4.0.0 org.owasp dependency-check-parent 11.1.0 pom utils core cli ant maven archetype Dependency-Check https://github.com/jeremylong/DependencyCheck.git dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities. 2012 OWASP https://www.owasp.org Jeremy Long jeremy.long@owasp.org OWASP https://www.owasp.org/ architect developer Steve Springett Steve.Springett@owasp.org OWASP https://www.owasp.org/ developer Will Stranathan Will.Stranathan@owasp.org OWASP https://www.owasp.org/ developer Dale Visser dvisser@ida.org Institute for Defense Analyses https://www.ida.org/ developer Hugo Costa OWASP https://www.owasp.org/ logo design scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck scm:git:https://github.com/jeremylong/DependencyCheck.git v11.1.0 github https://github.com/jeremylong/DependencyCheck/issues github-actions https://github.com/jeremylong/DependencyCheck/actions The Apache Software License, Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt 11 2024-10-30T09:37:46Z UTF-8 UTF-8 github 9.12.0 1.10.15 1.7.36 1.2.11 3.6.3 3.6.0 9.3 2.0.0 3.1.0 3.8.1 3.10.1 2.5 3.8.0 3.5.1 0.8.12 4.8.6 4.8.6.5 3.2.1 2.17.1 26.0.1 2.3.232 1.9.0 2.17.0 3.17.0 1.12.0 5.4 3.2.1 1.2.3 4.13.2 3.0 5.12.0 1.18.1 1.27.1 3.1.0 3.3.0 3.15.1 4.0.0 2.4.1 1.4 3.3.0 1.1.4 0.13.1 2.4.21 4.0.1 3.0.4 2.18.1 jacoco reuseReports ${project.basedir}/target/jacoco-results/jacoco.xml java ossrh https://oss.sonatype.org/content/repositories/snapshots ossrh https://oss.sonatype.org/service/local/staging/deploy/maven2/ gh-pages gh-pages https://jeremylong.github.io/DependencyCheck/ clean install org.jsonschema2pojo jsonschema2pojo-maven-plugin 1.2.2 org.codehaus.mojo appassembler-maven-plugin 2.1.0 org.jacoco jacoco-maven-plugin ${jacoco-maven-plugin.version} org.apache.maven.plugins maven-assembly-plugin 3.7.1 org.apache.maven.plugins maven-clean-plugin 3.4.0 org.apache.maven.plugins maven-compiler-plugin 3.13.0 org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-artifact-plugin 3.5.2 org.apache.maven.plugins maven-enforcer-plugin 3.5.0 org.apache.maven.plugins maven-deploy-plugin 3.1.3 org.apache.maven.plugins maven-failsafe-plugin 3.5.1 org.apache.maven.plugins maven-gpg-plugin 3.2.7 org.apache.maven.plugins maven-install-plugin 3.1.3 org.apache.maven.plugins maven-jar-plugin 3.4.2 org.apache.maven.plugins maven-release-plugin 3.1.1 org.sonatype.plugins nexus-staging-maven-plugin 1.6.13 org.apache.maven.plugins maven-resources-plugin 3.3.1 org.owasp.maven-tools velocity-whitespace-resource-filter 2.0.0 org.apache.maven.plugins maven-site-plugin 3.21.0 org.apache.maven.plugins maven-surefire-plugin 3.5.1 org.apache.maven.plugins maven-antrun-plugin 3.1.0 org.apache.maven.plugins maven-source-plugin 3.3.1 org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} implNote a Implementation Note: org.apache.maven.plugins maven-checkstyle-plugin ${reporting.checkstyle-plugin.version} com.puppycrawl.tools checkstyle ${reporting.checkstyle.tool.version} org.apache.maven.plugins maven-invoker-plugin 3.8.1 org.codehaus.groovy groovy-all ${groovy-all.version} org.codehaus.gmavenplus gmavenplus-plugin ${gmavenplus-plugin.version} org.codehaus.groovy groovy-all ${groovy-all.version} runtime org.codehaus.gmavenplus gmavenplus-plugin org.codehaus.groovy groovy-all ${groovy-all.version} runtime add-dynamic-properties-clean pre-clean execute add-dynamic-properties-init initialize execute add-dynamic-properties-site pre-site execute org.apache.maven.plugins maven-compiler-plugin true -Xlint org.apache.maven.plugins maven-jar-plugin true **/checkstyle* pl.project13.maven git-commit-id-plugin 4.9.10 git-info revision initialize false yyyy-MM-dd'T'HH:mm:ss'Z' Zulu true true full git.build.time git.build.user.* git.build.host git.commit.user.* git.tags git.total.commit.count org.apache.maven.plugins maven-artifact-plugin 3.5.2 buildinfo verify ${git.commit.time} true org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} false Copyright© 2012-21 Jeremy Long. All Rights Reserved. **/generated-sources/**/*.java false org.apache.maven.plugins maven-enforcer-plugin org.owasp.maven.enforcer class-file-format-rule 2.0.0 true enforce-java enforce 1.8.0 enforce-classfileformat 55 enforce enforce-maven-3 enforce [3.1,] true org.jacoco jacoco-maven-plugin pre-unit-test prepare-agent ${project.basedir}/target/jacoco.exec surefireArgLine true pre-integration-test pre-integration-test prepare-agent ${project.basedir}/target/jacoco.exec failsafeArgLine true pre-invoker-test pre-integration-test prepare-agent ${project.basedir}/target/jacoco.exec invoker.mavenOpts true default-report report ${project.basedir}/target/jacoco.exec ${project.basedir}/target/jacoco-results/ org.apache.maven.plugins maven-surefire-plugin @{surefireArgLine} -Dfile.encoding=UTF-8 ${project.build.directory}/data ${project.build.directory}/temp ${odc.dotnet.path} org.apache.maven.plugins maven-failsafe-plugin @{failsafeArgLine} ${project.build.directory}/data ${project.build.directory}/temp ${odc.dotnet.path} **/*MySqlIT.java integration-test verify org.sonarsource.scanner.maven sonar-maven-plugin 4.0.0.4121 org.apache.maven.plugins maven-resources-plugin site-filtering-hack pre-site copy-resources false ${project.build.directory}/site/ src/main/site-resources/ true UTF-8 org.apache.maven.plugins maven-site-plugin org.apache.maven.doxia doxia-module-markdown ${doxia-module-markdown.version} true false org.apache.maven.plugins maven-antrun-plugin ${maven-antrun-plugin.version} copy-xsd compile run org.apache.maven.plugins maven-release-plugin build: v@{project.version} -Dmaven.javadoc.skip=true -DskipTests -DskipITs true false org.sonatype.plugins nexus-staging-maven-plugin true ossrh https://oss.sonatype.org/ true 120 org.apache.maven.plugins maven-checkstyle-plugin ${reporting.checkstyle-plugin.version} false verify checkstyle-aggregate ${project.build.directory}/checkstyle-result.sarif sarif false false **/HelpMojo.java ${project.basedir}/src/main/config/checkstyle-checks.xml ${project.basedir}/src/main/config/checkstyle-header.txt ${project.basedir}/src/main/config/checkstyle-suppressions.xml checkstyle.suppressions.file com.github.spotbugs spotbugs-maven-plugin ${spotbugs.maven.plugin.version} verify spotbugs true ${odc.config}/spotbugs_excludes.xml org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} default javadoc false Copyright© 2012-24 Jeremy Long. All Rights Reserved. **/generated-sources/**/*.java false org.apache.maven.plugins maven-jxr-plugin ${maven-jxr-plugin.version} org.apache.maven.plugins maven-checkstyle-plugin ${reporting.checkstyle-plugin.version} false false **/HelpMojo.java ${odc.config}/checkstyle-checks.xml ${odc.config}/checkstyle-header.txt ${odc.config}/checkstyle-suppressions.xml checkstyle.suppressions.file org.apache.maven.plugins maven-project-info-reports-plugin ${maven-project-info-reports-plugin.version} summary issue-management modules team scm ci-management licenses org.apache.maven.plugins maven-surefire-report-plugin ${maven-surefire-report-plugin.version} report-only failsafe-report-only org.jacoco jacoco-maven-plugin ${jacoco-maven-plugin.version} ${project.basedir}/target/jacoco.exec report com.github.spotbugs spotbugs-maven-plugin ${spotbugs.maven.plugin.version} ${odc.config}/spotbugs_excludes.xml org.codehaus.mojo taglist-maven-plugin ${taglist-maven-plugin.version} Todo Work todo ignoreCase FIXME exact org.codehaus.mojo versions-maven-plugin ${versions-maven-plugin.version} dependency-updates-report plugin-updates-report io.github.jeremylong open-vulnerability-clients 7.0.1 org.anarres.jdiagnostics jdiagnostics 1.0.7 org.mock-server mockserver-netty 5.15.0 test org.mock-server mockserver-junit-rule 5.15.0 test org.mockito mockito-core ${mockito-core.version} test org.apache.commons commons-jcs3-core ${commons-jcs-core.version} org.apache.httpcomponents.client5 httpclient5 ${httpcomponents.version} io.github.jeremylong jcs3-slf4j 1.0.5 commons-validator commons-validator 1.9.0 org.apache.commons commons-dbcp2 2.12.0 com.github.package-url packageurl-java 1.5.0 us.springett cpe-parser 2.1.0 com.github.spotbugs spotbugs-annotations ${spotbugs.version} compile true org.whitesource pecoff4j 0.0.2.1 org.semver4j semver4j 5.4.1 org.jetbrains annotations ${jetbrains.annotations.version} com.h2database h2 ${com.h2database.version} commons-cli commons-cli ${commons-cli.version} commons-beanutils commons-beanutils 1.9.4 org.codehaus.plexus plexus-utils 4.0.2 org.codehaus.plexus plexus-xml 3.0.1 com.fasterxml.jackson jackson-bom ${jackson.version} pom import com.fasterxml.jackson.datatype jackson-datatype-jsr310 ${jackson.version} commons-io commons-io ${commons-io.version} org.apache.commons commons-lang3 ${commons-lang3.version} org.apache.commons commons-text ${commons-text.version} ch.qos.logback logback-core ${logback.version} ch.qos.logback logback-classic ${logback.version} junit junit ${junit.version} org.hamcrest hamcrest-core test org.apache.commons commons-compress ${commons-compress.version} org.apache.ant ant ${apache.ant.version} com.sun tools org.apache.ant ant-testutil ${apache.ant.version} com.sun tools org.apache.lucene lucene-analysis-common ${apache.lucene.version} org.apache.lucene lucene-core ${apache.lucene.version} org.apache.lucene lucene-queryparser ${apache.lucene.version} org.apache.lucene lucene-test-framework ${apache.lucene.version} commons-codec commons-codec 1.17.1 com.h3xstream.retirejs retirejs-core ${com.h3xstream.retirejs.core.version} org.apache.maven maven-core ${maven.api.version} org.apache.maven.shared maven-shared-utils 3.4.2 org.apache.maven maven-plugin-api ${maven.api.version} org.apache.maven.shared file-management ${org.apache.maven.shared.file-management.version} org.apache.maven maven-settings ${maven.api.version} org.apache.maven maven-model ${maven.api.version} provided org.apache.maven maven-artifact ${maven.api.version} provided org.apache.maven.plugin-testing maven-plugin-testing-harness ${maven-plugin-testing-harness.version} org.apache.maven.plugin-tools maven-plugin-annotations ${maven-plugin-annotations.version} provided org.apache.maven.reporting maven-reporting-api ${maven-reporting-api.version} org.apache.commons commons-collections4 4.4 org.apache.velocity velocity-engine-core ${org.apache.velocity.version} org.sonatype.plexus plexus-sec-dispatcher ${plexus-sec-dispatcher.version} org.apache.maven.shared maven-dependency-tree ${maven-dependency-tree.version} org.glassfish javax.json ${org.glassfish.javax.json.version} org.hamcrest hamcrest ${hamcrest.version} test org.jsoup jsoup ${jsoup.version} org.slf4j slf4j-api ${slf4j.version} org.slf4j slf4j-simple ${slf4j.version} org.apache.maven.shared maven-artifact-transfer ${maven-artifact-transfer.version} org.sonatype.ossindex ossindex-service-client 1.8.2 org.apache.httpcomponents httpclient org.apache.httpcomponents httpcore com.google.guava guava org.slf4j jcl-over-slf4j com.google.guava guava 33.3.1-jre com.hankcs aho-corasick-double-array-trie ${aho-corasick-double-array-trie.version} org.eclipse.packager packager-rpm 0.21.0 org.bouncycastle bcprov-jdk15on org.bouncycastle bcpg-jdk15on junit junit test org.hamcrest hamcrest test org.jetbrains annotations compile true com.github.spotbugs spotbugs-annotations compile true release false org.apache.maven.plugins maven-gpg-plugin 3.2.7 sign-artifacts verify sign --pinentry-mode loopback