medium
Vendor pom developer id mpoeschl Medium
Vendor pom developer id psteitz Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id yoavs Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name David Weinrich Medium
Vendor pom developer name Dirk Verbeeck Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Jörg Schaible Medium
Vendor pom developer name John McNally Medium
Vendor pom developer name Mark Thomas Medium
Vendor pom developer name Martin Poeschl Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Phil Steitz Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Yoav Shapira Medium
Vendor pom developer org Apache Software Foundation Medium
Vendor pom developer org tucana.at Medium
Vendor pom groupid commons-dbcp Highest
Vendor pom name Commons DBCP High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url http://commons.apache.org/dbcp/ Highest
Product file name commons-dbcp High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name dbcp Highest
Product Manifest bundle-docurl http://commons.apache.org/dbcp/ Low
Product Manifest Bundle-Name Commons DBCP Medium
Product Manifest bundle-symbolicname org.apache.commons.dbcp Medium
Product Manifest Implementation-Title Commons DBCP High
Product Manifest specification-title Commons DBCP Medium
Product pom artifactid commons-dbcp Highest
Product pom developer email joerg.schaible@gmx.de Low
Product pom developer email markt@apache.org Low
Product pom developer email mpoeschl@marmot.at Low
Product pom developer email yoavs@apache.org Low
Product pom developer id craigmcc Low
Product pom developer id dirkv Low
Product pom developer id dweinr1 Low
Product pom developer id geirm Low
Product pom developer id jmcnally Low
Product pom developer id joehni Low
Product pom developer id markt Low
Product pom developer id morgand Low
Product pom developer id mpoeschl Low
Product pom developer id psteitz Low
Product pom developer id rwaldhoff Low
Product pom developer id yoavs Low
Product pom developer name Craig McClanahan Low
Product pom developer name David Weinrich Low
Product pom developer name Dirk Verbeeck Low
Product pom developer name Geir Magnusson Low
Product pom developer name Jörg Schaible Low
Product pom developer name John McNally Low
Product pom developer name Mark Thomas Low
Product pom developer name Martin Poeschl Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Phil Steitz Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Yoav Shapira Low
Product pom developer org Apache Software Foundation Low
Product pom developer org tucana.at Low
Product pom groupid commons-dbcp Highest
Product pom name Commons DBCP High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url http://commons.apache.org/dbcp/ Medium
Version file version 1.4 High
Version Manifest Bundle-Version 1.4 High
Version Manifest Implementation-Version 1.4 High
Version pom parent-version 1.4 Low
Version pom version 1.4 Highest
pkg:maven/commons-dbcp/commons-dbcp@1.4
(Confidence :High)
commons-io-2.22.0.jar
Description:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-io/commons-io/2.22.0/commons-io-2.22.0.jar
MD5: f91d54bd47c42456b4a5ae62eed85565
SHA1: 5b1e18bc0ad651ed878029d83f88d9c8189fd51e
SHA256: 2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758
Referenced In Project/Scope: Tailormap API:compile
commons-io-2.22.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name commons-io High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name file Highest
Vendor jar package name io Highest
Vendor Manifest automatic-module-name org.apache.commons.io Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-io Medium
Vendor Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-io Highest
Vendor pom artifactid commons-io Low
Vendor pom developer email bayard@apache.org Low
Vendor pom developer email dion@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jeremias@apache.org Low
Vendor pom developer email jochen.wiedmann@gmail.com Low
Vendor pom developer email krosenvold@apache.org Low
Vendor pom developer email martinc@apache.org Low
Vendor pom developer email matth@apache.org Low
Vendor pom developer email nicolaken@apache.org Low
Vendor pom developer email roxspring@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer id bayard Medium
Vendor pom developer id dion Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jeremias Medium
Vendor pom developer id jochen Medium
Vendor pom developer id jukka Medium
Vendor pom developer id krosenvold Medium
Vendor pom developer id martinc Medium
Vendor pom developer id matth Medium
Vendor pom developer id niallp Medium
Vendor pom developer id nicolaken Medium
Vendor pom developer id roxspring Medium
Vendor pom developer id sanders Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer name dIon Gillard Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name Jeremias Maerki Medium
Vendor pom developer name Jochen Wiedmann Medium
Vendor pom developer name Jukka Zitting Medium
Vendor pom developer name Kristian Rosenvold Medium
Vendor pom developer name Martin Cooper Medium
Vendor pom developer name Matthew Hawthorne Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Nicola Ken Barozzi Medium
Vendor pom developer name Rob Oxspring Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-io Highest
Vendor pom name Apache Commons IO High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-io/ Highest
Product file name commons-io High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name file Highest
Product jar package name io Highest
Product Manifest automatic-module-name org.apache.commons.io Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-io/ Low
Product Manifest Bundle-Name Apache Commons IO Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-io Medium
Product Manifest enabledynamicagentloading -XX:+EnableDynamicAgentLoading Low
Product Manifest Implementation-Title Apache Commons IO High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons IO Medium
Product pom artifactid commons-io Highest
Product pom developer email bayard@apache.org Low
Product pom developer email dion@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jeremias@apache.org Low
Product pom developer email jochen.wiedmann@gmail.com Low
Product pom developer email krosenvold@apache.org Low
Product pom developer email martinc@apache.org Low
Product pom developer email matth@apache.org Low
Product pom developer email nicolaken@apache.org Low
Product pom developer email roxspring@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer id bayard Low
Product pom developer id dion Low
Product pom developer id ggregory Low
Product pom developer id jeremias Low
Product pom developer id jochen Low
Product pom developer id jukka Low
Product pom developer id krosenvold Low
Product pom developer id martinc Low
Product pom developer id matth Low
Product pom developer id niallp Low
Product pom developer id nicolaken Low
Product pom developer id roxspring Low
Product pom developer id sanders Low
Product pom developer id scolebourne Low
Product pom developer name dIon Gillard Low
Product pom developer name Gary Gregory Low
Product pom developer name Henri Yandell Low
Product pom developer name Jeremias Maerki Low
Product pom developer name Jochen Wiedmann Low
Product pom developer name Jukka Zitting Low
Product pom developer name Kristian Rosenvold Low
Product pom developer name Martin Cooper Low
Product pom developer name Matthew Hawthorne Low
Product pom developer name Niall Pemberton Low
Product pom developer name Nicola Ken Barozzi Low
Product pom developer name Rob Oxspring Low
Product pom developer name Scott Sanders Low
Product pom developer name Stephen Colebourne Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-io Highest
Product pom name Apache Commons IO High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-io/ Medium
Version file version 2.22.0 High
Version Manifest Bundle-Version 2.22.0 High
Version Manifest Implementation-Version 2.22.0 High
Version pom parent-version 2.22.0 Low
Version pom version 2.22.0 Highest
commons-jxpath-1.4.0.jar
Description:
A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-jxpath/commons-jxpath/1.4.0/commons-jxpath-1.4.0.jar
MD5: 0f59e33e5a2e7265155b51a1fb592fa4
SHA1: f61af30d8db727b7bb53d285fe074f89d8b68951
SHA256: 226cb33a644995b084b3bdd42f2eb861509e6db71d7a343d411ee321387b0860
Referenced In Project/Scope: Tailormap API:compile
commons-jxpath-1.4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-jxpath High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name jxpath Highest
Vendor jar package name xml Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-jxpath/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-jxpath Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-jxpath Highest
Vendor pom artifactid commons-jxpath Low
Vendor pom developer email Craig.McClanahan@eng.sun.com Low
Vendor pom developer email dmitri@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email mbenson@apache.org Low
Vendor pom developer id craigmcc Medium
Vendor pom developer id dmitri Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id mbenson Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dmitri Plotnikov Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Matt Benson Medium
Vendor pom developer org Sun Microsystems Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-jxpath Highest
Vendor pom name Apache Commons JXPath High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-jxpath/ Highest
Product file name commons-jxpath High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name jxpath Highest
Product jar package name xml Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-jxpath/ Low
Product Manifest Bundle-Name Apache Commons JXPath Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-jxpath Medium
Product Manifest Implementation-Title Apache Commons JXPath High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons JXPath Medium
Product pom artifactid commons-jxpath Highest
Product pom developer email Craig.McClanahan@eng.sun.com Low
Product pom developer email dmitri@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email mbenson@apache.org Low
Product pom developer id craigmcc Low
Product pom developer id dmitri Low
Product pom developer id ggregory Low
Product pom developer id mbenson Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dmitri Plotnikov Low
Product pom developer name Gary Gregory Low
Product pom developer name Matt Benson Low
Product pom developer org Sun Microsystems Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-jxpath Highest
Product pom name Apache Commons JXPath High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-jxpath/ Medium
Version file version 1.4.0 High
Version Manifest Bundle-Version 1.4.0 High
Version Manifest Implementation-Version 1.4.0 High
Version pom parent-version 1.4.0 Low
Version pom version 1.4.0 Highest
commons-lang3-3.20.0.jar
Description:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
The code is tested using the latest revision of the JDK for supported
LTS releases: 8, 11, 17, 21 and 25 currently.
See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
Please ensure your build environment is up-to-date and kindly report any build issues.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256: 69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: Tailormap API:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name commons-lang3 High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name lang3 Highest
Vendor Manifest automatic-module-name org.apache.commons.lang3 Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-lang3 Highest
Vendor pom artifactid commons-lang3 Low
Vendor pom developer email bayard@apache.org Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email djones@apache.org Low
Vendor pom developer email dlr@finemaltcoding.com Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jcarman@apache.org Low
Vendor pom developer email joerg.schaible@gmx.de Low
Vendor pom developer email lguibert@apache.org Low
Vendor pom developer email oheger@apache.org Low
Vendor pom developer email pbenedict@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email scolebourne@joda.org Low
Vendor pom developer email stevencaswell@apache.org Low
Vendor pom developer id bayard Medium
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id djones Medium
Vendor pom developer id dlr Medium
Vendor pom developer id fredrik Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id joehni Medium
Vendor pom developer id lguibert Medium
Vendor pom developer id mbenson Medium
Vendor pom developer id niallp Medium
Vendor pom developer id oheger Medium
Vendor pom developer id pbenedict Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id scaswell Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Daniel Rall Medium
Vendor pom developer name Duncan Jones Medium
Vendor pom developer name Fredrik Westermarck Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Henri Yandell Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name Joerg Schaible Medium
Vendor pom developer name Loic Guibert Medium
Vendor pom developer name Matt Benson Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Oliver Heger Medium
Vendor pom developer name Paul Benedict Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Steven Caswell Medium
Vendor pom developer org Carman Consulting, Inc. Medium
Vendor pom developer org CollabNet, Inc. Medium
Vendor pom developer org SITA ATS Ltd Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Lang High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-lang/ Highest
Product file name commons-lang3 High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name lang3 Highest
Product Manifest automatic-module-name org.apache.commons.lang3 Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-lang/ Low
Product Manifest Bundle-Name Apache Commons Lang Medium
Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium
Product Manifest Implementation-Title Apache Commons Lang High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Lang Medium
Product pom artifactid commons-lang3 Highest
Product pom developer email bayard@apache.org Low
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email djones@apache.org Low
Product pom developer email dlr@finemaltcoding.com Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jcarman@apache.org Low
Product pom developer email joerg.schaible@gmx.de Low
Product pom developer email lguibert@apache.org Low
Product pom developer email oheger@apache.org Low
Product pom developer email pbenedict@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email scolebourne@joda.org Low
Product pom developer email stevencaswell@apache.org Low
Product pom developer id bayard Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id djones Low
Product pom developer id dlr Low
Product pom developer id fredrik Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id joehni Low
Product pom developer id lguibert Low
Product pom developer id mbenson Low
Product pom developer id niallp Low
Product pom developer id oheger Low
Product pom developer id pbenedict Low
Product pom developer id rdonkin Low
Product pom developer id scaswell Low
Product pom developer id scolebourne Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Daniel Rall Low
Product pom developer name Duncan Jones Low
Product pom developer name Fredrik Westermarck Low
Product pom developer name Gary Gregory Low
Product pom developer name Henri Yandell Low
Product pom developer name James Carman Low
Product pom developer name Joerg Schaible Low
Product pom developer name Loic Guibert Low
Product pom developer name Matt Benson Low
Product pom developer name Niall Pemberton Low
Product pom developer name Oliver Heger Low
Product pom developer name Paul Benedict Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Steven Caswell Low
Product pom developer org Carman Consulting, Inc. Low
Product pom developer org CollabNet, Inc. Low
Product pom developer org SITA ATS Ltd Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Lang High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-lang/ Medium
Version file version 3.20.0 High
Version Manifest Bundle-Version 3.20.0 High
Version Manifest Implementation-Version 3.20.0 High
Version pom parent-version 3.20.0 Low
Version pom version 3.20.0 Highest
commons-logging-1.3.6.jar
Description:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.6/commons-logging-1.3.6.jar
MD5: fe0ccbe8971fed954a0ad6528fe3ef24
SHA1: 63e78ca6cd446c0ad166d14f03ed99e7efb3896d
SHA256: f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357
Referenced In Project/Scope: Tailormap API:compile
commons-logging-1.3.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.0.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-logging High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name logging Highest
Vendor Manifest automatic-module-name org.apache.commons.logging Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-logging Highest
Vendor pom artifactid commons-logging Low
Vendor pom developer email baliuka@apache.org Low
Vendor pom developer email costin@apache.org Low
Vendor pom developer email craigmcc@apache.org Low
Vendor pom developer email dennisl@apache.org Low
Vendor pom developer email donaldp@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email morgand@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email rsitze@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer email skitching@apache.org Low
Vendor pom developer email tn@apache.org Low
Vendor pom developer id baliuka Medium
Vendor pom developer id bstansberry Medium
Vendor pom developer id costin Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dennisl Medium
Vendor pom developer id donaldp Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rsitze Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id skitching Medium
Vendor pom developer id tn Medium
Vendor pom developer name Brian Stansberry Medium
Vendor pom developer name Costin Manolache Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dennis Lundberg Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Juozas Baliuka Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Peter Donald Medium
Vendor pom developer name Richard Sitze Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Simon Kitching Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom developer org Apache Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-logging Highest
Vendor pom name Apache Commons Logging High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-logging/ Highest
Product file name commons-logging High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name logging Highest
Product Manifest automatic-module-name org.apache.commons.logging Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Product Manifest Bundle-Name Apache Commons Logging Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Product Manifest Implementation-Title Apache Commons Logging High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Logging Medium
Product pom artifactid commons-logging Highest
Product pom developer email baliuka@apache.org Low
Product pom developer email costin@apache.org Low
Product pom developer email craigmcc@apache.org Low
Product pom developer email dennisl@apache.org Low
Product pom developer email donaldp@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email morgand@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email rsitze@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer email skitching@apache.org Low
Product pom developer email tn@apache.org Low
Product pom developer id baliuka Low
Product pom developer id bstansberry Low
Product pom developer id costin Low
Product pom developer id craigmcc Low
Product pom developer id dennisl Low
Product pom developer id donaldp Low
Product pom developer id ggregory Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rsitze Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id skitching Low
Product pom developer id tn Low
Product pom developer name Brian Stansberry Low
Product pom developer name Costin Manolache Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dennis Lundberg Low
Product pom developer name Gary Gregory Low
Product pom developer name Juozas Baliuka Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Peter Donald Low
Product pom developer name Richard Sitze Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Simon Kitching Low
Product pom developer name Thomas Neidhart Low
Product pom developer org Apache Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-logging Highest
Product pom name Apache Commons Logging High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-logging/ Medium
Version file version 1.3.6 High
Version Manifest Bundle-Version 1.3.6 High
Version Manifest Implementation-Version 1.3.6 High
Version pom parent-version 1.3.6 Low
Version pom version 1.3.6 Highest
pkg:maven/commons-logging/commons-logging@1.3.6
(Confidence :High)
commons-pool-1.6.jar
Description:
Commons Object Pooling Library
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.6/commons-pool-1.6.jar
MD5: 5ca02245c829422176d23fa530e919cc
SHA1: 4572d589699f09d866a226a14b7f4323c6d8f040
SHA256: 46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc
Referenced In Project/Scope: Tailormap API:compile
commons-pool-1.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-pool High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name pool Highest
Vendor Manifest bundle-docurl http://commons.apache.org/pool/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.pool Medium
Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-pool Highest
Vendor pom artifactid commons-pool Low
Vendor pom developer id craigmcc Medium
Vendor pom developer id dirkv Medium
Vendor pom developer id dweinr1 Medium
Vendor pom developer id geirm Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sandymac Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name David Weinrich Medium
Vendor pom developer name Dirk Verbeeck Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Geir Magnusson Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Sandy McArthur Medium
Vendor pom developer org Apache Software Foundation Medium
Vendor pom groupid commons-pool Highest
Vendor pom name Commons Pool High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url http://commons.apache.org/pool/ Highest
Product file name commons-pool High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name pool Highest
Product Manifest bundle-docurl http://commons.apache.org/pool/ Low
Product Manifest Bundle-Name Commons Pool Medium
Product Manifest bundle-symbolicname org.apache.commons.pool Medium
Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low
Product Manifest Implementation-Title Commons Pool High
Product Manifest specification-title Commons Pool Medium
Product pom artifactid commons-pool Highest
Product pom developer id craigmcc Low
Product pom developer id dirkv Low
Product pom developer id dweinr1 Low
Product pom developer id geirm Low
Product pom developer id ggregory Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id sandymac Low
Product pom developer name Craig McClanahan Low
Product pom developer name David Weinrich Low
Product pom developer name Dirk Verbeeck Low
Product pom developer name Gary Gregory Low
Product pom developer name Geir Magnusson Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Sandy McArthur Low
Product pom developer org Apache Software Foundation Low
Product pom groupid commons-pool Highest
Product pom name Commons Pool High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url http://commons.apache.org/pool/ Medium
Version file version 1.6 High
Version Manifest Implementation-Version 1.6 High
Version pom parent-version 1.6 Low
Version pom version 1.6 Highest
pkg:maven/commons-pool/commons-pool@1.6
(Confidence :High)
commons-text-1.13.0.jar
Description:
Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
and manipulating text that should be of use in a Java environment.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.13.0/commons-text-1.13.0.jar
MD5: 4b4766452c04316e3ef6ffe3490d6b10
SHA1: ba2ed5521c491cabf7ecdb57f77922561c2e8958
SHA256: 1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38
Referenced In Project/Scope: Tailormap API:compile
commons-text-1.13.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name commons-text High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name text Highest
Vendor Manifest automatic-module-name org.apache.commons.text Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low
Vendor Manifest bundle-symbolicname org.apache.commons.text Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-text Highest
Vendor pom artifactid commons-text Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email djones@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email kinow@apache.org Low
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id djones Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id kinow Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Bruno P. Kinoshita Medium
Vendor pom developer name Duncan Jones Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid org.apache.commons Highest
Vendor pom name Apache Commons Text High
Vendor pom parent-artifactid commons-parent Low
Vendor pom url https://commons.apache.org/proper/commons-text Highest
Product file name commons-text High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name text Highest
Product Manifest automatic-module-name org.apache.commons.text Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-text Low
Product Manifest Bundle-Name Apache Commons Text Medium
Product Manifest bundle-symbolicname org.apache.commons.text Medium
Product Manifest Implementation-Title Apache Commons Text High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Text Medium
Product pom artifactid commons-text Highest
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email djones@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email kinow@apache.org Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id djones Low
Product pom developer id ggregory Low
Product pom developer id kinow Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Bruno P. Kinoshita Low
Product pom developer name Duncan Jones Low
Product pom developer name Gary Gregory Low
Product pom developer name Rob Tompkins Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid org.apache.commons Highest
Product pom name Apache Commons Text High
Product pom parent-artifactid commons-parent Medium
Product pom url https://commons.apache.org/proper/commons-text Medium
Version file version 1.13.0 High
Version Manifest Bundle-Version 1.13.0 High
Version Manifest Implementation-Version 1.13.0 High
Version pom parent-version 1.13.0 Low
Version pom version 1.13.0 Highest
content-type-2.3.jar
Description:
Java library for Content (Media) Type representation
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/content-type/2.3/content-type-2.3.jar
MD5: f0fc0d6be73e838863e2197c03a27c3f
SHA1: e3aa0be212d7a42839a8f3f506f5b990bcce0222
SHA256: 60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895
Referenced In Project/Scope: Tailormap API:compile
content-type-2.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name content-type High
Vendor jar package name nimbusds Highest
Vendor Manifest build-date ${timestamp} Low
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest build-number ${buildNumber} Low
Vendor Manifest build-tag 2.3 Low
Vendor Manifest bundle-docurl https://connect2id.com Low
Vendor Manifest bundle-symbolicname com.nimbusds.content-type Medium
Vendor Manifest implementation-url https://bitbucket.org/connect2id/nimbus-content-type Low
Vendor Manifest Implementation-Vendor Connect2id Ltd. High
Vendor Manifest Implementation-Vendor-Id com.nimbusds Medium
Vendor Manifest specification-vendor Connect2id Ltd. Low
Vendor pom artifactid content-type Highest
Vendor pom artifactid content-type Low
Vendor pom developer email vladimir@dzhuvinov.com Low
Vendor pom developer id vdzhuvinov Medium
Vendor pom developer name Vladimir Dzhuvinov Medium
Vendor pom groupid com.nimbusds Highest
Vendor pom name Nimbus Content Type High
Vendor pom organization name Connect2id Ltd. High
Vendor pom organization url https://connect2id.com Medium
Vendor pom url https://bitbucket.org/connect2id/nimbus-content-type Highest
Product file name content-type High
Product jar package name nimbusds Highest
Product Manifest build-date ${timestamp} Low
Product Manifest build-jdk-spec 11 Low
Product Manifest build-number ${buildNumber} Low
Product Manifest build-tag 2.3 Low
Product Manifest bundle-docurl https://connect2id.com Low
Product Manifest Bundle-Name Nimbus Content Type Medium
Product Manifest bundle-symbolicname com.nimbusds.content-type Medium
Product Manifest Implementation-Title Nimbus Content Type High
Product Manifest implementation-url https://bitbucket.org/connect2id/nimbus-content-type Low
Product Manifest specification-title Nimbus Content Type Medium
Product pom artifactid content-type Highest
Product pom developer email vladimir@dzhuvinov.com Low
Product pom developer id vdzhuvinov Low
Product pom developer name Vladimir Dzhuvinov Low
Product pom groupid com.nimbusds Highest
Product pom name Nimbus Content Type High
Product pom organization name Connect2id Ltd. Low
Product pom organization url https://connect2id.com Low
Product pom url https://bitbucket.org/connect2id/nimbus-content-type Medium
Version file version 2.3 High
Version Manifest build-tag 2.3 Low
Version Manifest Implementation-Version 2.3 High
Version pom version 2.3 Highest
pkg:maven/com.nimbusds/content-type@2.3
(Confidence :High)
disruptor-1.2.15.jar
Description:
Conversant Disruptor - very high throughput Java BlockingQueue
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/conversantmedia/disruptor/1.2.15/disruptor-1.2.15.jar
MD5: 9b66d90caa2794c624e4cc0cd6c0468b
SHA1: 21924297eb54dfd8a390c3e08cc9e7a457dff358
SHA256: bd3154a3fb41594b02950ad52bcd9b775a45577bd4d6ef1bee66ea6885c9f39e
Referenced In Project/Scope: Tailormap API:compile
disruptor-1.2.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-wms@34.3
Evidence
Type Source Name Value Confidence
Vendor file name disruptor High
Vendor jar package name concurrent Low
Vendor jar package name conversantmedia Highest
Vendor jar package name conversantmedia Low
Vendor jar package name util Low
Vendor pom artifactid disruptor Highest
Vendor pom artifactid disruptor Low
Vendor pom developer email john@2ad.com Low
Vendor pom developer name John Cairns Medium
Vendor pom developer org URL https://github.com/jac18281828 Medium
Vendor pom groupid com.conversantmedia Highest
Vendor pom name : High
Vendor pom organization name Conversant Engineering High
Vendor pom organization url http://engineering.conversantmedia.com Medium
Vendor pom url conversant/disruptor Highest
Product file name disruptor High
Product jar package name concurrent Low
Product jar package name conversantmedia Highest
Product jar package name util Low
Product pom artifactid disruptor Highest
Product pom developer email john@2ad.com Low
Product pom developer name John Cairns Low
Product pom developer org URL https://github.com/jac18281828 Low
Product pom groupid com.conversantmedia Highest
Product pom name : High
Product pom organization name Conversant Engineering Low
Product pom organization url http://engineering.conversantmedia.com Low
Product pom url conversant/disruptor High
Version file version 1.2.15 High
Version pom version 1.2.15 Highest
pkg:maven/com.conversantmedia/disruptor@1.2.15
(Confidence :High)
ejml-core-0.41.jar
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-core/0.41/ejml-core-0.41.jar
MD5: 200146f623a8eb87196bbc35cae6c2b1
SHA1: 92ac2bee332a5697c42e576b94d563ba8c25877c
SHA256: 8d36469e8414d79c875defc0af3b980525d384761c9471d15a4f365b936dd1d5
Referenced In Project/Scope: Tailormap API:compile
ejml-core-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name ejml-core High
Vendor jar package name ejml Highest
Vendor jar package name ejml Low
Vendor jar package name matrix Highest
Vendor jar package name sparse Highest
Vendor pom artifactid ejml-core Highest
Vendor pom artifactid ejml-core Low
Vendor pom developer email peter.abeles@gmail.com Low
Vendor pom developer id pabeles Medium
Vendor pom developer name Peter Abeles Medium
Vendor pom groupid org.ejml Highest
Vendor pom name EJML High
Vendor pom url http://ejml.org/ Highest
Product file name ejml-core High
Product jar package name ejml Highest
Product jar package name matrix Highest
Product jar package name sparse Highest
Product pom artifactid ejml-core Highest
Product pom developer email peter.abeles@gmail.com Low
Product pom developer id pabeles Low
Product pom developer name Peter Abeles Low
Product pom groupid org.ejml Highest
Product pom name EJML High
Product pom url http://ejml.org/ Medium
Version file version 0.41 High
Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-core@0.41
(Confidence :High)
ejml-ddense-0.41.jar
Description:
A fast and easy to use dense and sparse matrix linear algebra library written in Java.
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/ejml/ejml-ddense/0.41/ejml-ddense-0.41.jar
MD5: 2128d09683d0ed77429fac23f64e42c7
SHA1: 782c80d4c3c8a3432c4641f24c177f336a360f9c
SHA256: 355347e9cac7e96d5d724d331a9b04bb14a8a02e1d111f1ac51c79f25d937123
Referenced In Project/Scope: Tailormap API:compile
ejml-ddense-0.41.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name ejml-ddense High
Vendor jar package name dense Highest
Vendor jar package name dense Low
Vendor jar package name ejml Highest
Vendor jar package name ejml Low
Vendor jar package name row Low
Vendor pom artifactid ejml-ddense Highest
Vendor pom artifactid ejml-ddense Low
Vendor pom developer email peter.abeles@gmail.com Low
Vendor pom developer id pabeles Medium
Vendor pom developer name Peter Abeles Medium
Vendor pom groupid org.ejml Highest
Vendor pom name EJML High
Vendor pom url http://ejml.org/ Highest
Product file name ejml-ddense High
Product jar package name dense Highest
Product jar package name dense Low
Product jar package name ejml Highest
Product jar package name row Low
Product pom artifactid ejml-ddense Highest
Product pom developer email peter.abeles@gmail.com Low
Product pom developer id pabeles Low
Product pom developer name Peter Abeles Low
Product pom groupid org.ejml Highest
Product pom name EJML High
Product pom url http://ejml.org/ Medium
Version file version 0.41 High
Version pom version 0.41 Highest
pkg:maven/org.ejml/ejml-ddense@0.41
(Confidence :High)
evo-inflector-1.3.jar
Description:
Evo Inflector implements English pluralization algorithm.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/atteo/evo-inflector/1.3/evo-inflector-1.3.jar
MD5: 3ef7ac615df62834f49f2c29c57fe329
SHA1: 4cf8b5f363c60e63f8b7688ac053590460f2768e
SHA256: ac0192fd110a0363732b17ea94fd1ce8cfd85790c8e1551e14f866908b5d80e1
Referenced In Project/Scope: Tailormap API:compile
evo-inflector-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.0.5
Evidence
Type Source Name Value Confidence
Vendor file name evo-inflector High
Vendor jar package name atteo Highest
Vendor jar package name english Highest
Vendor jar package name evo Highest
Vendor jar package name inflector Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor pom artifactid evo-inflector Highest
Vendor pom artifactid evo-inflector Low
Vendor pom developer email sentinel@atteo.com Low
Vendor pom developer id sentinel Medium
Vendor pom developer name Sławek Piotrowski Medium
Vendor pom groupid org.atteo Highest
Vendor pom name Evo Inflector High
Vendor pom parent-artifactid parent Low
Vendor pom url http://atteo.org/static/evo-inflector Highest
Product file name evo-inflector High
Product jar package name atteo Highest
Product jar package name english Highest
Product jar package name evo Highest
Product jar package name inflector Highest
Product Manifest build-jdk-spec 1.8 Low
Product pom artifactid evo-inflector Highest
Product pom developer email sentinel@atteo.com Low
Product pom developer id sentinel Low
Product pom developer name Sławek Piotrowski Low
Product pom groupid org.atteo Highest
Product pom name Evo Inflector High
Product pom parent-artifactid parent Medium
Product pom url http://atteo.org/static/evo-inflector Medium
Version file version 1.3 High
Version pom parent-version 1.3 Low
Version pom version 1.3 Highest
pkg:maven/org.atteo/evo-inflector@1.3
(Confidence :High)
flyway-core-12.4.0.jar
File Path: /home/runner/.m2/repository/org/flywaydb/flyway-core/12.4.0/flyway-core-12.4.0.jar
MD5: 6d78880e8442f7eccad34e652add7630
SHA1: 8dfd90404bb9b6fd4727c67ccbe9a7dfa20c0e53
SHA256: c3f93df1f3e0c9d14652adb5ade97401f2ede503859ac693c2af5c06e2797799
Referenced In Project/Scope: Tailormap API:compile
flyway-core-12.4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name flyway-core High
Vendor jar package name core Highest
Vendor jar package name flyway Highest
Vendor jar package name flywaydb Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor pom artifactid flyway-core Highest
Vendor pom artifactid flyway-core Low
Vendor pom groupid org.flywaydb Highest
Vendor pom name ${project.artifactId} High
Vendor pom parent-artifactid flyway-parent Low
Product file name flyway-core High
Product jar package name core Highest
Product jar package name flyway Highest
Product jar package name flywaydb Highest
Product Manifest build-jdk-spec 21 Low
Product pom artifactid flyway-core Highest
Product pom groupid org.flywaydb Highest
Product pom name ${project.artifactId} High
Product pom parent-artifactid flyway-parent Medium
Version file version 12.4.0 High
Version pom version 12.4.0 Highest
pkg:maven/org.flywaydb/flyway-core@12.4.0
(Confidence :High)
flyway-database-postgresql-12.4.0.jar
File Path: /home/runner/.m2/repository/org/flywaydb/flyway-database-postgresql/12.4.0/flyway-database-postgresql-12.4.0.jar
MD5: e1423cf973056383b5375796dc2f83d7
SHA1: 90fc8dc92bef70c143c4112ad6658f29eea437fd
SHA256: abc075a5c3cbf37dc64b28fec7e2398fb14f31109f7ab6271854738797407b85
Referenced In Project/Scope: Tailormap API:compile
flyway-database-postgresql-12.4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name flyway-database-postgresql High
Vendor jar package name database Highest
Vendor jar package name flywaydb Highest
Vendor jar package name postgresql Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor pom artifactid flyway-database-postgresql Highest
Vendor pom artifactid flyway-database-postgresql Low
Vendor pom groupid org.flywaydb Highest
Vendor pom name ${project.artifactId} High
Vendor pom parent-artifactid flyway-parent Low
Product file name flyway-database-postgresql High
Product jar package name database Highest
Product jar package name flywaydb Highest
Product jar package name postgresql Highest
Product Manifest build-jdk-spec 21 Low
Product pom artifactid flyway-database-postgresql Highest
Product pom groupid org.flywaydb Highest
Product pom name ${project.artifactId} High
Product pom parent-artifactid flyway-parent Medium
Version file version 12.4.0 High
Version pom version 12.4.0 Highest
pkg:maven/org.flywaydb/flyway-database-postgresql@12.4.0
(Confidence :High)
gt-xml-34.3.jar
Description:
GTXML Schema Driven Parser
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/gt-xml/34.3/gt-xml-34.3.jar
MD5: baf816b00f20152ffed670612a3e0460
SHA1: 0e7774f7bb9aba2e31e79536754b4f79cc49130e
SHA256: 6c67b79206c52864b20069a44cbe23d4a79e3e2f94714d41515cd070054c3e15
Referenced In Project/Scope: Tailormap API:compile
gt-xml-34.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name gt-xml High
Vendor jar package name geotools Highest
Vendor jar package name schema Highest
Vendor jar package name xml Highest
Vendor Manifest automatic-module-name org.geotools.xml Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 19-Mar-2026 18:28 Low
Vendor Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Vendor pom artifactid gt-xml Highest
Vendor pom artifactid gt-xml Low
Vendor pom developer email jdeolive@users.sourceforge.net Low
Vendor pom developer email jive@users.sourceforge.net Low
Vendor pom developer name Jody Garnett Medium
Vendor pom developer name Justin Deoliveira Medium
Vendor pom developer org Refractions Research Medium
Vendor pom developer org The Open Planning Project Medium
Vendor pom groupid org.geotools Highest
Vendor pom name XML Parsing Support High
Vendor pom parent-artifactid library Low
Product file name gt-xml High
Product jar package name geotools Highest
Product jar package name schema Highest
Product jar package name xml Highest
Product Manifest automatic-module-name org.geotools.xml Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 19-Mar-2026 18:28 Low
Product Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Product pom artifactid gt-xml Highest
Product pom developer email jdeolive@users.sourceforge.net Low
Product pom developer email jive@users.sourceforge.net Low
Product pom developer name Jody Garnett Low
Product pom developer name Justin Deoliveira Low
Product pom developer org Refractions Research Low
Product pom developer org The Open Planning Project Low
Product pom groupid org.geotools Highest
Product pom name XML Parsing Support High
Product pom parent-artifactid library Medium
Version file version 34.3 High
Version Manifest project-version 34.3 Medium
Version pom version 34.3 Highest
Related Dependencies
gt-jdbc-oracle-34.3.jar
File Path: /home/runner/.m2/repository/org/geotools/jdbc/gt-jdbc-oracle/34.3/gt-jdbc-oracle-34.3.jar
MD5: c233f19072d1b91c61e00ca8dd410fbd
SHA1: c4b2db949f5b7ffed93ec38b4086420bed1ef116
SHA256: d63639b2981e8b265098425bda6d1654aa50131cd5ec5d15bae7c2768fb1c2c1
pkg:maven/org.geotools.jdbc/gt-jdbc-oracle@34.3
gt-jdbc-postgis-34.3.jar
File Path: /home/runner/.m2/repository/org/geotools/jdbc/gt-jdbc-postgis/34.3/gt-jdbc-postgis-34.3.jar
MD5: 38461f993aaae5b29b4743489796be79
SHA1: 6633a3def5a1e1da8eaa4fd80cf22ddb3c66b9ca
SHA256: 7d9445d0d8b674c477957a1d8c9ee89ead7fd2142da3e7e0566d4377ab4966f8
pkg:maven/org.geotools.jdbc/gt-jdbc-postgis@34.3
gt-xsd-core-34.3.jar
Description:
Schema based xml parsing. This module contains tools for creating
bindings from xml types to java types. Schema modelling is based
on Eclipse XSD.
License:
Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
File Path: /home/runner/.m2/repository/org/geotools/xsd/gt-xsd-core/34.3/gt-xsd-core-34.3.jar
MD5: c483534eb81415dd3ff896dc5ee8975e
SHA1: ebdc8a974f9b76f36f10748428e9f4740069562d
SHA256: 39c17fdbfd86c2bb3e6c7f6de5636c21e3d634055033016bbd35b794429c6230
Referenced In Project/Scope: Tailormap API:compile
gt-xsd-core-34.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name gt-xsd-core High
Vendor jar package name bindings Highest
Vendor jar package name geotools Highest
Vendor jar package name xml Highest
Vendor jar package name xsd Highest
Vendor Manifest automatic-module-name org.geotools.xsd.xsd_core Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 19-Mar-2026 18:28 Low
Vendor Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Vendor pom artifactid gt-xsd-core Highest
Vendor pom artifactid gt-xsd-core Low
Vendor pom developer email jdeolive@users.sourceforge.net Low
Vendor pom developer email jive@users.sourceforge.net Low
Vendor pom developer id jdeolive Medium
Vendor pom developer id jive Medium
Vendor pom developer name Jody Garnett Medium
Vendor pom developer name Justin Deoliveira Medium
Vendor pom developer org Refractions Research Medium
Vendor pom developer org The Open Planning Project Medium
Vendor pom groupid org.geotools.xsd Highest
Vendor pom name XML Parsing High
Vendor pom parent-artifactid xsd Low
Product file name gt-xsd-core High
Product jar package name bindings Highest
Product jar package name geotools Highest
Product jar package name xml Highest
Product jar package name xsd Highest
Product Manifest automatic-module-name org.geotools.xsd.xsd_core Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 19-Mar-2026 18:28 Low
Product Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Product pom artifactid gt-xsd-core Highest
Product pom developer email jdeolive@users.sourceforge.net Low
Product pom developer email jive@users.sourceforge.net Low
Product pom developer id jdeolive Low
Product pom developer id jive Low
Product pom developer name Jody Garnett Low
Product pom developer name Justin Deoliveira Low
Product pom developer org Refractions Research Low
Product pom developer org The Open Planning Project Low
Product pom groupid org.geotools.xsd Highest
Product pom name XML Parsing High
Product pom parent-artifactid xsd Medium
Version file version 34.3 High
Version Manifest project-version 34.3 Medium
Version pom version 34.3 Highest
Related Dependencies
hibernate-core-7.3.2.Final.jar
Description:
Hibernate's core ORM functionality
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-core/7.3.2.Final/hibernate-core-7.3.2.Final.jar
MD5: 4d429c3bff054fa07f30568fae30fb0a
SHA1: 054eaa6a605f75ccb60a291cf2af6529d5f4547b
SHA256: 709aeb2d5500af04b8fc8582bc6ef358383b3976127cebdfaef05246ed7de55d
Referenced In Project/Scope: Tailormap API:compile
hibernate-core-7.3.2.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name hibernate-core High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name hibernate Highest
Vendor Manifest automatic-module-name org.hibernate.orm.core Medium
Vendor Manifest bundle-docurl https://hibernate.org/orm/releases/7.3 Low
Vendor Manifest bundle-symbolicname org.hibernate.orm.core Medium
Vendor Manifest implementation-url https://hibernate.org/orm Low
Vendor Manifest Implementation-Vendor Hibernate.org High
Vendor Manifest Implementation-Vendor-Id org.hibernate Medium
Vendor Manifest specification-vendor Hibernate.org Low
Vendor pom artifactid hibernate-core Highest
Vendor pom artifactid hibernate-core Low
Vendor pom developer id hibernate-team Medium
Vendor pom developer name The Hibernate Development Team Medium
Vendor pom developer org Hibernate.org Medium
Vendor pom developer org URL https://hibernate.org Medium
Vendor pom groupid org.hibernate.orm Highest
Vendor pom name Hibernate ORM - hibernate-core High
Vendor pom organization name Hibernate.org High
Vendor pom organization url https://hibernate.org Medium
Vendor pom url https://hibernate.org/orm Highest
Product file name hibernate-core High
Product jar package name hibernate Highest
Product Manifest automatic-module-name org.hibernate.orm.core Medium
Product Manifest bundle-docurl https://hibernate.org/orm/releases/7.3 Low
Product Manifest Bundle-Name hibernate-core Medium
Product Manifest bundle-symbolicname org.hibernate.orm.core Medium
Product Manifest Implementation-Title hibernate-core High
Product Manifest implementation-url https://hibernate.org/orm Low
Product Manifest specification-title hibernate-core Medium
Product pom artifactid hibernate-core Highest
Product pom developer id hibernate-team Low
Product pom developer name The Hibernate Development Team Low
Product pom developer org Hibernate.org Low
Product pom developer org URL https://hibernate.org Low
Product pom groupid org.hibernate.orm Highest
Product pom name Hibernate ORM - hibernate-core High
Product pom organization name Hibernate.org Low
Product pom organization url https://hibernate.org Low
Product pom url https://hibernate.org/orm Medium
Version Manifest Bundle-Version 7.3.2.Final High
Version Manifest Implementation-Version 7.3.2.Final High
Version pom version 7.3.2.Final Highest
Related Dependencies
hibernate-envers-7.3.2.Final.jar
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-envers/7.3.2.Final/hibernate-envers-7.3.2.Final.jar
MD5: e47e6f352574fc53e867f139f500d226
SHA1: d4e483ef7802136c7d75a56cd8dec2326e2bf81c
SHA256: a25f90e06bd3dc5a79fdcb52b546b0f4fb3ad24898a8af54e83b07a1ee544e53
pkg:maven/org.hibernate.orm/hibernate-envers@7.3.2.Final
hibernate-micrometer-7.3.2.Final.jar
File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-micrometer/7.3.2.Final/hibernate-micrometer-7.3.2.Final.jar
MD5: 40f68c791653c6c95f9ecab406e035cf
SHA1: a4de41b8ba01fa1f71a168d37f654380137dd4a3
SHA256: 261d248e8f77eeaa9e5415f2551f803ed1ee78e19db8c0708bccee3ed21a30a5
pkg:maven/org.hibernate.orm/hibernate-micrometer@7.3.2.Final
hibernate-models-1.1.1.jar
Description:
A de-typed abstraction over reflection and annotations
License:
Apache License Version 2.0: http://www.apache.org/licenses/
File Path: /home/runner/.m2/repository/org/hibernate/models/hibernate-models/1.1.1/hibernate-models-1.1.1.jar
MD5: bfdc23cef68eaa53fc308edb20a46264
SHA1: c890a4cc781fd8720e0e2613b4a24b33cdaa80a1
SHA256: 7cb645f2ebe5fcb63e21d26259cef62d93a1ca77c400bda6992c92cb19826a89
Referenced In Project/Scope: Tailormap API:runtime
hibernate-models-1.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name hibernate-models High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name hibernate Highest
Vendor jar package name models Highest
Vendor Manifest automatic-module-name org.hibernate.models Medium
Vendor pom artifactid hibernate-models Highest
Vendor pom artifactid hibernate-models Low
Vendor pom developer id hibernate-team Medium
Vendor pom developer name The Hibernate Development Team Medium
Vendor pom developer org Hibernate.org Medium
Vendor pom developer org URL https://hibernate.org Medium
Vendor pom groupid org.hibernate.models Highest
Vendor pom name Hibernate Models High
Vendor pom organization name Hibernate.org High
Vendor pom organization url https://hibernate.org Medium
Vendor pom url hibernate/hibernate-models Highest
Product file name hibernate-models High
Product jar package name hibernate Highest
Product jar package name models Highest
Product Manifest automatic-module-name org.hibernate.models Medium
Product pom artifactid hibernate-models Highest
Product pom developer id hibernate-team Low
Product pom developer name The Hibernate Development Team Low
Product pom developer org Hibernate.org Low
Product pom developer org URL https://hibernate.org Low
Product pom groupid org.hibernate.models Highest
Product pom name Hibernate Models High
Product pom organization name Hibernate.org Low
Product pom organization url https://hibernate.org Low
Product pom url hibernate/hibernate-models High
Version file version 1.1.1 High
Version pom version 1.1.1 Highest
pkg:maven/org.hibernate.models/hibernate-models@1.1.1
(Confidence :High)
hibernate-validator-9.0.1.Final.jar
Description:
Hibernate's Jakarta Validation reference implementation.
License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/hibernate/validator/hibernate-validator/9.0.1.Final/hibernate-validator-9.0.1.Final.jar
MD5: 142bc6bcf1a014e768fa962013f3ac1d
SHA1: 28c0e41ecc84d1f0b8b6d81d16e0784e63364e68
SHA256: 25f40118fa4c50f8522d090d25d52d5a38953b0ccd1250835f052e7bd3164ce0
Referenced In Project/Scope: Tailormap API:compile
hibernate-validator-9.0.1.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name hibernate-validator High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name engine Highest
Vendor jar package name hibernate Highest
Vendor jar package name validator Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname org.hibernate.validator Medium
Vendor Manifest implementation-url https://hibernate.org/validator/ Low
Vendor Manifest Implementation-Vendor org.hibernate.validator High
Vendor Manifest Implementation-Vendor-Id org.hibernate.validator Medium
Vendor pom artifactid hibernate-validator Highest
Vendor pom artifactid hibernate-validator Low
Vendor pom developer email davide@hibernate.org Low
Vendor pom developer email emmanuel@hibernate.org Low
Vendor pom developer email guillaume.smet@hibernate.org Low
Vendor pom developer email gunnar@hibernate.org Low
Vendor pom developer email hferents@redhat.com Low
Vendor pom developer email kevin.pollet@serli.com Low
Vendor pom developer email marko@hibernate.org Low
Vendor pom developer id davide.dalto Medium
Vendor pom developer id epbernard Medium
Vendor pom developer id guillaume.smet Medium
Vendor pom developer id gunnar.morling Medium
Vendor pom developer id hardy.ferentschik Medium
Vendor pom developer id kevinpollet Medium
Vendor pom developer id marko.bekhta Medium
Vendor pom developer name Davide D'Alto Medium
Vendor pom developer name Emmanuel Bernard Medium
Vendor pom developer name Guillaume Smet Medium
Vendor pom developer name Gunnar Morling Medium
Vendor pom developer name Hardy Ferentschik Medium
Vendor pom developer name Kevin Pollet Medium
Vendor pom developer name Marko Bekhta Medium
Vendor pom developer org Red Hat, Inc. Medium
Vendor pom developer org SERLI Medium
Vendor pom groupid org.hibernate.validator Highest
Vendor pom name Hibernate Validator Engine High
Vendor pom url https://hibernate.org/validator Highest
Product file name hibernate-validator High
Product jar package name engine Highest
Product jar package name hibernate Highest
Product jar package name validator Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Hibernate Validator Engine Medium
Product Manifest bundle-symbolicname org.hibernate.validator Medium
Product Manifest Implementation-Title hibernate-validator High
Product Manifest implementation-url https://hibernate.org/validator/ Low
Product Manifest specification-title Jakarta Validation Medium
Product pom artifactid hibernate-validator Highest
Product pom developer email davide@hibernate.org Low
Product pom developer email emmanuel@hibernate.org Low
Product pom developer email guillaume.smet@hibernate.org Low
Product pom developer email gunnar@hibernate.org Low
Product pom developer email hferents@redhat.com Low
Product pom developer email kevin.pollet@serli.com Low
Product pom developer email marko@hibernate.org Low
Product pom developer id davide.dalto Low
Product pom developer id epbernard Low
Product pom developer id guillaume.smet Low
Product pom developer id gunnar.morling Low
Product pom developer id hardy.ferentschik Low
Product pom developer id kevinpollet Low
Product pom developer id marko.bekhta Low
Product pom developer name Davide D'Alto Low
Product pom developer name Emmanuel Bernard Low
Product pom developer name Guillaume Smet Low
Product pom developer name Gunnar Morling Low
Product pom developer name Hardy Ferentschik Low
Product pom developer name Kevin Pollet Low
Product pom developer name Marko Bekhta Low
Product pom developer org Red Hat, Inc. Low
Product pom developer org SERLI Low
Product pom groupid org.hibernate.validator Highest
Product pom name Hibernate Validator Engine High
Product pom url https://hibernate.org/validator Medium
Version Manifest Bundle-Version 9.0.1.Final High
Version Manifest Implementation-Version 9.0.1.Final High
Version pom version 9.0.1.Final Highest
hsqldb-2.7.3.jar
Description:
HSQLDB - Lightweight 100% Java SQL Database Engine
License:
HSQLDB License, a BSD open source license: http://hsqldb.org/web/hsqlLicense.html
File Path: /home/runner/.m2/repository/org/hsqldb/hsqldb/2.7.3/hsqldb-2.7.3.jar
MD5: 724301ab61ff54755deec86c7a724505
SHA1: 85b49338b36f3051d217295596cf92beb92e4bfb
SHA256: 6f2f77eedbe75cfbe26bf30d73b13de0cc57fb7cdb27a92ed8c1a012f0e2363a
Referenced In Project/Scope: Tailormap API:compile
hsqldb-2.7.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-epsg-hsql@34.3
Evidence
Type Source Name Value Confidence
Vendor file name hsqldb High
Vendor jar package name database Highest
Vendor jar package name hsqldb Highest
Vendor jar package name java Highest
Vendor Manifest bundle-symbolicname org.hsqldb.hsqldb Medium
Vendor Manifest originally-created-by 11.0.21+9 (Eclipse Adoptium) Low
Vendor Manifest specification-vendor The HSQL Development Group Low
Vendor pom artifactid hsqldb Highest
Vendor pom artifactid hsqldb Low
Vendor pom developer email blaine.simpson@admc.com Low
Vendor pom developer email ft@cluedup.com Low
Vendor pom developer id fredt Medium
Vendor pom developer id unsaved Medium
Vendor pom developer name Blaine Simpson Medium
Vendor pom developer name Fred Toussi Medium
Vendor pom groupid org.hsqldb Highest
Vendor pom name HyperSQL Database High
Vendor pom organization name The HSQL Development Group High
Vendor pom organization url http://hsqldb.org Medium
Vendor pom url http://hsqldb.org Highest
Product file name hsqldb High
Product jar package name database Highest
Product jar package name hsqldb Highest
Product jar package name java Highest
Product Manifest Bundle-Name HSQLDB Medium
Product Manifest bundle-symbolicname org.hsqldb.hsqldb Medium
Product Manifest Implementation-Title Standard runtime High
Product Manifest originally-created-by 11.0.21+9 (Eclipse Adoptium) Low
Product Manifest specification-title HSQLDB Medium
Product pom artifactid hsqldb Highest
Product pom developer email blaine.simpson@admc.com Low
Product pom developer email ft@cluedup.com Low
Product pom developer id fredt Low
Product pom developer id unsaved Low
Product pom developer name Blaine Simpson Low
Product pom developer name Fred Toussi Low
Product pom groupid org.hsqldb Highest
Product pom name HyperSQL Database High
Product pom organization name The HSQL Development Group Low
Product pom organization url http://hsqldb.org Low
Product pom url http://hsqldb.org Medium
Version file version 2.7.3 High
Version Manifest Bundle-Version 2.7.3 High
Version Manifest Implementation-Version 2.7.3 High
Version pom version 2.7.3 Highest
pkg:maven/org.hsqldb/hsqldb@2.7.3
(Confidence :High)
cpe:2.3:a:hsqldb:hypersql_database:2.7.3:*:*:*:*:*:*:*
(Confidence :Low)
suppress
httpclient-4.5.14.jar
Description:
Apache HttpComponents Client
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256: c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Project/Scope: Tailormap API:compile
httpclient-4.5.14.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-wfs-ng@34.3
Evidence
Type Source Name Value Confidence
Vendor file name httpclient High
Vendor jar package name apache Highest
Vendor jar package name client Highest
Vendor jar package name httpclient Highest
Vendor Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium
Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache.httpcomponents Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid httpclient Highest
Vendor pom artifactid httpclient Low
Vendor pom groupid org.apache.httpcomponents Highest
Vendor pom name Apache HttpClient High
Vendor pom parent-artifactid httpcomponents-client Low
Vendor pom url http://hc.apache.org/httpcomponents-client-ga Highest
Product file name httpclient High
Product jar package name apache Highest
Product jar package name client Highest
Product jar package name http Highest
Product jar package name httpclient Highest
Product Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium
Product Manifest Implementation-Title Apache HttpClient High
Product Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low
Product Manifest specification-title Apache HttpClient Medium
Product pom artifactid httpclient Highest
Product pom groupid org.apache.httpcomponents Highest
Product pom name Apache HttpClient High
Product pom parent-artifactid httpcomponents-client Medium
Product pom url http://hc.apache.org/httpcomponents-client-ga Medium
Version file version 4.5.14 High
Version Manifest Implementation-Version 4.5.14 High
Version pom version 4.5.14 Highest
httpcore-4.4.16.jar
Description:
Apache HttpComponents Core (blocking I/O)
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256: 6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Project/Scope: Tailormap API:compile
httpcore-4.4.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-wfs-ng@34.3
Evidence
Type Source Name Value Confidence
Vendor file name httpcore High
Vendor jar package name apache Highest
Vendor Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium
Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000 Low
Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low
Vendor pom artifactid httpcore Highest
Vendor pom artifactid httpcore Low
Vendor pom groupid org.apache.httpcomponents Highest
Vendor pom name Apache HttpCore High
Vendor pom parent-artifactid httpcomponents-core Low
Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest
Product file name httpcore High
Product jar package name apache Highest
Product jar package name http Highest
Product Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium
Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000 Low
Product Manifest Implementation-Title HttpComponents Apache HttpCore High
Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low
Product Manifest specification-title HttpComponents Apache HttpCore Medium
Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low
Product pom artifactid httpcore Highest
Product pom groupid org.apache.httpcomponents Highest
Product pom name Apache HttpCore High
Product pom parent-artifactid httpcomponents-core Medium
Product pom url http://hc.apache.org/httpcomponents-core-ga Medium
Version file version 4.4.16 High
Version Manifest Implementation-Version 4.4.16 High
Version pom version 4.4.16 Highest
pkg:maven/org.apache.httpcomponents/httpcore@4.4.16
(Confidence :High)
hypersistence-tsid-2.1.4.jar
Description:
A Java library for generating Time-Sorted Unique Identifiers (TSID).
License:
MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/io/hypersistence/hypersistence-tsid/2.1.4/hypersistence-tsid-2.1.4.jar
MD5: 0d491b7d018a59bc04d8236086ddb2e8
SHA1: 7837057227aae89e4a9abf0e4cba6d4ac68041d0
SHA256: e4087fce815d7cf91e3f62ee8d1058a822264e6bf210a163abf5aff43831f059
Referenced In Project/Scope: Tailormap API:compile
hypersistence-tsid-2.1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name hypersistence-tsid High
Vendor jar package name hypersistence Highest
Vendor jar package name io Highest
Vendor jar package name tsid Highest
Vendor Manifest automatic-module-name io.hypersistence.tsid Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.hypersistence.tsid Medium
Vendor pom artifactid hypersistence-tsid Highest
Vendor pom artifactid hypersistence-tsid Low
Vendor pom developer name Fabio Lima Medium
Vendor pom developer name Vlad Mihalcea Medium
Vendor pom groupid io.hypersistence Highest
Vendor pom name hypersistence-tsid High
Vendor pom url vladmihalcea/hypersistence-tsid Highest
Product file name hypersistence-tsid High
Product jar package name hypersistence Highest
Product jar package name io Highest
Product jar package name tsid Highest
Product Manifest automatic-module-name io.hypersistence.tsid Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name hypersistence-tsid Medium
Product Manifest bundle-symbolicname io.hypersistence.tsid Medium
Product pom artifactid hypersistence-tsid Highest
Product pom developer name Fabio Lima Low
Product pom developer name Vlad Mihalcea Low
Product pom groupid io.hypersistence Highest
Product pom name hypersistence-tsid High
Product pom url vladmihalcea/hypersistence-tsid High
Version file version 2.1.4 High
Version Manifest Bundle-Version 2.1.4 High
Version pom version 2.1.4 Highest
pkg:maven/io.hypersistence/hypersistence-tsid@2.1.4
(Confidence :High)
imagen-core-0.9.1.jar
Description:
ImageN core interfaces
File Path: /home/runner/.m2/repository/org/eclipse/imagen/imagen-core/0.9.1/imagen-core-0.9.1.jar
MD5: b1ddd9074bac9df8edec694e48bdda7f
SHA1: 11b91b3bba1b183339084b1dee99b59fcfb8ec8f
SHA256: 4f1a8aa346ff2d2460b0372fd47b536a295543aa921e311f4e74bbf2e169ba48
Referenced In Project/Scope: Tailormap API:compile
imagen-core-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name imagen-core High
Vendor jar package name eclipse Highest
Vendor jar package name imagen Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid imagen-core Highest
Vendor pom artifactid imagen-core Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name imagen-core High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product Manifest build-jdk-spec 17 Low
Product pom artifactid imagen-core Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.1 High
Version pom version 0.9.1 Highest
pkg:maven/org.eclipse.imagen/imagen-core@0.9.1
(Confidence :High)
indriya-2.2.jar
Description:
Unit Standard (JSR 385) Reference Implementation.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/tech/units/indriya/2.2/indriya-2.2.jar
MD5: cefa3a26996e4c70071d27a0c36603ea
SHA1: 647a0e06d60346f3f3c48284f66d34b28ff83340
SHA256: 5b61eafd63fd235898dea0e5e614e9636c9d7783705a0c9f1794dd07e3a84b35
Referenced In Project/Scope: Tailormap API:compile
indriya-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name indriya High
Vendor jar package name indriya Highest
Vendor jar package name tech Highest
Vendor jar package name unit Highest
Vendor jar package name units Highest
Vendor Manifest automatic-module-name tech.units.indriya Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Vendor Manifest bundle-symbolicname tech.units.indriya Medium
Vendor Manifest implementation-url http://units.tech Low
Vendor Manifest Implementation-Vendor Units of Measurement project High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Vendor pom artifactid indriya Highest
Vendor pom artifactid indriya Low
Vendor pom developer email jean-marie@dautelle.com Low
Vendor pom developer email martin.desruisseaux@geomatys.com Low
Vendor pom developer email otaviopolianasantana@gmail.com Low
Vendor pom developer email werner.keil@gmx.net Low
Vendor pom developer id dautelle Medium
Vendor pom developer id desruisseaux Medium
Vendor pom developer id keilw Medium
Vendor pom developer id otaviojava Medium
Vendor pom developer name Jean-Marie Dautelle Medium
Vendor pom developer name Martin Desruisseaux Medium
Vendor pom developer name Otávio Gonçalves de Santana Medium
Vendor pom developer name Werner Keil Medium
Vendor pom developer org Airbus Medium
Vendor pom developer org Creative Arts & Technologies Medium
Vendor pom developer org Geomatys Medium
Vendor pom developer org Individual / SouJava Medium
Vendor pom developer org URL http://www.airbus.com Medium
Vendor pom developer org URL http://www.catmedia.us Medium
Vendor pom developer org URL http://www.geomatys.com Medium
Vendor pom groupid tech.units Highest
Vendor pom name Units of Measurement Reference Implementation High
Vendor pom organization name Units of Measurement project High
Vendor pom organization url http://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-parent Low
Vendor pom parent-groupid tech.uom Medium
Vendor pom url http://units.tech Highest
Product file name indriya High
Product jar package name indriya Highest
Product jar package name tech Highest
Product jar package name unit Highest
Product jar package name units Highest
Product Manifest automatic-module-name tech.units.indriya Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Product Manifest Bundle-Name Units of Measurement Reference Implementation Medium
Product Manifest bundle-symbolicname tech.units.indriya Medium
Product Manifest Implementation-Title Units of Measurement Reference Implementation High
Product Manifest implementation-url http://units.tech Low
Product Manifest multi-release true Low
Product Manifest specification-title Unit API Medium
Product pom artifactid indriya Highest
Product pom developer email jean-marie@dautelle.com Low
Product pom developer email martin.desruisseaux@geomatys.com Low
Product pom developer email otaviopolianasantana@gmail.com Low
Product pom developer email werner.keil@gmx.net Low
Product pom developer id dautelle Low
Product pom developer id desruisseaux Low
Product pom developer id keilw Low
Product pom developer id otaviojava Low
Product pom developer name Jean-Marie Dautelle Low
Product pom developer name Martin Desruisseaux Low
Product pom developer name Otávio Gonçalves de Santana Low
Product pom developer name Werner Keil Low
Product pom developer org Airbus Low
Product pom developer org Creative Arts & Technologies Low
Product pom developer org Geomatys Low
Product pom developer org Individual / SouJava Low
Product pom developer org URL http://www.airbus.com Low
Product pom developer org URL http://www.catmedia.us Low
Product pom developer org URL http://www.geomatys.com Low
Product pom groupid tech.units Highest
Product pom name Units of Measurement Reference Implementation High
Product pom organization name Units of Measurement project Low
Product pom organization url http://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-parent Medium
Product pom parent-groupid tech.uom Medium
Product pom url http://units.tech Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/tech.units/indriya@2.2
(Confidence :High)
istack-commons-runtime-4.1.2.jar
Description:
istack common utility code
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar
MD5: 535154ef647af2a52478c4debec93659
SHA1: 18ec117c85f3ba0ac65409136afa8e42bc74e739
SHA256: 7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee
Referenced In Project/Scope: Tailormap API:runtime
istack-commons-runtime-4.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name istack-commons-runtime High
Vendor jar package name istack Highest
Vendor jar package name sun Highest
Vendor jar (hint) package name oracle Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium
Vendor Manifest implementation-build-id 4.1.2 - 343a28e Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id com.sun.istack Medium
Vendor pom artifactid istack-commons-runtime Highest
Vendor pom artifactid istack-commons-runtime Low
Vendor pom groupid com.sun.istack Highest
Vendor pom name istack common utility code runtime High
Vendor pom parent-artifactid istack-commons Low
Product file name istack-commons-runtime High
Product jar package name istack Highest
Product jar package name sun Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name istack common utility code runtime Medium
Product Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium
Product Manifest implementation-build-id 4.1.2 - 343a28e Low
Product pom artifactid istack-commons-runtime Highest
Product pom groupid com.sun.istack Highest
Product pom name istack common utility code runtime High
Product pom parent-artifactid istack-commons Medium
Version file version 4.1.2 High
Version Manifest Bundle-Version 4.1.2 High
Version Manifest implementation-build-id 4.1.2 Low
Version pom version 4.1.2 Highest
pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2
(Confidence :High)
iterators-0.9.1.jar
File Path: /home/runner/.m2/repository/org/eclipse/imagen/iterators/0.9.1/iterators-0.9.1.jar
MD5: 924fc22415f5cc838b9db4a43b94119f
SHA1: f74b1c296b3edbd561c7ac77eebf5ded5b531629
SHA256: ba0a3bf97f28410d33f7991f4327b7447184a10bda7275c85b5146446a9de4d7
Referenced In Project/Scope: Tailormap API:compile
iterators-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name iterators High
Vendor jar package name eclipse Highest
Vendor jar package name imagen Highest
Vendor jar package name iterators Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid iterators Highest
Vendor pom artifactid iterators Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name iterators High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product jar package name iterators Highest
Product Manifest build-jdk-spec 17 Low
Product pom artifactid iterators Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.1 High
Version pom version 0.9.1 Highest
pkg:maven/org.eclipse.imagen/iterators@0.9.1
(Confidence :High)
jackson-annotations-2.21.jar
Description:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar
MD5: e0d0c3e7300954f73e43c67d933aaea4
SHA1: b1bc1868bf02dc0bd6c7836257a036a331005309
SHA256: 53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b
Referenced In Project/Scope: Tailormap API:compile
jackson-annotations-2.21.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-annotations High
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-annotations Highest
Vendor pom artifactid jackson-annotations Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-annotations High
Vendor pom parent-artifactid jackson-parent Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-annotations High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name Jackson-annotations Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Product Manifest Implementation-Title Jackson-annotations High
Product Manifest specification-title Jackson-annotations Medium
Product pom artifactid jackson-annotations Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-annotations High
Product pom parent-artifactid jackson-parent Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.21 High
Version Manifest Implementation-Version 2.21 High
Version pom version 2.21 Highest
jackson-core-2.21.2.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.21.2/jackson-core-2.21.2.jar
MD5: b62c1031b5f38fc58158fc0c559980cb
SHA1: 7d11eac823392f28d8ee7bda77eaadfccbab83e5
SHA256: 12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b
Referenced In Project/Scope: Tailormap API:compile
jackson-core-2.21.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name com Highest
Vendor jar package name core Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name base Highest
Product jar package name com Highest
Product jar package name core Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 2.21.2 High
Version Manifest Bundle-Version 2.21.2 High
Version Manifest Implementation-Version 2.21.2 High
Version pom version 2.21.2 Highest
jackson-core-3.1.2.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-core/3.1.2/jackson-core-3.1.2.jar
MD5: 26ca9e27f24af5ffcff54c9ddb1440ee
SHA1: d0da2e67ffb0b7cf5aba0436b315aa3eb3eb37ca
SHA256: bbb00763f5998f03a26f21e47ed500f253c7fc5c158fa3e8a41dbf97aa7416fd
Referenced In Project/Scope: Tailormap API:compile
jackson-core-3.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name core Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor jar package name tools Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom developer email tatu@fasterxml.com Low
Vendor pom developer id cowtowncoder Medium
Vendor pom developer name Tatu Saloranta Medium
Vendor pom groupid tools.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid tools.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product jar package name 21 Highest
Product jar package name base Highest
Product jar package name core Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product jar package name tools Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom developer email tatu@fasterxml.com Low
Product pom developer id cowtowncoder Low
Product pom developer name Tatu Saloranta Low
Product pom groupid tools.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid tools.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 3.1.2 High
Version Manifest Bundle-Version 3.1.2 High
Version Manifest Implementation-Version 3.1.2 High
Version pom version 3.1.2 Highest
jackson-databind-2.21.2.jar
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.21.2/jackson-databind-2.21.2.jar
MD5: add2fbe739574bfd1877c2cca25f46d1
SHA1: 71ab8ff75b4fd74afdee0004173fdd15de1d6a28
SHA256: 8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849
Referenced In Project/Scope: Tailormap API:runtime
jackson-databind-2.21.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name jackson-databind High
Vendor jar package name databind Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-databind Highest
Vendor pom artifactid jackson-databind Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name jackson-databind High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-databind High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name databind Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name jackson-databind Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Product Manifest Implementation-Title jackson-databind High
Product Manifest multi-release true Low
Product Manifest specification-title jackson-databind Medium
Product pom artifactid jackson-databind Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name jackson-databind High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.21.2 High
Version Manifest Bundle-Version 2.21.2 High
Version Manifest Implementation-Version 2.21.2 High
Version pom version 2.21.2 Highest
jackson-databind-3.1.2.jar
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-databind/3.1.2/jackson-databind-3.1.2.jar
MD5: c372488080c2db0bcea8a23d3fb012ce
SHA1: 2550e04829fc14566ddab7b9564ba886a9c6a532
SHA256: 0a366b1c2f6321e466c2970847b1251a5dc7201b680f320594230b77bfc8ddb2
Referenced In Project/Scope: Tailormap API:compile
jackson-databind-3.1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-databind High
Vendor jar package name databind Highest
Vendor jar package name jackson Highest
Vendor jar package name tools Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-databind Highest
Vendor pom artifactid jackson-databind Low
Vendor pom groupid tools.jackson.core Highest
Vendor pom name jackson-databind High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid tools.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-databind High
Product jar package name databind Highest
Product jar package name jackson Highest
Product jar package name tools Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name jackson-databind Medium
Product Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium
Product Manifest Implementation-Title jackson-databind High
Product Manifest specification-title jackson-databind Medium
Product pom artifactid jackson-databind Highest
Product pom groupid tools.jackson.core Highest
Product pom name jackson-databind High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid tools.jackson Medium
Product pom url FasterXML/jackson High
Version file version 3.1.2 High
Version Manifest Bundle-Version 3.1.2 High
Version Manifest Implementation-Version 3.1.2 High
Version pom version 3.1.2 Highest
jakarta.activation-api-2.1.4.jar
Description:
Specification
License:
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.4/jakarta.activation-api-2.1.4.jar
MD5: bc1602eee7bc61a0b86f14bbbb0cc794
SHA1: 9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8
SHA256: c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004
Referenced In Project/Scope: Tailormap API:compile
jakarta.activation-api-2.1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.8
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.activation-api High
Vendor jar package name activation Highest
Vendor jar package name jakarta Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.activation-api Medium
Vendor Manifest extension-name jakarta.activation Medium
Vendor Manifest implementation-build-id 3dad341 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.activation-api Highest
Vendor pom artifactid jakarta.activation-api Low
Vendor pom developer email bill.shannon@oracle.com Low
Vendor pom developer id shannon Medium
Vendor pom developer name Bill Shannon Medium
Vendor pom developer org Oracle Medium
Vendor pom groupid jakarta.activation Highest
Vendor pom name Jakarta Activation API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url jakartaee/jaf-api Highest
Vendor pom (hint) developer org sun Medium
Product file name jakarta.activation-api High
Product jar package name activation Highest
Product jar package name jakarta Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Activation API Medium
Product Manifest bundle-symbolicname jakarta.activation-api Medium
Product Manifest extension-name jakarta.activation Medium
Product Manifest implementation-build-id 3dad341 Low
Product Manifest Implementation-Title Jakarta Activation API High
Product Manifest specification-title Jakarta Activation Specification Medium
Product pom artifactid jakarta.activation-api Highest
Product pom developer email bill.shannon@oracle.com Low
Product pom developer id shannon Low
Product pom developer name Bill Shannon Low
Product pom developer org Oracle Low
Product pom groupid jakarta.activation Highest
Product pom name Jakarta Activation API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url jakartaee/jaf-api High
Version file version 2.1.4 High
Version Manifest Bundle-Version 2.1.4 High
Version pom parent-version 2.1.4 Low
Version pom version 2.1.4 Highest
pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4
(Confidence :High)
jakarta.annotation-api-3.0.0.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256: b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: Tailormap API:provided
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.annotation-api High
Vendor jar package name annotation Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 18 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium
Vendor Manifest extension-name jakarta.annotation Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.annotation-api Highest
Vendor pom artifactid jakarta.annotation-api Low
Vendor pom developer name Dmitry Kornilov Medium
Vendor pom developer name Linda De Michiel Medium
Vendor pom developer org Oracle Corp. Medium
Vendor pom groupid jakarta.annotation Highest
Vendor pom name Jakarta Annotations API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest
Product file name jakarta.annotation-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 18 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Annotations API Medium
Product Manifest bundle-symbolicname jakarta.annotation-api Medium
Product Manifest extension-name jakarta.annotation Medium
Product pom artifactid jakarta.annotation-api Highest
Product pom developer name Dmitry Kornilov Low
Product pom developer name Linda De Michiel Low
Product pom developer org Oracle Corp. Low
Product pom groupid jakarta.annotation Highest
Product pom name Jakarta Annotations API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium
Version file version 3.0.0 High
Version Manifest Bundle-Version 3.0.0 High
Version Manifest Implementation-Version 3.0.0 High
Version pom parent-version 3.0.0 Low
Version pom version 3.0.0 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0
(Confidence :High)
cpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.inject-api-2.0.1.jar
Description:
Jakarta Dependency Injection
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256: f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Project/Scope: Tailormap API:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.inject-api High
Vendor jar package name inject Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium
Vendor pom artifactid jakarta.inject-api Highest
Vendor pom artifactid jakarta.inject-api Low
Vendor pom developer email asd[at]redhat[dot]com Low
Vendor pom developer email manovotn[at]redhat[dot]com Low
Vendor pom developer email mkouba[at]redhat[dot]com Low
Vendor pom developer email tremes[at]redhat[dot]com Low
Vendor pom developer id asabotdu Medium
Vendor pom developer id manovotn Medium
Vendor pom developer id mkouba Medium
Vendor pom developer id tremes Medium
Vendor pom developer name Antoine Sabot-Durand Medium
Vendor pom developer name Martin Kouba Medium
Vendor pom developer name Matej Novotny Medium
Vendor pom developer name Tomas Remes Medium
Vendor pom developer org Red Hat Inc. Medium
Vendor pom groupid jakarta.inject Highest
Vendor pom name Jakarta Dependency Injection High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url eclipse-ee4j/injection-api Highest
Product file name jakarta.inject-api High
Product jar package name inject Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Dependency Injection Medium
Product Manifest bundle-symbolicname jakarta.inject.jakarta.inject-api Medium
Product pom artifactid jakarta.inject-api Highest
Product pom developer email asd[at]redhat[dot]com Low
Product pom developer email manovotn[at]redhat[dot]com Low
Product pom developer email mkouba[at]redhat[dot]com Low
Product pom developer email tremes[at]redhat[dot]com Low
Product pom developer id asabotdu Low
Product pom developer id manovotn Low
Product pom developer id mkouba Low
Product pom developer id tremes Low
Product pom developer name Antoine Sabot-Durand Low
Product pom developer name Martin Kouba Low
Product pom developer name Matej Novotny Low
Product pom developer name Tomas Remes Low
Product pom developer org Red Hat Inc. Low
Product pom groupid jakarta.inject Highest
Product pom name Jakarta Dependency Injection High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url eclipse-ee4j/injection-api High
Version file version 2.0.1 High
Version Manifest Bundle-Version 2.0.1 High
Version pom parent-version 2.0.1 Low
Version pom version 2.0.1 Highest
pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1
(Confidence :High)
jakarta.mail-api-2.1.5.jar
Description:
Specification API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.5/jakarta.mail-api-2.1.5.jar
MD5: a1872951f46b87594806bb01e342a468
SHA1: be9b3b677ed6083f575c437ebc442a6a4bd2b931
SHA256: aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e
Referenced In Project/Scope: Tailormap API:compile
jakarta.mail-api-2.1.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.icegreen/greenmail@2.1.8
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.mail-api High
Vendor jar package name jakarta Highest
Vendor jar package name mail Highest
Vendor jar package name version Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.mail-api Medium
Vendor Manifest extension-name jakarta.mail Medium
Vendor Manifest implementation-build-id e187321 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.mail-api Highest
Vendor pom artifactid jakarta.mail-api Low
Vendor pom groupid jakarta.mail Highest
Vendor pom name Jakarta Mail API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Product file name jakarta.mail-api High
Product jar package name jakarta Highest
Product jar package name mail Highest
Product jar package name version Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Mail API Medium
Product Manifest bundle-symbolicname jakarta.mail-api Medium
Product Manifest extension-name jakarta.mail Medium
Product Manifest implementation-build-id e187321 Low
Product Manifest Implementation-Title Jakarta Mail API High
Product Manifest specification-title Jakarta Mail Specification Medium
Product pom artifactid jakarta.mail-api Highest
Product pom groupid jakarta.mail Highest
Product pom name Jakarta Mail API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Version file version 2.1.5 High
Version Manifest Bundle-Version 2.1.5 High
Version pom parent-version 2.1.5 Low
Version pom version 2.1.5 Highest
jakarta.persistence-api-3.2.0.jar
Description:
Jakarta Persistence 3.2 API jar
License:
Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.2.0/jakarta.persistence-api-3.2.0.jar
MD5: 79acec18d202797dcba1fff596a47684
SHA1: bb75a113f3fa191c2c7ee7b206d8e674251b3129
SHA256: be8a26b0e75c84c1b7600f759256fbc68d60333d89ec0ce3f784fc3ffa09aa8c
Referenced In Project/Scope: Tailormap API:compile
jakarta.persistence-api-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.persistence-api High
Vendor jar package name jakarta Highest
Vendor jar package name persistence Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.persistence-api Medium
Vendor Manifest extension-name jakarta.persistence Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.persistence-api Highest
Vendor pom artifactid jakarta.persistence-api Low
Vendor pom developer id lukasj Medium
Vendor pom developer name Lukas Jungmann Medium
Vendor pom developer org Oracle, Inc. Medium
Vendor pom groupid jakarta.persistence Highest
Vendor pom name Jakarta Persistence API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url jakartaee/persistence Highest
Product file name jakarta.persistence-api High
Product jar package name jakarta Highest
Product jar package name persistence Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Persistence API jar Medium
Product Manifest bundle-symbolicname jakarta.persistence-api Medium
Product Manifest extension-name jakarta.persistence Medium
Product pom artifactid jakarta.persistence-api Highest
Product pom developer id lukasj Low
Product pom developer name Lukas Jungmann Low
Product pom developer org Oracle, Inc. Low
Product pom groupid jakarta.persistence Highest
Product pom name Jakarta Persistence API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url jakartaee/persistence High
Version file version 3.2.0 High
Version Manifest Bundle-Version 3.2.0 High
Version Manifest Implementation-Version 3.2.0 High
Version pom parent-version 3.2.0 Low
Version pom version 3.2.0 Highest
pkg:maven/jakarta.persistence/jakarta.persistence-api@3.2.0
(Confidence :High)
jakarta.transaction-api-2.0.1.jar
Description:
Jakarta Transactions
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/transaction/jakarta.transaction-api/2.0.1/jakarta.transaction-api-2.0.1.jar
MD5: 5315974a3935e342b40849478e1c9966
SHA1: 51a520e3fae406abb84e2e1148e6746ce3f80a1a
SHA256: 50c0a7c760c13ae6c042acf182b28f0047413db95b4636fb8879bcffab5ba875
Referenced In Project/Scope: Tailormap API:compile
jakarta.transaction-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.transaction-api High
Vendor jar package name jakarta Highest
Vendor jar package name transaction Highest
Vendor Manifest automatic-module-name jakarta.transaction Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://github.com/eclipse-ee4j Low
Vendor Manifest bundle-symbolicname jakarta.transaction-api Medium
Vendor Manifest extension-name jakarta.transaction Medium
Vendor Manifest Implementation-Vendor EE4J Community High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Oracle Corporation Low
Vendor pom artifactid jakarta.transaction-api Highest
Vendor pom artifactid jakarta.transaction-api Low
Vendor pom developer id stephen_felts Medium
Vendor pom developer name Stephen Felts Medium
Vendor pom developer org Oracle, Inc. Medium
Vendor pom groupid jakarta.transaction Highest
Vendor pom name API High
Vendor pom name ${extension.name} API High
Vendor pom organization name EE4J Community High
Vendor pom organization url eclipse-ee4j Medium
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jta Highest
Product file name jakarta.transaction-api High
Product jar package name jakarta Highest
Product jar package name transaction Highest
Product Manifest automatic-module-name jakarta.transaction Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://github.com/eclipse-ee4j Low
Product Manifest Bundle-Name jakarta.transaction API Medium
Product Manifest bundle-symbolicname jakarta.transaction-api Medium
Product Manifest extension-name jakarta.transaction Medium
Product pom artifactid jakarta.transaction-api Highest
Product pom developer id stephen_felts Low
Product pom developer name Stephen Felts Low
Product pom developer org Oracle, Inc. Low
Product pom groupid jakarta.transaction Highest
Product pom name API High
Product pom name ${extension.name} API High
Product pom organization name EE4J Community Low
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url eclipse-ee4j High
Product pom url https://projects.eclipse.org/projects/ee4j.jta Medium
Version file version 2.0.1 High
Version Manifest Bundle-Version 2.0.1 High
Version Manifest Implementation-Version 2.0.1 High
Version pom parent-version 2.0.1 Low
Version pom version 2.0.1 Highest
pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1
(Confidence :High)
cpe:2.3:a:oracle:projects:2.0.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.validation-api-3.1.1.jar
Description:
Jakarta Validation API
License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/validation/jakarta.validation-api/3.1.1/jakarta.validation-api-3.1.1.jar
MD5: 93ce96e77734f4280157edeffcae44e8
SHA1: ec8622148afc5564235d17af80ea80288d0e7f92
SHA256: 63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab
Referenced In Project/Scope: Tailormap API:compile
jakarta.validation-api-3.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.validation-api High
Vendor jar package name jakarta Highest
Vendor jar package name validation Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.validation.jakarta.validation-api Medium
Vendor pom artifactid jakarta.validation-api Highest
Vendor pom artifactid jakarta.validation-api Low
Vendor pom developer email emmanuel@hibernate.org Low
Vendor pom developer email guillaume.smet@hibernate.org Low
Vendor pom developer email gunnar@hibernate.org Low
Vendor pom developer email hferents@redhat.com Low
Vendor pom developer id emmanuelbernard Medium
Vendor pom developer id epbernard Medium
Vendor pom developer id guillaume.smet Medium
Vendor pom developer id gunnar.morling Medium
Vendor pom developer id hardy.ferentschik Medium
Vendor pom developer name Emmanuel Bernard Medium
Vendor pom developer name Guillaume Smet Medium
Vendor pom developer name Gunnar Morling Medium
Vendor pom developer name Hardy Ferentschik Medium
Vendor pom developer org Red Hat, Inc. Medium
Vendor pom groupid jakarta.validation Highest
Vendor pom name Jakarta Validation API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://beanvalidation.org Highest
Product file name jakarta.validation-api High
Product jar package name jakarta Highest
Product jar package name validation Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Validation API Medium
Product Manifest bundle-symbolicname jakarta.validation.jakarta.validation-api Medium
Product pom artifactid jakarta.validation-api Highest
Product pom developer email emmanuel@hibernate.org Low
Product pom developer email guillaume.smet@hibernate.org Low
Product pom developer email gunnar@hibernate.org Low
Product pom developer email hferents@redhat.com Low
Product pom developer id emmanuelbernard Low
Product pom developer id epbernard Low
Product pom developer id guillaume.smet Low
Product pom developer id gunnar.morling Low
Product pom developer id hardy.ferentschik Low
Product pom developer name Emmanuel Bernard Low
Product pom developer name Guillaume Smet Low
Product pom developer name Gunnar Morling Low
Product pom developer name Hardy Ferentschik Low
Product pom developer org Red Hat, Inc. Low
Product pom groupid jakarta.validation Highest
Product pom name Jakarta Validation API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://beanvalidation.org Medium
Version file version 3.1.1 High
Version Manifest Bundle-Version 3.1.1 High
Version pom parent-version 3.1.1 Low
Version pom version 3.1.1 Highest
pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1
(Confidence :High)
jakarta.ws.rs-api-4.0.0.jar
Description:
Jakarta RESTful Web Services
License:
https://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/4.0.0/jakarta.ws.rs-api-4.0.0.jar
MD5: 9b7cc90c000f193157d60d95caf45972
SHA1: c27a67f84ca491efcb3fa68f4df926e8a110069e
SHA256: 6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6
Referenced In Project/Scope: Tailormap API:runtime
jakarta.ws.rs-api-4.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.ws.rs-api High
Vendor hint analyzer vendor web services Medium
Vendor jar package name jakarta Highest
Vendor jar package name rs Highest
Vendor jar package name ws Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low
Vendor Manifest bundle-symbolicname jakarta.ws.rs-api Medium
Vendor Manifest extension-name jakarta.ws.rs Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.ws.rs-api Highest
Vendor pom artifactid jakarta.ws.rs-api Low
Vendor pom groupid jakarta.ws.rs Highest
Vendor pom name Jakarta RESTful WS API High
Vendor pom parent-artifactid all Low
Product file name jakarta.ws.rs-api High
Product hint analyzer product web services Medium
Product jar package name jakarta Highest
Product jar package name rs Highest
Product jar package name ws Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://www.eclipse.org/org/foundation/ Low
Product Manifest Bundle-Name Jakarta RESTful WS API Medium
Product Manifest bundle-symbolicname jakarta.ws.rs-api Medium
Product Manifest extension-name jakarta.ws.rs Medium
Product pom artifactid jakarta.ws.rs-api Highest
Product pom groupid jakarta.ws.rs Highest
Product pom name Jakarta RESTful WS API High
Product pom parent-artifactid all Medium
Version file version 4.0.0 High
Version Manifest Bundle-Version 4.0.0 High
Version Manifest Implementation-Version 4.0.0 High
Version pom version 4.0.0 Highest
pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0
(Confidence :High)
jakarta.xml.bind-api-4.0.4.jar
Description:
Jakarta XML Binding API 4.0 Design Specification
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.4/jakarta.xml.bind-api-4.0.4.jar
MD5: 6dd465a232e545193ab8ab77cc4fbdb9
SHA1: d6d2327f3817d9a33a3b6b8f2e15a96bc2e7afdc
SHA256: c507ca69a8c6dd11bf4afeec9e0d412c4fa3933fffb0a84680ea5727e8472124
Referenced In Project/Scope: Tailormap API:runtime
jakarta.xml.bind-api-4.0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.xml.bind-api High
Vendor jar package name bind Highest
Vendor jar package name jakarta Highest
Vendor jar package name xml Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.xml.bind-api Medium
Vendor Manifest extension-name jakarta.xml.bind Medium
Vendor Manifest implementation-build-id 1df980a Low
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.xml.bind-api Highest
Vendor pom artifactid jakarta.xml.bind-api Low
Vendor pom groupid jakarta.xml.bind Highest
Vendor pom name Jakarta XML Binding API High
Vendor pom parent-artifactid jakarta.xml.bind-api-parent Low
Product file name jakarta.xml.bind-api High
Product jar package name bind Highest
Product jar package name jakarta Highest
Product jar package name xml Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta XML Binding API Medium
Product Manifest bundle-symbolicname jakarta.xml.bind-api Medium
Product Manifest extension-name jakarta.xml.bind Medium
Product Manifest implementation-build-id 1df980a Low
Product pom artifactid jakarta.xml.bind-api Highest
Product pom groupid jakarta.xml.bind Highest
Product pom name Jakarta XML Binding API High
Product pom parent-artifactid jakarta.xml.bind-api-parent Medium
Version file version 4.0.4 High
Version Manifest Bundle-Version 4.0.4 High
Version Manifest Implementation-Version 4.0.4 High
Version pom version 4.0.4 Highest
pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4
(Confidence :High)
jandex-3.3.2.jar
Description:
SmallRye Build Parent POM
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/smallrye/jandex/3.3.2/jandex-3.3.2.jar
MD5: db297711cd5fe4d8f6d2dabe8226f040
SHA1: 5f67f3771987975b64637e78884ab2813acbf1c6
SHA256: b7a214dbb405c11cfa62fd4319810a46e502b633ce86d6e2dea7a5065b932256
Referenced In Project/Scope: Tailormap API:runtime
jandex-3.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-envers@4.0.5
Evidence
Type Source Name Value Confidence
Vendor file name jandex High
Vendor jar package name jandex Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.smallrye.jandex Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid jandex Highest
Vendor pom artifactid jandex Low
Vendor pom groupid io.smallrye Highest
Vendor pom name Jandex: Core High
Vendor pom parent-artifactid jandex-parent Low
Product file name jandex High
Product jar package name jandex Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Jandex: Core Medium
Product Manifest bundle-symbolicname io.smallrye.jandex Medium
Product Manifest multi-release true Low
Product pom artifactid jandex Highest
Product pom groupid io.smallrye Highest
Product pom name Jandex: Core High
Product pom parent-artifactid jandex-parent Medium
Version file version 3.3.2 High
Version Manifest Bundle-Version 3.3.2 High
Version pom version 3.3.2 Highest
pkg:maven/io.smallrye/jandex@3.3.2
(Confidence :High)
javaparser-core-3.28.0.jar
Description:
The core parser functionality. This may be all you need.
License:
GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/javaparser/javaparser-core/3.28.0/javaparser-core-3.28.0.jar
MD5: 2c776bbdb368e4ee8bb79ec290a36fbe
SHA1: 59829d055a8327d017e83316fc01b182335da9d6
SHA256: d3852d78461c02602eb9bfc15e9fc21ad7c765e6013a1b6d5809a5d0e7db5309
Referenced In Project/Scope: Tailormap API:provided
javaparser-core-3.28.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name javaparser-core High
Vendor jar package name github Highest
Vendor jar package name javaparser Highest
Vendor Manifest automatic-module-name com.github.javaparser.core Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-developers matozoid;email="hexagonaal@gmail.com";name="Danny van Bruggen","jgesser@gmail.com";email="jgesser@gmail.com";name="Júlio Vilmar Gesser",sebastiankirsch;email="sebastian.kirsch@immobilienscout24.de";name="Sebastian Kirsch",before;name="André Rouél",SmiddyPence;email="smiddypence@gmail.com";name="Nicholas Smith",ftomassetti;email="federico@tomassetti.me";name="Federico Tomassetti",ptitjes;email="ptitjes@free.fr";name="Didier Villevalois",MysterAitch;name="Roger Howell",MysterAitch;name="Roger Howell",jlerbsc;name="Jean Pierre Lerbscher",maartenc;name="Maarten Coene" Low
Vendor Manifest bundle-docurl https://javaparser.org Low
Vendor Manifest bundle-symbolicname com.github.javaparser.javaparser-core Medium
Vendor pom artifactid javaparser-core Highest
Vendor pom artifactid javaparser-core Low
Vendor pom groupid com.github.javaparser Highest
Vendor pom name : High
Vendor pom parent-artifactid javaparser-parent Low
Vendor pom url javaparser Highest
Product file name javaparser-core High
Product jar package name github Highest
Product jar package name javaparser Highest
Product Manifest automatic-module-name com.github.javaparser.core Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-developers matozoid;email="hexagonaal@gmail.com";name="Danny van Bruggen","jgesser@gmail.com";email="jgesser@gmail.com";name="Júlio Vilmar Gesser",sebastiankirsch;email="sebastian.kirsch@immobilienscout24.de";name="Sebastian Kirsch",before;name="André Rouél",SmiddyPence;email="smiddypence@gmail.com";name="Nicholas Smith",ftomassetti;email="federico@tomassetti.me";name="Federico Tomassetti",ptitjes;email="ptitjes@free.fr";name="Didier Villevalois",MysterAitch;name="Roger Howell",MysterAitch;name="Roger Howell",jlerbsc;name="Jean Pierre Lerbscher",maartenc;name="Maarten Coene" Low
Product Manifest bundle-docurl https://javaparser.org Low
Product Manifest Bundle-Name com.github.javaparser:javaparser-core Medium
Product Manifest bundle-symbolicname com.github.javaparser.javaparser-core Medium
Product pom artifactid javaparser-core Highest
Product pom groupid com.github.javaparser Highest
Product pom name : High
Product pom parent-artifactid javaparser-parent Medium
Product pom url javaparser High
Version file version 3.28.0 High
Version Manifest Bundle-Version 3.28.0 High
Version pom version 3.28.0 Highest
pkg:maven/com.github.javaparser/javaparser-core@3.28.0
(Confidence :High)
jaxb-core-4.0.6.jar
Description:
JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-core/4.0.6/jaxb-core-4.0.6.jar
MD5: e36c915cf47342b4fe31ffba3407b928
SHA1: 8e61282303777fc98a00cc3affd0560d68748a75
SHA256: ebbd274207b4860d0dc6e2d44d6dbdb5945cede01222d2e50661d45f5d46c0f7
Referenced In Project/Scope: Tailormap API:runtime
jaxb-core-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jaxb-core High
Vendor jar package name core Highest
Vendor jar package name glassfish Highest
Vendor jar package name jaxb Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.jaxb.core Medium
Vendor Manifest git-revision 0dcfdf5 Low
Vendor Manifest implementation-build-id 4.0.6 - 0dcfdf5 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish.jaxb Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jaxb-core Highest
Vendor pom artifactid jaxb-core Low
Vendor pom groupid org.glassfish.jaxb Highest
Vendor pom name JAXB Core High
Vendor pom parent-artifactid jaxb-parent Low
Vendor pom parent-groupid com.sun.xml.bind.mvn Medium
Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest
Product file name jaxb-core High
Product jar package name core Highest
Product jar package name glassfish Highest
Product jar package name jaxb Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name JAXB Core Medium
Product Manifest bundle-symbolicname org.glassfish.jaxb.core Medium
Product Manifest git-revision 0dcfdf5 Low
Product Manifest implementation-build-id 4.0.6 - 0dcfdf5 Low
Product Manifest Implementation-Title Eclipse Implementation of JAXB High
Product Manifest specification-title Jakarta XML Binding Medium
Product pom artifactid jaxb-core Highest
Product pom groupid org.glassfish.jaxb Highest
Product pom name JAXB Core High
Product pom parent-artifactid jaxb-parent Medium
Product pom parent-groupid com.sun.xml.bind.mvn Medium
Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium
Version file version 4.0.6 High
Version Manifest build-version 4.0.6 Medium
Version Manifest Bundle-Version 4.0.6 High
Version Manifest implementation-build-id 4.0.6 Low
Version pom version 4.0.6 Highest
pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6
(Confidence :High)
jaxb-runtime-4.0.6.jar
Description:
JAXB (JSR 222) Reference Implementation
License:
http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-runtime/4.0.6/jaxb-runtime-4.0.6.jar
MD5: 0e600d639f3a09ddd6fa91623a12b634
SHA1: fb95ebb62564657b2fedfe165b859789ef3a8711
SHA256: 1c0d57f8c25f9605d5a2f7ad0a87581893776ac85b00b101b2651258edaa9118
Referenced In Project/Scope: Tailormap API:runtime
jaxb-runtime-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jaxb-runtime High
Vendor jar package name glassfish Highest
Vendor jar package name jaxb Highest
Vendor jar package name runtime Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium
Vendor Manifest git-revision 0dcfdf5 Low
Vendor Manifest implementation-build-id 4.0.6 - 0dcfdf5 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish.jaxb Medium
Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.xml.bind.JAXBContextFactory" Low
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jaxb-runtime Highest
Vendor pom artifactid jaxb-runtime Low
Vendor pom groupid org.glassfish.jaxb Highest
Vendor pom name JAXB Runtime High
Vendor pom parent-artifactid jaxb-runtime-parent Low
Vendor pom parent-groupid com.sun.xml.bind.mvn Medium
Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest
Product file name jaxb-runtime High
Product jar package name glassfish Highest
Product jar package name jaxb Highest
Product jar package name runtime Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name JAXB Runtime Medium
Product Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium
Product Manifest git-revision 0dcfdf5 Low
Product Manifest implementation-build-id 4.0.6 - 0dcfdf5 Low
Product Manifest Implementation-Title Eclipse Implementation of JAXB High
Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.xml.bind.JAXBContextFactory" Low
Product Manifest specification-title Jakarta XML Binding Medium
Product pom artifactid jaxb-runtime Highest
Product pom groupid org.glassfish.jaxb Highest
Product pom name JAXB Runtime High
Product pom parent-artifactid jaxb-runtime-parent Medium
Product pom parent-groupid com.sun.xml.bind.mvn Medium
Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium
Version file version 4.0.6 High
Version Manifest build-version 4.0.6 Medium
Version Manifest Bundle-Version 4.0.6 High
Version Manifest implementation-build-id 4.0.6 Low
Version pom version 4.0.6 Highest
pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6
(Confidence :High)
jboss-logging-3.6.3.Final.jar
Description:
The JBoss Logging Framework
License:
Apache License 2.0: https://repository.jboss.org/licenses/apache-2.0.txt
File Path: /home/runner/.m2/repository/org/jboss/logging/jboss-logging/3.6.3.Final/jboss-logging-3.6.3.Final.jar
MD5: b4cf5872f18b3e80e18769d51c7ae9b2
SHA1: 1cc9f976725720bb4a66f80af3e3aa6b9890d969
SHA256: 7c12ee575508f81e22b1db9334b969d0ec54ef0fd1dcba24eeab1a44235fc366
Referenced In Project/Scope: Tailormap API:compile
jboss-logging-3.6.3.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name jboss-logging High
Vendor hint analyzer vendor redhat Highest
Vendor jar package name jboss Highest
Vendor jar package name logging Highest
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl http://www.jboss.org Low
Vendor Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium
Vendor Manifest implementation-url https://www.jboss.org Low
Vendor Manifest Implementation-Vendor JBoss by Red Hat High
Vendor Manifest os-arch amd64 Low
Vendor Manifest os-name Linux Medium
Vendor Manifest specification-vendor JBoss by Red Hat Low
Vendor pom artifactid jboss-logging Highest
Vendor pom artifactid jboss-logging Low
Vendor pom groupid org.jboss.logging Highest
Vendor pom name JBoss Logging 3 High
Vendor pom parent-artifactid jboss-parent Low
Vendor pom parent-groupid org.jboss Medium
Vendor pom url https://www.jboss.org Highest
Product file name jboss-logging High
Product jar package name jboss Highest
Product jar package name logging Highest
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl http://www.jboss.org Low
Product Manifest Bundle-Name JBoss Logging 3 Medium
Product Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium
Product Manifest Implementation-Title JBoss Logging 3 High
Product Manifest implementation-url https://www.jboss.org Low
Product Manifest os-arch amd64 Low
Product Manifest os-name Linux Medium
Product Manifest specification-title JBoss Logging 3 Medium
Product pom artifactid jboss-logging Highest
Product pom groupid org.jboss.logging Highest
Product pom name JBoss Logging 3 High
Product pom parent-artifactid jboss-parent Medium
Product pom parent-groupid org.jboss Medium
Product pom url https://www.jboss.org Medium
Version Manifest Bundle-Version 3.6.3.Final High
Version Manifest Implementation-Version 3.6.3.Final High
Version pom parent-version 3.6.3.Final Low
Version pom version 3.6.3.Final Highest
pkg:maven/org.jboss.logging/jboss-logging@3.6.3.Final
(Confidence :High)
jcip-annotations-1.0-1.jar
Description:
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256: 4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: Tailormap API:compile
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name jcip-annotations High
Vendor jar package name annotations Highest
Vendor jar package name annotations Low
Vendor jar package name jcip Highest
Vendor jar package name jcip Low
Vendor jar package name net Low
Vendor pom artifactid jcip-annotations Highest
Vendor pom artifactid jcip-annotations Low
Vendor pom developer id stephenc Medium
Vendor pom developer name Stephen Connolly Medium
Vendor pom groupid com.github.stephenc.jcip Highest
Vendor pom name JCIP Annotations under Apache License High
Vendor pom url http://stephenc.github.com/jcip-annotations Highest
Product file name jcip-annotations High
Product jar package name annotations Highest
Product jar package name annotations Low
Product jar package name jcip Highest
Product jar package name jcip Low
Product pom artifactid jcip-annotations Highest
Product pom developer id stephenc Low
Product pom developer name Stephen Connolly Low
Product pom groupid com.github.stephenc.jcip Highest
Product pom name JCIP Annotations under Apache License High
Product pom url http://stephenc.github.com/jcip-annotations Medium
Version pom version 1.0-1 Highest
pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1
(Confidence :High)
jcl-over-slf4j-2.0.17.jar
Description:
JCL 1.2 implemented over SLF4J
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar
MD5: 4fcd46ca51e55b9fd9b0db34474927e0
SHA1: 76ea503eb688f06556a9ba69995d7eab63e34531
SHA256: affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c
Referenced In Project/Scope: Tailormap API:runtime
jcl-over-slf4j-2.0.17.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name jcl-over-slf4j High
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor pom artifactid jcl-over-slf4j Highest
Vendor pom artifactid jcl-over-slf4j Low
Vendor pom groupid org.slf4j Highest
Vendor pom name JCL 1.2 implemented over SLF4J High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name jcl-over-slf4j High
Product jar package name 9 Highest
Product jar package name apache Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium
Product Manifest bundle-symbolicname jcl.over.slf4j Medium
Product Manifest Implementation-Title jcl-over-slf4j High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product pom artifactid jcl-over-slf4j Highest
Product pom groupid org.slf4j Highest
Product pom name JCL 1.2 implemented over SLF4J High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17
(Confidence :High)
jgridshift-core-1.3.jar
File Path: /home/runner/.m2/repository/it/geosolutions/jgridshift/jgridshift-core/1.3/jgridshift-core-1.3.jar
MD5: 04a57b57bb0654b3d603eaaa748de563
SHA1: 314702a7b6e634e1c74589983a6762974b9c51c8
SHA256: 303eb6a6f6f87369f6b9e3dcacefd6f9b0ad55920cd65a7f162ab9a23401c722
Referenced In Project/Scope: Tailormap API:compile
jgridshift-core-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-referencing@34.3
Evidence
Type Source Name Value Confidence
Vendor file name jgridshift-core High
Vendor jar package name au Low
Vendor jar package name com Low
Vendor jar package name jgridshift Highest
Vendor jar package name objectix Low
Vendor pom artifactid jgridshift-core Highest
Vendor pom artifactid jgridshift-core Low
Vendor pom groupid it.geosolutions.jgridshift Highest
Vendor pom parent-artifactid jgridshift Low
Product file name jgridshift-core High
Product jar package name com Low
Product jar package name jgridshift Highest
Product jar package name jgridshift Low
Product jar package name objectix Low
Product pom artifactid jgridshift-core Highest
Product pom groupid it.geosolutions.jgridshift Highest
Product pom parent-artifactid jgridshift Medium
Version file version 1.3 High
Version pom version 1.3 Highest
pkg:maven/it.geosolutions.jgridshift/jgridshift-core@1.3
(Confidence :High)
json-path-3.0.0.jar
Description:
A library to query and verify JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/3.0.0/json-path-3.0.0.jar
MD5: 2ab4381a6e940ad027e976902fc42474
SHA1: 053913e54e804386c8e375e567410bb2c86666ad
SHA256: e4e49440701674ace75af44a98840d9e13f53b34aab280446707661318405dc8
Referenced In Project/Scope: Tailormap API:compile
json-path-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name json-path High
Vendor jar package name jayway Highest
Vendor jar package name json Highest
Vendor jar package name jsonpath Highest
Vendor jar package name path Highest
Vendor Manifest automatic-module-name json.path Medium
Vendor Manifest bundle-symbolicname json-path Medium
Vendor pom artifactid json-path Highest
Vendor pom artifactid json-path Low
Vendor pom developer email kalle.stenflo (a) gmail.com Low
Vendor pom developer id kalle.stenflo Medium
Vendor pom developer name Kalle Stenflo Medium
Vendor pom groupid com.jayway.jsonpath Highest
Vendor pom name json-path High
Vendor pom url jayway/JsonPath Highest
Product file name json-path High
Product jar package name jayway Highest
Product jar package name json Highest
Product jar package name jsonpath Highest
Product jar package name path Highest
Product Manifest automatic-module-name json.path Medium
Product Manifest Bundle-Name json-path Medium
Product Manifest bundle-symbolicname json-path Medium
Product Manifest Implementation-Title json-path High
Product pom artifactid json-path Highest
Product pom developer email kalle.stenflo (a) gmail.com Low
Product pom developer id kalle.stenflo Low
Product pom developer name Kalle Stenflo Low
Product pom groupid com.jayway.jsonpath Highest
Product pom name json-path High
Product pom url jayway/JsonPath High
Version file version 3.0.0 High
Version Manifest Bundle-Version 3.0.0 High
Version pom version 3.0.0 Highest
json-smart-2.6.0.jar
Description:
JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.6.0/json-smart-2.6.0.jar
MD5: fde8981f31c3b972355a5adf26a9ec65
SHA1: 5f858a43a325a8673da6869ab2bc787a1bcb2244
SHA256: 1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b
Referenced In Project/Scope: Tailormap API:compile
json-smart-2.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.jayway.jsonpath/json-path@3.0.0
Evidence
Type Source Name Value Confidence
Vendor file name json-smart High
Vendor jar package name json Highest
Vendor jar package name minidev Highest
Vendor jar package name net Highest
Vendor jar package name parser Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://urielch.github.io/ Low
Vendor Manifest bundle-symbolicname net.minidev.json-smart Medium
Vendor pom artifactid json-smart Highest
Vendor pom artifactid json-smart Low
Vendor pom developer email adoneitan@gmail.com Low
Vendor pom developer email hezhangjian97gmail.com Low
Vendor pom developer email uchemouni@gmail.com Low
Vendor pom developer id erav Medium
Vendor pom developer id hezhangjian Medium
Vendor pom developer id uriel Medium
Vendor pom developer name Eitan Raviv Medium
Vendor pom developer name Uriel Chemouni Medium
Vendor pom developer name Zhangjian He Medium
Vendor pom groupid net.minidev Highest
Vendor pom name JSON Small and Fast Parser High
Vendor pom organization name Chemouni Uriel High
Vendor pom organization url https://urielch.github.io/ Medium
Vendor pom url https://urielch.github.io/ Highest
Product file name json-smart High
Product jar package name json Highest
Product jar package name minidev Highest
Product jar package name net Highest
Product jar package name parser Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://urielch.github.io/ Low
Product Manifest Bundle-Name json-smart Medium
Product Manifest bundle-symbolicname net.minidev.json-smart Medium
Product pom artifactid json-smart Highest
Product pom developer email adoneitan@gmail.com Low
Product pom developer email hezhangjian97gmail.com Low
Product pom developer email uchemouni@gmail.com Low
Product pom developer id erav Low
Product pom developer id hezhangjian Low
Product pom developer id uriel Low
Product pom developer name Eitan Raviv Low
Product pom developer name Uriel Chemouni Low
Product pom developer name Zhangjian He Low
Product pom groupid net.minidev Highest
Product pom name JSON Small and Fast Parser High
Product pom organization name Chemouni Uriel Low
Product pom organization url https://urielch.github.io/ Low
Product pom url https://urielch.github.io/ Medium
Version file version 2.6.0 High
Version Manifest Bundle-Version 2.6.0 High
Version pom version 2.6.0 Highest
jspecify-1.0.0.jar
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256: 1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: Tailormap API:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-core@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name jspecify High
Vendor jar package name annotations Highest
Vendor jar package name jspecify Highest
Vendor Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Vendor Manifest bundle-symbolicname org.jspecify.jspecify Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid jspecify Highest
Vendor pom artifactid jspecify Low
Vendor pom developer email kevinb9n@gmail.com Low
Vendor pom developer id kevinb9n Medium
Vendor pom developer name Kevin Bourrillion Medium
Vendor pom groupid org.jspecify Highest
Vendor pom name JSpecify annotations High
Vendor pom url http://jspecify.org/ Highest
Product file name jspecify High
Product jar package name annotations Highest
Product jar package name jspecify Highest
Product Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Product Manifest Bundle-Name JSpecify annotations Medium
Product Manifest bundle-symbolicname org.jspecify.jspecify Medium
Product Manifest multi-release true Low
Product pom artifactid jspecify Highest
Product pom developer email kevinb9n@gmail.com Low
Product pom developer id kevinb9n Low
Product pom developer name Kevin Bourrillion Low
Product pom groupid org.jspecify Highest
Product pom name JSpecify annotations High
Product pom url http://jspecify.org/ Medium
Version file version 1.0.0 High
Version Manifest Bundle-Version 1.0.0 High
Version Manifest Implementation-Version 1.0.0 High
Version pom version 1.0.0 Highest
pkg:maven/org.jspecify/jspecify@1.0.0
(Confidence :High)
jts-core-1.20.0.jar
Description:
The JTS Topology Suite is an API for 2D linear geometry predicates and functions.
License:
https://github.com/locationtech/jts/blob/master/LICENSE_EPLv2.txt, https://github.com/locationtech/jts/blob/master/LICENSE_EDLv1.txt
File Path: /home/runner/.m2/repository/org/locationtech/jts/jts-core/1.20.0/jts-core-1.20.0.jar
MD5: 8de91edea80ac2de00c07226458649fb
SHA1: 25b72c9548a328cb1aea8a6b89d710a31ade5403
SHA256: 6a783d8f9dba3d3cf7265435f134402f63c05838aa6cbcc4297ad3a5b2842baf
Referenced In Project/Scope: Tailormap API:compile
jts-core-1.20.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jts-core High
Vendor jar package name jts Highest
Vendor jar package name locationtech Highest
Vendor Manifest automatic-module-name org.locationtech.jts Medium
Vendor Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium
Vendor pom artifactid jts-core Highest
Vendor pom artifactid jts-core Low
Vendor pom groupid org.locationtech.jts Highest
Vendor pom name : High
Vendor pom parent-artifactid jts-modules Low
Product file name jts-core High
Product jar package name geometry Highest
Product jar package name jts Highest
Product jar package name locationtech Highest
Product Manifest automatic-module-name org.locationtech.jts Medium
Product Manifest Bundle-Name jts-core Medium
Product Manifest bundle-symbolicname org.locationtech.jts.jts-core Medium
Product pom artifactid jts-core Highest
Product pom groupid org.locationtech.jts Highest
Product pom name : High
Product pom parent-artifactid jts-modules Medium
Version file version 1.20.0 High
Version Manifest Bundle-Version 1.20.0 High
Version pom version 1.20.0 Highest
pkg:maven/org.locationtech.jts/jts-core@1.20.0
(Confidence :High)
jul-to-slf4j-2.0.17.jar
Description:
JUL to SLF4J bridge
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar
MD5: a42936c56611e4794c42908fb3d3a647
SHA1: 524cb6ccc2b68a57604750e1ab8b13b5a786a6aa
SHA256: a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538
Referenced In Project/Scope: Tailormap API:compile
jul-to-slf4j-2.0.17.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name jul-to-slf4j High
Vendor jar package name bridge Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname jul.to.slf4j Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid jul-to-slf4j Highest
Vendor pom artifactid jul-to-slf4j Low
Vendor pom groupid org.slf4j Highest
Vendor pom name JUL to SLF4J bridge High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name jul-to-slf4j High
Product jar package name bridge Highest
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name JUL to SLF4J bridge Medium
Product Manifest bundle-symbolicname jul.to.slf4j Medium
Product Manifest Implementation-Title jul-to-slf4j High
Product Manifest multi-release true Low
Product pom artifactid jul-to-slf4j Highest
Product pom groupid org.slf4j Highest
Product pom name JUL to SLF4J bridge High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/jul-to-slf4j@2.0.17
(Confidence :High)
lang-tag-1.7.jar
Description:
Java implementation of "Tags for Identifying Languages" (RFC 5646)
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/lang-tag/1.7/lang-tag-1.7.jar
MD5: 31b8a4f76fdbf21f1d667f9d6618e0b2
SHA1: 97c73ecd70bc7e8eefb26c5eea84f251a63f1031
SHA256: e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31
Referenced In Project/Scope: Tailormap API:compile
lang-tag-1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name lang-tag High
Vendor jar package name langtag Highest
Vendor jar package name nimbusds Highest
Vendor Manifest build-date ${timestamp} Low
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest build-number ${buildNumber} Low
Vendor Manifest build-tag 1.7 Low
Vendor Manifest bundle-docurl https://connect2id.com/ Low
Vendor Manifest bundle-symbolicname lang-tag Medium
Vendor Manifest Implementation-Vendor Connect2id Ltd. High
Vendor Manifest Implementation-Vendor-Id com.nimbusds Medium
Vendor Manifest specification-vendor Connect2id Ltd. Low
Vendor pom artifactid lang-tag Highest
Vendor pom artifactid lang-tag Low
Vendor pom developer email vladimir@dzhuvinov.com Low
Vendor pom developer id vdzhuvinov Medium
Vendor pom developer name Vladimir Dzhuvinov Medium
Vendor pom groupid com.nimbusds Highest
Vendor pom name Nimbus LangTag High
Vendor pom organization name Connect2id Ltd. High
Vendor pom organization url https://connect2id.com/ Medium
Vendor pom url https://bitbucket.org/connect2id/nimbus-language-tags Highest
Product file name lang-tag High
Product jar package name langtag Highest
Product jar package name nimbusds Highest
Product Manifest build-date ${timestamp} Low
Product Manifest build-jdk-spec 11 Low
Product Manifest build-number ${buildNumber} Low
Product Manifest build-tag 1.7 Low
Product Manifest bundle-docurl https://connect2id.com/ Low
Product Manifest Bundle-Name Nimbus LangTag Medium
Product Manifest bundle-symbolicname lang-tag Medium
Product Manifest Implementation-Title Nimbus LangTag High
Product Manifest specification-title Nimbus LangTag Medium
Product pom artifactid lang-tag Highest
Product pom developer email vladimir@dzhuvinov.com Low
Product pom developer id vdzhuvinov Low
Product pom developer name Vladimir Dzhuvinov Low
Product pom groupid com.nimbusds Highest
Product pom name Nimbus LangTag High
Product pom organization name Connect2id Ltd. Low
Product pom organization url https://connect2id.com/ Low
Product pom url https://bitbucket.org/connect2id/nimbus-language-tags Medium
Version file version 1.7 High
Version Manifest build-tag 1.7 Low
Version Manifest Implementation-Version 1.7 High
Version pom version 1.7 Highest
pkg:maven/com.nimbusds/lang-tag@1.7
(Confidence :High)
log4j-api-2.25.4.jar
Description:
The logging API of the Log4j project.
Library and application code can log through this API.
It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.25.4/log4j-api-2.25.4.jar
MD5: 5efb17ae45b749c1fbfedb3d93375cfc
SHA1: 89ff2217b193fb187b134aa6ebcbfa8a28b018a9
SHA256: c4b642a7f047275215de117e0e3847eb2c7711d84a0aa7433e7b3c096daf341d
Referenced In Project/Scope: Tailormap API:compile
log4j-api-2.25.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name log4j-api High
Vendor jar package name apache Highest
Vendor jar package name log4j Highest
Vendor jar package name logging Highest
Vendor jar package name org Highest
Vendor jar package name simple Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-symbolicname org.apache.logging.log4j.api Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid log4j-api Highest
Vendor pom artifactid log4j-api Low
Vendor pom groupid org.apache.logging.log4j Highest
Vendor pom name Apache Log4j API High
Vendor pom parent-artifactid log4j Low
Vendor pom url https://logging.apache.org/log4j/2.x/ Highest
Product file name log4j-api High
Product jar package name apache Highest
Product jar package name log4j Highest
Product jar package name logging Highest
Product jar package name org Highest
Product jar package name simple Highest
Product jar package name util Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-activationpolicy lazy Low
Product Manifest Bundle-Name Apache Log4j API Medium
Product Manifest bundle-symbolicname org.apache.logging.log4j.api Medium
Product Manifest Implementation-Title Apache Log4j API High
Product Manifest multi-release true Low
Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low
Product Manifest specification-title Apache Log4j API Medium
Product pom artifactid log4j-api Highest
Product pom groupid org.apache.logging.log4j Highest
Product pom name Apache Log4j API High
Product pom parent-artifactid log4j Medium
Product pom url https://logging.apache.org/log4j/2.x/ Medium
Version file version 2.25.4 High
Version Manifest Bundle-Version 2.25.4 High
Version Manifest Implementation-Version 2.25.4 High
Version pom version 2.25.4 Highest
log4j-to-slf4j-2.25.4.jar
Description:
Forwards the Log4j API calls to SLF4J.
(Refer to the `log4j-slf4j[2]-impl` artifacts for forwarding SLF4J to the Log4j API.)
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.25.4/log4j-to-slf4j-2.25.4.jar
MD5: b3d45f5534aa71da607e403ce1519977
SHA1: 68df56640a5d245192e91bd2ac89e504b477cc10
SHA256: d7b78fc0aaaa5e8ada388b29d718b0ab187e512965bed0b259bb4ab299f13db2
Referenced In Project/Scope: Tailormap API:compile
log4j-to-slf4j-2.25.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name log4j-to-slf4j High
Vendor jar package name apache Highest
Vendor jar package name logging Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release false Low
Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid log4j-to-slf4j Highest
Vendor pom artifactid log4j-to-slf4j Low
Vendor pom groupid org.apache.logging.log4j Highest
Vendor pom name Log4j API to SLF4J Adapter High
Vendor pom parent-artifactid log4j Low
Vendor pom url https://logging.apache.org/log4j/2.x/ Highest
Product file name log4j-to-slf4j High
Product jar package name apache Highest
Product jar package name logging Highest
Product jar package name slf4j Highest
Product jar package name slf4jprovider Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-activationpolicy lazy Low
Product Manifest Bundle-Name Log4j API to SLF4J Adapter Medium
Product Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium
Product Manifest Implementation-Title Log4j API to SLF4J Adapter High
Product Manifest multi-release false Low
Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low
Product Manifest specification-title Log4j API to SLF4J Adapter Medium
Product pom artifactid log4j-to-slf4j Highest
Product pom groupid org.apache.logging.log4j Highest
Product pom name Log4j API to SLF4J Adapter High
Product pom parent-artifactid log4j Medium
Product pom url https://logging.apache.org/log4j/2.x/ Medium
Version file version 2.25.4 High
Version Manifest Bundle-Version 2.25.4 High
Version Manifest Implementation-Version 2.25.4 High
Version pom version 2.25.4 Highest
pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.4
(Confidence :High)
logback-core-1.5.32.jar
Description:
logback-core module
License:
https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.32/logback-core-1.5.32.jar
MD5: 053d4a28d6ba4c9b6247c6fd859ca64f
SHA1: fdfb3ff9a842303d4a95207294a6c6bc64e2605d
SHA256: 6a904d5778d0e361a9692f9cbe68b1b0620ae0f3eda2ec2ed09102755bf036c4
Referenced In Project/Scope: Tailormap API:compile
logback-core-1.5.32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name logback-core High
Vendor jar package name ch Highest
Vendor jar package name core Highest
Vendor jar package name logback Highest
Vendor jar package name qos Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.qos.ch Low
Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium
Vendor Manifest Implementation-Vendor QOS.ch High
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor Manifest specification-vendor QOS.ch Low
Vendor pom artifactid logback-core Highest
Vendor pom artifactid logback-core Low
Vendor pom groupid ch.qos.logback Highest
Vendor pom name Logback Core Module High
Vendor pom parent-artifactid logback-parent Low
Product file name logback-core High
Product jar package name 21 Highest
Product jar package name ch Highest
Product jar package name core Highest
Product jar package name logback Highest
Product jar package name qos Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.qos.ch Low
Product Manifest Bundle-Name Logback Core Module Medium
Product Manifest bundle-symbolicname ch.qos.logback.core Medium
Product Manifest Implementation-Title Logback Core Module High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product Manifest specification-title Logback Core Module Medium
Product pom artifactid logback-core Highest
Product pom groupid ch.qos.logback Highest
Product pom name Logback Core Module High
Product pom parent-artifactid logback-parent Medium
Version file version 1.5.32 High
Version Manifest Bundle-Version 1.5.32 High
Version Manifest Implementation-Version 1.5.32 High
Version pom version 1.5.32 Highest
Related Dependencies
logback-classic-1.5.32.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.5.32/logback-classic-1.5.32.jar
MD5: cc1b628dcb1f44089d0decf8a4cf9009
SHA1: 2b1042c50f508f2eb402bd4d22ccbdf94cc37d2e
SHA256: 2d4cf592db78be2de4d6140434c2fec170dcb16a09e8c8b7b207dbf5e31b848a
pkg:maven/ch.qos.logback/logback-classic@1.5.32
micrometer-core-1.16.5.jar
Description:
Core module of Micrometer containing instrumentation API and implementation
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-core/1.16.5/micrometer-core-1.16.5.jar
MD5: 44ff087270426e6bca299885ea999367
SHA1: eed1add84bba09a75ac35733cb0ed6bf5a1d3cb7
SHA256: 2908222d2eed9411d0d2a7a3725026cd6d8a8f7a3feab7009746009810248164
Referenced In Project/Scope: Tailormap API:compile
micrometer-core-1.16.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-core High
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.core Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2026-04-13_13:44:12 Low
Vendor Manifest build-date-utc 2026-04-13T13:44:12.927425635Z Low
Vendor Manifest build-host 9e09bda18b43 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 67591 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/67591 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-core Medium
Vendor Manifest change cf727d0 Low
Vendor Manifest full-change cf727d0a9605c1aea58c26c5e72fb9f6fe84df2a Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-core Low
Vendor pom artifactid micrometer-core Highest
Vendor pom artifactid micrometer-core Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-core High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-core High
Product jar package name core Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.core Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2026-04-13_13:44:12 Low
Product Manifest build-date-utc 2026-04-13T13:44:12.927425635Z Low
Product Manifest build-host 9e09bda18b43 Low
Product Manifest build-job deploy Low
Product Manifest build-number 67591 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/67591 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-core Medium
Product Manifest bundle-symbolicname micrometer-core Medium
Product Manifest change cf727d0 Low
Product Manifest full-change cf727d0a9605c1aea58c26c5e72fb9f6fe84df2a Low
Product Manifest Implementation-Title io.micrometer#micrometer-core;1.16.5 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-core Low
Product pom artifactid micrometer-core Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-core High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.5 High
Version Manifest Bundle-Version 1.16.5 High
Version Manifest Implementation-Version 1.16.5 High
Version pom version 1.16.5 Highest
Related Dependencies
micrometer-commons-1.16.5.jar
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.16.5/micrometer-commons-1.16.5.jar
MD5: 19fa8edce75d29d550c4ea726506d7e2
SHA1: f8c25a4e35d5049d41d8446b111b9891ae407881
SHA256: b0cc8c620453ef71e22d6c4ec5c496cc112f964b4e826b9f87182fc97512c8f9
pkg:maven/io.micrometer/micrometer-commons@1.16.5
micrometer-jakarta9-1.16.5.jar
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-jakarta9/1.16.5/micrometer-jakarta9-1.16.5.jar
MD5: 5eb076c7566a56fa0d22024ab1899e7b
SHA1: 2e98cb69f333a3d2eb78f338c99cb7f11d9c533a
SHA256: f40e07dea10f4905cf321bd9e719a87b288493cbb10c0c0a1bae7194b5996ad4
pkg:maven/io.micrometer/micrometer-jakarta9@1.16.5
micrometer-observation-1.16.5.jar
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.16.5/micrometer-observation-1.16.5.jar
MD5: d4b4161bdbf3e4f0770f67fe11050f37
SHA1: 9dff48a7a9dd84d9083e30a36855bb21a7d6836e
SHA256: 4406f33535185ff896375e9a81a4b8694e28bf20c1089b24de0325d87f63dfe7
pkg:maven/io.micrometer/micrometer-observation@1.16.5
pkg:maven/io.micrometer/micrometer-core@1.16.5
(Confidence :High)
cpe:2.3:a:4d:4d:1.16.5:*:*:*:*:*:*:*
(Confidence :Low)
suppress
micrometer-registry-prometheus-1.16.5.jar
Description:
MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-registry-prometheus/1.16.5/micrometer-registry-prometheus-1.16.5.jar
MD5: c8891265c7cf404435627fd58c3c6e26
SHA1: cde72d1c305727e20397170a8c46c2fa88c12e9e
SHA256: c8ee6627baa1458a625eee3aaf000555cb4af37935d0b8c36b1ec0cc3dd31bab
Referenced In Project/Scope: Tailormap API:compile
micrometer-registry-prometheus-1.16.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-registry-prometheus High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.registry.prometheus Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2026-04-13_13:44:14 Low
Vendor Manifest build-date-utc 2026-04-13T13:44:14.471526601Z Low
Vendor Manifest build-host 9e09bda18b43 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 67591 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/67591 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-registry-prometheus Medium
Vendor Manifest change cf727d0 Low
Vendor Manifest full-change cf727d0a9605c1aea58c26c5e72fb9f6fe84df2a Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /implementations/micrometer-registry-prometheus Low
Vendor pom artifactid micrometer-registry-prometheus Highest
Vendor pom artifactid micrometer-registry-prometheus Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-registry-prometheus High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-registry-prometheus High
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.registry.prometheus Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2026-04-13_13:44:14 Low
Product Manifest build-date-utc 2026-04-13T13:44:14.471526601Z Low
Product Manifest build-host 9e09bda18b43 Low
Product Manifest build-job deploy Low
Product Manifest build-number 67591 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/67591 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-registry-prometheus Medium
Product Manifest bundle-symbolicname micrometer-registry-prometheus Medium
Product Manifest change cf727d0 Low
Product Manifest full-change cf727d0a9605c1aea58c26c5e72fb9f6fe84df2a Low
Product Manifest Implementation-Title io.micrometer#micrometer-registry-prometheus;1.16.5 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /implementations/micrometer-registry-prometheus Low
Product pom artifactid micrometer-registry-prometheus Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-registry-prometheus High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.5 High
Version Manifest Bundle-Version 1.16.5 High
Version Manifest Implementation-Version 1.16.5 High
Version pom version 1.16.5 Highest
modernizer-maven-annotations-3.3.0.jar
File Path: /home/runner/.m2/repository/org/gaul/modernizer-maven-annotations/3.3.0/modernizer-maven-annotations-3.3.0.jar
MD5: b145d6fcbfce8a5556c2d4859490be6b
SHA1: dbe5ac52c78408f6c86d2bc726f90ad6c4c5f09b
SHA256: a6a5b63dc2450922eb7c22e8cee674af0e847a4b2f06f0ff2de183dc8a27c138
Referenced In Project/Scope: Tailormap API:compile
modernizer-maven-annotations-3.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name modernizer-maven-annotations High
Vendor jar package name gaul Highest
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest multi-release true Low
Vendor pom artifactid modernizer-maven-annotations Highest
Vendor pom artifactid modernizer-maven-annotations Low
Vendor pom groupid org.gaul Highest
Vendor pom name Modernizer Maven Plugin annotations High
Vendor pom parent-artifactid modernizer-maven-parent Low
Product file name modernizer-maven-annotations High
Product jar package name gaul Highest
Product Manifest build-jdk-spec 25 Low
Product Manifest multi-release true Low
Product pom artifactid modernizer-maven-annotations Highest
Product pom groupid org.gaul Highest
Product pom name Modernizer Maven Plugin annotations High
Product pom parent-artifactid modernizer-maven-parent Medium
Version file version 3.3.0 High
Version pom version 3.3.0 Highest
pkg:maven/org.gaul/modernizer-maven-annotations@3.3.0
(Confidence :High)
mssql-jdbc-13.4.0.jre11.jar
Description:
Microsoft JDBC Driver for SQL Server.
License:
MIT License: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/com/microsoft/sqlserver/mssql-jdbc/13.4.0.jre11/mssql-jdbc-13.4.0.jre11.jar
MD5: dfbc5d35ad9cabc113f8db3725616d9c
SHA1: 061d769c8a7dd4870fd85099ab55fbc6040b1997
SHA256: e36f5237c1267983e5b88dc2169f6b9d7e50eceec6dc1ca31018e3877e14af66
Referenced In Project/Scope: Tailormap API:compile
mssql-jdbc-13.4.0.jre11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name mssql-jdbc High
Vendor jar package name jdbc Highest
Vendor jar package name microsoft Highest
Vendor jar package name mssql Highest
Vendor jar package name sql Highest
Vendor jar package name sqlserver Highest
Vendor Manifest automatic-module-name com.microsoft.sqlserver.jdbc Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-symbolicname com.microsoft.sqlserver.mssql-jdbc Medium
Vendor pom artifactid mssql-jdbc Highest
Vendor pom artifactid mssql-jdbc Low
Vendor pom developer org Microsoft Medium
Vendor pom developer org URL http://www.microsoft.com Medium
Vendor pom groupid com.microsoft.sqlserver Highest
Vendor pom name Microsoft JDBC Driver for SQL Server High
Vendor pom organization name Microsoft Corporation High
Vendor pom url Microsoft/mssql-jdbc Highest
Product file name mssql-jdbc High
Product jar package name jdbc Highest
Product jar package name microsoft Highest
Product jar package name mssql Highest
Product jar package name sql Highest
Product jar package name sqlserver Highest
Product Manifest automatic-module-name com.microsoft.sqlserver.jdbc Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest Bundle-Name Microsoft JDBC Driver for SQL Server Medium
Product Manifest bundle-symbolicname com.microsoft.sqlserver.mssql-jdbc Medium
Product pom artifactid mssql-jdbc Highest
Product pom developer org Microsoft Low
Product pom developer org URL http://www.microsoft.com Low
Product pom groupid com.microsoft.sqlserver Highest
Product pom name Microsoft JDBC Driver for SQL Server High
Product pom organization name Microsoft Corporation Low
Product pom url Microsoft/mssql-jdbc High
Version file version 13.4.0.jre11 High
Version Manifest Bundle-Version 13.4.0.jre11 High
Version pom version 13.4.0.jre11 Highest
pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.4.0
(Confidence :High)
pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.4.0.jre11
(Confidence :High)
cpe:2.3:a:microsoft:jdbc_driver_for_sql_server:13.4.0.jre11:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:www-sql_project:www-sql:13.4.0.jre11:*:*:*:*:*:*:*
(Confidence :Highest)
suppress
nbvcxz-1.5.1.jar
Description:
Nbvcxz takes heavy inspiration from the zxcvbn library built by Dropbox, and in a lot of ways is
similar.
I built this library to be heavily extensible for every use case, with sane defaults.
License:
MIT license: https://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/me/gosimple/nbvcxz/1.5.1/nbvcxz-1.5.1.jar
MD5: f6e4f7e6d5b5fe1b8a6f3eb97ca2ea08
SHA1: 50b5bb20fcd6c40a8c6de7e7b52662df8c0c46bd
SHA256: e640b177c1fcc709a01afef8036061e04eac54b6f9024e4b457cc12f973fc93d
Referenced In Project/Scope: Tailormap API:compile
nbvcxz-1.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name nbvcxz High
Vendor jar package name gosimple Highest
Vendor jar package name me Highest
Vendor jar package name nbvcxz Highest
Vendor Manifest automatic-module-name me.gosimple.nbvcxz Medium
Vendor Manifest build-jdk-spec 19 Low
Vendor pom artifactid nbvcxz Highest
Vendor pom artifactid nbvcxz Low
Vendor pom developer email adambrusselback@gmail.com Low
Vendor pom developer name Adam Brusselback Medium
Vendor pom developer org GoSimple Medium
Vendor pom developer org URL https://blacksmithapplications.com Medium
Vendor pom groupid me.gosimple Highest
Vendor pom name nbvcxz High
Vendor pom url GoSimpleLLC/nbvcxz Highest
Product file name nbvcxz High
Product jar package name gosimple Highest
Product jar package name me Highest
Product jar package name nbvcxz Highest
Product Manifest automatic-module-name me.gosimple.nbvcxz Medium
Product Manifest build-jdk-spec 19 Low
Product pom artifactid nbvcxz Highest
Product pom developer email adambrusselback@gmail.com Low
Product pom developer name Adam Brusselback Low
Product pom developer org GoSimple Low
Product pom developer org URL https://blacksmithapplications.com Low
Product pom groupid me.gosimple Highest
Product pom name nbvcxz High
Product pom url GoSimpleLLC/nbvcxz High
Version file version 1.5.1 High
Version pom version 1.5.1 Highest
net.opengis.fes-34.3.jar
Description:
Filter Encoding Specification Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.fes/34.3/net.opengis.fes-34.3.jar
MD5: 86ec213b414c815be7ac5cbe69b0c83b
SHA1: 4d4f0cedc2ec47ac173aecd02b2a76c3c6dda2cc
SHA256: 22015b017fb33532f982c3ef579130457f23c051dbc888316c2356cbbe36fefe
Referenced In Project/Scope: Tailormap API:compile
net.opengis.fes-34.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-wfs-ng@34.3
Evidence
Type Source Name Value Confidence
Vendor file name net.opengis.fes High
Vendor jar package name net Highest
Vendor jar package name opengis Highest
Vendor Manifest automatic-module-name org.geotools.ogc.net.opengis.fes Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 19-Mar-2026 18:28 Low
Vendor Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Vendor pom artifactid net.opengis.fes Highest
Vendor pom artifactid net.opengis.fes Low
Vendor pom groupid org.geotools.ogc Highest
Vendor pom name Filter Encoding Specification Model High
Vendor pom parent-artifactid ogc Low
Vendor pom parent-groupid org.geotools Medium
Product file name net.opengis.fes High
Product jar package name net Highest
Product jar package name opengis Highest
Product Manifest automatic-module-name org.geotools.ogc.net.opengis.fes Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 19-Mar-2026 18:28 Low
Product Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Product pom artifactid net.opengis.fes Highest
Product pom groupid org.geotools.ogc Highest
Product pom name Filter Encoding Specification Model High
Product pom parent-artifactid ogc Medium
Product pom parent-groupid org.geotools Medium
Version file version 34.3 High
Version Manifest project-version 34.3 Medium
Version pom version 34.3 Highest
Related Dependencies
net.opengis.ows-34.3.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.ows/34.3/net.opengis.ows-34.3.jar
MD5: e44dc30f5b7acbec9706296a85f5bc22
SHA1: 042c17cfab47199812c0f13721546c37ec587209
SHA256: 625e862459ad12fc39fa76ca615cd6267a8950f42901121dcb586d08e46ba552
pkg:maven/org.geotools.ogc/net.opengis.ows@34.3
net.opengis.wfs-34.3.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.wfs/34.3/net.opengis.wfs-34.3.jar
MD5: f863f5f7855e17c5249bb7e69fd713dd
SHA1: 0e4ef54e6975b32e8201888ef180f2211789813a
SHA256: 4bd1956c089da20dedad6e76ab6219309afaa38015ff1bbaaf715942c651957e
pkg:maven/org.geotools.ogc/net.opengis.wfs@34.3
net.opengis.wmts-34.3.jar
File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.wmts/34.3/net.opengis.wmts-34.3.jar
MD5: 5603d50d45f46030f99ec3b36f510b76
SHA1: 9b34a56620bdbf1208ea3d8caa7af42c8681cdc6
SHA256: 5aa926e4260a76e3db6a37cf8b22ef6507399af1a38c358d5e19538c39a3fd79
pkg:maven/org.geotools.ogc/net.opengis.wmts@34.3
nimbus-jose-jwt-10.4.jar (shaded: com.google.code.gson:gson:2.12.1)
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/10.4/nimbus-jose-jwt-10.4.jar/META-INF/maven/com.google.code.gson/gson/pom.xml
MD5: 54205b633e8a676f5bb25c188631c854
SHA1: d2c3993ff96e5da39a57e5e0b695eda560949b57
SHA256: 0b5735ec85f45282f1e2c769779800427b150a8163f405093a9280b71cab1978
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
Vendor pom artifactid gson Low
Vendor pom groupid com.google.code.gson Highest
Vendor pom name Gson High
Vendor pom parent-artifactid gson-parent Low
Product pom artifactid gson Highest
Product pom groupid com.google.code.gson Highest
Product pom name Gson High
Product pom parent-artifactid gson-parent Medium
Version pom version 2.12.1 Highest
nimbus-jose-jwt-10.4.jar
Description:
Java library for Javascript Object Signing and Encryption (JOSE) and
JSON Web Tokens (JWT)
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/10.4/nimbus-jose-jwt-10.4.jar
MD5: 814c1bcc5ce8be81124064581de6ae11
SHA1: 0ca983d3f13080567e36ea554a15af38f31a0cb4
SHA256: 6f13f3480ddc53d820d276f582f54843cff1daf5c6e35e534947e9de7723b46b
Referenced In Project/Scope: Tailormap API:compile
nimbus-jose-jwt-10.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name nimbus-jose-jwt High
Vendor jar package name jose Highest
Vendor jar package name jwt Highest
Vendor jar package name nimbusds Highest
Vendor Manifest build-date ${timestamp} Low
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-number ${buildNumber} Low
Vendor Manifest build-tag 10.4 Low
Vendor Manifest bundle-docurl https://connect2id.com Low
Vendor Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium
Vendor Manifest Implementation-Vendor Connect2id Ltd. High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor Connect2id Ltd. Low
Vendor pom artifactid nimbus-jose-jwt Highest
Vendor pom artifactid nimbus-jose-jwt Low
Vendor pom developer email vladimir@dzhuvinov.com Low
Vendor pom developer id vdzhuvinov Medium
Vendor pom developer name Vladimir Dzhuvinov Medium
Vendor pom groupid com.nimbusds Highest
Vendor pom name Nimbus JOSE+JWT High
Vendor pom organization name Connect2id Ltd. High
Vendor pom organization url https://connect2id.com Medium
Vendor pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Highest
Product file name nimbus-jose-jwt High
Product jar package name jose Highest
Product jar package name jwt Highest
Product jar package name nimbusds Highest
Product Manifest build-date ${timestamp} Low
Product Manifest build-jdk-spec 17 Low
Product Manifest build-number ${buildNumber} Low
Product Manifest build-tag 10.4 Low
Product Manifest bundle-docurl https://connect2id.com Low
Product Manifest Bundle-Name Nimbus JOSE+JWT Medium
Product Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium
Product Manifest Implementation-Title Nimbus JOSE+JWT High
Product Manifest multi-release true Low
Product Manifest specification-title Nimbus JOSE+JWT Medium
Product pom artifactid nimbus-jose-jwt Highest
Product pom developer email vladimir@dzhuvinov.com Low
Product pom developer id vdzhuvinov Low
Product pom developer name Vladimir Dzhuvinov Low
Product pom groupid com.nimbusds Highest
Product pom name Nimbus JOSE+JWT High
Product pom organization name Connect2id Ltd. Low
Product pom organization url https://connect2id.com Low
Product pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Medium
Version file version 10.4 High
Version Manifest build-tag 10.4 Low
Version Manifest Implementation-Version 10.4 High
Version pom version 10.4 Highest
oauth2-oidc-sdk-11.26.1.jar
Description:
OAuth 2.0 SDK with OpenID Connection extensions for developing client
and server applications.
License:
Apache License, version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/nimbusds/oauth2-oidc-sdk/11.26.1/oauth2-oidc-sdk-11.26.1.jar
MD5: b9e743d2476378853b1f2c78128372e9
SHA1: 0fe01570e55df6e4d56ecc0a481d5ccf95ae1363
SHA256: 648494b00da090a4df23aa6a05e4dc03f6e8603b29dd807a4491f33d586f7f78
Referenced In Project/Scope: Tailormap API:compile
oauth2-oidc-sdk-11.26.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name oauth2-oidc-sdk High
Vendor jar package name client Highest
Vendor jar package name connect Highest
Vendor jar package name nimbusds Highest
Vendor jar package name oauth2 Highest
Vendor jar package name openid Highest
Vendor jar package name sdk Highest
Vendor Manifest build-date 20250724.104023.553 Low
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-number f2100789952111e4541a501f06293b8c21afdaac Low
Vendor Manifest build-tag 11.26.1 Low
Vendor Manifest bundle-developers vdzhuvinov;email="vd@connect2id.com";name="Vladimir Dzhuvinov" Low
Vendor Manifest bundle-docurl https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Low
Vendor Manifest bundle-symbolicname oauth2-oidc-sdk Medium
Vendor Manifest Implementation-Vendor Connect2id Ltd. High
Vendor Manifest specification-vendor Connect2id Ltd. Low
Vendor pom artifactid oauth2-oidc-sdk Highest
Vendor pom artifactid oauth2-oidc-sdk Low
Vendor pom developer email vd@connect2id.com Low
Vendor pom developer id vdzhuvinov Medium
Vendor pom developer name Vladimir Dzhuvinov Medium
Vendor pom groupid com.nimbusds Highest
Vendor pom name OAuth 2.0 SDK with OpenID Connect extensions High
Vendor pom organization name Connect2id Ltd. High
Vendor pom organization url https://connect2id.com Medium
Vendor pom url https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Highest
Product file name oauth2-oidc-sdk High
Product jar package name client Highest
Product jar package name connect Highest
Product jar package name nimbusds Highest
Product jar package name oauth2 Highest
Product jar package name openid Highest
Product jar package name sdk Highest
Product Manifest build-date 20250724.104023.553 Low
Product Manifest build-jdk-spec 17 Low
Product Manifest build-number f2100789952111e4541a501f06293b8c21afdaac Low
Product Manifest build-tag 11.26.1 Low
Product Manifest bundle-developers vdzhuvinov;email="vd@connect2id.com";name="Vladimir Dzhuvinov" Low
Product Manifest bundle-docurl https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Low
Product Manifest Bundle-Name OAuth 2.0 SDK with OpenID Connect extensions Medium
Product Manifest bundle-symbolicname oauth2-oidc-sdk Medium
Product Manifest Implementation-Title OAuth 2.0 SDK with OpenID Connect extensions High
Product Manifest specification-title OAuth 2.0 SDK with OpenID Connect extensions Medium
Product pom artifactid oauth2-oidc-sdk Highest
Product pom developer email vd@connect2id.com Low
Product pom developer id vdzhuvinov Low
Product pom developer name Vladimir Dzhuvinov Low
Product pom groupid com.nimbusds Highest
Product pom name OAuth 2.0 SDK with OpenID Connect extensions High
Product pom organization name Connect2id Ltd. Low
Product pom organization url https://connect2id.com Low
Product pom url https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions Medium
Version file version 11.26.1 High
Version Manifest build-tag 11.26.1 Low
Version Manifest Bundle-Version 11.26.1 High
Version Manifest Implementation-Version 11.26.1 High
Version pom version 11.26.1 Highest
pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.26.1
(Confidence :High)
ojdbc17-23.26.1.0.0.jar
Description:
Oracle JDBC Driver compatible with JDK17, JDK19, and JDK21
License:
Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
File Path: /home/runner/.m2/repository/com/oracle/database/jdbc/ojdbc17/23.26.1.0.0/ojdbc17-23.26.1.0.0.jar
MD5: 069301dfd785ab4480e108e16f83456d
SHA1: cfbce3d8fe73cdd4240d41e71d5d0938969c767a
SHA256: a26dbb47bdb0a4e2f0af09dd486e41f0c50ed5fb8910df5943e29d264b2eb8cc
Referenced In Project/Scope: Tailormap API:compile
ojdbc17-23.26.1.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name ojdbc17 High
Vendor jar package name driver Highest
Vendor jar package name jdbc Highest
Vendor jar package name oracle Highest
Vendor jar (hint) package name sun Highest
Vendor Manifest automatic-module-name com.oracle.database.jdbc Medium
Vendor Manifest Implementation-Vendor Oracle Corporation High
Vendor Manifest repository-id JAVAVM_23.26.1.0.0DBRU_LINUX.X64_260101 Low
Vendor Manifest specification-vendor Sun Microsystems Inc. Low
Vendor pom artifactid ojdbc17 Highest
Vendor pom artifactid ojdbc17 Low
Vendor pom developer org Oracle America, Inc. Medium
Vendor pom developer org URL http://www.oracle.com Medium
Vendor pom groupid com.oracle.database.jdbc Highest
Vendor pom name ojdbc17 High
Vendor pom url https://www.oracle.com/database/technologies/maven-central-guide.html Highest
Product file name ojdbc17 High
Product jar package name driver Highest
Product jar package name jdbc Highest
Product jar package name oracle Highest
Product Manifest automatic-module-name com.oracle.database.jdbc Medium
Product Manifest Implementation-Title JDBC High
Product Manifest repository-id JAVAVM_23.26.1.0.0DBRU_LINUX.X64_260101 Low
Product Manifest specification-title JDBC Medium
Product pom artifactid ojdbc17 Highest
Product pom developer org Oracle America, Inc. Low
Product pom developer org URL http://www.oracle.com Low
Product pom groupid com.oracle.database.jdbc Highest
Product pom name ojdbc17 High
Product pom url https://www.oracle.com/database/technologies/maven-central-guide.html Medium
Version file version 23.26.1.0.0 High
Version Manifest Implementation-Version 23.26.1.0.0 High
Version pom version 23.26.1.0.0 Highest
org.eclipse.emf.common-2.15.0.jar
Description:
EMF Common
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.common/2.15.0/org.eclipse.emf.common-2.15.0.jar
MD5: aa878b3e47b671ebc182108e6b4986c6
SHA1: e0f1608a9855651e899d609b106ae78f903a2f04
SHA256: bdb51f83b2daa51446b4ae5d606464e4b22fb7ef98f0477ac95de72551e2978a
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.common-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.common High
Vendor jar package name common Highest
Vendor jar package name eclipse Highest
Vendor jar package name emf Highest
Vendor Manifest automatic-module-name org.eclipse.emf.common Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium
Vendor Manifest eclipse-buddypolicy dependent Low
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.common Low
Vendor pom artifactid org.eclipse.emf.common Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.common High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.common High
Product jar package name common Highest
Product jar package name eclipse Highest
Product jar package name emf Highest
Product Manifest automatic-module-name org.eclipse.emf.common Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.common;singleton:=true Medium
Product Manifest eclipse-buddypolicy dependent Low
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.common Highest
Product pom artifactid org.eclipse.emf.common Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.common High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.common@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.emf.ecore-2.15.0.jar
Description:
EMF Ecore
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0.jar
MD5: 566797e186b122fb2cb64a699b1c2d2b
SHA1: ccfc09c8b6a0d4fadde09216d8a07678d38998de
SHA256: d5e3c25344fe27f14f514f5d6deb6e9cc3f6153fa462361261a8d49a3dfe9bbf
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.ecore-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.ecore High
Vendor jar package name eclipse Highest
Vendor jar package name ecore Highest
Vendor jar package name emf Highest
Vendor Manifest automatic-module-name org.eclipse.emf.ecore Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium
Vendor Manifest eclipse-buddypolicy dependent Low
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.ecore Low
Vendor pom artifactid org.eclipse.emf.ecore Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.ecore High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.ecore High
Product jar package name eclipse Highest
Product jar package name ecore Highest
Product jar package name emf Highest
Product jar package name plugin Highest
Product Manifest automatic-module-name org.eclipse.emf.ecore Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.ecore;singleton:=true Medium
Product Manifest eclipse-buddypolicy dependent Low
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.ecore Highest
Product pom artifactid org.eclipse.emf.ecore Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.ecore High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.emf.ecore.xmi-2.15.0.jar
Description:
EMF XML/XMI Persistence
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore.xmi/2.15.0/org.eclipse.emf.ecore.xmi-2.15.0.jar
MD5: 7ac89d5bf958f0a2cfab049690f2e68c
SHA1: 9aa1a584be1df1eb0ef8fae7123784af6e51f47a
SHA256: 712ff33fef916d2fa4d838992fccae85c4817a71639a9a5933fc44568ed6dc57
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.emf.ecore.xmi-2.15.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.emf.ecore.xmi High
Vendor jar package name eclipse Highest
Vendor jar package name ecore Highest
Vendor jar package name emf Highest
Vendor jar package name xmi Highest
Vendor Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.emf.ecore.xmi Low
Vendor pom artifactid org.eclipse.emf.ecore.xmi Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.emf Highest
Vendor pom name org.eclipse.emf.ecore.xmi High
Vendor pom parent-artifactid org.eclipse.emf.plugins Low
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.emf.ecore.xmi High
Product jar package name eclipse Highest
Product jar package name ecore Highest
Product jar package name emf Highest
Product jar package name xmi Highest
Product Manifest automatic-module-name org.eclipse.emf.ecore.xmi Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.emf.ecore.xmi; singleton:=true Medium
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.emf.ecore.xmi Highest
Product pom artifactid org.eclipse.emf.ecore.xmi Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.emf Highest
Product pom name org.eclipse.emf.ecore.xmi High
Product pom parent-artifactid org.eclipse.emf.plugins Medium
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.15.0 High
Version pom version 2.15.0 Highest
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0
(Confidence :High)
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore.xmi@2.15.0-SNAPSHOT
(Confidence :High)
org.eclipse.xsd-2.12.0.jar
Description:
http://www.eclipse.org
License:
The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/org/eclipse/xsd/org.eclipse.xsd/2.12.0/org.eclipse.xsd-2.12.0.jar
MD5: 75fa52ffcf1c5d0d9f85ca9aa7a0e3de
SHA1: 1d4c0da59535d3b79e73a91b1f161c97d3103668
SHA256: 0cbded7b090a2205c367b6d08f6ab32dc6857265b87673a4e51b77301ef1b953
Referenced In Project/Scope: Tailormap API:compile
org.eclipse.xsd-2.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name org.eclipse.xsd High
Vendor jar package name eclipse Highest
Vendor jar package name xsd Highest
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.eclipse.xsd; singleton:=true Medium
Vendor Manifest eclipse-lazystart true Low
Vendor pom artifactid eclipse.xsd Low
Vendor pom artifactid org.eclipse.xsd Highest
Vendor pom developer email info@eclipse.org Low
Vendor pom developer id eclipse Medium
Vendor pom developer name Eclipse.org Medium
Vendor pom groupid org.eclipse.xsd Highest
Vendor pom name org.eclipse.xsd High
Vendor pom url http://www.eclipse.org/emf Highest
Product file name org.eclipse.xsd High
Product jar package name eclipse Highest
Product jar package name xsd Highest
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.eclipse.xsd; singleton:=true Medium
Product Manifest eclipse-lazystart true Low
Product pom artifactid eclipse.xsd Highest
Product pom artifactid org.eclipse.xsd Highest
Product pom developer email info@eclipse.org Low
Product pom developer id eclipse Low
Product pom developer name Eclipse.org Low
Product pom groupid org.eclipse.xsd Highest
Product pom name org.eclipse.xsd High
Product pom url http://www.eclipse.org/emf Medium
Version file version 2.12.0 High
Version pom version 2.12.0 Highest
pkg:maven/org.eclipse.xsd/org.eclipse.xsd@2.12.0
(Confidence :High)
org.w3.xlink-34.3.jar
Description:
Xlink Schema EMF Model
File Path: /home/runner/.m2/repository/org/geotools/ogc/org.w3.xlink/34.3/org.w3.xlink-34.3.jar
MD5: 013023901d2c754a4619a8df39985a4b
SHA1: 0695b95c5f91bc368746188a50d977ff4b154bd2
SHA256: 6e5fe98edca1ae1e98b77cea3e4d9d7e9a4665573dc62feb5d4d7758d6335218
Referenced In Project/Scope: Tailormap API:compile
org.w3.xlink-34.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-metadata@34.3
Evidence
Type Source Name Value Confidence
Vendor file name org.w3.xlink High
Vendor jar package name w3 Highest
Vendor jar package name xlink Highest
Vendor Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest build-timestamp 19-Mar-2026 18:28 Low
Vendor Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Vendor pom artifactid org.w3.xlink Highest
Vendor pom artifactid w3.xlink Low
Vendor pom groupid org.geotools.ogc Highest
Vendor pom name Xlink Model High
Vendor pom parent-artifactid ogc Low
Vendor pom parent-groupid org.geotools Medium
Product file name org.w3.xlink High
Product jar package name w3 Highest
Product jar package name xlink Highest
Product Manifest automatic-module-name org.geotools.ogc.org.w3.xlink Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest build-timestamp 19-Mar-2026 18:28 Low
Product Manifest git-revision 489cb583e34fdcf5d6a97c5622a9b0c6b54083d4 Low
Product pom artifactid org.w3.xlink Highest
Product pom artifactid w3.xlink Highest
Product pom groupid org.geotools.ogc Highest
Product pom name Xlink Model High
Product pom parent-artifactid ogc Medium
Product pom parent-groupid org.geotools Medium
Version file version 34.3 High
Version Manifest project-version 34.3 Medium
Version pom version 34.3 Highest
p6spy-3.9.1.jar
Description:
property 'description'
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/p6spy/p6spy/3.9.1/p6spy-3.9.1.jar
MD5: 8d85bf5aada43de0832c6a2f81c250a8
SHA1: a393fe91de298097b0242a9f380267e2bb1e1003
SHA256: 197aa64a6676da578dac1097824accda7a89d5ab21c0829e05bfde92a176f4a1
Referenced In Project/Scope: Tailormap API:compile
p6spy-3.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-jdbc@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name p6spy High
Vendor jar package name p6spy Highest
Vendor Manifest automatic-module-name p6spy Medium
Vendor pom artifactid p6spy Highest
Vendor pom artifactid p6spy Low
Vendor pom developer email agavlyukovskiy@gmail.com Low
Vendor pom developer email butkovic@gmail.com Low
Vendor pom developer email felix.barnsteiner@isys-software.de Low
Vendor pom developer email quinton.mccombs@gmail.com Low
Vendor pom developer name Arthur Gavlyukovskiy Medium
Vendor pom developer name Felix Barnsteiner Medium
Vendor pom developer name Peter Butkovic Medium
Vendor pom developer name Quinton McCombs Medium
Vendor pom groupid p6spy Highest
Vendor pom name p6spy High
Vendor pom url p6spy/p6spy Highest
Product file name p6spy High
Product jar package name p6spy Highest
Product Manifest automatic-module-name p6spy Medium
Product pom artifactid p6spy Highest
Product pom developer email agavlyukovskiy@gmail.com Low
Product pom developer email butkovic@gmail.com Low
Product pom developer email felix.barnsteiner@isys-software.de Low
Product pom developer email quinton.mccombs@gmail.com Low
Product pom developer name Arthur Gavlyukovskiy Low
Product pom developer name Felix Barnsteiner Low
Product pom developer name Peter Butkovic Low
Product pom developer name Quinton McCombs Low
Product pom groupid p6spy Highest
Product pom name p6spy High
Product pom url p6spy/p6spy High
Version file version 3.9.1 High
Version pom version 3.9.1 Highest
pkg:maven/p6spy/p6spy@3.9.1
(Confidence :High)
picocontainer-1.2.jar
Description:
Please refer to the main website for documentation.
File Path: /home/runner/.m2/repository/picocontainer/picocontainer/1.2/picocontainer-1.2.jar
MD5: 3e2dea8daea96da71724cae35da4cc0c
SHA1: c55e869dcdddd735acd8789b74863cde8d15d444
SHA256: d729282e385ed351684e649e261b5b02399327c4713c6b100f122942f923412f
Referenced In Project/Scope: Tailormap API:compile
picocontainer-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@34.3
Evidence
Type Source Name Value Confidence
Vendor file name picocontainer High
Vendor jar package name picocontainer Highest
Vendor Manifest extension-name picocontainer Medium
Vendor Manifest Implementation-Vendor Codehaus High
Vendor Manifest specification-vendor Codehaus Low
Vendor pom artifactid picocontainer Highest
Vendor pom artifactid picocontainer Low
Vendor pom groupid picocontainer Highest
Vendor pom name PicoContainer Core High
Vendor pom organization name Codehaus High
Vendor pom organization url http://codehaus.org/ Medium
Vendor pom url http://www.picocontainer.org/ Highest
Product file name picocontainer High
Product jar package name picocontainer Highest
Product Manifest extension-name picocontainer Medium
Product Manifest Implementation-Title org.picocontainer High
Product Manifest specification-title Small footprint Dependency Injection container Medium
Product pom artifactid picocontainer Highest
Product pom groupid picocontainer Highest
Product pom name PicoContainer Core High
Product pom organization name Codehaus Low
Product pom organization url http://codehaus.org/ Low
Product pom url http://www.picocontainer.org/ Medium
Version file version 1.2 High
Version Manifest Implementation-Version 1.2 High
Version pom version 1.2 Highest
pkg:maven/picocontainer/picocontainer@1.2
(Confidence :High)
postgresql-42.7.10.jar
Description:
PostgreSQL JDBC Driver Postgresql
License:
BSD-2-Clause: https://jdbc.postgresql.org/about/license.html
File Path: /home/runner/.m2/repository/org/postgresql/postgresql/42.7.10/postgresql-42.7.10.jar
MD5: 46b64ac0888710f255fc6584f6facf68
SHA1: 35100a3f0899551e27af8fed4a3414619a4663b3
SHA256: cab1cd67cfa25c25de4348e532298028288a877ba01c77d1619fe45416193387
Referenced In Project/Scope: Tailormap API:compile
postgresql-42.7.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name postgresql High
Vendor jar package name driver Highest
Vendor jar package name jdbc Highest
Vendor jar package name org Highest
Vendor jar package name postgresql Highest
Vendor Manifest automatic-module-name org.postgresql.jdbc Medium
Vendor Manifest bundle-copyright Copyright (c) 2003-2024, PostgreSQL Global Development Group Low
Vendor Manifest bundle-docurl https://jdbc.postgresql.org/ Low
Vendor Manifest bundle-symbolicname org.postgresql.jdbc Medium
Vendor Manifest Implementation-Vendor PostgreSQL Global Development Group High
Vendor Manifest Implementation-Vendor-Id org.postgresql Medium
Vendor Manifest multi-release true Low
Vendor Manifest provide-capability osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver" Low
Vendor Manifest specification-vendor Oracle Corporation Low
Vendor pom artifactid postgresql Highest
Vendor pom artifactid postgresql Low
Vendor pom developer id bokken Medium
Vendor pom developer id davecramer Medium
Vendor pom developer id jurka Medium
Vendor pom developer id oliver Medium
Vendor pom developer id ringerc Medium
Vendor pom developer id vlsi Medium
Vendor pom developer name Brett Okken Medium
Vendor pom developer name Craig Ringer Medium
Vendor pom developer name Dave Cramer Medium
Vendor pom developer name Kris Jurka Medium
Vendor pom developer name Oliver Jowett Medium
Vendor pom developer name Vladimir Sitnikov Medium
Vendor pom groupid org.postgresql Highest
Vendor pom name PostgreSQL JDBC Driver High
Vendor pom organization name PostgreSQL Global Development Group High
Vendor pom organization url https://jdbc.postgresql.org/ Medium
Vendor pom url https://jdbc.postgresql.org Highest
Product file name postgresql High
Product hint analyzer product pgjdbc Highest
Product hint analyzer product postgresql_jdbc_driver Highest
Product jar package name driver Highest
Product jar package name jdbc Highest
Product jar package name org Highest
Product jar package name osgi Highest
Product jar package name postgresql Highest
Product Manifest automatic-module-name org.postgresql.jdbc Medium
Product Manifest bundle-copyright Copyright (c) 2003-2024, PostgreSQL Global Development Group Low
Product Manifest bundle-docurl https://jdbc.postgresql.org/ Low
Product Manifest Bundle-Name PostgreSQL JDBC Driver Medium
Product Manifest bundle-symbolicname org.postgresql.jdbc Medium
Product Manifest Implementation-Title PostgreSQL JDBC Driver High
Product Manifest multi-release true Low
Product Manifest provide-capability osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver" Low
Product Manifest specification-title JDBC Medium
Product pom artifactid postgresql Highest
Product pom developer id bokken Low
Product pom developer id davecramer Low
Product pom developer id jurka Low
Product pom developer id oliver Low
Product pom developer id ringerc Low
Product pom developer id vlsi Low
Product pom developer name Brett Okken Low
Product pom developer name Craig Ringer Low
Product pom developer name Dave Cramer Low
Product pom developer name Kris Jurka Low
Product pom developer name Oliver Jowett Low
Product pom developer name Vladimir Sitnikov Low
Product pom groupid org.postgresql Highest
Product pom name PostgreSQL JDBC Driver High
Product pom organization name PostgreSQL Global Development Group Low
Product pom organization url https://jdbc.postgresql.org/ Low
Product pom url https://jdbc.postgresql.org Medium
Version file version 42.7.10 High
Version Manifest Bundle-Version 42.7.10 High
Version Manifest Implementation-Version 42.7.10 High
Version pom version 42.7.10 Highest
pkg:maven/org.postgresql/postgresql@42.7.10
(Confidence :High)
cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.7.10:*:*:*:*:*:*:*
(Confidence :Low)
suppress
prometheus-metrics-config-1.4.3.jar
Description:
Configuration for Prometheus metrics and exposition formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-config/1.4.3/prometheus-metrics-config-1.4.3.jar
MD5: 46714aa1ccfd6a75a06d05b1a5e0c8fb
SHA1: 785bf741491702f0e755a6a5c9c58a8127db0683
SHA256: 3da2d5f0123af9e313bcf26f04c1248afeacd1b0d5c3a35f220034604ac0ec47
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-config-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-config High
Vendor jar package name config Highest
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name prometheus Highest
Vendor Manifest automatic-module-name io.prometheus.metrics.config Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-config Medium
Vendor pom artifactid prometheus-metrics-config Highest
Vendor pom artifactid prometheus-metrics-config Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Config High
Vendor pom parent-artifactid client_java Low
Product file name prometheus-metrics-config High
Product jar package name config Highest
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name prometheus Highest
Product Manifest automatic-module-name io.prometheus.metrics.config Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Config Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-config Medium
Product pom artifactid prometheus-metrics-config Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Config High
Product pom parent-artifactid client_java Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3
(Confidence :High)
prometheus-metrics-core-1.4.3.jar
Description:
Core Prometheus metric types
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-core/1.4.3/prometheus-metrics-core-1.4.3.jar
MD5: bd35856a8c8dbab69058b5638b8e1815
SHA1: 1f00dc12e0bef05dff593a9abd7a4d626b675b0b
SHA256: 7ecd546d5238e3d3f5f312f580eaaab10cb05d147597978ab90b78080cc58255
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-core-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-core High
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name prometheus Highest
Vendor Manifest automatic-module-name io.prometheus.metrics.core Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-core Medium
Vendor pom artifactid prometheus-metrics-core Highest
Vendor pom artifactid prometheus-metrics-core Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Core High
Vendor pom parent-artifactid client_java Low
Product file name prometheus-metrics-core High
Product jar package name core Highest
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name prometheus Highest
Product Manifest automatic-module-name io.prometheus.metrics.core Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Core Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-core Medium
Product pom artifactid prometheus-metrics-core Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Core High
Product pom parent-artifactid client_java Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3
(Confidence :High)
prometheus-metrics-exposition-formats-1.4.3.jar
Description:
Prometheus exposition formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-formats/1.4.3/prometheus-metrics-exposition-formats-1.4.3.jar
MD5: f1b9f4969a6d4b64ea5b7f1dfab22d0b
SHA1: 14eeb4e0a6a366d6b7562e4457e2a863b837b5bd
SHA256: 502ad6b37c44b1a6311f6070a18fc921ffa2e26abb43eaaaf7626aa1b97984b6
Referenced In Project/Scope: Tailormap API:runtime
prometheus-metrics-exposition-formats-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-exposition-formats High
Vendor jar package name expositionformats Highest
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name prometheus Highest
Vendor Manifest automatic-module-name io.prometheus.metrics.expositionformats Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-exposition-formats Medium
Vendor pom artifactid prometheus-metrics-exposition-formats Highest
Vendor pom artifactid prometheus-metrics-exposition-formats Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Exposition Formats High
Vendor pom parent-artifactid client_java Low
Product file name prometheus-metrics-exposition-formats High
Product jar package name expositionformats Highest
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name prometheus Highest
Product Manifest automatic-module-name io.prometheus.metrics.expositionformats Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Exposition Formats Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-exposition-formats Medium
Product pom artifactid prometheus-metrics-exposition-formats Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Exposition Formats High
Product pom parent-artifactid client_java Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3
(Confidence :High)
prometheus-metrics-exposition-textformats-1.4.3.jar
Description:
Prometheus exposition text formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-textformats/1.4.3/prometheus-metrics-exposition-textformats-1.4.3.jar
MD5: fa00ec1b5682dbc5c6386f7f2d4e8e75
SHA1: 3a4f58da44fdb1a26bbda60cf38930db62f2f887
SHA256: 4aeee30d937ae5baf34ca9daced0f84400ec0f034e7beaa8331d9c519d84e3d7
Referenced In Project/Scope: Tailormap API:runtime
prometheus-metrics-exposition-textformats-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-exposition-textformats High
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name prometheus Highest
Vendor Manifest automatic-module-name io.prometheus.writer.text Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-exposition-textformats Medium
Vendor pom artifactid prometheus-metrics-exposition-textformats Highest
Vendor pom artifactid prometheus-metrics-exposition-textformats Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Exposition Text Formats High
Vendor pom parent-artifactid client_java Low
Product file name prometheus-metrics-exposition-textformats High
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name prometheus Highest
Product Manifest automatic-module-name io.prometheus.writer.text Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Exposition Text Formats Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-exposition-textformats Medium
Product pom artifactid prometheus-metrics-exposition-textformats Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Exposition Text Formats High
Product pom parent-artifactid client_java Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3
(Confidence :High)
prometheus-metrics-model-1.4.3.jar
Description:
Data model for read-only immutable Prometheus metrics snapshots.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-model/1.4.3/prometheus-metrics-model-1.4.3.jar
MD5: 9cfd3913946e59885a5eae3a0b6a5b98
SHA1: b18da634ccdc033468c0a17e56996de09b4e6b36
SHA256: bc3f1825014a14006626086ea779b62893e647e71d1eab075c0bb65057c245f8
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-model-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-model High
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name model Highest
Vendor jar package name prometheus Highest
Vendor Manifest automatic-module-name io.prometheus.metrics.model Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-model Medium
Vendor pom artifactid prometheus-metrics-model Highest
Vendor pom artifactid prometheus-metrics-model Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Model High
Vendor pom parent-artifactid client_java Low
Product file name prometheus-metrics-model High
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name model Highest
Product jar package name prometheus Highest
Product Manifest automatic-module-name io.prometheus.metrics.model Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Model Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-model Medium
Product pom artifactid prometheus-metrics-model Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Model High
Product pom parent-artifactid client_java Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3
(Confidence :High)
prometheus-metrics-tracer-common-1.4.3.jar
Description:
Common Module for Prometheus integrations with distributed tracing libraries.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-tracer-common/1.4.3/prometheus-metrics-tracer-common-1.4.3.jar
MD5: 36367a2c2f7e05aa1ec584d6dd9669a1
SHA1: 67af5fc22c23e695d986a6301e61964efe9c9f80
SHA256: b816aaf84e45d591e5f66c5b94c7a789dedf2d705e5bf3eec2ae8730f76c68cd
Referenced In Project/Scope: Tailormap API:compile
prometheus-metrics-tracer-common-1.4.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5
Evidence
Type Source Name Value Confidence
Vendor file name prometheus-metrics-tracer-common High
Vendor jar package name io Highest
Vendor jar package name metrics Highest
Vendor jar package name prometheus Highest
Vendor jar package name tracer Highest
Vendor Manifest automatic-module-name io.prometheus.metrics.tracer.common Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-symbolicname io.prometheus.metrics-tracer-common Medium
Vendor pom artifactid prometheus-metrics-tracer-common Highest
Vendor pom artifactid prometheus-metrics-tracer-common Low
Vendor pom groupid io.prometheus Highest
Vendor pom name Prometheus Metrics Tracer Common High
Vendor pom parent-artifactid prometheus-metrics-tracer Low
Product file name prometheus-metrics-tracer-common High
Product jar package name io Highest
Product jar package name metrics Highest
Product jar package name prometheus Highest
Product jar package name tracer Highest
Product Manifest automatic-module-name io.prometheus.metrics.tracer.common Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest Bundle-Name Prometheus Metrics Tracer Common Medium
Product Manifest bundle-symbolicname io.prometheus.metrics-tracer-common Medium
Product pom artifactid prometheus-metrics-tracer-common Highest
Product pom groupid io.prometheus Highest
Product pom name Prometheus Metrics Tracer Common High
Product pom parent-artifactid prometheus-metrics-tracer Medium
Version file version 1.4.3 High
Version Manifest Bundle-Version 1.4.3 High
Version pom version 1.4.3 Highest
pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3
(Confidence :High)
quartz-2.5.2.jar
Description:
Quartz Enterprise Job Scheduler
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/quartz-scheduler/quartz/2.5.2/quartz-2.5.2.jar
MD5: b8ed3623018a763841145b5afce13230
SHA1: 2c3a3d8dc34774607e73370352bb1c1beb82b71a
SHA256: 452e418739c0da1bff255f7c1343dd3a92e1fdd3ceb126b185939edae9922091
Referenced In Project/Scope: Tailormap API:compile
quartz-2.5.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name quartz High
Vendor hint analyzer vendor softwareag Highest
Vendor jar package name job Highest
Vendor jar package name quartz Highest
Vendor jar package name scheduler Highest
Vendor Manifest automatic-module-name org.quartz Medium
Vendor Manifest bundle-symbolicname quartz Medium
Vendor Manifest Implementation-Vendor-Id org.quartz-scheduler Medium
Vendor pom artifactid quartz Highest
Vendor pom artifactid quartz Low
Vendor pom developer email tc-oss@wwpdl.vnet.ibm.com Low
Vendor pom developer name Terracotta Engineers Medium
Vendor pom developer org IBM Corp. Medium
Vendor pom developer org URL http://www.quartz-scheduler.org/ Medium
Vendor pom groupid org.quartz-scheduler Highest
Vendor pom name quartz High
Vendor pom url https://www.quartz-scheduler.org/ Highest
Product file name quartz High
Product jar package name job Highest
Product jar package name quartz Highest
Product jar package name scheduler Highest
Product Manifest automatic-module-name org.quartz Medium
Product Manifest Bundle-Name quartz Medium
Product Manifest bundle-symbolicname quartz Medium
Product Manifest Implementation-Title quartz High
Product pom artifactid quartz Highest
Product pom developer email tc-oss@wwpdl.vnet.ibm.com Low
Product pom developer name Terracotta Engineers Low
Product pom developer org IBM Corp. Low
Product pom developer org URL http://www.quartz-scheduler.org/ Low
Product pom groupid org.quartz-scheduler Highest
Product pom name quartz High
Product pom url https://www.quartz-scheduler.org/ Medium
Version file version 2.5.2 High
Version Manifest Bundle-Version 2.5.2 High
Version Manifest Implementation-Version 2.5.2 High
Version pom version 2.5.2 Highest
re2j-1.8.jar
Description:
Linear time regular expressions for Java
License:
Go License: https://golang.org/LICENSE
File Path: /home/runner/.m2/repository/com/google/re2j/re2j/1.8/re2j-1.8.jar
MD5: 4240e655caa938c61ddbec8b92bfb061
SHA1: 12c25e923e9e4fb1575a7640a2698745c6f19a94
SHA256: 7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7
Referenced In Project/Scope: Tailormap API:compile
re2j-1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name re2j High
Vendor jar package name google Highest
Vendor jar package name google Low
Vendor jar package name re2 Highest
Vendor jar package name re2j Highest
Vendor jar package name re2j Low
Vendor pom artifactid re2j Highest
Vendor pom artifactid re2j Low
Vendor pom developer email re2j-discuss@googlegroups.com Low
Vendor pom developer id dev Medium
Vendor pom developer name The RE2/J Contributors Medium
Vendor pom groupid com.google.re2j Highest
Vendor pom name RE2/J High
Vendor pom url http://github.com/google/re2j Highest
Product file name re2j High
Product jar package name google Highest
Product jar package name re2 Highest
Product jar package name re2j Highest
Product jar package name re2j Low
Product pom artifactid re2j Highest
Product pom developer email re2j-discuss@googlegroups.com Low
Product pom developer id dev Low
Product pom developer name The RE2/J Contributors Low
Product pom groupid com.google.re2j Highest
Product pom name RE2/J High
Product pom url http://github.com/google/re2j Medium
Version file version 1.8 High
Version pom version 1.8 Highest
pkg:maven/com.google.re2j/re2j@1.8
(Confidence :High)
semver4j-6.0.0.jar
Description:
Semantic versioning for Java apps.
License:
The MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/semver4j/semver4j/6.0.0/semver4j-6.0.0.jar
MD5: fbedac2197067c12480b9307d80b010d
SHA1: 995a8afc0b9d9a700c7858843a36ece815852d72
SHA256: 43d5e02f60e2b1f8ff0c92139f612a547691a1debe6bea32b0a70ba5a3bcbdd7
Referenced In Project/Scope: Tailormap API:runtime
semver4j-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name semver4j High
Vendor jar package name semver4j Highest
Vendor Manifest automatic-module-name org.semver4j Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid semver4j Highest
Vendor pom artifactid semver4j Low
Vendor pom developer email piotroo89@gmail.com Low
Vendor pom developer name Piotr Olaszewski Medium
Vendor pom groupid org.semver4j Highest
Vendor pom name semver4j High
Vendor pom url semver4j/semver4j Highest
Product file name semver4j High
Product jar package name semver4j Highest
Product Manifest automatic-module-name org.semver4j Medium
Product Manifest build-jdk-spec 17 Low
Product pom artifactid semver4j Highest
Product pom developer email piotroo89@gmail.com Low
Product pom developer name Piotr Olaszewski Low
Product pom groupid org.semver4j Highest
Product pom name semver4j High
Product pom url semver4j/semver4j High
Version file version 6.0.0 High
Version pom version 6.0.0 Highest
pkg:maven/org.semver4j/semver4j@6.0.0
(Confidence :High)
sentry-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry/8.40.0/sentry-8.40.0.jar
MD5: 8c53d120408690c0bc99a7690b22c9c4
SHA1: 7db6df2f041bf87e8cc9b8d67f92dca8d4b5e38d
SHA256: 280c9536efe1bec545448620adfea63c942d7db480b1b436c2b192b4c3e83d4e
Referenced In Project/Scope: Tailormap API:compile
sentry-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name sentry High
Vendor jar package name io Highest
Vendor jar package name sentry Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry Medium
Vendor pom artifactid sentry Highest
Vendor pom artifactid sentry Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry High
Product jar package name io Highest
Product jar package name sentry Highest
Product Manifest Implementation-Title sentry High
Product Manifest sentry-sdk-name sentry.java Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry Medium
Product pom artifactid sentry Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry@8.40.0
(Confidence :High)
sentry-jdbc-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-jdbc/8.40.0/sentry-jdbc-8.40.0.jar
MD5: aac259e3775058a970ade2142589636e
SHA1: f4911d08fa3f43be1d89039c1ca8c89510d7af9f
SHA256: 7135df8f6be7fdc4fd5ba1215c44b51b3e7915076f4a4b7e73df0b84f806f6e0
Referenced In Project/Scope: Tailormap API:compile
sentry-jdbc-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name sentry-jdbc High
Vendor jar package name io Highest
Vendor jar package name jdbc Highest
Vendor jar package name sentry Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.jdbc Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-jdbc Medium
Vendor pom artifactid sentry-jdbc Highest
Vendor pom artifactid sentry-jdbc Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-jdbc High
Product jar package name io Highest
Product jar package name jdbc Highest
Product jar package name sentry Highest
Product Manifest Implementation-Title sentry-jdbc High
Product Manifest sentry-sdk-name sentry.java.jdbc Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-jdbc Medium
Product pom artifactid sentry-jdbc Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-jdbc@8.40.0
(Confidence :High)
sentry-quartz-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-quartz/8.40.0/sentry-quartz-8.40.0.jar
MD5: b0e38459662137a494cae2b33961ddd6
SHA1: 37c2c6be35bba543a24cca7075276b87c8ee438c
SHA256: b24c863cb7e57617b7b7791d59487b6c5ff51f57a688b22b937499171e39b37e
Referenced In Project/Scope: Tailormap API:compile
sentry-quartz-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name sentry-quartz High
Vendor jar package name io Highest
Vendor jar package name quartz Highest
Vendor jar package name sentry Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.quartz Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-quartz Medium
Vendor pom artifactid sentry-quartz Highest
Vendor pom artifactid sentry-quartz Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-quartz High
Product jar package name io Highest
Product jar package name quartz Highest
Product jar package name sentry Highest
Product Manifest Implementation-Title sentry-quartz High
Product Manifest sentry-sdk-name sentry.java.quartz Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-quartz Medium
Product pom artifactid sentry-quartz Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-quartz@8.40.0
(Confidence :High)
sentry-reactor-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-reactor/8.40.0/sentry-reactor-8.40.0.jar
MD5: e0f7ca2bdb95b9f21834191081567546
SHA1: cb06bed8c1600bbc296b911e5ee1a82997bf4cad
SHA256: 988935594009aa1a4c6fa0c638aaa0b7490a1d9f78713e8d1d400e90c7d341ba
Referenced In Project/Scope: Tailormap API:compile
sentry-reactor-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name sentry-reactor High
Vendor jar package name io Highest
Vendor jar package name reactor Highest
Vendor jar package name sentry Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.reactor Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-reactor Medium
Vendor pom artifactid sentry-reactor Highest
Vendor pom artifactid sentry-reactor Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-reactor High
Product jar package name io Highest
Product jar package name reactor Highest
Product jar package name sentry Highest
Product Manifest Implementation-Title sentry-reactor High
Product Manifest sentry-sdk-name sentry.java.reactor Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-reactor Medium
Product pom artifactid sentry-reactor Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-reactor@8.40.0
(Confidence :High)
sentry-spring-7-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-7/8.40.0/sentry-spring-7-8.40.0.jar
MD5: 7d6d52980afbd2ca67fb85db4bf9107a
SHA1: 77236264eee16684782085c93eab14e70429aaf0
SHA256: 423e1e3b3210a0791ed00c8e7d35cb743eaacb19c7e4e196dabecb83556da4a0
Referenced In Project/Scope: Tailormap API:compile
sentry-spring-7-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name sentry-spring-7 High
Vendor jar package name io Highest
Vendor jar package name sentry Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.spring-7 Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-7 Medium
Vendor pom artifactid sentry-spring-7 Highest
Vendor pom artifactid sentry-spring-7 Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-spring-7 High
Product jar package name io Highest
Product jar package name sentry Highest
Product Manifest Implementation-Title sentry-spring-7 High
Product Manifest sentry-sdk-name sentry.java.spring-7 Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-7 Medium
Product pom artifactid sentry-spring-7 Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-spring-7@8.40.0
(Confidence :High)
sentry-spring-boot-4-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-boot-4/8.40.0/sentry-spring-boot-4-8.40.0.jar
MD5: 7f447b38756922b31e485060df9b277b
SHA1: 03d6973c28f39543816f564a513067412b24414b
SHA256: e28fad4b47b72e4bf2ba45285e3f26b007f8de1402ebd9bfe643373d816235cd
Referenced In Project/Scope: Tailormap API:compile
sentry-spring-boot-4-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name sentry-spring-boot-4 High
Vendor jar package name io Highest
Vendor jar package name sentry Highest
Vendor jar package name spring Highest
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.spring-boot-4 Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-boot-4 Medium
Vendor pom artifactid sentry-spring-boot-4 Highest
Vendor pom artifactid sentry-spring-boot-4 Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-spring-boot-4 High
Product jar package name io Highest
Product jar package name sentry Highest
Product jar package name spring Highest
Product Manifest Implementation-Title sentry-spring-boot-4 High
Product Manifest sentry-sdk-name sentry.java.spring-boot-4 Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-boot-4 Medium
Product pom artifactid sentry-spring-boot-4 Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-spring-boot-4@8.40.0
(Confidence :High)
sentry-spring-boot-4-starter-8.40.0.jar
Description:
SDK for sentry.io
License:
MIT: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-boot-4-starter/8.40.0/sentry-spring-boot-4-starter-8.40.0.jar
MD5: af7a39c18cbe1965f587d1205b974dc8
SHA1: dd2a0b857bf6a972aed917d73af6165f0d6af20d
SHA256: 5a46733dbead5dbc808c761638dc58987e317806afd9e4b773a635ef9938e43b
Referenced In Project/Scope: Tailormap API:compile
sentry-spring-boot-4-starter-8.40.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name sentry-spring-boot-4-starter High
Vendor Manifest Implementation-Vendor Sentry High
Vendor Manifest sentry-sdk-name sentry.java.spring-boot-4-starter Medium
Vendor Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-boot-4-starter Medium
Vendor pom artifactid sentry-spring-boot-4-starter Highest
Vendor pom artifactid sentry-spring-boot-4-starter Low
Vendor pom developer id getsentry Medium
Vendor pom developer name Sentry Team and Contributors Medium
Vendor pom groupid io.sentry Highest
Vendor pom name Sentry SDK High
Vendor pom url getsentry/sentry-java Highest
Product file name sentry-spring-boot-4-starter High
Product Manifest Implementation-Title sentry-spring-boot-4-starter High
Product Manifest sentry-sdk-name sentry.java.spring-boot-4-starter Medium
Product Manifest sentry-sdk-package-name maven:io.sentry:sentry-spring-boot-4-starter Medium
Product pom artifactid sentry-spring-boot-4-starter Highest
Product pom developer id getsentry Low
Product pom developer name Sentry Team and Contributors Low
Product pom groupid io.sentry Highest
Product pom name Sentry SDK High
Product pom url getsentry/sentry-java High
Version file version 8.40.0 High
Version Manifest Implementation-Version 8.40.0 High
Version Manifest sentry-version-name 8.40.0 Medium
Version pom version 8.40.0 Highest
pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
(Confidence :High)
si-quantity-2.1.jar
Description:
Units of Measurement SI (Système International d'Unités)
License:
https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/si/uom/si-quantity/2.1/si-quantity-2.1.jar
MD5: 79685f60efca0051a6c579e1f1522542
SHA1: 5617d2cf30898ffcc760807009fe947483bd867b
SHA256: 2cdcfd3e5395db5576f5efc0f224b5bbd0731f3ec7552afee6ee7b63a4f65820
Referenced In Project/Scope: Tailormap API:compile
si-quantity-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name si-quantity High
Vendor jar package name quantity Highest
Vendor jar package name si Highest
Vendor jar package name uom Highest
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low
Vendor Manifest bundle-symbolicname si.uom.si-quantity Medium
Vendor pom artifactid si-quantity Highest
Vendor pom artifactid si-quantity Low
Vendor pom groupid si.uom Highest
Vendor pom name SI Quantities High
Vendor pom parent-artifactid si-parent Low
Product file name si-quantity High
Product jar package name quantity Highest
Product jar package name si Highest
Product jar package name uom Highest
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/ Low
Product Manifest Bundle-Name SI Quantities Medium
Product Manifest bundle-symbolicname si.uom.si-quantity Medium
Product pom artifactid si-quantity Highest
Product pom groupid si.uom Highest
Product pom name SI Quantities High
Product pom parent-artifactid si-parent Medium
Version file version 2.1 High
Version pom version 2.1 Highest
pkg:maven/si.uom/si-quantity@2.1
(Confidence :High)
si-units-2.1.jar
Description:
"Units of Measurement SI (Système International d'Unités)"
License:
"BSD 3-Clause";link="https://opensource.org/licenses/BSD-3-Clause"
File Path: /home/runner/.m2/repository/si/uom/si-units/2.1/si-units-2.1.jar
MD5: 43abf4b896da58d8bca0e87f412a8457
SHA1: 7e812192ff1abbef6c79123249840c42b4e145d4
SHA256: 491ed9956ddf4b2e30180b087e1f6fb51debccb6d46785ae0d52026342013c51
Referenced In Project/Scope: Tailormap API:compile
si-units-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name si-units High
Vendor jar package name si Highest
Vendor jar package name uom Highest
Vendor Manifest build-jdk-spec 14 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low
Vendor Manifest bundle-symbolicname si-units Medium
Vendor Manifest implementation-url https://unitsofmeasurement.github.io/ Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement Low
Vendor pom artifactid si-units Highest
Vendor pom artifactid si-units Low
Vendor pom groupid si.uom Highest
Vendor pom name SI Units High
Vendor pom parent-artifactid si-parent Low
Product file name si-units High
Product jar package name si Highest
Product jar package name uom Highest
Product Manifest build-jdk-spec 14 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/si-parent/si-units/ Low
Product Manifest Bundle-Name SI Units Medium
Product Manifest bundle-symbolicname si-units Medium
Product Manifest Implementation-Title SI Units High
Product Manifest implementation-url https://unitsofmeasurement.github.io/ Low
Product Manifest specification-title International System of Units Medium
Product pom artifactid si-units Highest
Product pom groupid si.uom Highest
Product pom name SI Units High
Product pom parent-artifactid si-parent Medium
Version file version 2.1 High
Version Manifest Implementation-Version 2.1 High
Version pom version 2.1 Highest
pkg:maven/si.uom/si-units@2.1
(Confidence :High)
slf4j-api-2.0.17.jar
Description:
The slf4j API
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256: 7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: Tailormap API:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name slf4j-api High
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname slf4j.api Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid slf4j-api Highest
Vendor pom artifactid slf4j-api Low
Vendor pom groupid org.slf4j Highest
Vendor pom name SLF4J API Module High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name slf4j-api High
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name SLF4J API Module Medium
Product Manifest bundle-symbolicname slf4j.api Medium
Product Manifest Implementation-Title slf4j-api High
Product Manifest multi-release true Low
Product pom artifactid slf4j-api Highest
Product pom groupid org.slf4j Highest
Product pom name SLF4J API Module High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/slf4j-api@2.0.17
(Confidence :High)
snakeyaml-2.5.jar
Description:
YAML 1.1 parser and emitter for Java
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.5/snakeyaml-2.5.jar
MD5: 8d3b7581db5c7620db55183f33a4f2ad
SHA1: 2d53ddec134280cb384c1e35d094e5f71c1f2316
SHA256: e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd
Referenced In Project/Scope: Tailormap API:compile
snakeyaml-2.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.sentry/sentry-spring-boot-4-starter@8.40.0
Evidence
Type Source Name Value Confidence
Vendor file name snakeyaml High
Vendor jar package name emitter Highest
Vendor jar package name org Highest
Vendor jar package name parser Highest
Vendor jar package name snakeyaml Highest
Vendor jar package name yaml Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid snakeyaml Highest
Vendor pom artifactid snakeyaml Low
Vendor pom developer email alexander.maslov@gmail.com Low
Vendor pom developer email public.somov@gmail.com Low
Vendor pom developer id asomov Medium
Vendor pom developer id maslovalex Medium
Vendor pom developer name Alexander Maslov Medium
Vendor pom developer name Andrey Somov Medium
Vendor pom groupid org.yaml Highest
Vendor pom name SnakeYAML High
Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest
Product file name snakeyaml High
Product jar package name emitter Highest
Product jar package name org Highest
Product jar package name parser Highest
Product jar package name snakeyaml Highest
Product jar package name yaml Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest Bundle-Name SnakeYAML Medium
Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Product Manifest multi-release true Low
Product pom artifactid snakeyaml Highest
Product pom developer email alexander.maslov@gmail.com Low
Product pom developer email public.somov@gmail.com Low
Product pom developer id asomov Low
Product pom developer id maslovalex Low
Product pom developer name Alexander Maslov Low
Product pom developer name Andrey Somov Low
Product pom groupid org.yaml Highest
Product pom name SnakeYAML High
Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium
Version file version 2.5 High
Version pom version 2.5 Highest
solr-api-10.0.0.jar
Description:
Apache Solr (module: api)
License:
Apache 2: https://apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/solr/solr-api/10.0.0/solr-api-10.0.0.jar
MD5: bffdb9ee0d33fdd17eaf022986fc17b7
SHA1: c865e60dae5851259af260a1d6704dd7b5438cbe
SHA256: eba144a935fb4a200420a302c50e22b90d779f86281a0de73c1ba1173d576aee
Referenced In Project/Scope: Tailormap API:compile
solr-api-10.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name solr-api High
Vendor jar package name apache Highest
Vendor jar package name api Highest
Vendor jar package name solr Highest
Vendor Manifest extension-name org.apache.solr Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor Manifest x-build-os Mac OS X aarch64 26.2 Low
Vendor pom artifactid solr-api Highest
Vendor pom artifactid solr-api Low
Vendor pom groupid org.apache.solr Highest
Vendor pom name Apache Solr (module: api) High
Vendor pom url https://solr.apache.org/ Highest
Product file name solr-api High
Product jar package name apache Highest
Product jar package name api Highest
Product jar package name solr Highest
Product Manifest extension-name org.apache.solr Medium
Product Manifest Implementation-Title org.apache.solr High
Product Manifest specification-title Apache Solr Search Server: api Medium
Product Manifest x-build-os Mac OS X aarch64 26.2 Low
Product pom artifactid solr-api Highest
Product pom groupid org.apache.solr Highest
Product pom name Apache Solr (module: api) High
Product pom url https://solr.apache.org/ Medium
Version file version 10.0.0 High
Version pom version 10.0.0 Highest
Related Dependencies
solr-solrj-10.0.0.jar
File Path: /home/runner/.m2/repository/org/apache/solr/solr-solrj/10.0.0/solr-solrj-10.0.0.jar
MD5: 626dd026b61a66802b0b69f87c6c9a74
SHA1: 14bc98a779223cb982b86744ca3eab5a5d5d0a25
SHA256: 59178b49e43ffed3d4845b73c0b3302bd77e1b0e3c10c5c4550ba8499bdb3fac
pkg:maven/org.apache.solr/solr-solrj@10.0.0
spring-boot-data-commons-4.0.6.jar
Description:
Spring Boot Data Commons
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-data-commons/4.0.6/spring-boot-data-commons-4.0.6.jar
MD5: d5d9588d12e3c6fa1fade15687e2d61e
SHA1: 4702c0e63d5164330fbaef7a5e55d0d173cc3ab9
SHA256: c75c99034009d67e43fc7f68c2e0bdb785392953917b11bbe3c74821fd80282a
Referenced In Project/Scope: Tailormap API:compile
spring-boot-data-commons-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot-data-commons High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name data Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.boot.data.commons Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot-data-commons Highest
Vendor pom artifactid spring-boot-data-commons Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot-data-commons High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot-data-commons High
Product jar package name boot Highest
Product jar package name data Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.boot.data.commons Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot Data Commons High
Product pom artifactid spring-boot-data-commons Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot-data-commons High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 4.0.6 High
Version Manifest Implementation-Version 4.0.6 High
Version pom version 4.0.6 Highest
spring-boot-data-rest-4.0.6.jar
Description:
Spring Boot Data REST
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-data-rest/4.0.6/spring-boot-data-rest-4.0.6.jar
MD5: 8cef00b7b4c2c51c7c260fabbbd1651a
SHA1: f14125f36ffeb9fbadc17704877faaffaf29b05d
SHA256: 9d1b55927d930f12c7bdf8ae333869670d9d39d462656ae1d4e992751ec05683
Referenced In Project/Scope: Tailormap API:compile
spring-boot-data-rest-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot-data-rest High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name data Highest
Vendor jar package name rest Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.boot.data.rest Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot-data-rest Highest
Vendor pom artifactid spring-boot-data-rest Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot-data-rest High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot-data-rest High
Product jar package name boot Highest
Product jar package name data Highest
Product jar package name rest Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.boot.data.rest Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot Data REST High
Product pom artifactid spring-boot-data-rest Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot-data-rest High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 4.0.6 High
Version Manifest Implementation-Version 4.0.6 High
Version pom version 4.0.6 Highest
spring-boot-sql-4.0.6.jar
Description:
Spring Boot SQL
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-sql/4.0.6/spring-boot-sql-4.0.6.jar
MD5: ae4bb6a4d7f7b429439592f9321e1b0c
SHA1: 2526bc5a53f0ca3c029a4c02a1360a25c9e226d4
SHA256: aa98cba6a0195ce0a6cc48e075f37f4b11587d91f1004b3b37b47a59897de615
Referenced In Project/Scope: Tailormap API:compile
spring-boot-sql-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot-sql High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name springframework Highest
Vendor jar package name sql Highest
Vendor Manifest automatic-module-name spring.boot.sql Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot-sql Highest
Vendor pom artifactid spring-boot-sql Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot-sql High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot-sql High
Product jar package name boot Highest
Product jar package name springframework Highest
Product jar package name sql Highest
Product Manifest automatic-module-name spring.boot.sql Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot SQL High
Product pom artifactid spring-boot-sql Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot-sql High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 4.0.6 High
Version Manifest Implementation-Version 4.0.6 High
Version pom version 4.0.6 Highest
Related Dependencies
spring-boot-session-4.0.6.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-session/4.0.6/spring-boot-session-4.0.6.jar
MD5: 28b99bdb6b98907ca45f1fd7bcbadad4
SHA1: 9aec1783faae357f8d2631da0bc18c6e9cfb0cf5
SHA256: f0bea714344545a8e6835e735f632f762b87f8af223f17b859f296a7317e795d
pkg:maven/org.springframework.boot/spring-boot-session@4.0.6
spring-boot-session-jdbc-4.0.6.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-session-jdbc/4.0.6/spring-boot-session-jdbc-4.0.6.jar
MD5: 95254d00339f94e201b2e94654db6483
SHA1: 9821244af867e9f22c8af668f64ec78be4effce1
SHA256: 7812f7223dd7ef45c87e2de48e35b670f8ab6292f68b67f046267664e80b6f97
pkg:maven/org.springframework.boot/spring-boot-session-jdbc@4.0.6
spring-boot-starter-session-jdbc-4.0.6.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-session-jdbc/4.0.6/spring-boot-starter-session-jdbc-4.0.6.jar
MD5: 8a247f53b316860aa16cd5392cc67953
SHA1: 8b7af411c1111db860edc6b66286a111c5c0b503
SHA256: 69986e7f60c8728e57d6051fd934426cd284c7e6da0691939b63196c1e436a79
pkg:maven/org.springframework.boot/spring-boot-starter-session-jdbc@4.0.6
spring-boot-web-server-4.0.6.jar
Description:
Spring Boot Web Server
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-web-server/4.0.6/spring-boot-web-server-4.0.6.jar
MD5: 8fd94e440c782e11289275c01f1b8f70
SHA1: 8a087bc97418b3082fe402b3241260180fa7133e
SHA256: d75dcc45dd7b09ae9816d74aae772dc22ac7fee6ca69e8e094f2b693229dc556
Referenced In Project/Scope: Tailormap API:compile
spring-boot-web-server-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-webmvc-test@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot-web-server High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name server Highest
Vendor jar package name springframework Highest
Vendor jar package name web Highest
Vendor Manifest automatic-module-name spring.boot.web.server Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot-web-server Highest
Vendor pom artifactid spring-boot-web-server Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot-web-server High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot-web-server High
Product jar package name boot Highest
Product jar package name server Highest
Product jar package name springframework Highest
Product jar package name web Highest
Product Manifest automatic-module-name spring.boot.web.server Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot Web Server High
Product pom artifactid spring-boot-web-server Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot-web-server High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 4.0.6 High
Version Manifest Implementation-Version 4.0.6 High
Version pom version 4.0.6 Highest
Related Dependencies
spring-core-7.0.7.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.7/spring-core-7.0.7.jar
MD5: 33ce0cb6c81faaa067b4b05dcd152188
SHA1: 4f85340fd463031cd93a0629a0323bb467ae51aa
SHA256: 9e1c13ed6d69002aae7ebc4b7d2d1d07e309013a2fbb63ab266bea8601229785
Referenced In Project/Scope: Tailormap API:compile
spring-core-7.0.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.0.3
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name org Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email juergen.hoeller@broadcom.com Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name org Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product Manifest multi-release true Low
Product pom artifactid spring-core Highest
Product pom developer email juergen.hoeller@broadcom.com Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 7.0.7 High
Version Manifest Implementation-Version 7.0.7 High
Version pom version 7.0.7 Highest
Related Dependencies
spring-aop-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.7/spring-aop-7.0.7.jar
MD5: b5279f81785ea8880de565c0ce431d61
SHA1: 21045648cc638653fb872da3b3fdd50b1cb7b370
SHA256: c0503b7f318368f37f0d0e0557f65e572cebdf61cf9c318a7cbcad7824b0f284
pkg:maven/org.springframework/spring-aop@7.0.7
spring-aspects-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aspects/7.0.7/spring-aspects-7.0.7.jar
MD5: 5c7f4c399eb759e2c0f45e650f081826
SHA1: e507bc50ddca9ee54c37191f9c96e5f491459d3c
SHA256: aa4a2229f4ca985dd9ca3fb660c7fb743e258625087a99746d3bad4c1b87f1bb
pkg:maven/org.springframework/spring-aspects@7.0.7
spring-beans-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.7/spring-beans-7.0.7.jar
MD5: 2e64e2ac37daeb77177a992818df2c4b
SHA1: 1278f23233223c480880b62234c96fb3545ba104
SHA256: 13775be4269a6cc82ebcee619a9fef1545c90ae54c6fba84a0d8c6d79ff6877a
pkg:maven/org.springframework/spring-beans@7.0.7
spring-context-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.7/spring-context-7.0.7.jar
MD5: 51493daabca4825748edebc27600268b
SHA1: bd71294ceaa815abcdbbf5e116c9382103845139
SHA256: 4a252050fd8595c5922c4d795728f8aae495e41171b3a958b0cee349b5e3586b
pkg:maven/org.springframework/spring-context@7.0.7
spring-context-support-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context-support/7.0.7/spring-context-support-7.0.7.jar
MD5: 9ce65174bf5bb20ce8249ea131486e70
SHA1: 22df8ea5093b7e040848616eff0ca557ee7da8e6
SHA256: c2a50cecd342ae6bdf7c70ae8150ca0556a3ca8435add636eec3a699c08a4a16
pkg:maven/org.springframework/spring-context-support@7.0.7
spring-expression-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.7/spring-expression-7.0.7.jar
MD5: 848e75396f49b8f787591947fa468fa8
SHA1: 90c3dc3174244786c33eb3a2be8c5006cfc7389b
SHA256: 3c23d7eb62bb3fbddc0ad1d7f94be94d1518424f1c9a1b4de6b1b6906e8d0c54
pkg:maven/org.springframework/spring-expression@7.0.7
spring-jdbc-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-jdbc/7.0.7/spring-jdbc-7.0.7.jar
MD5: 46c1259de36233966fd16283a35a4e16
SHA1: 7369c7cc321b649f291c6222e5982d75878845c5
SHA256: 7bf8760ebca14457068125ddcef2ca1b17b3147e01d161aac23463626cd123a5
pkg:maven/org.springframework/spring-jdbc@7.0.7
spring-orm-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-orm/7.0.7/spring-orm-7.0.7.jar
MD5: 2a5d4c72154e6ca87c4077306c11ea9a
SHA1: c5f883ce3bf4407a8c86751e3fa3a2fac4482626
SHA256: e49b8b8ee4af0cc322cf3df2d72ee03da4f0ef6fc4b105717e32c95e51105699
pkg:maven/org.springframework/spring-orm@7.0.7
spring-tx-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-tx/7.0.7/spring-tx-7.0.7.jar
MD5: 19c21bbc47139afcdd7a092e4c43c9eb
SHA1: c398a2ab7706e16c90be33ff9eaafcb2872d73bf
SHA256: d6517a0164bbe1f7525ad6f1ad621913b3a9ce89460e75580130316af022affd
pkg:maven/org.springframework/spring-tx@7.0.7
spring-web-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/7.0.7/spring-web-7.0.7.jar
MD5: a3073643babe877cc72660db4010510b
SHA1: 8c6ba7dd1ef6a3d9246b08885185806426daa7ec
SHA256: dbc9298d83849fb0255791fb86b80e996cfc482801ce4879481ad733d225c518
pkg:maven/org.springframework/spring-web@7.0.7
spring-webmvc-7.0.7.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/7.0.7/spring-webmvc-7.0.7.jar
MD5: 3b44c3b1cecafa48c9d7a0d542f0e197
SHA1: 5d7758ed288cda1eacae4b96defb9eed3a7e561d
SHA256: 41c0c6ed2244cdbcd84a9955b4b2717e8466e20e82335b043ea9ce768dc38d9c
pkg:maven/org.springframework/spring-webmvc@7.0.7
spring-data-commons-4.0.5.jar
Description:
Core Spring concepts underpinning every Spring Data module.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-commons/4.0.5/spring-data-commons-4.0.5.jar
MD5: 78b8a26fee1f75434050528b4360d0db
SHA1: eed2c7272ba1b13456124949a2bdcbd035ab1154
SHA256: b75c957b798497435b9168c9677fae3c5cac5831d1badcf280b2bb4c57b12e4f
Referenced In Project/Scope: Tailormap API:compile
spring-data-commons-4.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.0.5
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-commons High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name data Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.commons Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-commons Highest
Vendor pom artifactid spring-data-commons Low
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data Core High
Vendor pom parent-artifactid spring-data-parent Low
Vendor pom parent-groupid org.springframework.data.build Medium
Vendor pom url https://spring.io/projects/spring-data Highest
Product file name spring-data-commons High
Product jar package name core Highest
Product jar package name data Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.commons Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data Core High
Product pom artifactid spring-data-commons Highest
Product pom groupid org.springframework.data Highest
Product pom name Spring Data Core High
Product pom parent-artifactid spring-data-parent Medium
Product pom parent-groupid org.springframework.data.build Medium
Product pom url https://spring.io/projects/spring-data Medium
Version file version 4.0.5 High
Version Manifest Implementation-Version 4.0.5 High
Version pom version 4.0.5 Highest
spring-data-envers-4.0.5.jar
Description:
Spring Data extension to work with Hibernate Envers
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-envers/4.0.5/spring-data-envers-4.0.5.jar
MD5: 9e547b328a91505ab094b80ee4b887fe
SHA1: 5920d9a3c62d9f7fd91998653dc27c56d55c051a
SHA256: 948888ac693c24583bd7e33abcfaa3e3a31da2beb9af15c96ce52faccf4a81ad
Referenced In Project/Scope: Tailormap API:compile
spring-data-envers-4.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-envers High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name data Highest
Vendor jar package name envers Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.envers Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-envers Highest
Vendor pom artifactid spring-data-envers Low
Vendor pom developer email jschauder@vmware.com Low
Vendor pom developer email michael.igler@forward-tech.de Low
Vendor pom developer email ogierke@pivotal.io Low
Vendor pom developer email philip.huegelmeyer@ble.de Low
Vendor pom developer name Jens Schauder Medium
Vendor pom developer name Michael Igler Medium
Vendor pom developer name Oliver Gierke Medium
Vendor pom developer name Philip Huegelmeyer Medium
Vendor pom developer org BLE Medium
Vendor pom developer org Freelancer Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL www.ble.de Medium
Vendor pom developer org URL www.spring.io Medium
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data Envers High
Vendor pom parent-artifactid spring-data-jpa-parent Low
Product file name spring-data-envers High
Product jar package name data Highest
Product jar package name envers Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.envers Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data Envers High
Product pom artifactid spring-data-envers Highest
Product pom developer email jschauder@vmware.com Low
Product pom developer email michael.igler@forward-tech.de Low
Product pom developer email ogierke@pivotal.io Low
Product pom developer email philip.huegelmeyer@ble.de Low
Product pom developer name Jens Schauder Low
Product pom developer name Michael Igler Low
Product pom developer name Oliver Gierke Low
Product pom developer name Philip Huegelmeyer Low
Product pom developer org BLE Low
Product pom developer org Freelancer Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL www.ble.de Low
Product pom developer org URL www.spring.io Low
Product pom groupid org.springframework.data Highest
Product pom name Spring Data Envers High
Product pom parent-artifactid spring-data-jpa-parent Medium
Version file version 4.0.5 High
Version Manifest Implementation-Version 4.0.5 High
Version pom version 4.0.5 Highest
pkg:maven/org.springframework.data/spring-data-envers@4.0.5
(Confidence :High)
cpe:2.3:a:pivotal_software:spring_data_jpa:4.0.5:*:*:*:*:*:*:*
(Confidence :Low)
suppress
spring-data-jpa-4.0.5.jar
Description:
Spring Data module for JPA repositories.
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-jpa/4.0.5/spring-data-jpa-4.0.5.jar
MD5: 7d9df711794069a0f6e18194ed0b42aa
SHA1: fbb375863a4deb4df21b803756b97b767e18559a
SHA256: af60ddc39f70ddeaf97e1dd9895cd357c884a82f7e863ec02e8947ada6d60512
Referenced In Project/Scope: Tailormap API:compile
spring-data-jpa-4.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-envers@4.0.5
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-jpa High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name data Highest
Vendor jar package name jpa Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.jpa Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-jpa Highest
Vendor pom artifactid spring-data-jpa Low
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data JPA High
Vendor pom parent-artifactid spring-data-jpa-parent Low
Vendor pom url https://projects.spring.io/spring-data-jpa Highest
Product file name spring-data-jpa High
Product jar package name data Highest
Product jar package name jpa Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.jpa Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data JPA High
Product pom artifactid spring-data-jpa Highest
Product pom groupid org.springframework.data Highest
Product pom name Spring Data JPA High
Product pom parent-artifactid spring-data-jpa-parent Medium
Product pom url https://projects.spring.io/spring-data-jpa Medium
Version file version 4.0.5 High
Version Manifest Implementation-Version 4.0.5 High
Version pom version 4.0.5 Highest
spring-data-rest-core-5.0.5.jar
Description:
Spring Data REST - Core
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-rest-core/5.0.5/spring-data-rest-core-5.0.5.jar
MD5: 98f44c39516d9293501a893bc67bccf1
SHA1: 567fdc2335c445d267036dc98f981cf143859278
SHA256: 00f43bc80999107d70adca7bad421e445ac3c0be596caa481f306c0e8886059f
Referenced In Project/Scope: Tailormap API:compile
spring-data-rest-core-5.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.0.5
Evidence
Type Source Name Value Confidence
Vendor file name spring-data-rest-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name data Highest
Vendor jar package name rest Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.data.rest.core Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor pom artifactid spring-data-rest-core Highest
Vendor pom artifactid spring-data-rest-core Low
Vendor pom groupid org.springframework.data Highest
Vendor pom name Spring Data REST - Core High
Vendor pom parent-artifactid spring-data-rest-parent Low
Product file name spring-data-rest-core High
Product jar package name core Highest
Product jar package name data Highest
Product jar package name rest Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.data.rest.core Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest Implementation-Title Spring Data REST - Core High
Product pom artifactid spring-data-rest-core Highest
Product pom groupid org.springframework.data Highest
Product pom name Spring Data REST - Core High
Product pom parent-artifactid spring-data-rest-parent Medium
Version file version 5.0.5 High
Version Manifest Implementation-Version 5.0.5 High
Version pom version 5.0.5 Highest
Related Dependencies
spring-data-rest-webmvc-5.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-rest-webmvc/5.0.5/spring-data-rest-webmvc-5.0.5.jar
MD5: 7c4a39c4861b06f2935e703b393f96cf
SHA1: 762bb15f470f82717392a45743709f7d708d0e59
SHA256: 172795bc0174a790ab3c393786bfa935c10774b834a95d7e53696bbc17bf0f51
pkg:maven/org.springframework.data/spring-data-rest-webmvc@5.0.5
spring-hateoas-3.0.3.jar
Description:
Library to support implementing representations for
hyper-text driven REST web services.
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/3.0.3/spring-hateoas-3.0.3.jar
MD5: 3ca53764c286ce8d38b57851d3ef0d49
SHA1: 60cdf10119ea16570747c8829922b63c0e79e9da
SHA256: 878b98e976aa8514580decd72de6adea23bf311c4054100b8ee5e3c38cd97b56
Referenced In Project/Scope: Tailormap API:compile
spring-hateoas-3.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-hateoas High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name hateoas Highest
Vendor jar package name springframework Highest
Vendor jar package name support Highest
Vendor Manifest automatic-module-name spring.hateoas Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-hateoas Highest
Vendor pom artifactid spring-hateoas Low
Vendor pom developer email gturnquist(at)vmware.com Low
Vendor pom developer email odrotbohm(at)vmware.com Low
Vendor pom developer id gturnquist Medium
Vendor pom developer id odrotbohm Medium
Vendor pom developer name Greg Turnquist Medium
Vendor pom developer name Oliver Drotbohm Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom groupid org.springframework.hateoas Highest
Vendor pom name Spring HATEOAS High
Vendor pom organization name Pivotal, Inc. High
Vendor pom organization url https://www.spring.io Medium
Vendor pom url spring-projects/spring-hateoas Highest
Product file name spring-hateoas High
Product jar package name hateoas Highest
Product jar package name springframework Highest
Product jar package name support Highest
Product Manifest automatic-module-name spring.hateoas Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring HATEOAS High
Product pom artifactid spring-hateoas Highest
Product pom developer email gturnquist(at)vmware.com Low
Product pom developer email odrotbohm(at)vmware.com Low
Product pom developer id gturnquist Low
Product pom developer id odrotbohm Low
Product pom developer name Greg Turnquist Low
Product pom developer name Oliver Drotbohm Low
Product pom developer org VMware, Inc. Low
Product pom groupid org.springframework.hateoas Highest
Product pom name Spring HATEOAS High
Product pom organization name Pivotal, Inc. Low
Product pom organization url https://www.spring.io Low
Product pom url spring-projects/spring-hateoas High
Version file version 3.0.3 High
Version Manifest Implementation-Version 3.0.3 High
Version pom version 3.0.3 Highest
spring-plugin-core-4.0.0.jar
Description:
Core plugin infrastructure
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/4.0.0/spring-plugin-core-4.0.0.jar
MD5: 80e4625c3d89b3b3fe41354880006ea8
SHA1: a461fa99b406277f8a6ed3290536768d5c14bc90
SHA256: 5d577d48f06f29d6f3a3935c847a3ee0d035020bd09dc17faf48cba67e88dfda
Referenced In Project/Scope: Tailormap API:compile
spring-plugin-core-4.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@3.0.3
Evidence
Type Source Name Value Confidence
Vendor file name spring-plugin-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name plugin Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.plugin.core Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-plugin-core Highest
Vendor pom artifactid spring-plugin-core Low
Vendor pom developer email odrotbohm@vmware.com Low
Vendor pom developer id drotbohm Medium
Vendor pom developer name Oliver Drotbohm Medium
Vendor pom developer org VMware Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.plugin Highest
Vendor pom name Spring Plugin - Core High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://www.vmware.com Medium
Vendor pom url spring-projects/spring-plugin/spring-plugin-core Highest
Product file name spring-plugin-core High
Product jar package name core Highest
Product jar package name plugin Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.plugin.core Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Plugin - Core High
Product pom artifactid spring-plugin-core Highest
Product pom developer email odrotbohm@vmware.com Low
Product pom developer id drotbohm Low
Product pom developer name Oliver Drotbohm Low
Product pom developer org VMware Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.plugin Highest
Product pom name Spring Plugin - Core High
Product pom organization name VMware, Inc. Low
Product pom organization url https://www.vmware.com Low
Product pom url spring-projects/spring-plugin/spring-plugin-core High
Version file version 4.0.0 High
Version Manifest Implementation-Version 4.0.0 High
Version pom version 4.0.0 Highest
pkg:maven/org.springframework.plugin/spring-plugin-core@4.0.0
(Confidence :High)
spring-security-core-7.0.5.jar
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/7.0.5/spring-security-core-7.0.5.jar
MD5: 0a89cf0352acb65c6ec79a046cf875a8
SHA1: 9d331a891df2aa811eb91ffad056bb5077e471e8
SHA256: 344bfbed8025031781218cbd7891f6b9fd750d4f52c923f75948d5e7b11fc2ea
Referenced In Project/Scope: Tailormap API:compile
spring-security-core-7.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.security/spring-security-test@7.0.5
Evidence
Type Source Name Value Confidence
Vendor file name spring-security-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name security Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.security.core Medium
Vendor pom artifactid spring-security-core Highest
Vendor pom artifactid spring-security-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.security Highest
Vendor pom name spring-security-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-security Highest
Product file name spring-security-core High
Product jar package name core Highest
Product jar package name security Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.security.core Medium
Product Manifest Implementation-Title spring-security-core High
Product pom artifactid spring-security-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.security Highest
Product pom name spring-security-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-security Medium
Version file version 7.0.5 High
Version Manifest Implementation-Version 7.0.5 High
Version pom version 7.0.5 Highest
Related Dependencies
spring-security-config-7.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-config/7.0.5/spring-security-config-7.0.5.jar
MD5: 08c877abf71dfb27753d43d6c04c7fe7
SHA1: 9d6b471cfcc8fc30bcc139e04f3781242bd5b001
SHA256: 3682285f86681a93bddb5c14d8b2dfa111aa6809b195b8c12d1897c1781d2fde
pkg:maven/org.springframework.security/spring-security-config@7.0.5
spring-security-crypto-7.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/7.0.5/spring-security-crypto-7.0.5.jar
MD5: d98126573edf9e16efd848da8ef8dd6e
SHA1: e18e190fe0b55b0e28ae4a64c59bb2efe5406466
SHA256: fa2dbe7ce6aea8b3b0cc82bcd09b5b4ef030cdac51b85e54d785d85f1a3d42d9
pkg:maven/org.springframework.security/spring-security-crypto@7.0.5
spring-security-web-7.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.0.5/spring-security-web-7.0.5.jar
MD5: 766ca85b07135684bc5f8e7d57dafa41
SHA1: e78938fc30d0cbf40996f7e7d5d955b15bacfe01
SHA256: 4616f13afe233600dfad8cfa4ef1472c378a080a6cbf516739c779d9267edbd9
pkg:maven/org.springframework.security/spring-security-web@7.0.5
spring-security-oauth2-core-7.0.5.jar
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-core/7.0.5/spring-security-oauth2-core-7.0.5.jar
MD5: e7cd85052e42fd65c6f98b1b15bcd955
SHA1: 11eae201564bf4f23109040ff2ab0d16413c2dcb
SHA256: 3e5d3a855543d4b805551d1685a7ce01ecc32c7bb84f85579a56fdd8fe9286e6
Referenced In Project/Scope: Tailormap API:compile
spring-security-oauth2-core-7.0.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name spring-security-oauth2-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name oauth2 Highest
Vendor jar package name security Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.security.oauth2.core Medium
Vendor pom artifactid spring-security-oauth2-core Highest
Vendor pom artifactid spring-security-oauth2-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.security Highest
Vendor pom name spring-security-oauth2-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-security Highest
Product file name spring-security-oauth2-core High
Product jar package name core Highest
Product jar package name oauth2 Highest
Product jar package name security Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.security.oauth2.core Medium
Product Manifest Implementation-Title spring-security-oauth2-core High
Product pom artifactid spring-security-oauth2-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.security Highest
Product pom name spring-security-oauth2-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-security Medium
Version file version 7.0.5 High
Version Manifest Implementation-Version 7.0.5 High
Version pom version 7.0.5 Highest
Related Dependencies
spring-security-oauth2-client-7.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-client/7.0.5/spring-security-oauth2-client-7.0.5.jar
MD5: c973e077602e7d58bd029a7518f1ad7e
SHA1: 39a0c597e75bda21150bdad3174f4e46fc0269b4
SHA256: 9c5be3a93fab2aeb75322ab684b0845f78c624464500e72687e5d68d2512b24e
pkg:maven/org.springframework.security/spring-security-oauth2-client@7.0.5
spring-security-oauth2-jose-7.0.5.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-jose/7.0.5/spring-security-oauth2-jose-7.0.5.jar
MD5: c4a5e4ab972130adf8a531efae0192ec
SHA1: 77f62f6b557a4d31d45701bbe185945bd78259ed
SHA256: 6c4f1e6839b2fa960c8961b3d964925e44896cb883aafac8f45688701657703a
pkg:maven/org.springframework.security/spring-security-oauth2-jose@7.0.5
spring-security-web-7.0.5.jar: spring-security-webauthn.js
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.0.5/spring-security-web-7.0.5.jar/org/springframework/security/spring-security-webauthn.js
MD5: d8d90d854a23d021c2e758b3eebce213
SHA1: 7814ccd3adc2388f52b2658bf5fc30b457949ab6
SHA256: 044a2b8d7e995bff815565678631a2d3a5cc0aa96ef8ac35cfacb579307f77a9
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
spring-session-core-4.0.3.jar
Description:
Spring Session
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/session/spring-session-core/4.0.3/spring-session-core-4.0.3.jar
MD5: dd71fbc05c54d5ed7ce9390102d9c7fc
SHA1: 61883df7d1f48ac9a530b6933875c3dfd6ed8653
SHA256: c1cd05c7d2ecaad73cb8409871034b8343b96b831e97a281f77e60c4bd87b673
Referenced In Project/Scope: Tailormap API:compile
spring-session-core-4.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.session/spring-session-jdbc@4.0.3
Evidence
Type Source Name Value Confidence
Vendor file name spring-session-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name session Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.session.core Medium
Vendor pom artifactid spring-session-core Highest
Vendor pom artifactid spring-session-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.session Highest
Vendor pom name spring-session-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-session Highest
Product file name spring-session-core High
Product jar package name session Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.session.core Medium
Product Manifest Implementation-Title spring-session-core High
Product pom artifactid spring-session-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.session Highest
Product pom name spring-session-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-session Medium
Version file version 4.0.3 High
Version Manifest Implementation-Version 4.0.3 High
Version pom version 4.0.3 Highest
Related Dependencies
spring-session-jdbc-4.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/session/spring-session-jdbc/4.0.3/spring-session-jdbc-4.0.3.jar
MD5: 17d1537cefcd3a6a66cbb6b233e5cb5e
SHA1: a40c33caf1aa10e09ee1ff1b63680db8ca36410d
SHA256: 6758545f92df3a2c4770d1116d58deb9846b11658d3a2fd2ef397185f35af745
pkg:maven/org.springframework.session/spring-session-jdbc@4.0.3
sse-eventbus-3.2.0.jar
Description:
A simple eventbus library to track connected sse clients and broadcast messages
License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/ch/rasc/sse-eventbus/3.2.0/sse-eventbus-3.2.0.jar
MD5: 52641d482865ce8b498efd370177179b
SHA1: 0ad879f125386d9936c0cb342fea0b653914bc1d
SHA256: 8d38aa7f20ebdc1a3dbbb0f008dbcc00d38b44f57869d29c64530d60d13ece66
Referenced In Project/Scope: Tailormap API:compile
sse-eventbus-3.2.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name sse-eventbus High
Vendor jar package name ch Highest
Vendor jar package name eventbus Highest
Vendor jar package name rasc Highest
Vendor jar package name sse Highest
Vendor Manifest automatic-module-name ch.rasc.sse.eventbus Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid sse-eventbus Highest
Vendor pom artifactid sse-eventbus Low
Vendor pom developer email ralphschaer@gmail.com Low
Vendor pom developer name Ralph Schaer Medium
Vendor pom groupid ch.rasc Highest
Vendor pom name Sse Eventbus Library High
Vendor pom url ralscha/sse-eventbus/ Highest
Product file name sse-eventbus High
Product jar package name ch Highest
Product jar package name eventbus Highest
Product jar package name rasc Highest
Product jar package name sse Highest
Product Manifest automatic-module-name ch.rasc.sse.eventbus Medium
Product Manifest build-jdk-spec 17 Low
Product pom artifactid sse-eventbus Highest
Product pom developer email ralphschaer@gmail.com Low
Product pom developer name Ralph Schaer Low
Product pom groupid ch.rasc Highest
Product pom name Sse Eventbus Library High
Product pom url ralscha/sse-eventbus/ High
Version file version 3.2.0 High
Version pom version 3.2.0 Highest
pkg:maven/ch.rasc/sse-eventbus@3.2.0
(Confidence :High)
swagger-annotations-2.2.48.jar
Description:
swagger-annotations
License:
"Apache License 2.0";link="http://www.apache.org/licenses/LICENSE-2.0.html"
File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations/2.2.48/swagger-annotations-2.2.48.jar
MD5: 141250f41c16f2616bc2cdf927a651b4
SHA1: 149e215edb850c8acdfcc782db2d60a086bfc5c1
SHA256: fea309bce0b075cb7767469982e98bd68d8c0ed3ff23ab3452b22a72c6770e8b
Referenced In Project/Scope: Tailormap API:compile
swagger-annotations-2.2.48.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name swagger-annotations High
Vendor jar package name io Highest
Vendor jar package name oas Highest
Vendor jar package name swagger Highest
Vendor jar package name v3 Highest
Vendor Manifest automatic-module-name io.swagger.v3.oas.annotations Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low
Vendor Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Vendor Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations Medium
Vendor Manifest mode development Low
Vendor Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Vendor pom artifactid swagger-annotations Highest
Vendor pom artifactid swagger-annotations Low
Vendor pom groupid io.swagger.core.v3 Highest
Vendor pom name swagger-annotations High
Vendor pom parent-artifactid swagger-project Low
Product file name swagger-annotations High
Product jar package name io Highest
Product jar package name oas Highest
Product jar package name swagger Highest
Product jar package name v3 Highest
Product Manifest automatic-module-name io.swagger.v3.oas.annotations Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low
Product Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Product Manifest Bundle-Name swagger-annotations Medium
Product Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations Medium
Product Manifest mode development Low
Product Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Product pom artifactid swagger-annotations Highest
Product pom groupid io.swagger.core.v3 Highest
Product pom name swagger-annotations High
Product pom parent-artifactid swagger-project Medium
Version file version 2.2.48 High
Version Manifest Bundle-Version 2.2.48 High
Version Manifest implementation-version 2.2.48 High
Version pom version 2.2.48 Highest
pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.48
(Confidence :High)
cpe:2.3:a:http-swagger_project:http-swagger:2.2.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
swagger-annotations-jakarta-2.2.22.jar
Description:
swagger-annotations-jakarta
License:
"Apache License 2.0";link="http://www.apache.org/licenses/LICENSE-2.0.html"
File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations-jakarta/2.2.22/swagger-annotations-jakarta-2.2.22.jar
MD5: 0df4a41a0f292514d219439f9a20f3a3
SHA1: 1efc0b0af32fce629f0786062c89e8b117abe120
SHA256: f2caefc17f7989a59aea59785f746201ea88635cb5c440c582d9a8ebdbf2a96f
Referenced In Project/Scope: Tailormap API:compile
swagger-annotations-jakarta-2.2.22.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.solr/solr-solrj@10.0.0
Evidence
Type Source Name Value Confidence
Vendor file name swagger-annotations-jakarta High
Vendor jar package name io Highest
Vendor jar package name oas Highest
Vendor jar package name swagger Highest
Vendor jar package name v3 Highest
Vendor Manifest automatic-module-name io.swagger.v3.oas.annotations Medium
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low
Vendor Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Vendor Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations.jakarta Medium
Vendor Manifest mode development Low
Vendor Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Vendor pom artifactid swagger-annotations-jakarta Highest
Vendor pom artifactid swagger-annotations-jakarta Low
Vendor pom groupid io.swagger.core.v3 Highest
Vendor pom name swagger-annotations-jakarta High
Vendor pom parent-artifactid swagger-project-jakarta Low
Product file name swagger-annotations-jakarta High
Product jar package name io Highest
Product jar package name oas Highest
Product jar package name swagger Highest
Product jar package name v3 Highest
Product Manifest automatic-module-name io.swagger.v3.oas.annotations Medium
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-developers frantuma;email="frantuma@yahoo.com";name="Francesco Tumanischvili",fehguy;email="fehguy@gmail.com";name="Tony Tam",webron;email="webron@gmail.com";name="Ron Ratovsky" Low
Product Manifest bundle-docurl https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Product Manifest Bundle-Name swagger-annotations Jakarta Medium
Product Manifest bundle-symbolicname io.swagger.core.v3.swagger-annotations.jakarta Medium
Product Manifest mode development Low
Product Manifest url https://github.com/swagger-api/swagger-core/modules/swagger-annotations Low
Product pom artifactid swagger-annotations-jakarta Highest
Product pom groupid io.swagger.core.v3 Highest
Product pom name swagger-annotations-jakarta High
Product pom parent-artifactid swagger-project-jakarta Medium
Version file version 2.2.22 High
Version Manifest Bundle-Version 2.2.22 High
Version Manifest implementation-version 2.2.22 High
Version pom version 2.2.22 Highest
pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.22
(Confidence :High)
cpe:2.3:a:http-swagger_project:http-swagger:2.2.22:*:*:*:*:*:*:*
(Confidence :Low)
suppress
swagger-initializer.js
File Path: /home/runner/work/tailormap-api/tailormap-api/src/main/resources/static/swagger-ui/swagger-initializer.js
MD5: 982555cacc0cf7ebf5307dc607579416
SHA1: 8e695db71da2e1820a01415150bf79901f0c152e
SHA256: b5afeb4c34a10ec914c144e08701987e723ec85580ef8c07da92fc5572306faa
Referenced In Project/Scope: Tailormap API
Evidence
Type Source Name Value Confidence
swagger-ui-5.32.4.jar
Description:
WebJar for Swagger UI
License:
Apache-2.0
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar
MD5: 4b3ab78abf7b6c8bedaa854b21980c64
SHA1: 6fe200e69b262ccc15fb0c9e2c6a9e51b9125f1d
SHA256: 55a4433071ca40a0f2648cae70057f044a55be279a9ff0b38f0cc1ab45fd9f59
Referenced In Project/Scope: Tailormap API:compile
swagger-ui-5.32.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name swagger-ui High
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname org.webjars.swagger-ui Medium
Vendor pom artifactid swagger-ui Highest
Vendor pom artifactid swagger-ui Low
Vendor pom developer id webjars Medium
Vendor pom groupid org.webjars Highest
Vendor pom name Swagger UI High
Vendor pom url https://www.webjars.org Highest
Product file name swagger-ui High
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name Swagger UI Medium
Product Manifest bundle-symbolicname org.webjars.swagger-ui Medium
Product pom artifactid swagger-ui Highest
Product pom developer id webjars Low
Product pom groupid org.webjars Highest
Product pom name Swagger UI High
Product pom url https://www.webjars.org Medium
Version file version 5.32.4 High
Version Manifest Bundle-Version 5.32.4 High
Version pom version 5.32.4 Highest
pkg:maven/org.webjars/swagger-ui@5.32.4
(Confidence :High)
cpe:2.3:a:http-swagger_project:http-swagger:5.32.4:*:*:*:*:*:*:*
(Confidence :Low)
suppress
swagger-ui-5.32.4.jar: oauth2-redirect.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/oauth2-redirect.js
MD5: d170ff78b648354d9005ff7dce2b141d
SHA1: d9df3eb79cf8ab7d1bd9df14d3264350c270b51b
SHA256: a5c8a34e09e49737382cc5019446eec7c3db3461963fc5bfe448361d3c5549e9
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
swagger-ui-5.32.4.jar: swagger-initializer.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-initializer.js
MD5: ff995915f51c051c59fed883f5d7be28
SHA1: c434dd8fbfa625a10351681d3037ee79d5682207
SHA256: a895034f24f12d7cd81ec47c98da4f15721d9d9a8d2405f22f21704821f81d02
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
swagger-ui-5.32.4.jar: swagger-ui-bundle.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-ui-bundle.js
MD5: 45ccffa901bb9a18069b6c20d3363413
SHA1: 5f9278b867c750274663e10fed4686c4847aa450
SHA256: 82c56ace487aa04c1f92602eb14739cecf600379741eb40c8810ebd03d98a033
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
Vendor RetireJS name DOMPurify High
Product RetireJS name DOMPurify High
Version RetireJS version 3.3.2 High
pkg:javascript/DOMPurify@3.3.2
(Confidence :Highest)
## Summary
In `src/purify.ts:1117-1123`, `ADD_TAGS` as a function (via `EXTRA_ELEMENT_HANDLING.tagCheck`) bypasses `FORBID_TAGS` due to short-circuit evaluation.
The condition:
```
!(tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])
```
When `tagCheck(tagName)` returns `true`, the entire condition is `false` and the element is kept — `FORBID_TAGS[tagName]` is never evaluated.
## Inconsistency
This contradicts the attribute-side pattern at line 1214 where `FORBID_ATTR` explicitly wins first:
```
if (FORBID_ATTR[lcName]) { continue; }
```
For tags, FORBID should also take precedence over ADD.
## Impact
Applications using both `ADD_TAGS` as a function and `FORBID_TAGS` simultaneously get unexpected behavior — forbidden tags are allowed through. Config-dependent but a genuine logic inconsistency.
## Suggested Fix
Check `FORBID_TAGS` before `tagCheck`:
```
if (FORBID_TAGS[tagName]) { /* remove */ }
else if (tagCheck(tagName) || ALLOWED_TAGS[tagName]) { /* keep */ }
```
## Affected Version
v3.3.3 (commit 883ac15) (RETIREJS) suppress
## Summary
In `src/purify.ts:1117-1123`, `ADD_TAGS` as a function (via `EXTRA_ELEMENT_HANDLING.tagCheck`) bypasses `FORBID_TAGS` due to short-circuit evaluation.
The condition:
```
!(tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])
```
When `tagCheck(tagName)` returns `true`, the entire condition is `false` and the element is kept — `FORBID_TAGS[tagName]` is never evaluated.
## Inconsistency
This contradicts the attribute-side pattern at line 1214 where `FORBID_ATTR` explicitly wins first:
```
if (FORBID_ATTR[lcName]) { continue; }
```
For tags, FORBID should also take precedence over ADD.
## Impact
Applications using both `ADD_TAGS` as a function and `FORBID_TAGS` simultaneously get unexpected behavior — forbidden tags are allowed through. Config-dependent but a genuine logic inconsistency.
## Suggested Fix
Check `FORBID_TAGS` before `tagCheck`:
```
if (FORBID_TAGS[tagName]) { /* remove */ }
else if (tagCheck(tagName) || ALLOWED_TAGS[tagName]) { /* keep */ }
```
## Affected Version
v3.3.3 (commit 883ac15)
Unscored:
References:
CVE-2026-41238 (RETIREJS) suppress
Unscored:
References:
CVE-2026-41239 (RETIREJS) suppress
Unscored:
References:
CVE-2026-41240 (RETIREJS) suppress
Unscored:
References:
swagger-ui-5.32.4.jar: swagger-ui-es-bundle-core.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-ui-es-bundle-core.js
MD5: 9d13da031f16172f1eebdf5a612237ea
SHA1: d753c55c83461beedd3a4a256ab1f03110675d38
SHA256: 24abdb869daeceeb949e71d9fdc306a7207173a5ecaec25a5557d5e7dfea9201
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
swagger-ui-5.32.4.jar: swagger-ui-es-bundle.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-ui-es-bundle.js
MD5: fb97d9c05935d15ed81fbc16227357e6
SHA1: d7c546af7ae56e99231c0087480e95d44e7014c3
SHA256: 5c609364246d315dbc710a6f6b726b428c906a67407bb1602b04a9013ba97e4c
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
Vendor RetireJS name DOMPurify High
Product RetireJS name DOMPurify High
Version RetireJS version 3.3.2 High
pkg:javascript/DOMPurify@3.3.2
(Confidence :Highest)
## Summary
In `src/purify.ts:1117-1123`, `ADD_TAGS` as a function (via `EXTRA_ELEMENT_HANDLING.tagCheck`) bypasses `FORBID_TAGS` due to short-circuit evaluation.
The condition:
```
!(tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])
```
When `tagCheck(tagName)` returns `true`, the entire condition is `false` and the element is kept — `FORBID_TAGS[tagName]` is never evaluated.
## Inconsistency
This contradicts the attribute-side pattern at line 1214 where `FORBID_ATTR` explicitly wins first:
```
if (FORBID_ATTR[lcName]) { continue; }
```
For tags, FORBID should also take precedence over ADD.
## Impact
Applications using both `ADD_TAGS` as a function and `FORBID_TAGS` simultaneously get unexpected behavior — forbidden tags are allowed through. Config-dependent but a genuine logic inconsistency.
## Suggested Fix
Check `FORBID_TAGS` before `tagCheck`:
```
if (FORBID_TAGS[tagName]) { /* remove */ }
else if (tagCheck(tagName) || ALLOWED_TAGS[tagName]) { /* keep */ }
```
## Affected Version
v3.3.3 (commit 883ac15) (RETIREJS) suppress
## Summary
In `src/purify.ts:1117-1123`, `ADD_TAGS` as a function (via `EXTRA_ELEMENT_HANDLING.tagCheck`) bypasses `FORBID_TAGS` due to short-circuit evaluation.
The condition:
```
!(tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])
```
When `tagCheck(tagName)` returns `true`, the entire condition is `false` and the element is kept — `FORBID_TAGS[tagName]` is never evaluated.
## Inconsistency
This contradicts the attribute-side pattern at line 1214 where `FORBID_ATTR` explicitly wins first:
```
if (FORBID_ATTR[lcName]) { continue; }
```
For tags, FORBID should also take precedence over ADD.
## Impact
Applications using both `ADD_TAGS` as a function and `FORBID_TAGS` simultaneously get unexpected behavior — forbidden tags are allowed through. Config-dependent but a genuine logic inconsistency.
## Suggested Fix
Check `FORBID_TAGS` before `tagCheck`:
```
if (FORBID_TAGS[tagName]) { /* remove */ }
else if (tagCheck(tagName) || ALLOWED_TAGS[tagName]) { /* keep */ }
```
## Affected Version
v3.3.3 (commit 883ac15)
Unscored:
References:
CVE-2026-41238 (RETIREJS) suppress
Unscored:
References:
CVE-2026-41239 (RETIREJS) suppress
Unscored:
References:
CVE-2026-41240 (RETIREJS) suppress
Unscored:
References:
swagger-ui-5.32.4.jar: swagger-ui-standalone-preset.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-ui-standalone-preset.js
MD5: 7289ecfaa5507c519cb95606e6216dbb
SHA1: 296ac957b2bd263971de6f608409b11337387160
SHA256: 38f7334300f524e1d456b1c5f6ec45383316283c257444aa9453143fdb434c73
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
swagger-ui-5.32.4.jar: swagger-ui.js
File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.32.4/swagger-ui-5.32.4.jar/META-INF/resources/webjars/swagger-ui/5.32.4/swagger-ui.js
MD5: 8aaaa0dde665c0176c01626dcd6553ad
SHA1: 427bfddf8f8a0d2ac04c2f822fe94c9fe1f3bb2a
SHA256: 5e7b2edddd95d3ab2336fd531ea71be50a05fa05f2d95f63d6f20f82e59d6905
Referenced In Project/Scope: Tailormap API:compile
Evidence
Type Source Name Value Confidence
systems-common-2.1.jar
Description:
Parent POM for Unit Systems
License:
BSD;link=LICENSE
File Path: /home/runner/.m2/repository/systems/uom/systems-common/2.1/systems-common-2.1.jar
MD5: 8c3a56e267bbd26bb947c826e51bee2b
SHA1: a173cc6f1fedc8b32498d6cc9599251baa72de27
SHA256: b3cc1f3e604dcd18d3bba266db5fd01744bbd6b02f147377d4016585ba375cff
Referenced In Project/Scope: Tailormap API:compile
systems-common-2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name systems-common High
Vendor jar package name common Highest
Vendor jar package name systems Highest
Vendor jar package name uom Highest
Vendor Manifest automatic-module-name systems.uom.common Medium
Vendor Manifest build-jdk-spec 14 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl http://www.uom.systems/systems-common Low
Vendor Manifest bundle-symbolicname systems-common Medium
Vendor Manifest implementation-url http://uom.technology Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement project Low
Vendor pom artifactid systems-common Highest
Vendor pom artifactid systems-common Low
Vendor pom groupid systems.uom Highest
Vendor pom name Units of Measurement Common Unit Systems High
Vendor pom parent-artifactid systems-parent Low
Product file name systems-common High
Product jar package name common Highest
Product jar package name systems Highest
Product jar package name uom Highest
Product Manifest automatic-module-name systems.uom.common Medium
Product Manifest build-jdk-spec 14 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization="Creative Arts & Technologies";organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone="+1",desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Thodoris Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl http://www.uom.systems/systems-common Low
Product Manifest Bundle-Name Units of Measurement Common Unit Systems Medium
Product Manifest bundle-symbolicname systems-common Medium
Product Manifest Implementation-Title Units of Measurement Common Unit Systems High
Product Manifest implementation-url http://uom.technology Low
Product Manifest specification-title Units of Measurement Systems Medium
Product pom artifactid systems-common Highest
Product pom groupid systems.uom Highest
Product pom name Units of Measurement Common Unit Systems High
Product pom parent-artifactid systems-parent Medium
Version file version 2.1 High
Version Manifest Implementation-Version 2.1 High
Version pom version 2.1 Highest
pkg:maven/systems.uom/systems-common@2.1
(Confidence :High)
tomcat-embed-core-11.0.21.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/11.0.21/tomcat-embed-core-11.0.21.jar
MD5: d2bca26439a0ff8bdd0317af8e243dd1
SHA1: 6d53989fe9f9416eb1295a9c53c7b6fb8e3c04bb
SHA256: 5dbe19880b5025e0b9de7c3de81cb837ce79636ea1da39c8d00a66d3add25567
Referenced In Project/Scope: Tailormap API:compile
tomcat-embed-core-11.0.21.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-webmvc@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-core High
Vendor jar package name apache Highest
Vendor jar package name core Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-core Highest
Vendor pom artifactid tomcat-embed-core Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-core High
Product jar package name annotation Highest
Product jar package name apache Highest
Product jar package name auth Highest
Product jar package name core Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name jakarta Highest
Product jar package name message Highest
Product jar package name security Highest
Product jar package name servlet Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-embed-core Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/security/auth/message/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/callback/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/callback/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/config/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/config/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/module/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/module/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium
Product pom artifactid tomcat-embed-core Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.21 High
Version Manifest Bundle-Version 11.0.21 High
Version Manifest Implementation-Version 11.0.21 High
Version pom version 11.0.21 Highest
Related Dependencies
tomcat-embed-websocket-11.0.21.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/11.0.21/tomcat-embed-websocket-11.0.21.jar
MD5: 991c978b58ad16aff449cf9bf5899798
SHA1: 0abed2f9a4a8d7e8b8dfe492b1c6e58ea73825db
SHA256: fc64e531c473d627ff121e31bcb5871dee9f241e1fd1d1f1522498208f1a278d
pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.21
tomcat-embed-el-11.0.21.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/11.0.21/tomcat-embed-el-11.0.21.jar
MD5: dd59f123bc31093489237bdda1b8a4a7
SHA1: ab5200daf4fac467fa0e73598cdc10de6ce1c139
SHA256: 3745cb768f4ed74c2f4af8fc2453992143997019718f71c915d4545fdbef1fb3
Referenced In Project/Scope: Tailormap API:compile
tomcat-embed-el-11.0.21.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@4.0.6
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-el Highest
Vendor pom artifactid tomcat-embed-el Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-el High
Product jar package name apache Highest
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name expressionfactory Highest
Product jar package name expressionfactoryimpl Highest
Product jar package name jakarta Highest
Product Manifest Bundle-Name tomcat-embed-jasper-el Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/el/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium
Product pom artifactid tomcat-embed-el Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.21 High
Version Manifest Bundle-Version 11.0.21 High
Version Manifest Implementation-Version 11.0.21 High
Version pom version 11.0.21 Highest
pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@11.0.21
(Confidence :High)
txw2-4.0.6.jar
Description:
TXW is a library that allows you to write XML documents.
File Path: /home/runner/.m2/repository/org/glassfish/jaxb/txw2/4.0.6/txw2-4.0.6.jar
MD5: 0bf7070aee3bb53640d2ea6441e059fb
SHA1: 4f4cd53b5ff9a2c5aa1211f15ed2569c57dfb044
SHA256: fcc749785412ef3806fde1ce70f93ef5a0065dcc47fe449bc871db0795cb11af
Referenced In Project/Scope: Tailormap API:runtime
txw2-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.hibernate.orm/hibernate-core@7.3.2.Final
Evidence
Type Source Name Value Confidence
Vendor file name txw2 High
Vendor jar package name sun Highest
Vendor jar package name txw Highest
Vendor jar package name txw2 Highest
Vendor jar package name xml Highest
Vendor jar (hint) package name oracle Highest
Vendor Manifest git-revision 0dcfdf5 Low
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.eclipse Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid txw2 Highest
Vendor pom artifactid txw2 Low
Vendor pom groupid org.glassfish.jaxb Highest
Vendor pom name TXW2 Runtime High
Vendor pom parent-artifactid jaxb-txw-parent Low
Vendor pom parent-groupid com.sun.xml.bind.mvn Medium
Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest
Product file name txw2 High
Product jar package name sun Highest
Product jar package name txw Highest
Product jar package name txw2 Highest
Product jar package name xml Highest
Product Manifest git-revision 0dcfdf5 Low
Product Manifest Implementation-Title Eclipse Implementation of JAXB High
Product Manifest specification-title Jakarta XML Binding Medium
Product pom artifactid txw2 Highest
Product pom groupid org.glassfish.jaxb Highest
Product pom name TXW2 Runtime High
Product pom parent-artifactid jaxb-txw-parent Medium
Product pom parent-groupid com.sun.xml.bind.mvn Medium
Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium
Version file version 4.0.6 High
Version Manifest build-version 4.0.6 Medium
Version pom version 4.0.6 Highest
pkg:maven/org.glassfish.jaxb/txw2@4.0.6
(Confidence :High)
unit-api-2.2.jar
Description:
Units of Measurement Standard - This JSR specifies Java
packages for modeling and working with measurement values, quantities
and their corresponding units.
License:
BSD 3-Clause: LICENSE
File Path: /home/runner/.m2/repository/javax/measure/unit-api/2.2/unit-api-2.2.jar
MD5: 6cbc2bae2cb63cb4f85c5a187ee7dda2
SHA1: 2b624f7334b94a82c74cb954ede9fb1179b8d30c
SHA256: 667487e1ee57298cdc767885f00b86c899b2fe7e72dc00b6560a6aa64f2bc9c4
Referenced In Project/Scope: Tailormap API:compile
unit-api-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name unit-api High
Vendor jar package name javax Highest
Vendor jar package name measure Highest
Vendor jar package name unit Highest
Vendor Manifest automatic-module-name java.measure Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Vendor Manifest bundle-symbolicname javax.measure.unit-api Medium
Vendor Manifest Implementation-Vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Vendor pom artifactid unit-api Highest
Vendor pom artifactid unit-api Low
Vendor pom developer email daniel.dias.analistati@gmail.com Low
Vendor pom developer email jean-marie@dautelle.com Low
Vendor pom developer email martin.desruisseaux@geomatys.com Low
Vendor pom developer email otaviopolianasantana@gmail.com Low
Vendor pom developer email thodoris.bais@gmail.com Low
Vendor pom developer email werner.keil@gmx.net Low
Vendor pom developer id Daniel-Dos Medium
Vendor pom developer id dautelle Medium
Vendor pom developer id desruisseaux Medium
Vendor pom developer id jhg023 Medium
Vendor pom developer id keilw Medium
Vendor pom developer id magesh678 Medium
Vendor pom developer id mohalmo Medium
Vendor pom developer id otaviojava Medium
Vendor pom developer id thodorisbais Medium
Vendor pom developer name Daniel Dias Medium
Vendor pom developer name Jacob Glickman Medium
Vendor pom developer name Jean-Marie Dautelle Medium
Vendor pom developer name Magesh Kasthuri Medium
Vendor pom developer name Martin Desruisseaux Medium
Vendor pom developer name Mohammed Al-Moayed Medium
Vendor pom developer name Otávio Gonçalves de Santana Medium
Vendor pom developer name Thodoris Bais Medium
Vendor pom developer name Werner Keil Medium
Vendor pom developer org Airbus Medium
Vendor pom developer org Creative Arts & Technologies Medium
Vendor pom developer org Geomatys Medium
Vendor pom developer org Individual Medium
Vendor pom developer org Individual / SouJava Medium
Vendor pom developer org Individual / Utrecht JUG Medium
Vendor pom developer org URL http://www.airbus.com Medium
Vendor pom developer org URL http://www.catmedia.us Medium
Vendor pom developer org URL http://www.geomatys.com Medium
Vendor pom groupid javax.measure Highest
Vendor pom name Units of Measurement API High
Vendor pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana High
Vendor pom organization url http://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-parent Low
Vendor pom parent-groupid tech.uom Medium
Vendor pom url https://unitsofmeasurement.github.io/unit-api/ Highest
Product file name unit-api High
Product jar package name javax Highest
Product jar package name measure Highest
Product jar package name unit Highest
Product Manifest automatic-module-name java.measure Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low
Product Manifest Bundle-Name Units of Measurement API Medium
Product Manifest bundle-symbolicname javax.measure.unit-api Medium
Product Manifest Implementation-Title Units of Measurement API High
Product Manifest multi-release true Low
Product Manifest specification-title Units of Measurement API Medium
Product pom artifactid unit-api Highest
Product pom developer email daniel.dias.analistati@gmail.com Low
Product pom developer email jean-marie@dautelle.com Low
Product pom developer email martin.desruisseaux@geomatys.com Low
Product pom developer email otaviopolianasantana@gmail.com Low
Product pom developer email thodoris.bais@gmail.com Low
Product pom developer email werner.keil@gmx.net Low
Product pom developer id Daniel-Dos Low
Product pom developer id dautelle Low
Product pom developer id desruisseaux Low
Product pom developer id jhg023 Low
Product pom developer id keilw Low
Product pom developer id magesh678 Low
Product pom developer id mohalmo Low
Product pom developer id otaviojava Low
Product pom developer id thodorisbais Low
Product pom developer name Daniel Dias Low
Product pom developer name Jacob Glickman Low
Product pom developer name Jean-Marie Dautelle Low
Product pom developer name Magesh Kasthuri Low
Product pom developer name Martin Desruisseaux Low
Product pom developer name Mohammed Al-Moayed Low
Product pom developer name Otávio Gonçalves de Santana Low
Product pom developer name Thodoris Bais Low
Product pom developer name Werner Keil Low
Product pom developer org Airbus Low
Product pom developer org Creative Arts & Technologies Low
Product pom developer org Geomatys Low
Product pom developer org Individual Low
Product pom developer org Individual / SouJava Low
Product pom developer org Individual / Utrecht JUG Low
Product pom developer org URL http://www.airbus.com Low
Product pom developer org URL http://www.catmedia.us Low
Product pom developer org URL http://www.geomatys.com Low
Product pom groupid javax.measure Highest
Product pom name Units of Measurement API High
Product pom organization name Jean-Marie Dautelle, Werner Keil, Otavio Santana Low
Product pom organization url http://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-parent Medium
Product pom parent-groupid tech.uom Medium
Product pom url https://unitsofmeasurement.github.io/unit-api/ Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/javax.measure/unit-api@2.2
(Confidence :High)
uom-lib-common-2.2.jar
Description:
Units Common Library
License:
BSD: LICENSE
File Path: /home/runner/.m2/repository/tech/uom/lib/uom-lib-common/2.2/uom-lib-common-2.2.jar
MD5: eb6a1296ea160f731ac81ab8a2c7fed7
SHA1: 94a52abfdad3935c3769b4caab3ce9d384d8fb4e
SHA256: a01ece1c236b7b15a431b0383bdddf06dc6d7a85290e9a62b63904e1e4e0dc0d
Referenced In Project/Scope: Tailormap API:compile
uom-lib-common-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-api@34.3
Evidence
Type Source Name Value Confidence
Vendor file name uom-lib-common High
Vendor jar package name common Highest
Vendor jar package name lib Highest
Vendor jar package name tech Highest
Vendor jar package name uom Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Vendor Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low
Vendor Manifest bundle-symbolicname uom-lib-common Medium
Vendor Manifest implementation-url https://unitsofmeasurement.github.io Low
Vendor Manifest Implementation-Vendor Units of Measurement contributors High
Vendor Manifest specification-vendor Units of Measurement project Low
Vendor pom artifactid uom-lib-common Highest
Vendor pom artifactid uom-lib-common Low
Vendor pom groupid tech.uom.lib Highest
Vendor pom name Units of Measurement Common Library for Java High
Vendor pom organization name Units of Measurement project High
Vendor pom organization url https://unitsofmeasurement.github.io Medium
Vendor pom parent-artifactid uom-lib Low
Vendor pom url https://unitsofmeasurement.github.io/uom-lib Highest
Product file name uom-lib-common High
Product jar package name common Highest
Product jar package name lib Highest
Product jar package name tech Highest
Product jar package name uom Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-developers dautelle;email="jean-marie@dautelle.com";name="Jean-Marie Dautelle";organization=Airbus;organizationUrl="https://www.airbus.com";roles="Architect,Java Developer,Spec Lead";timezone="+1",keilw;email="werner@catmedia.us";name="Werner Keil";organization=CATMedia;organizationUrl="http://www.catmedia.us";roles="Architect,Java Developer,Spec Lead";timezone="+1",otaviojava;email="otaviopolianasantana@gmail.com";name="Otávio Gonçalves de Santana";organization="Individual / SouJava";roles="Expert,Java Developer,Spec Lead";timezone=0,desruisseaux;email="martin.desruisseaux@geomatys.com";name="Martin Desruisseaux";organization=Geomatys;organizationUrl="http://www.geomatys.com";roles="Expert,Java Developer";timezone="+1",thodorisbais;email="thodoris.bais@gmail.com";name="Teo Bais";organization="Individual / Utrecht JUG";roles="Expert,Java Developer";timezone="+1",Daniel-Dos;email="daniel.dias.analistati@gmail.com";name="Daniel Dias";organization="Individual / SouJava";roles="Expert,Java Developer";timezone=-5,jhg023;name="Jacob Glickman";organization=Individual;roles="Expert,Java Developer";timezone=-4,magesh678;name="Magesh Kasthuri";organization=Individual;roles="Expert,Java Developer";timezone="+4" Low
Product Manifest bundle-docurl https://unitsofmeasurement.github.io/uom-lib Low
Product Manifest Bundle-Name Units of Measurement Common Library for Java Medium
Product Manifest bundle-symbolicname uom-lib-common Medium
Product Manifest Implementation-Title Units of Measurement Common Library for Java High
Product Manifest implementation-url https://unitsofmeasurement.github.io Low
Product Manifest specification-title Units of Measurement Medium
Product pom artifactid uom-lib-common Highest
Product pom groupid tech.uom.lib Highest
Product pom name Units of Measurement Common Library for Java High
Product pom organization name Units of Measurement project Low
Product pom organization url https://unitsofmeasurement.github.io Low
Product pom parent-artifactid uom-lib Medium
Product pom url https://unitsofmeasurement.github.io/uom-lib Medium
Version file version 2.2 High
Version Manifest Implementation-Version 2.2 High
Version pom version 2.2 Highest
pkg:maven/tech.uom.lib/uom-lib-common@2.2
(Confidence :High)
utilities-0.9.1.jar
File Path: /home/runner/.m2/repository/org/eclipse/imagen/utilities/0.9.1/utilities-0.9.1.jar
MD5: bfe9aa865760d3886bbceae44cbab15a
SHA1: ecf369ab1d658af967d09b0073a4e02216d00f92
SHA256: 29db1c076961bcd67f797d8375b22cdffb8c7bba0e9243639bc33edee50ed4cc
Referenced In Project/Scope: Tailormap API:compile
utilities-0.9.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-main@34.3
Evidence
Type Source Name Value Confidence
Vendor file name utilities High
Vendor jar package name eclipse Highest
Vendor jar package name eclipse Low
Vendor jar package name imagen Highest
Vendor jar package name imagen Low
Vendor jar package name media Low
Vendor jar package name utilities Highest
Vendor pom artifactid utilities Highest
Vendor pom artifactid utilities Low
Vendor pom groupid org.eclipse.imagen Highest
Vendor pom name : High
Vendor pom parent-artifactid imagen-modules Low
Product file name utilities High
Product jar package name eclipse Highest
Product jar package name imagen Highest
Product jar package name imagen Low
Product jar package name media Low
Product jar package name utilities Highest
Product pom artifactid utilities Highest
Product pom groupid org.eclipse.imagen Highest
Product pom name : High
Product pom parent-artifactid imagen-modules Medium
Version file version 0.9.1 High
Version pom version 0.9.1 Highest
pkg:maven/org.eclipse.imagen/utilities@0.9.1
(Confidence :High)
value-2.12.1.jar
Description:
Compile time annotations and compile time annotation processor to generate consistent value object using
either abstract class, interface or annotation as a base.
File Path: /home/runner/.m2/repository/org/immutables/value/2.12.1/value-2.12.1.jar
MD5: 7cb8cedd6690a1e79d1bc1c8ff9a3855
SHA1: f0952337c879d624ef92b0adb0e4f222664249ad
SHA256: 01dbf1347afb60fcd31f60e01ea8cf1b0f5a0d1d4210f0061dd37f16c32b4d85
Referenced In Project/Scope: Tailormap API:compile
value-2.12.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name value High
Vendor jar package name immutables Highest
Vendor jar package name processor Highest
Vendor jar package name value Highest
Vendor Manifest automatic-module-name org.immutables.value Medium
Vendor Manifest build-jdk-spec 1.8 Low
Vendor pom artifactid value Highest
Vendor pom artifactid value Low
Vendor pom groupid org.immutables Highest
Vendor pom name ${project.groupId}.${project.artifactId} High
Vendor pom parent-artifactid immutables Low
Vendor pom url immutables/immutables/tree/value Highest
Product file name value High
Product jar package name immutables Highest
Product jar package name processor Highest
Product jar package name value Highest
Product Manifest automatic-module-name org.immutables.value Medium
Product Manifest build-jdk-spec 1.8 Low
Product pom artifactid value Highest
Product pom groupid org.immutables Highest
Product pom name ${project.groupId}.${project.artifactId} High
Product pom parent-artifactid immutables Medium
Product pom url immutables/immutables/tree/value High
Version file version 2.12.1 High
Version pom version 2.12.1 Highest
pkg:maven/org.immutables/value@2.12.1
(Confidence :High)
webjars-locator-core-0.59.jar
Description:
WebJar Locator Core functionality
License:
MIT: https://github.com/webjars/webjars-locator-core/blob/master/LICENSE.md
File Path: /home/runner/.m2/repository/org/webjars/webjars-locator-core/0.59/webjars-locator-core-0.59.jar
MD5: 3138e5b870eddc24595a2c658fa1d648
SHA1: a25e04cb0437d88eb177af1dface14edcd0cd767
SHA256: 86e89c3504205ecfbc169cffcbc220bb2f4a68077acc5a95692d1129bf0e53fb
Referenced In Project/Scope: Tailormap API:compile
webjars-locator-core-0.59.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.tailormap/tailormap-api@12.6.3-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name webjars-locator-core High
Vendor jar package name webjars Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor pom artifactid webjars-locator-core Highest
Vendor pom artifactid webjars-locator-core Low
Vendor pom developer email james@jamesward.org Low
Vendor pom developer id jamesward Medium
Vendor pom developer name James Ward Medium
Vendor pom groupid org.webjars Highest
Vendor pom name webjars-locator-core High
Vendor pom url http://webjars.org Highest
Product file name webjars-locator-core High
Product jar package name webjars Highest
Product Manifest build-jdk-spec 1.8 Low
Product pom artifactid webjars-locator-core Highest
Product pom developer email james@jamesward.org Low
Product pom developer id jamesward Low
Product pom developer name James Ward Low
Product pom groupid org.webjars Highest
Product pom name webjars-locator-core High
Product pom url http://webjars.org Medium
Version file version 0.59 High
Version pom version 0.59 Highest
pkg:maven/org.webjars/webjars-locator-core@0.59
(Confidence :High)
xml-commons-resolver-1.2.jar
File Path: /home/runner/.m2/repository/org/apache/xml/xml-commons-resolver/1.2/xml-commons-resolver-1.2.jar
MD5: 706c533146c1f4ee46b66659ea14583a
SHA1: 3d0f97750b3a03e0971831566067754ba4bfd68c
SHA256: 47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1
Referenced In Project/Scope: Tailormap API:compile
xml-commons-resolver-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.geotools/gt-xml@34.3
Evidence
Type Source Name Value Confidence
Vendor file name xml-commons-resolver High
Vendor jar package name apache Highest
Vendor jar package name resolver Highest
Vendor jar package name xml Highest
Vendor manifest: org/apache/xml/resolver Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid xml-commons-resolver Highest
Vendor pom artifactid xml-commons-resolver Low
Vendor pom groupid org.apache.xml Highest
Product file name xml-commons-resolver High
Product jar package name apache Highest
Product jar package name catalog Highest
Product jar package name resolver Highest
Product jar package name xml Highest
Product manifest: org/apache/xml/resolver Implementation-Title org.apache.xml.resolver.Catalog Medium
Product pom artifactid xml-commons-resolver Highest
Product pom groupid org.apache.xml Highest
Version file version 1.2 High
Version manifest: org/apache/xml/resolver Implementation-Version 1.2 Medium
Version pom version 1.2 Highest
pkg:maven/org.apache.xml/xml-commons-resolver@1.2
(Confidence :High)