Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 5.2.4
Report Generated On: Mon, 13 Jan 2020 07:13:16 GMT
Dependencies Scanned: 20 (17 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2020-01-13T07:09:08
NVD CVE Modified: 2020-01-13T06:03:11
VersionCheckOn: 2020-01-08T23:07:54

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
jackson-databind-2.10.2.jar	cpe:2.3:a:fasterxml:jackson:2.10.2:::::::* cpe:2.3:a:fasterxml:jackson-databind:2.10.2:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.2	Highest	39
jackson-core-2.10.2.jar	cpe:2.3:a:fasterxml:jackson:2.10.2:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.2	Highest	45
snakeyaml-1.24.jar	cpe:2.3:a:snakeyaml_project:snakeyaml:1.24:::::::*	pkg:maven/org.yaml/snakeyaml@1.24	Highest	28
javase-3.4.0.jar		pkg:maven/com.google.zxing/javase@3.4.0		23
core-3.4.0.jar		pkg:maven/com.google.zxing/core@3.4.0		33
jcommander-1.72.jar		pkg:maven/com.beust/jcommander@1.72		23
jai-imageio-core-1.4.0.jar		pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0		36
commons-cli-1.4.jar		pkg:maven/commons-cli/commons-cli@1.4		40
jaxb-api-2.3.1.jar		pkg:maven/javax.xml.bind/jaxb-api@2.3.1		36
javax.activation-api-1.2.0.jar		pkg:maven/javax.activation/javax.activation-api@1.2.0		38
appassembler-booter-2.1.0.jar		pkg:maven/org.codehaus.mojo.appassembler/appassembler-booter@2.1.0		29
appassembler-model-2.1.0.jar		pkg:maven/org.codehaus.mojo.appassembler/appassembler-model@2.1.0		29
plexus-utils-3.2.0.jar	cpe:2.3:a:plexus-utils_project:plexus-utils:3.2.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@3.2.0	Highest	27
stax-utils-20060502.jar		pkg:maven/net.java.dev.stax-utils/stax-utils@20060502		13
stax-1.1.1-dev.jar		pkg:maven/stax/stax@1.1.1-dev		16
junit-3.8.1.jar		pkg:maven/junit/junit@3.8.1		21
stax-api-1.0.1.jar		pkg:maven/stax/stax-api@1.0.1		19

Dependencies

jackson-databind-2.10.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.10.2/jackson-databind-2.10.2.jar
MD5: 057751b4e2dd1104be8caad6e9a3e589
SHA1: 0528de95f198afafbcfb0c09d2e43b6e0ea663ec
SHA256:42c25644e35fadfbded1b7f35a8d1e70a86737f190e43aa2c56cea4b96cbda88
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	pom	name	jackson-databind	High
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	artifactid	jackson-databind	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Vendor	jar	package name	databind	Highest
Vendor	file	name	jackson-databind	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	jar	package name	jackson	Highest
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	Manifest	implementation-build-date	2020-01-05 02:13:45+0000	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	pom	name	jackson-databind	High
Product	pom	groupid	fasterxml.jackson.core	Low
Product	jar	package name	fasterxml	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Low
Product	jar	package name	databind	Highest
Product	file	name	jackson-databind	High
Product	pom	artifactid	jackson-databind	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	implementation-build-date	2020-01-05 02:13:45+0000	Low
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	Bundle-Name	jackson-databind	Medium
Version	Manifest	Bundle-Version	2.10.2	High
Version	pom	version	2.10.2	Highest
Version	file	version	2.10.2	Highest
Version	Manifest	Implementation-Version	2.10.2	High

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.2 (Confidence:High)
cpe:2.3:a:fasterxml:jackson:2.10.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-databind:2.10.2:*:*:*:*:*:*:* (Confidence:Highest)

jackson-core-2.10.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.10.2/jackson-core-2.10.2.jar
MD5: 5514a46e38331f8c8262ea63bf36483e
SHA1: 73d4322a6bda684f676a2b5fe918361c4e5c7cca
SHA256:4c41f22a48f6ebb28752baeb6d25bf09ba4ff0ad8bfb82650dde448928b9da4f
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-build-date	2020-01-05 02:05:12+0000	Low
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	jar	package name	json	Highest
Vendor	jar	package name	base	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Vendor	pom	artifactid	jackson-core	Low
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	pom	name	Jackson-core	High
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	jar	package name	core	Highest
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	file	name	jackson-core	High
Product	Manifest	implementation-build-date	2020-01-05 02:05:12+0000	Low
Product	pom	groupid	fasterxml.jackson.core	Low
Product	jar	package name	fasterxml	Highest
Product	jar	package name	json	Highest
Product	jar	package name	base	Highest
Product	jar	package name	version	Highest
Product	pom	parent-groupid	com.fasterxml.jackson	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	name	Jackson-core	High
Product	jar	package name	jackson	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	Manifest	specification-title	Jackson-core	Medium
Product	pom	url	FasterXML/jackson-core	High
Product	jar	package name	core	Highest
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	pom	artifactid	jackson-core	Highest
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	file	name	jackson-core	High
Product	Manifest	Implementation-Title	Jackson-core	High
Product	jar	package name	filter	Highest
Version	Manifest	Bundle-Version	2.10.2	High
Version	pom	version	2.10.2	Highest
Version	file	version	2.10.2	Highest
Version	Manifest	Implementation-Version	2.10.2	High

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.2 (Confidence:High)
cpe:2.3:a:fasterxml:jackson:2.10.2:*:*:*:*:*:*:* (Confidence:Highest)

snakeyaml-1.24.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/org/yaml/snakeyaml/1.24/snakeyaml-1.24.jar
MD5: 694248028b74151981bbb97c1e565843
SHA1: 13a9c0d6776483c3876e3ff9384f9bb55b17001b
SHA256:d3f7f09989d5b0ce5c4791818ef937ee7663f1e359c2ef2d312f938aad0763da
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	snakeyaml	Highest
Vendor	pom	groupid	yaml	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	emitter	Highest
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	pom	name	SnakeYAML	High
Vendor	pom	url	http://www.snakeyaml.org	Highest
Vendor	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Vendor	pom	groupid	org.yaml	Highest
Vendor	pom	artifactid	snakeyaml	Low
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	yaml	Highest
Vendor	file	name	snakeyaml	High
Product	jar	package name	snakeyaml	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	artifactid	snakeyaml	Highest
Product	jar	package name	emitter	Highest
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	pom	name	SnakeYAML	High
Product	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Product	pom	url	http://www.snakeyaml.org	Medium
Product	pom	groupid	yaml	Low
Product	jar	package name	parser	Highest
Product	jar	package name	yaml	Highest
Product	file	name	snakeyaml	High
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Version	pom	version	1.24	Highest
Version	file	version	1.24	Highest

Identifiers

pkg:maven/org.yaml/snakeyaml@1.24 (Confidence:High)
cpe:2.3:a:snakeyaml_project:snakeyaml:1.24:*:*:*:*:*:*:* (Confidence:Highest)

javase-3.4.0.jar

Description:

Java SE-specific extensions to core ZXing library

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/google/zxing/javase/3.4.0/javase-3.4.0.jar
MD5: fd431a1d523512b68c4642a2a5fed474
SHA1: 8be20100f28515037a31cc0bbe557501c0538147
SHA256:7aeef746a544effcd9e499214d9f315e69c3a835e7c81abfb703be79f859a6d7
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	javase	Low
Vendor	file	name	javase	High
Vendor	jar	package name	zxing	Highest
Vendor	pom	parent-artifactid	zxing-parent	Low
Vendor	jar	package name	google	Highest
Vendor	pom	groupid	google.zxing	Highest
Vendor	pom	name	ZXing Java SE extensions	High
Vendor	pom	groupid	com.google.zxing	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	parent-groupid	com.google.zxing	Medium
Vendor	Manifest	automatic-module-name	com.google.zxing.javase	Medium
Product	file	name	javase	High
Product	jar	package name	zxing	Highest
Product	pom	artifactid	javase	Highest
Product	jar	package name	google	Highest
Product	pom	groupid	google.zxing	Low
Product	pom	name	ZXing Java SE extensions	High
Product	pom	parent-groupid	com.google.zxing	Low
Product	pom	parent-artifactid	zxing-parent	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	automatic-module-name	com.google.zxing.javase	Medium
Version	pom	version	3.4.0	Highest
Version	file	version	3.4.0	Highest

Identifiers

pkg:maven/com.google.zxing/javase@3.4.0 (Confidence:High)

core-3.4.0.jar

Description:

Core barcode encoding/decoding library

License:

"The Apache Software License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/google/zxing/core/3.4.0/core-3.4.0.jar
MD5: 8542da29497cf33e80d7630e62d58a81
SHA1: 5264296c46634347890ec9250bc65f14b7362bf8
SHA256:65004806a669234c698fbe0755258100375fb01fe93b538455f3903713d4a50d
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	core	High
Vendor	Manifest	bundle-developers	zxing-authors;name="ZXing Authors"	Low
Vendor	pom	groupid	google.zxing	Highest
Vendor	pom	name	ZXing Core	High
Vendor	pom	groupid	com.google.zxing	Highest
Vendor	pom	parent-groupid	com.google.zxing	Medium
Vendor	pom	artifactid	core	Low
Vendor	jar	package name	zxing	Highest
Vendor	pom	parent-artifactid	zxing-parent	Low
Vendor	Manifest	automatic-module-name	com.google.zxing	Medium
Vendor	Manifest	bundle-symbolicname	com.google.zxing.core	Medium
Vendor	jar	package name	google	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/zxing/zxing/core	Low
Product	file	name	core	High
Product	Manifest	bundle-developers	zxing-authors;name="ZXing Authors"	Low
Product	pom	name	ZXing Core	High
Product	pom	artifactid	core	Highest
Product	jar	package name	zxing	Highest
Product	Manifest	automatic-module-name	com.google.zxing	Medium
Product	Manifest	bundle-symbolicname	com.google.zxing.core	Medium
Product	Manifest	Bundle-Name	ZXing Core	Medium
Product	jar	package name	google	Highest
Product	pom	groupid	google.zxing	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	com.google.zxing	Low
Product	pom	parent-artifactid	zxing-parent	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/zxing/zxing/core	Low
Version	Manifest	Bundle-Version	3.4.0	High
Version	pom	version	3.4.0	Highest
Version	file	version	3.4.0	Highest

Identifiers

pkg:maven/com.google.zxing/core@3.4.0 (Confidence:High)

jcommander-1.72.jar

Description:

Command line parsing

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/beust/jcommander/1.72/jcommander-1.72.jar
MD5: 9fde6bc0ba1032eceb7267fd1ad1657b
SHA1: 6375e521c1e11d6563d4f25a07ce124ccf8cd171
SHA256:e0de160b129b2414087e01fe845609cd55caec6820cfd4d0c90fabcc7bdb8c1e
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	beust	Highest
Vendor	pom	artifactid	jcommander	Low
Vendor	pom	groupid	com.beust	Highest
Vendor	pom	name	jcommander	High
Vendor	pom	url	http://jcommander.org	Highest
Vendor	file	name	jcommander	High
Vendor	Manifest	build-date	2017-05-15	Low
Vendor	jar	package name	jcommander	Highest
Vendor	jar	package name	beust	Highest
Vendor	Manifest	bundle-symbolicname	jcommander	Medium
Product	pom	artifactid	jcommander	Highest
Product	pom	url	http://jcommander.org	Medium
Product	Manifest	Bundle-Name	com.beust.jcommander	Medium
Product	pom	groupid	beust	Low
Product	pom	name	jcommander	High
Product	file	name	jcommander	High
Product	Manifest	build-date	2017-05-15	Low
Product	jar	package name	jcommander	Highest
Product	jar	package name	beust	Highest
Product	Manifest	bundle-symbolicname	jcommander	Medium
Version	Manifest	Bundle-Version	1.72	High
Version	file	version	1.72	Highest
Version	pom	version	1.72	Highest

Identifiers

pkg:maven/com.beust/jcommander@1.72 (Confidence:High)

jai-imageio-core-1.4.0.jar

Description:

    Java Advanced Imaging Image I/O Tools API core, but without the classes 
    involved with javax.media.jai dependencies, JPEG2000 or 
    codecLibJIIO, meaning that this library can be distributed under the 
    modified BSD license and should be GPL compatible.

License:

BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/com/github/jai-imageio/jai-imageio-core/1.4.0/jai-imageio-core-1.4.0.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope:random-barcode:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	extension-name	com.github.jai-imageio-jai-imageio-core	Medium
Vendor	pom	artifactid	jai-imageio-core	Low
Vendor	pom	url	jai-imageio/jai-imageio-core	Highest
Vendor	Manifest	bundle-symbolicname	jai-imageio-core	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	url	https://github.com/jai-imageio/jai-imageio-core	Low
Vendor	Manifest	specification-vendor	Sun Microsystems, Inc.	Low
Vendor	pom	groupid	com.github.jai-imageio	Highest
Vendor	file	name	jai-imageio-core	High
Vendor	Manifest	bundle-docurl	https://github.com/jai-imageio/	Low
Vendor	Manifest	Implementation-Vendor	https://github.com/jai-imageio/ jai-imageio GitHub group	High
Vendor	pom	name	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Vendor	pom	organization url	jai-imageio/	Medium
Vendor	pom	organization name	jai-imageio GitHub group	High
Vendor	pom	groupid	github.jai-imageio	Highest
Vendor	jar	package name	github	Highest
Product	Manifest	extension-name	com.github.jai-imageio-jai-imageio-core	Medium
Product	Manifest	Implementation-Title	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Product	Manifest	Bundle-Name	Java Advanced Imaging Image I/O Tools API core (standalone)	Medium
Product	pom	artifactid	jai-imageio-core	Highest
Product	Manifest	bundle-symbolicname	jai-imageio-core	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	url	https://github.com/jai-imageio/jai-imageio-core	Low
Product	pom	groupid	github.jai-imageio	Low
Product	file	name	jai-imageio-core	High
Product	Manifest	bundle-docurl	https://github.com/jai-imageio/	Low
Product	pom	name	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Product	Manifest	specification-title	Java Advanced Imaging	Medium
Product	pom	url	jai-imageio/	High
Product	pom	organization name	jai-imageio GitHub group	Low
Product	pom	url	jai-imageio/jai-imageio-core	High
Product	jar	package name	github	Highest
Version	Manifest	Implementation-Version	1.4.0	High
Version	Manifest	Bundle-Version	1.4.0	High
Version	pom	version	1.4.0	Highest
Version	file	version	1.4.0	Highest

Identifiers

pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

commons-cli-1.4.jar

Description:

    Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/commons-cli/commons-cli/1.4/commons-cli-1.4.jar
MD5: c966d7e03507c834d5b09b848560174e
SHA1: c51c00206bb913cd8612b24abd9fa98ae89719b1
SHA256:fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	artifactid	commons-cli	Low
Vendor	Manifest	implementation-build	tags/cli-1.4-RC1@r1786159; 2017-03-09 13:01:35+0000	Low
Vendor	jar	package name	commons	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	file	name	commons-cli	High
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-cli/	Low
Vendor	jar	package name	cli	Highest
Vendor	pom	url	http://commons.apache.org/proper/commons-cli/	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.cli	Medium
Vendor	pom	groupid	commons-cli	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-cli/	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	name	Apache Commons CLI	High
Product	Manifest	implementation-build	tags/cli-1.4-RC1@r1786159; 2017-03-09 13:01:35+0000	Low
Product	pom	artifactid	commons-cli	Highest
Product	jar	package name	commons	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Product	Manifest	Implementation-Title	Apache Commons CLI	High
Product	file	name	commons-cli	High
Product	Manifest	Bundle-Name	Apache Commons CLI	Medium
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-cli/	Low
Product	Manifest	specification-title	Apache Commons CLI	Medium
Product	pom	url	http://commons.apache.org/proper/commons-cli/	Medium
Product	pom	parent-groupid	org.apache.commons	Low
Product	jar	package name	cli	Highest
Product	pom	groupid	commons-cli	Low
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.cli	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-cli/	Low
Product	jar	package name	apache	Highest
Product	pom	name	Apache Commons CLI	High
Version	Manifest	Implementation-Version	1.4	High
Version	pom	parent-version	1.4	Low
Version	file	version	1.4	Highest
Version	pom	version	1.4	Highest

Identifiers

pkg:maven/commons-cli/commons-cli@1.4 (Confidence:High)

jaxb-api-2.3.1.jar

Description:

JAXB (JSR 222) API

License:

https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1

File Path: /builds/sw4j-org/random-barcode/.m2/repository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar
MD5: bcf270d320f645ad19f5edb60091e87f
SHA1: 8531ad5ac454cc2deb9d4d32c40c4d7451939b5d
SHA256:88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	pom	parent-artifactid	jaxb-api-parent	Low
Vendor	file	name	jaxb-api	High
Vendor	jar	package name	bind	Highest
Vendor	Manifest	extension-name	javax.xml.bind	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Vendor	jar	package name	xml	Highest
Vendor	Manifest	bundle-symbolicname	jaxb-api	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	jar	package name	javax	Highest
Vendor	pom	artifactid	jaxb-api	Low
Vendor	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Vendor	pom	groupid	javax.xml.bind	Highest
Vendor	jar	package name	jaxb	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	file	name	jaxb-api	High
Product	jar	package name	bind	Highest
Product	Manifest	extension-name	javax.xml.bind	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Product	jar	package name	xml	Highest
Product	Manifest	bundle-symbolicname	jaxb-api	Medium
Product	pom	artifactid	jaxb-api	Highest
Product	Manifest	specification-title	jaxb-api	Medium
Product	jar	package name	javax	Highest
Product	pom	groupid	javax.xml.bind	Low
Product	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Product	pom	parent-artifactid	jaxb-api-parent	Medium
Product	Manifest	Bundle-Name	jaxb-api	Medium
Product	jar	package name	jaxb	Highest
Version	file	version	2.3.1	Highest
Version	pom	version	2.3.1	Highest
Version	Manifest	Bundle-Version	2.3.1	High

Identifiers

pkg:maven/javax.xml.bind/jaxb-api@2.3.1 (Confidence:High)

javax.activation-api-1.2.0.jar

Description:

JavaBeans Activation Framework API jar

License:

https://github.com/javaee/activation/blob/master/LICENSE.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar
MD5: 5e50e56bcf4a3ef3bc758f69f7643c3b
SHA1: 85262acf3ca9816f9537ca47d5adeabaead7cb16
SHA256:43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	pom	artifactid	javax.activation-api	Low
Vendor	pom	groupid	javax.activation	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	pom	parent-artifactid	all	Low
Vendor	file	name	javax.activation-api	High
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	jar	package name	javax	Highest
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	jar	package name	activation	Highest
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	Manifest	automatic-module-name	java.activation	Medium
Vendor	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Vendor	pom	name	JavaBeans Activation Framework API jar	High
Vendor	Manifest	extension-name	javax.activation	Medium
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	Manifest	bundle-symbolicname	javax.activation-api	Medium
Product	Manifest	specification-title	javax.activation.javax.activation-api	Medium
Product	pom	groupid	javax.activation	Low
Product	Manifest	Bundle-Name	JavaBeans Activation Framework API jar	Medium
Product	file	name	javax.activation-api	High
Product	jar	package name	javax	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Implementation-Title	javax.activation.javax.activation-api	High
Product	jar	package name	activation	Highest
Product	pom	parent-groupid	com.sun.activation	Low
Product	Manifest	automatic-module-name	java.activation	Medium
Product	pom	artifactid	javax.activation-api	Highest
Product	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Product	pom	name	JavaBeans Activation Framework API jar	High
Product	Manifest	extension-name	javax.activation	Medium
Product	pom	parent-artifactid	all	Medium
Product	Manifest	bundle-symbolicname	javax.activation-api	Medium
Version	Manifest	Implementation-Version	1.2.0	High
Version	file	version	1.2.0	Highest
Version	Manifest	Bundle-Version	1.2.0	High
Version	pom	version	1.2.0	Highest

Identifiers

pkg:maven/javax.activation/javax.activation-api@1.2.0 (Confidence:High)

appassembler-booter-2.1.0.jar

File Path: /builds/sw4j-org/random-barcode/.m2/repository/org/codehaus/mojo/appassembler/appassembler-booter/2.1.0/appassembler-booter-2.1.0.jar
MD5: a50bd3b93d4bc916e4173bc10e3c8872
SHA1: 62087a05eb37f909ba356193346408469e0fe914
SHA256:48ddb7d716ebef0577eb9f6110a1e2178695509fd139367ea4dd756807e28019
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	mojo	Low
Vendor	jar	package name	appassembler	Highest
Vendor	pom	name	Appassembler :: Generic Bootstrapper	High
Vendor	jar	package name	codehaus	Highest
Vendor	pom	groupid	codehaus.mojo.appassembler	Highest
Vendor	jar	package name	appassembler	Low
Vendor	jar	package name	mojo	Highest
Vendor	pom	groupid	org.codehaus.mojo.appassembler	Highest
Vendor	jar	package name	booter	Highest
Vendor	jar	package name	codehaus	Low
Vendor	pom	artifactid	appassembler-booter	Low
Vendor	pom	parent-groupid	org.codehaus.mojo.appassembler	Medium
Vendor	file	name	appassembler-booter	High
Vendor	pom	parent-artifactid	appassembler	Low
Product	jar	package name	mojo	Low
Product	jar	package name	appassembler	Highest
Product	pom	name	Appassembler :: Generic Bootstrapper	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	booter	Low
Product	pom	parent-artifactid	appassembler	Medium
Product	jar	package name	appassembler	Low
Product	pom	artifactid	appassembler-booter	Highest
Product	jar	package name	mojo	Highest
Product	pom	groupid	codehaus.mojo.appassembler	Low
Product	jar	package name	booter	Highest
Product	pom	parent-groupid	org.codehaus.mojo.appassembler	Low
Product	file	name	appassembler-booter	High
Version	pom	version	2.1.0	Highest
Version	file	version	2.1.0	Highest

Identifiers

pkg:maven/org.codehaus.mojo.appassembler/appassembler-booter@2.1.0 (Confidence:High)

appassembler-model-2.1.0.jar

File Path: /builds/sw4j-org/random-barcode/.m2/repository/org/codehaus/mojo/appassembler/appassembler-model/2.1.0/appassembler-model-2.1.0.jar
MD5: 5c6602981d0cb410aab72c443932e80c
SHA1: eae3ed501b21e5e306332b7ac6ffbc61ecf7ef50
SHA256:6a772e02707b867b23475e7e939017503f12e4d23bc021e8edc461512e5ff3e9
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	mojo	Low
Vendor	jar	package name	appassembler	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	pom	groupid	codehaus.mojo.appassembler	Highest
Vendor	jar	package name	model	Highest
Vendor	jar	package name	appassembler	Low
Vendor	jar	package name	mojo	Highest
Vendor	pom	groupid	org.codehaus.mojo.appassembler	Highest
Vendor	file	name	appassembler-model	High
Vendor	pom	name	Appassembler :: Model	High
Vendor	jar	package name	codehaus	Low
Vendor	pom	parent-groupid	org.codehaus.mojo.appassembler	Medium
Vendor	pom	parent-artifactid	appassembler	Low
Vendor	pom	artifactid	appassembler-model	Low
Product	jar	package name	mojo	Low
Product	jar	package name	appassembler	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	model	Highest
Product	pom	parent-artifactid	appassembler	Medium
Product	jar	package name	appassembler	Low
Product	pom	artifactid	appassembler-model	Highest
Product	jar	package name	mojo	Highest
Product	file	name	appassembler-model	High
Product	pom	groupid	codehaus.mojo.appassembler	Low
Product	jar	package name	model	Low
Product	pom	name	Appassembler :: Model	High
Product	pom	parent-groupid	org.codehaus.mojo.appassembler	Low
Version	pom	version	2.1.0	Highest
Version	file	version	2.1.0	Highest

Identifiers

pkg:maven/org.codehaus.mojo.appassembler/appassembler-model@2.1.0 (Confidence:High)

plexus-utils-3.2.0.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.

File Path: /builds/sw4j-org/random-barcode/.m2/repository/org/codehaus/plexus/plexus-utils/3.2.0/plexus-utils-3.2.0.jar
MD5: 00766f1f57572a8cd54992804733aa0d
SHA1: d69e11d69dfce0c964587ab97b559187b3c27a6f
SHA256:0b91029df4c216b8824bd95361f52e260e86ccf93a2619fd88c8f15d23dcb30d
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-utils	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	parent-groupid	org.codehaus.plexus	Medium
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	xml	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	artifactid	plexus-utils	Low
Vendor	jar	package name	plexus	Low
Vendor	pom	groupid	codehaus.plexus	Highest
Vendor	jar	package name	codehaus	Low
Vendor	jar	package name	util	Low
Product	pom	parent-groupid	org.codehaus.plexus	Low
Product	pom	parent-artifactid	plexus	Medium
Product	file	name	plexus-utils	High
Product	pom	groupid	codehaus.plexus	Low
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Low
Product	pom	artifactid	plexus-utils	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	util	Low
Product	jar	package name	xml	Highest
Product	pom	name	Plexus Common Utilities	High
Version	pom	version	3.2.0	Highest
Version	pom	parent-version	3.2.0	Low
Version	file	version	3.2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@3.2.0 (Confidence:High)
cpe:2.3:a:plexus-utils_project:plexus-utils:3.2.0:*:*:*:*:*:*:* (Confidence:Highest)

stax-utils-20060502.jar

License:

BSD: https://stax-utils.dev.java.net/source/browse/*checkout*/stax-utils/LICENSE

File Path: /builds/sw4j-org/random-barcode/.m2/repository/net/java/dev/stax-utils/stax-utils/20060502/stax-utils-20060502.jar
MD5: 6af71b7f47537a53c5adf70423a8fbfc
SHA1: 66fad5029732305ab7863c140eafd9de4972dd34
SHA256:ecafb82b24e0960a2ca360a91101c49d59ecd6b597a05e6150e0d2697b3547af
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	stax-utils	Low
Vendor	pom	url	http://stax-utils.dev.java.net/	Highest
Vendor	jar	package name	javanet	Low
Vendor	pom	groupid	net.java.dev.stax-utils	Highest
Vendor	file	name	stax-utils-20060502	High
Vendor	jar	package name	staxutils	Low
Product	pom	url	http://stax-utils.dev.java.net/	Medium
Product	pom	artifactid	stax-utils	Highest
Product	pom	groupid	net.java.dev.stax-utils	Low
Product	file	name	stax-utils-20060502	High
Product	jar	package name	staxutils	Low
Version	file	version	20060502	Medium
Version	pom	version	20060502	Highest

Identifiers

pkg:maven/net.java.dev.stax-utils/stax-utils@20060502 (Confidence:High)

stax-1.1.1-dev.jar

Description:

StAX is the reference implementation of the StAX API

File Path: /builds/sw4j-org/random-barcode/.m2/repository/stax/stax/1.1.1-dev/stax-1.1.1-dev.jar
MD5: 587a06aa4afd368cc6e692d388e933ca
SHA1: 56a9316906196fa8a35d81b2afcbe0fe072aeb23
SHA256:3b01f2d35ab7eecb4442bae69fb09879ecee1ba44d1e925c8f77557c622f50d0
Referenced In Project/Scope:random-barcode:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	StAX	High
Vendor	file	name	stax	High
Vendor	pom	artifactid	stax	Low
Vendor	jar	package name	bea	Highest
Vendor	Manifest	Implementation-Vendor	BEA	High
Vendor	Manifest	specification-vendor	JCP-173	Low
Vendor	pom	groupid	stax	Highest
Vendor	pom	url	http://stax.codehaus.org/	Highest
Product	Manifest	Implementation-Title	StAX reference implementation	High
Product	pom	name	StAX	High
Product	file	name	stax	High
Product	pom	url	http://stax.codehaus.org/	Medium
Product	Manifest	specification-title	StAX	Medium
Product	pom	groupid	stax	Low
Product	pom	artifactid	stax	Highest
Version	pom	version	1.1.1-dev	Highest

Identifiers

pkg:maven/stax/stax@1.1.1-dev (Confidence:High)

junit-3.8.1.jar

Description:

    JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.

License:

Common Public License Version 1.0: http://www.opensource.org/licenses/cpl1.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/junit/junit/3.8.1/junit-3.8.1.jar
MD5: 1f40fb782a4f2cf78f161d32670f7a3a
SHA1: 99129f16442844f6a4a11ae22fbbee40b14d774f
SHA256:b58e459509e190bed737f3592bc1950485322846cf10e78ded1d065153012d70
Referenced In Project/Scope:random-barcode:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	junit	Highest
Vendor	pom	url	http://junit.org	Highest
Vendor	file	name	junit	High
Vendor	pom	organization url	http://www.junit.org	Medium
Vendor	pom	name	JUnit	High
Vendor	jar	package name	junit	Low
Vendor	pom	organization name	JUnit	High
Vendor	jar	package name	framework	Highest
Vendor	pom	artifactid	junit	Low
Vendor	pom	groupid	junit	Highest
Product	jar	package name	junit	Highest
Product	pom	artifactid	junit	Highest
Product	pom	organization name	JUnit	Low
Product	file	name	junit	High
Product	pom	organization url	http://www.junit.org	Low
Product	pom	name	JUnit	High
Product	pom	url	http://junit.org	Medium
Product	pom	groupid	junit	Low
Product	jar	package name	framework	Highest
Version	file	version	3.8.1	Highest
Version	pom	version	3.8.1	Highest

Identifiers

pkg:maven/junit/junit@3.8.1 (Confidence:High)

stax-api-1.0.1.jar

Description:

StAX API is the standard java XML processing API defined by JSR-173

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/sw4j-org/random-barcode/.m2/repository/stax/stax-api/1.0.1/stax-api-1.0.1.jar
MD5: 7d436a53c64490bee564c576babb36b4
SHA1: 49c100caf72d658aca8e58bd74a4ba90fa2b0d70
SHA256:d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e
Referenced In Project/Scope:random-barcode:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	JCP	High
Vendor	pom	artifactid	stax-api	Low
Vendor	file	name	stax-api	High
Vendor	jar	package name	xml	Highest
Vendor	pom	name	StAX API	High
Vendor	Manifest	specification-vendor	JCP-173	Low
Vendor	pom	groupid	stax	Highest
Vendor	pom	url	http://stax.codehaus.org/	Highest
Product	pom	artifactid	stax-api	Highest
Product	pom	url	http://stax.codehaus.org/	Medium
Product	file	name	stax-api	High
Product	Manifest	specification-title	StAX	Medium
Product	jar	package name	xml	Highest
Product	Manifest	Implementation-Title	StAX 1.0 API	High
Product	pom	name	StAX API	High
Product	pom	groupid	stax	Low
Version	file	version	1.0.1	Highest
Version	pom	version	1.0.1	Highest
Version	Manifest	Implementation-Version	1.0.1	High

Identifiers

pkg:maven/stax/stax-api@1.0.1 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: random-barcode

org.sw4j.tool:random-barcode:0.1.0-SNAPSHOT

Summary

Dependencies

jackson-databind-2.10.2.jar

Evidence

Related Dependencies

Identifiers

jackson-core-2.10.2.jar

Evidence

Related Dependencies

Identifiers

snakeyaml-1.24.jar

Evidence

Identifiers

javase-3.4.0.jar

Evidence

Identifiers

core-3.4.0.jar

Evidence

Identifiers

jcommander-1.72.jar

Evidence

Identifiers

jai-imageio-core-1.4.0.jar

Evidence

Identifiers

commons-cli-1.4.jar

Evidence

Identifiers

jaxb-api-2.3.1.jar

Evidence

Identifiers

javax.activation-api-1.2.0.jar

Evidence

Identifiers

appassembler-booter-2.1.0.jar

Evidence

Identifiers

appassembler-model-2.1.0.jar

Evidence

Identifiers

plexus-utils-3.2.0.jar

Evidence

Identifiers

stax-utils-20060502.jar

Evidence

Identifiers

stax-1.1.1-dev.jar

Evidence

Identifiers

junit-3.8.1.jar

Evidence

Identifiers

stax-api-1.0.1.jar

Evidence

Identifiers