Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.1
Report Generated On: Wed, 30 Apr 2025 15:11:46 -0400
Dependencies Scanned: 70 (70 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 3
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-04-30T13:20:51-04
NVD API Last Modified: 2025-04-30T17:16:40Z

Analysis Exceptions

Could not execute .NET AssemblyAnalyzer, is the dotnet 8.0 runtime or sdk installed?

exception: org.owasp.dependencycheck.exception.InitializationException: Could not execute .NET AssemblyAnalyzer, is the dotnet 8.0 runtime or sdk installed?

org.owasp.dependencycheck.analyzer.AssemblyAnalyzer.prepareFileTypeAnalyzer(AssemblyAnalyzer.java:379)
org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer.prepareAnalyzer(AbstractFileTypeAnalyzer.java:83)
org.owasp.dependencycheck.analyzer.AbstractAnalyzer.prepare(AbstractAnalyzer.java:102)
org.owasp.dependencycheck.Engine.initializeAnalyzer(Engine.java:827)
org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:663)
org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck(BaseDependencyCheckMojo.java:2048)
org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.generate(BaseDependencyCheckMojo.java:1294)
org.apache.maven.plugins.site.render.ReportDocumentRenderer.renderDocument(ReportDocumentRenderer.java:202)
org.apache.maven.doxia.siterenderer.DefaultSiteRenderer.render(DefaultSiteRenderer.java:302)
org.apache.maven.plugins.site.render.SiteMojo.renderNonDoxiaDocuments(SiteMojo.java:282)
org.apache.maven.plugins.site.render.SiteMojo.renderLocale(SiteMojo.java:147)
org.apache.maven.plugins.site.render.SiteMojo.execute(SiteMojo.java:112)
org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:126)
org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2(MojoExecutor.java:328)
org.apache.maven.lifecycle.internal.MojoExecutor.doExecute(MojoExecutor.java:316)
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:212)
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:174)
org.apache.maven.lifecycle.internal.MojoExecutor.access$000(MojoExecutor.java:75)
org.apache.maven.lifecycle.internal.MojoExecutor$1.run(MojoExecutor.java:162)
org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute(DefaultMojosExecutionStrategy.java:39)
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:159)
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:105)
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:73)
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:53)
org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:118)
org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:261)
org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:173)
org.apache.maven.DefaultMaven.execute(DefaultMaven.java:101)
org.apache.maven.cli.MavenCli.execute(MavenCli.java:906)
org.apache.maven.cli.MavenCli.doMain(MavenCli.java:283)
org.apache.maven.cli.MavenCli.main(MavenCli.java:206)
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
java.base/java.lang.reflect.Method.invoke(Method.java:580)
org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:255)
org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:201)
org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:361)
org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:314)

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
aether-util-0.9.0.M2.jar		pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2		0		26
aircompressor-0.27.jar		pkg:maven/io.airlift/aircompressor@0.27		0		29
aopalliance-1.0.jar		pkg:maven/aopalliance/aopalliance@1.0		0		20
asm-6.1.1.jar		pkg:maven/org.ow2.asm/asm@6.1.1		0		53
classworlds-1.1.jar		pkg:maven/classworlds/classworlds@1.1		0		52
commons-codec-1.18.0.jar		pkg:maven/commons-codec/commons-codec@1.18.0		0		121
commons-collections-3.2.2.jar	cpe:2.3:a:apache:commons_collections:3.2.2:::::::*	pkg:maven/commons-collections/commons-collections@3.2.2		0	Highest	84
commons-compress-1.26.2.jar	cpe:2.3:a:apache:commons_compress:1.26.2:::::::*	pkg:maven/org.apache.commons/commons-compress@1.26.2		0	Highest	109
commons-io-2.15.1.jar	cpe:2.3:a:apache:commons_io:2.15.1:::::::*	pkg:maven/commons-io/commons-io@2.15.1		0	Highest	125
commons-lang-2.6.jar		pkg:maven/commons-lang/commons-lang@2.6		0		122
commons-lang3-3.14.0.jar		pkg:maven/org.apache.commons/commons-lang3@3.14.0		0		145
doxia-logging-api-1.4.jar		pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.4		0		27
doxia-sink-api-1.4.jar		pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.4		0		27
failureaccess-1.0.2.jar		pkg:maven/com.google.guava/failureaccess@1.0.2		0		32
file-management-3.0.0.jar		pkg:maven/org.apache.maven.shared/file-management@3.0.0		0		26
guava-33.2.1-jre.jar	cpe:2.3:a:google:guava:33.2.1:::::::*	pkg:maven/com.google.guava/guava@33.2.1-jre		0	Highest	27
guice-5.1.0.jar		pkg:maven/com.google.inject/guice@5.1.0		0		34
hamcrest-core-1.3.jar		pkg:maven/org.hamcrest/hamcrest-core@1.3		0		24
javax.inject-1.jar		pkg:maven/javax.inject/javax.inject@1		0		20
junit-4.13.2.jar	cpe:2.3:a:junit:junit4:4.13.2:::::::*	pkg:maven/junit/junit@4.13.2		0	Low	53
maven-archiver-3.6.1.jar		pkg:maven/org.apache.maven/maven-archiver@3.6.1		0		29
maven-artifact-3.9.9.jar		pkg:maven/org.apache.maven/maven-artifact@3.9.9		0		26
maven-artifact-transfer-0.9.1.jar		pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.9.1		0		30
maven-assembly-plugin-3.7.1.jar		pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1		0		29
maven-builder-support-3.9.9.jar		pkg:maven/org.apache.maven/maven-builder-support@3.9.9		0		24
maven-common-artifact-filters-3.3.2.jar		pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2		0		29
maven-compat-3.9.9.jar		pkg:maven/org.apache.maven/maven-compat@3.9.9		0		24
maven-core-3.9.9.jar	cpe:2.3:a:apache:maven:3.9.9:::::::*	pkg:maven/org.apache.maven/maven-core@3.9.9		0	Highest	24
maven-dependency-analyzer-1.10.jar		pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.10		0		30
maven-dependency-plugin-3.1.1.jar		pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1		0		30
maven-dependency-tree-3.0.1.jar		pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1		0		30
maven-filtering-3.3.2.jar		pkg:maven/org.apache.maven.shared/maven-filtering@3.3.2		0		563
maven-model-3.9.9.jar		pkg:maven/org.apache.maven/maven-model@3.9.9		0		26
maven-model-builder-3.9.9.jar		pkg:maven/org.apache.maven/maven-model-builder@3.9.9		0		32
maven-plugin-annotations-3.15.1.jar		pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1		0		26
maven-plugin-api-3.9.9.jar		pkg:maven/org.apache.maven/maven-plugin-api@3.9.9		0		26
maven-repository-metadata-3.9.9.jar		pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9		0		26
maven-resolver-api-1.9.22.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22		0		34
maven-resolver-impl-1.9.22.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22		0		32
maven-resolver-named-locks-1.9.22.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22		0		33
maven-resolver-provider-3.9.9.jar		pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9		0		26
maven-resolver-spi-1.9.22.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22		0		32
maven-resolver-util-1.9.22.jar		pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22		0		36
maven-settings-3.9.9.jar		pkg:maven/org.apache.maven/maven-settings@3.9.9		0		26
maven-settings-builder-3.9.9.jar		pkg:maven/org.apache.maven/maven-settings-builder@3.9.9		0		26
maven-shared-io-3.0.0.jar		pkg:maven/org.apache.maven.shared/maven-shared-io@3.0.0		0		28
maven-shared-utils-3.4.2.jar	cpe:2.3:a:apache:maven_shared_utils:3.4.2:::::::* cpe:2.3:a:utils_project:utils:3.4.2:::::::*	pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2		0	Highest	29
org.eclipse.sisu.inject-0.9.0.M3.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3		0		34
org.eclipse.sisu.plexus-0.9.0.M3.jar		pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3		0		29
plexus-archiver-4.10.0.jar	cpe:2.3:a:codehaus-plexus:plexus-archiver:4.10.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0		0	Highest	29
plexus-build-api-0.0.7.jar		pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7		0		26
plexus-cipher-2.0.jar		pkg:maven/org.codehaus.plexus/plexus-cipher@2.0		0		20
plexus-classworlds-2.9.0.jar		pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0		0		35
plexus-component-annotations-2.1.0.jar		pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0		0		27
plexus-container-default-1.0-alpha-30.jar (shaded: org.codehaus.plexus:plexus-component-api:1.0-alpha-30)		pkg:maven/org.codehaus.plexus/plexus-component-api@1.0-alpha-30		0		9
plexus-container-default-1.0-alpha-30.jar		pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30		0		23
plexus-interpolation-1.28.jar		pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28		0		27
plexus-io-3.4.2.jar		pkg:maven/org.codehaus.plexus/plexus-io@3.4.2		0		24
plexus-sec-dispatcher-2.0.jar	cpe:2.3:a:sec_project:sec:2.0:::::::*	pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0		0	Highest	20
plexus-utils-4.0.2.jar	cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.2:::::::* cpe:2.3:a:utils_project:utils:4.0.2:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2		0	Highest	219
plexus-xml-3.0.0.jar		pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0		0		24
slf4j-api-1.7.26.jar		pkg:maven/org.slf4j/slf4j-api@1.7.26		0		25
surefire-api-2.4.3.jar (shaded: org.codehaus.plexus:plexus-utils:1.5.1)	cpe:2.3:a:codehaus-plexus:plexus-utils:1.5.1:::::::* cpe:2.3:a:utils_project:utils:1.5.1:::::::*	pkg:maven/org.codehaus.plexus/plexus-utils@1.5.1	CRITICAL	3	Highest	12
surefire-api-2.4.3.jar		pkg:maven/org.apache.maven.surefire/surefire-api@2.4.3		0		25
wagon-provider-api-3.5.3.jar	cpe:2.3:a:apache:maven_wagon:3.5.3:::::::*	pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3		0	Highest	26
xz-1.9.jar		pkg:maven/org.tukaani/xz@1.9		0		33
zstd-jni-1.5.6-3.jar		pkg:maven/com.github.luben/zstd-jni@1.5.6-3		0		43
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll				0		4
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll				0		4
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll				0		4

Dependencies (vulnerable)

aether-util-0.9.0.M2.jar

Description:

    A collection of utility classes to ease usage of the repository system.

License:

http://www.eclipse.org/legal/epl-v10.html

File Path: /Users/kysmith/.m2/repository/org/eclipse/aether/aether-util/0.9.0.M2/aether-util-0.9.0.M2.jar
MD5: fc6315129d2e2063e2f2725e6337587f
SHA1: b957089deb654647da320ad7507b0a4b5ce23813
SHA256:7d62b0fdef90196ec4b2947f5973d750bfd3935785244e77cc06780131c404e9
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aether-util	High
Vendor	jar	package name	aether	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	repository	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/aether/aether-util/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.aether.util	Medium
Vendor	pom	artifactid	aether-util	Highest
Vendor	pom	artifactid	aether-util	Low
Vendor	pom	groupid	org.eclipse.aether	Highest
Vendor	pom	name	Aether Utilities	High
Vendor	pom	parent-artifactid	aether	Low
Product	file	name	aether-util	High
Product	jar	package name	aether	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	repository	Highest
Product	jar	package name	util	Highest
Product	Manifest	bundle-docurl	http://www.eclipse.org/aether/aether-util/	Low
Product	Manifest	Bundle-Name	Aether Utilities (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.aether.util	Medium
Product	pom	artifactid	aether-util	Highest
Product	pom	groupid	org.eclipse.aether	Highest
Product	pom	name	Aether Utilities	High
Product	pom	parent-artifactid	aether	Medium
Version	Manifest	Bundle-Version	0.9.0.M2	High
Version	pom	version	0.9.0.M2	Highest

Identifiers

pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2 (Confidence:High)

aircompressor-0.27.jar

Description:

Compression algorithms

License:

Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0.html

File Path: /Users/kysmith/.m2/repository/io/airlift/aircompressor/0.27/aircompressor-0.27.jar
MD5: 2c1137bd68ec7a65655fc1adca94742b
SHA1: 5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d
SHA256:fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aircompressor	High
Vendor	jar	package name	airlift	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	build-time	2024-05-20T14:15:10-0700	Low
Vendor	Manifest	git-commit-id	e139a31be059855a5a70f6994a4ecaa0adbbea7a	Low
Vendor	pom	artifactid	aircompressor	Highest
Vendor	pom	artifactid	aircompressor	Low
Vendor	pom	groupid	io.airlift	Highest
Vendor	pom	name	aircompressor	High
Vendor	pom	parent-artifactid	airbase	Low
Vendor	pom	url	airlift/aircompressor	Highest
Product	file	name	aircompressor	High
Product	jar	package name	airlift	Highest
Product	jar	package name	io	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	build-time	2024-05-20T14:15:10-0700	Low
Product	Manifest	git-commit-id	e139a31be059855a5a70f6994a4ecaa0adbbea7a	Low
Product	Manifest	Implementation-Title	aircompressor	High
Product	Manifest	specification-title	aircompressor	Medium
Product	pom	artifactid	aircompressor	Highest
Product	pom	groupid	io.airlift	Highest
Product	pom	name	aircompressor	High
Product	pom	parent-artifactid	airbase	Medium
Product	pom	url	airlift/aircompressor	High
Version	file	version	0.27	High
Version	Manifest	Implementation-Version	0.27	High
Version	pom	parent-version	0.27	Low
Version	pom	version	0.27	Highest

Identifiers

pkg:maven/io.airlift/aircompressor@0.27 (Confidence:High)

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain

File Path: /Users/kysmith/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aopalliance	High
Vendor	jar	package name	aop	Highest
Vendor	jar	package name	aopalliance	Highest
Vendor	jar	package name	aopalliance	Low
Vendor	jar	package name	intercept	Low
Vendor	pom	artifactid	aopalliance	Highest
Vendor	pom	artifactid	aopalliance	Low
Vendor	pom	groupid	aopalliance	Highest
Vendor	pom	name	AOP alliance	High
Vendor	pom	url	http://aopalliance.sourceforge.net	Highest
Product	file	name	aopalliance	High
Product	jar	package name	aop	Highest
Product	jar	package name	aopalliance	Highest
Product	jar	package name	intercept	Low
Product	pom	artifactid	aopalliance	Highest
Product	pom	groupid	aopalliance	Highest
Product	pom	name	AOP alliance	High
Product	pom	url	http://aopalliance.sourceforge.net	Medium
Version	file	version	1.0	High
Version	pom	version	1.0	Highest

Identifiers

pkg:maven/aopalliance/aopalliance@1.0 (Confidence:High)

asm-6.1.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD: http://asm.ow2.org/license.html

File Path: /Users/kysmith/.m2/repository/org/ow2/asm/asm/6.1.1/asm-6.1.1.jar
MD5: 04b72e489b64c54d5776ab59f330bd23
SHA1: 264754515362d92acd39e8d40395f6b8dee7bc08
SHA256:dd3b546415dd4bade2ebe3b47c7828ab0623ee2336604068e2d81023f9f8d833
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.org/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.org/	Medium
Version	file	version	6.1.1	High
Version	Manifest	Bundle-Version	6.1.1	High
Version	pom	parent-version	6.1.1	Low
Version	pom	version	6.1.1	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@6.1.1 (Confidence:High)

classworlds-1.1.jar

File Path: /Users/kysmith/.m2/repository/classworlds/classworlds/1.1/classworlds-1.1.jar
MD5: c20629baa65f1f2948b37aa393b0310b
SHA1: 60c708f55deeb7c5dfce8a7886ef09cbc1388eca
SHA256:4e3e0ad158ec60917e0de544c550f31cd65d5a97c3af1c1968bf427e4a9df2e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
classworlds-1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	classworlds	High
Vendor	jar	package name	classworlds	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	Manifest	extension-name	classworlds	Medium
Vendor	Manifest	Implementation-Vendor	The Codehaus	High
Vendor	Manifest	specification-vendor	The Codehaus	Low
Vendor	pom	artifactid	classworlds	Highest
Vendor	pom	artifactid	classworlds	Low
Vendor	pom	developer email	ben@walding.com	Low
Vendor	pom	developer email	bob@werken.com	Low
Vendor	pom	developer email	jason@zenplex.com	Low
Vendor	pom	developer id	bob	Medium
Vendor	pom	developer id	bwalding	Medium
Vendor	pom	developer id	jvanzyl	Medium
Vendor	pom	developer name	Ben Walding	Medium
Vendor	pom	developer name	bob mcwhirter	Medium
Vendor	pom	developer name	Jason van Zyl	Medium
Vendor	pom	developer org	The Werken Company	Medium
Vendor	pom	developer org	Walding Consulting Services	Medium
Vendor	pom	developer org	Zenplex	Medium
Vendor	pom	groupid	classworlds	Highest
Vendor	pom	name	classworlds	High
Vendor	pom	organization name	The Codehaus	High
Vendor	pom	organization url	http://codehaus.org/	Medium
Vendor	pom	url	http://classworlds.codehaus.org/	Highest
Product	file	name	classworlds	High
Product	jar	package name	classworlds	Highest
Product	jar	package name	codehaus	Highest
Product	Manifest	extension-name	classworlds	Medium
Product	Manifest	Implementation-Title	org.codehaus.classworlds	High
Product	Manifest	specification-title	classworlds: Java(tm) ClassLoader Management F...	Medium
Product	pom	artifactid	classworlds	Highest
Product	pom	developer email	ben@walding.com	Low
Product	pom	developer email	bob@werken.com	Low
Product	pom	developer email	jason@zenplex.com	Low
Product	pom	developer id	bob	Low
Product	pom	developer id	bwalding	Low
Product	pom	developer id	jvanzyl	Low
Product	pom	developer name	Ben Walding	Low
Product	pom	developer name	bob mcwhirter	Low
Product	pom	developer name	Jason van Zyl	Low
Product	pom	developer org	The Werken Company	Low
Product	pom	developer org	Walding Consulting Services	Low
Product	pom	developer org	Zenplex	Low
Product	pom	groupid	classworlds	Highest
Product	pom	name	classworlds	High
Product	pom	organization name	The Codehaus	Low
Product	pom	organization url	http://codehaus.org/	Low
Product	pom	url	http://classworlds.codehaus.org/	Medium
Version	file	version	1.1	High
Version	Manifest	Implementation-Version	1.1	High
Version	pom	version	1.1	Highest

Identifiers

pkg:maven/classworlds/classworlds@1.1 (Confidence:High)

commons-codec-1.18.0.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar
MD5: 2abf189633424b9292fd57a3192c0ed5
SHA1: ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f
SHA256:ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-codec	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	codec	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	digest	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-codec	Highest
Vendor	pom	artifactid	commons-codec	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	dgraham@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jon@collab.net	Low
Vendor	pom	developer email	julius@apache.org	Low
Vendor	pom	developer email	mattsicker@apache.org	Low
Vendor	pom	developer email	rwaldhoff@apache.org	Low
Vendor	pom	developer email	sanders@totalsync.com	Low
Vendor	pom	developer email	tn@apache.org	Low
Vendor	pom	developer email	tobrien@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	dgraham	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jon	Medium
Vendor	pom	developer id	julius	Medium
Vendor	pom	developer id	mattsicker	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer id	tobrien	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	David Graham	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jon S. Stevens	Medium
Vendor	pom	developer name	Julius Davies	Medium
Vendor	pom	developer name	Matt Sicker	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer name	Tim OBrien	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	http://juliusdavies.ca/	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-codec	Highest
Vendor	pom	name	Apache Commons Codec	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-codec/	Highest
Product	file	name	commons-codec	High
Product	jar	package name	apache	Highest
Product	jar	package name	codec	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	digest	Highest
Product	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Product	Manifest	Bundle-Name	Apache Commons Codec	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Product	Manifest	Implementation-Title	Apache Commons Codec	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Codec	Medium
Product	pom	artifactid	commons-codec	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	dgraham@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jon@collab.net	Low
Product	pom	developer email	julius@apache.org	Low
Product	pom	developer email	mattsicker@apache.org	Low
Product	pom	developer email	rwaldhoff@apache.org	Low
Product	pom	developer email	sanders@totalsync.com	Low
Product	pom	developer email	tn@apache.org	Low
Product	pom	developer email	tobrien@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	dgraham	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jon	Low
Product	pom	developer id	julius	Low
Product	pom	developer id	mattsicker	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	tn	Low
Product	pom	developer id	tobrien	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	David Graham	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jon S. Stevens	Low
Product	pom	developer name	Julius Davies	Low
Product	pom	developer name	Matt Sicker	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer name	Tim OBrien	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	http://juliusdavies.ca/	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-codec	Highest
Product	pom	name	Apache Commons Codec	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-codec/	Medium
Version	file	version	1.18.0	High
Version	Manifest	Bundle-Version	1.18.0	High
Version	Manifest	Implementation-Version	1.18.0	High
Version	pom	parent-version	1.18.0	Low
Version	pom	version	1.18.0	Highest

Identifiers

pkg:maven/commons-codec/commons-codec@1.18.0 (Confidence:High)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-collections	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	collections	Highest
Vendor	jar	package name	commons	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Vendor	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-collections	Highest
Vendor	pom	artifactid	commons-collections	Low
Vendor	pom	developer id	amamment	Medium
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	craigmcc	Medium
Vendor	pom	developer id	geirm	Medium
Vendor	pom	developer id	jcarman	Medium
Vendor	pom	developer id	matth	Medium
Vendor	pom	developer id	morgand	Medium
Vendor	pom	developer id	psteitz	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	Arun M. Thomas	Medium
Vendor	pom	developer name	Craig McClanahan	Medium
Vendor	pom	developer name	Geir Magnusson	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	James Carman	Medium
Vendor	pom	developer name	Matthew Hawthorne	Medium
Vendor	pom	developer name	Morgan Delagrange	Medium
Vendor	pom	developer name	Phil Steitz	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	groupid	commons-collections	Highest
Vendor	pom	name	Apache Commons Collections	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	http://commons.apache.org/collections/	Highest
Product	file	name	commons-collections	High
Product	jar	package name	apache	Highest
Product	jar	package name	collections	Highest
Product	jar	package name	commons	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Product	Manifest	Bundle-Name	Apache Commons Collections	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Product	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Product	Manifest	Implementation-Title	Apache Commons Collections	High
Product	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Product	Manifest	specification-title	Apache Commons Collections	Medium
Product	pom	artifactid	commons-collections	Highest
Product	pom	developer id	amamment	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	craigmcc	Low
Product	pom	developer id	geirm	Low
Product	pom	developer id	jcarman	Low
Product	pom	developer id	matth	Low
Product	pom	developer id	morgand	Low
Product	pom	developer id	psteitz	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	Arun M. Thomas	Low
Product	pom	developer name	Craig McClanahan	Low
Product	pom	developer name	Geir Magnusson	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	James Carman	Low
Product	pom	developer name	Matthew Hawthorne	Low
Product	pom	developer name	Morgan Delagrange	Low
Product	pom	developer name	Phil Steitz	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	groupid	commons-collections	Highest
Product	pom	name	Apache Commons Collections	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	http://commons.apache.org/collections/	Medium
Version	file	version	3.2.2	High
Version	Manifest	Bundle-Version	3.2.2	High
Version	Manifest	Implementation-Version	3.2.2	High
Version	pom	parent-version	3.2.2	Low
Version	pom	version	3.2.2	Highest

Identifiers

pkg:maven/commons-collections/commons-collections@3.2.2 (Confidence:High)
cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* (Confidence:Highest)

commons-compress-1.26.2.jar

Description:

Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.jar
MD5: d2c5abbd0a822c0b79cf4f03ead483ee
SHA1: eb1f823447af685208e684fce84783b43517960c
SHA256:9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-compress	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	compress	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.compress	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-compress/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-compress	Medium
Vendor	Manifest	extension-name	org.apache.commons.compress	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-compress	Highest
Vendor	pom	artifactid	commons-compress	Low
Vendor	pom	developer email	bodewig at apache.org	Low
Vendor	pom	developer email	chtompki at apache.org	Low
Vendor	pom	developer email	damjan at apache.org	Low
Vendor	pom	developer email	ebourg at apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	grobmeier at apache.org	Low
Vendor	pom	developer email	julius at apache.org	Low
Vendor	pom	developer email	peterlee at apache.org	Low
Vendor	pom	developer email	sebb at apache.org	Low
Vendor	pom	developer email	tcurdt at apache.org	Low
Vendor	pom	developer id	bodewig	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	damjan	Medium
Vendor	pom	developer id	ebourg	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	grobmeier	Medium
Vendor	pom	developer id	julius	Medium
Vendor	pom	developer id	peterlee	Medium
Vendor	pom	developer id	sebb	Medium
Vendor	pom	developer id	tcurdt	Medium
Vendor	pom	developer name	Christian Grobmeier	Medium
Vendor	pom	developer name	Damjan Jovanovic	Medium
Vendor	pom	developer name	Emmanuel Bourg	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Julius Davies	Medium
Vendor	pom	developer name	Peter Alfred Lee	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Sebastian Bazley	Medium
Vendor	pom	developer name	Stefan Bodewig	Medium
Vendor	pom	developer name	Torsten Curdt	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Compress	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-compress/	Highest
Product	file	name	commons-compress	High
Product	jar	package name	9	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	compress	Highest
Product	Manifest	automatic-module-name	org.apache.commons.compress	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-compress/	Low
Product	Manifest	Bundle-Name	Apache Commons Compress	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-compress	Medium
Product	Manifest	extension-name	org.apache.commons.compress	Medium
Product	Manifest	Implementation-Title	Apache Commons Compress	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	Manifest	specification-title	Apache Commons Compress	Medium
Product	pom	artifactid	commons-compress	Highest
Product	pom	developer email	bodewig at apache.org	Low
Product	pom	developer email	chtompki at apache.org	Low
Product	pom	developer email	damjan at apache.org	Low
Product	pom	developer email	ebourg at apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	grobmeier at apache.org	Low
Product	pom	developer email	julius at apache.org	Low
Product	pom	developer email	peterlee at apache.org	Low
Product	pom	developer email	sebb at apache.org	Low
Product	pom	developer email	tcurdt at apache.org	Low
Product	pom	developer id	bodewig	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	damjan	Low
Product	pom	developer id	ebourg	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	grobmeier	Low
Product	pom	developer id	julius	Low
Product	pom	developer id	peterlee	Low
Product	pom	developer id	sebb	Low
Product	pom	developer id	tcurdt	Low
Product	pom	developer name	Christian Grobmeier	Low
Product	pom	developer name	Damjan Jovanovic	Low
Product	pom	developer name	Emmanuel Bourg	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Julius Davies	Low
Product	pom	developer name	Peter Alfred Lee	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Sebastian Bazley	Low
Product	pom	developer name	Stefan Bodewig	Low
Product	pom	developer name	Torsten Curdt	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Compress	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	https://commons.apache.org/proper/commons-compress/	Medium
Version	file	version	1.26.2	High
Version	Manifest	Bundle-Version	1.26.2	High
Version	Manifest	Implementation-Version	1.26.2	High
Version	pom	parent-version	1.26.2	Low
Version	pom	version	1.26.2	Highest

Identifiers

pkg:maven/org.apache.commons/commons-compress@1.26.2 (Confidence:High)
cpe:2.3:a:apache:commons_compress:1.26.2:*:*:*:*:*:*:* (Confidence:Highest)

commons-io-2.15.1.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/commons-io/commons-io/2.15.1/commons-io-2.15.1.jar
MD5: 84351f7991a0e6722f00e96a4ccc376f
SHA1: f11560da189ab563a5c8e351941415430e9304ea
SHA256:a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-io	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	file	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-io	Highest
Vendor	pom	artifactid	commons-io	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	dion@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jeremias@apache.org	Low
Vendor	pom	developer email	jochen.wiedmann@gmail.com	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	martinc@apache.org	Low
Vendor	pom	developer email	matth@apache.org	Low
Vendor	pom	developer email	nicolaken@apache.org	Low
Vendor	pom	developer email	roxspring@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	dion	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jochen	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	martinc	Medium
Vendor	pom	developer id	matth	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	nicolaken	Medium
Vendor	pom	developer id	roxspring	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	dIon Gillard	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Jochen Wiedmann	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Martin Cooper	Medium
Vendor	pom	developer name	Matthew Hawthorne	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Nicola Ken Barozzi	Medium
Vendor	pom	developer name	Rob Oxspring	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-io	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-io/	Highest
Product	file	name	commons-io	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	file	Highest
Product	jar	package name	io	Highest
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	artifactid	commons-io	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	dion@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jeremias@apache.org	Low
Product	pom	developer email	jochen.wiedmann@gmail.com	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	martinc@apache.org	Low
Product	pom	developer email	matth@apache.org	Low
Product	pom	developer email	nicolaken@apache.org	Low
Product	pom	developer email	roxspring@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	dion	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jochen	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	martinc	Low
Product	pom	developer id	matth	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	nicolaken	Low
Product	pom	developer id	roxspring	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	dIon Gillard	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Jochen Wiedmann	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Martin Cooper	Low
Product	pom	developer name	Matthew Hawthorne	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Nicola Ken Barozzi	Low
Product	pom	developer name	Rob Oxspring	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-io	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-io/	Medium
Version	file	version	2.15.1	High
Version	Manifest	Bundle-Version	2.15.1	High
Version	Manifest	Implementation-Version	2.15.1	High
Version	pom	parent-version	2.15.1	Low
Version	pom	version	2.15.1	Highest

Identifiers

pkg:maven/commons-io/commons-io@2.15.1 (Confidence:High)
cpe:2.3:a:apache:commons_io:2.15.1:*:*:*:*:*:*:* (Confidence:Highest)

commons-lang-2.6.jar

Description:

        Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/commons-lang/commons-lang/2.6/commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
SHA256:50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-lang	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	lang	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/lang/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-lang	Highest
Vendor	pom	artifactid	commons-lang	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory@seagullsw.com	Low
Vendor	pom	developer email	jcarman@apache.org	Low
Vendor	pom	developer email	joerg.schaible@gmx.de	Low
Vendor	pom	developer email	oheger@apache.org	Low
Vendor	pom	developer email	pbenedict@apache.org	Low
Vendor	pom	developer email	phil@steitz.com	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	scolebourne@joda.org	Low
Vendor	pom	developer email	stevencaswell@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	fredrik	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jcarman	Medium
Vendor	pom	developer id	joehni	Medium
Vendor	pom	developer id	mbenson	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	oheger	Medium
Vendor	pom	developer id	pbenedict	Medium
Vendor	pom	developer id	psteitz	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	scaswell	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	Fredrik Westermarck	Medium
Vendor	pom	developer name	Gary D. Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	James Carman	Medium
Vendor	pom	developer name	Joerg Schaible	Medium
Vendor	pom	developer name	Matt Benson	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Oliver Heger	Medium
Vendor	pom	developer name	Paul Benedict	Medium
Vendor	pom	developer name	Phil Steitz	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer name	Steven Caswell	Medium
Vendor	pom	developer org	Carman Consulting, Inc.	Medium
Vendor	pom	developer org	CollabNet, Inc.	Medium
Vendor	pom	developer org	Seagull Software	Medium
Vendor	pom	developer org	SITA ATS Ltd	Medium
Vendor	pom	groupid	commons-lang	Highest
Vendor	pom	name	Commons Lang	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	http://commons.apache.org/lang/	Highest
Product	file	name	commons-lang	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	lang	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/lang/	Low
Product	Manifest	Bundle-Name	Commons Lang	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.lang	Medium
Product	Manifest	Implementation-Title	Commons Lang	High
Product	Manifest	specification-title	Commons Lang	Medium
Product	pom	artifactid	commons-lang	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory@seagullsw.com	Low
Product	pom	developer email	jcarman@apache.org	Low
Product	pom	developer email	joerg.schaible@gmx.de	Low
Product	pom	developer email	oheger@apache.org	Low
Product	pom	developer email	pbenedict@apache.org	Low
Product	pom	developer email	phil@steitz.com	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	scolebourne@joda.org	Low
Product	pom	developer email	stevencaswell@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	fredrik	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jcarman	Low
Product	pom	developer id	joehni	Low
Product	pom	developer id	mbenson	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	oheger	Low
Product	pom	developer id	pbenedict	Low
Product	pom	developer id	psteitz	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	scaswell	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	Fredrik Westermarck	Low
Product	pom	developer name	Gary D. Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	James Carman	Low
Product	pom	developer name	Joerg Schaible	Low
Product	pom	developer name	Matt Benson	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Oliver Heger	Low
Product	pom	developer name	Paul Benedict	Low
Product	pom	developer name	Phil Steitz	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer name	Steven Caswell	Low
Product	pom	developer org	Carman Consulting, Inc.	Low
Product	pom	developer org	CollabNet, Inc.	Low
Product	pom	developer org	Seagull Software	Low
Product	pom	developer org	SITA ATS Ltd	Low
Product	pom	groupid	commons-lang	Highest
Product	pom	name	Commons Lang	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	http://commons.apache.org/lang/	Medium
Version	file	version	2.6	High
Version	Manifest	Bundle-Version	2.6	High
Version	Manifest	Implementation-Version	2.6	High
Version	pom	parent-version	2.6	Low
Version	pom	version	2.6	Highest

Identifiers

pkg:maven/commons-lang/commons-lang@2.6 (Confidence:High)

commons-lang3-3.14.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/apache/commons/commons-lang3/3.14.0/commons-lang3-3.14.0.jar
MD5: 4e5c3f5e6b0b965ef241d7d72ac8971f
SHA1: 1ed471194b02f2c6cb734a0cd6f6f107c673afae
SHA256:7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-lang3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	lang3	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-lang3	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	britter@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	djones@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jcarman@apache.org	Low
Vendor	pom	developer email	joerg.schaible@gmx.de	Low
Vendor	pom	developer email	lguibert@apache.org	Low
Vendor	pom	developer email	oheger@apache.org	Low
Vendor	pom	developer email	pbenedict@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	scolebourne@joda.org	Low
Vendor	pom	developer email	stevencaswell@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	britter	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	djones	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	fredrik	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jcarman	Medium
Vendor	pom	developer id	joehni	Medium
Vendor	pom	developer id	lguibert	Medium
Vendor	pom	developer id	mbenson	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	oheger	Medium
Vendor	pom	developer id	pbenedict	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	scaswell	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	Benedikt Ritter	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	Duncan Jones	Medium
Vendor	pom	developer name	Fredrik Westermarck	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	James Carman	Medium
Vendor	pom	developer name	Joerg Schaible	Medium
Vendor	pom	developer name	Loic Guibert	Medium
Vendor	pom	developer name	Matt Benson	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Oliver Heger	Medium
Vendor	pom	developer name	Paul Benedict	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer name	Steven Caswell	Medium
Vendor	pom	developer org	Carman Consulting, Inc.	Medium
Vendor	pom	developer org	CollabNet, Inc.	Medium
Vendor	pom	developer org	SITA ATS Ltd	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Lang	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Product	file	name	commons-lang3	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	lang3	Highest
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	pom	artifactid	commons-lang3	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	britter@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	djones@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jcarman@apache.org	Low
Product	pom	developer email	joerg.schaible@gmx.de	Low
Product	pom	developer email	lguibert@apache.org	Low
Product	pom	developer email	oheger@apache.org	Low
Product	pom	developer email	pbenedict@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	scolebourne@joda.org	Low
Product	pom	developer email	stevencaswell@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	britter	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	djones	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	fredrik	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jcarman	Low
Product	pom	developer id	joehni	Low
Product	pom	developer id	lguibert	Low
Product	pom	developer id	mbenson	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	oheger	Low
Product	pom	developer id	pbenedict	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	scaswell	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	Benedikt Ritter	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	Duncan Jones	Low
Product	pom	developer name	Fredrik Westermarck	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	James Carman	Low
Product	pom	developer name	Joerg Schaible	Low
Product	pom	developer name	Loic Guibert	Low
Product	pom	developer name	Matt Benson	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Oliver Heger	Low
Product	pom	developer name	Paul Benedict	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer name	Steven Caswell	Low
Product	pom	developer org	Carman Consulting, Inc.	Low
Product	pom	developer org	CollabNet, Inc.	Low
Product	pom	developer org	SITA ATS Ltd	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Lang	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.14.0	High
Version	Manifest	Bundle-Version	3.14.0	High
Version	Manifest	Implementation-Version	3.14.0	High
Version	pom	parent-version	3.14.0	Low
Version	pom	version	3.14.0	Highest

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.14.0 (Confidence:High)

doxia-logging-api-1.4.jar

Description:

Doxia Logging API.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/doxia/doxia-logging-api/1.4/doxia-logging-api-1.4.jar
MD5: 3800c4a113c3f657c5d7653fb5695a53
SHA1: fd0ab30404ac0fca5f672eee70acf5d17a1ea856
SHA256:2c422e154f748d9c1cba6730b6304db48a19de09772aa0b7ca34240e5ec714ac
Referenced In Project/Scope: Event Processing Maven Plugin:compile
doxia-logging-api-1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	doxia-logging-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	doxia	Highest
Vendor	jar	package name	logging	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.doxia	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	doxia-logging-api	Highest
Vendor	pom	artifactid	doxia-logging-api	Low
Vendor	pom	groupid	org.apache.maven.doxia	Highest
Vendor	pom	name	Doxia :: Logging API	High
Vendor	pom	parent-artifactid	doxia	Low
Product	file	name	doxia-logging-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	doxia	Highest
Product	jar	package name	logging	Highest
Product	jar	package name	maven	Highest
Product	Manifest	Implementation-Title	Doxia :: Logging API	High
Product	Manifest	specification-title	Doxia :: Logging API	Medium
Product	pom	artifactid	doxia-logging-api	Highest
Product	pom	groupid	org.apache.maven.doxia	Highest
Product	pom	name	Doxia :: Logging API	High
Product	pom	parent-artifactid	doxia	Medium
Version	file	version	1.4	High
Version	Manifest	Implementation-Version	1.4	High
Version	pom	version	1.4	Highest

Identifiers

pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.4 (Confidence:High)

doxia-sink-api-1.4.jar

Description:

Doxia Sink API.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/doxia/doxia-sink-api/1.4/doxia-sink-api-1.4.jar
MD5: 4f8f19a149fd8a48ebefedcc5e9aafc1
SHA1: 3cfed174cabb086426a9043da49a70526ff40d16
SHA256:c72be063877e0713b9169231e4db62579f7e93b15eeb5806df8e694fc38a415e
Referenced In Project/Scope: Event Processing Maven Plugin:compile
doxia-sink-api-1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	doxia-sink-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	doxia	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	sink	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.doxia	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	doxia-sink-api	Highest
Vendor	pom	artifactid	doxia-sink-api	Low
Vendor	pom	groupid	org.apache.maven.doxia	Highest
Vendor	pom	name	Doxia :: Sink API	High
Vendor	pom	parent-artifactid	doxia	Low
Product	file	name	doxia-sink-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	doxia	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	sink	Highest
Product	Manifest	Implementation-Title	Doxia :: Sink API	High
Product	Manifest	specification-title	Doxia :: Sink API	Medium
Product	pom	artifactid	doxia-sink-api	Highest
Product	pom	groupid	org.apache.maven.doxia	Highest
Product	pom	name	Doxia :: Sink API	High
Product	pom	parent-artifactid	doxia	Medium
Version	file	version	1.4	High
Version	Manifest	Implementation-Version	1.4	High
Version	pom	version	1.4	Highest

Identifiers

pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.4 (Confidence:High)

failureaccess-1.0.2.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar
MD5: 3f75955b49b6758fd6d1e1bd9bf777b3
SHA1: c4a06a64e650562f30b7bf9aaec1bfed43aca12b
SHA256:8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	automatic-module-name	com.google.common.util.concurrent.internal	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	automatic-module-name	com.google.common.util.concurrent.internal	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.2	High
Version	Manifest	Bundle-Version	1.0.2	High
Version	pom	parent-version	1.0.2	Low
Version	pom	version	1.0.2	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.2 (Confidence:High)

file-management-3.0.0.jar

Description:

API to collect files from a given directory using several include/exclude rules.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/file-management/3.0.0/file-management-3.0.0.jar
MD5: 52e384d43eac94eb5111ea3251e06217
SHA1: 065d87e03797af7bb5bb199d4d8b50f83cbea3ce
SHA256:a37db9f4108b019a96b4fee8c6becaea64a3e755d5d21a904a8549501c7fc065
Referenced In Project/Scope: Event Processing Maven Plugin:compile
file-management-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	file-management	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.shared	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	file-management	Highest
Vendor	pom	artifactid	file-management	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven File Management API	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	file-management	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	Implementation-Title	Apache Maven File Management API	High
Product	Manifest	specification-title	Apache Maven File Management API	Medium
Product	pom	artifactid	file-management	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven File Management API	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.apache.maven.shared/file-management@3.0.0 (Confidence:High)

guava-33.2.1-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.jar
MD5: 872309e5982530bdc7e68096c0d53cd2
SHA1: 818e780da2c66c63bbb6480fef1f3855eeafa3e4
SHA256:452b2d9787b7d366fa8cf5ed9a1c40404542d05effa7a598da03bbbbb76d9f31
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.common	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	common	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.common	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.2.1-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.2.1-jre (Confidence:High)
cpe:2.3:a:google:guava:33.2.1:*:*:*:*:*:*:* (Confidence:Highest)

guice-5.1.0.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/com/google/inject/guice/5.1.0/guice-5.1.0.jar
MD5: 2560169296aa94492af34af2115e9511
SHA1: da25056c694c54ba16e78e4fc35f17fc60f0d1b4
SHA256:4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guice	High
Vendor	jar	package name	google	Highest
Vendor	jar	package name	guice	Highest
Vendor	jar	package name	inject	Highest
Vendor	Manifest	automatic-module-name	com.google.guice	Medium
Vendor	Manifest	bundle-copyright	Copyright (C) 2006 Google Inc.	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guice	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	Manifest	bundle-symbolicname	com.google.inject	Medium
Vendor	Manifest	eclipse-extensibleapi	true	Low
Vendor	pom	artifactid	guice	Highest
Vendor	pom	artifactid	guice	Low
Vendor	pom	groupid	com.google.inject	Highest
Vendor	pom	name	Google Guice - Core Library	High
Vendor	pom	parent-artifactid	guice-parent	Low
Product	file	name	guice	High
Product	jar	package name	dependency	Highest
Product	jar	package name	google	Highest
Product	jar	package name	guice	Highest
Product	jar	package name	inject	Highest
Product	Manifest	automatic-module-name	com.google.guice	Medium
Product	Manifest	bundle-copyright	Copyright (C) 2006 Google Inc.	Low
Product	Manifest	bundle-docurl	https://github.com/google/guice	Low
Product	Manifest	Bundle-Name	guice	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	Manifest	bundle-symbolicname	com.google.inject	Medium
Product	Manifest	eclipse-extensibleapi	true	Low
Product	pom	artifactid	guice	Highest
Product	pom	groupid	com.google.inject	Highest
Product	pom	name	Google Guice - Core Library	High
Product	pom	parent-artifactid	guice-parent	Medium
Version	file	version	5.1.0	High
Version	Manifest	Bundle-Version	5.1.0	High
Version	pom	version	5.1.0	Highest

Identifiers

pkg:maven/com.google.inject/guice@5.1.0 (Confidence:High)

hamcrest-core-1.3.jar

Description:

    This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.

File Path: /Users/kysmith/.m2/repository/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar
MD5: 6393363b47ddcbba82321110c3e07519
SHA1: 42a25dc3219429f0e5d060061f71acb49bf010a0
SHA256:66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9
Referenced In Project/Scope: Event Processing Maven Plugin:compile
hamcrest-core-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/junit/junit@4.13.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hamcrest-core	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	hamcrest	Highest
Vendor	jar	package name	matcher	Highest
Vendor	Manifest	built-date	2012-07-09 19:49:34	Low
Vendor	Manifest	Implementation-Vendor	hamcrest.org	High
Vendor	pom	artifactid	hamcrest-core	Highest
Vendor	pom	artifactid	hamcrest-core	Low
Vendor	pom	groupid	org.hamcrest	Highest
Vendor	pom	name	Hamcrest Core	High
Vendor	pom	parent-artifactid	hamcrest-parent	Low
Product	file	name	hamcrest-core	High
Product	jar	package name	core	Highest
Product	jar	package name	hamcrest	Highest
Product	jar	package name	matcher	Highest
Product	Manifest	built-date	2012-07-09 19:49:34	Low
Product	Manifest	Implementation-Title	hamcrest-core	High
Product	pom	artifactid	hamcrest-core	Highest
Product	pom	groupid	org.hamcrest	Highest
Product	pom	name	Hamcrest Core	High
Product	pom	parent-artifactid	hamcrest-parent	Medium
Version	file	version	1.3	High
Version	Manifest	Implementation-Version	1.3	High
Version	pom	version	1.3	Highest

Identifiers

pkg:maven/org.hamcrest/hamcrest-core@1.3 (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.inject-1	High
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	javax	Low
Vendor	pom	artifactid	javax.inject	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	pom	groupid	javax.inject	Highest
Vendor	pom	name	javax.inject	High
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Product	file	name	javax.inject-1	High
Product	jar	package name	inject	Highest
Product	jar	package name	inject	Low
Product	jar	package name	javax	Highest
Product	pom	artifactid	javax.inject	Highest
Product	pom	groupid	javax.inject	Highest
Product	pom	name	javax.inject	High
Product	pom	url	http://code.google.com/p/atinject/	Medium
Version	file	version	1	Medium
Version	pom	version	1	Highest

Identifiers

pkg:maven/javax.inject/javax.inject@1 (Confidence:High)

junit-4.13.2.jar

Description:

JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /Users/kysmith/.m2/repository/junit/junit/4.13.2/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit	High
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	junit	Highest
Vendor	Manifest	automatic-module-name	junit	Medium
Vendor	Manifest	implementation-url	http://junit.org	Low
Vendor	Manifest	Implementation-Vendor	JUnit	High
Vendor	Manifest	Implementation-Vendor-Id	junit	Medium
Vendor	pom	artifactid	junit	Highest
Vendor	pom	artifactid	junit	Low
Vendor	pom	developer email	david@saff.net	Low
Vendor	pom	developer email	kcooney@google.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	mail@stefan-birkner.de	Low
Vendor	pom	developer id	dsaff	Medium
Vendor	pom	developer id	kcooney	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	stefanbirkner	Medium
Vendor	pom	developer name	David Saff	Medium
Vendor	pom	developer name	Kevin Cooney	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Stefan Birkner	Medium
Vendor	pom	groupid	junit	Highest
Vendor	pom	name	JUnit	High
Vendor	pom	organization name	JUnit	High
Vendor	pom	organization url	http://www.junit.org	Medium
Vendor	pom	url	http://junit.org	Highest
Product	file	name	junit	High
Product	jar	package name	framework	Highest
Product	jar	package name	junit	Highest
Product	Manifest	automatic-module-name	junit	Medium
Product	Manifest	Implementation-Title	JUnit	High
Product	Manifest	implementation-url	http://junit.org	Low
Product	pom	artifactid	junit	Highest
Product	pom	developer email	david@saff.net	Low
Product	pom	developer email	kcooney@google.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	mail@stefan-birkner.de	Low
Product	pom	developer id	dsaff	Low
Product	pom	developer id	kcooney	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	stefanbirkner	Low
Product	pom	developer name	David Saff	Low
Product	pom	developer name	Kevin Cooney	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Stefan Birkner	Low
Product	pom	groupid	junit	Highest
Product	pom	name	JUnit	High
Product	pom	organization name	JUnit	Low
Product	pom	organization url	http://www.junit.org	Low
Product	pom	url	http://junit.org	Medium
Version	file	version	4.13.2	High
Version	Manifest	Implementation-Version	4.13.2	High
Version	pom	version	4.13.2	Highest

Identifiers

pkg:maven/junit/junit@4.13.2 (Confidence:High)
cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Low)

maven-archiver-3.6.1.jar

Description:

Provides utility methods for creating JARs and other archive files from a Maven project.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-archiver/3.6.1/maven-archiver-3.6.1.jar
MD5: a2fdb930b0fd117baa7ebda5742e60f6
SHA1: 7797346a0cfdac37326e0bcd04eca32c0f76b429
SHA256:a5fd6e2121c0a3f5e5cafdf336e21ba2e67a2cf7e781f69e3b8ae28215832823
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-archiver-3.6.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-archiver	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	archiver	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-archiver	Highest
Vendor	pom	artifactid	maven-archiver	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Apache Maven Archiver	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Vendor	pom	parent-groupid	org.apache.maven.shared	Medium
Product	file	name	maven-archiver	High
Product	jar	package name	apache	Highest
Product	jar	package name	archiver	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Apache Maven Archiver	High
Product	Manifest	specification-title	Apache Maven Archiver	Medium
Product	pom	artifactid	maven-archiver	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Apache Maven Archiver	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Product	pom	parent-groupid	org.apache.maven.shared	Medium
Version	file	version	3.6.1	High
Version	Manifest	Implementation-Version	3.6.1	High
Version	pom	parent-version	3.6.1	Low
Version	pom	version	3.6.1	Highest

Identifiers

pkg:maven/org.apache.maven/maven-archiver@3.6.1 (Confidence:High)

maven-artifact-3.9.9.jar

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-artifact/3.9.9/maven-artifact-3.9.9.jar
MD5: fcb27c2b8225edec3f2356973fa39e98
SHA1: a130ec431ef32e12a4424f9b074735bb58e15d2d
SHA256:30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-artifact-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-artifact	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-artifact	Highest
Vendor	pom	artifactid	maven-artifact	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-artifact	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Artifact	High
Product	Manifest	specification-title	Maven Artifact	Medium
Product	pom	artifactid	maven-artifact	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-artifact@3.9.9 (Confidence:High)

maven-artifact-transfer-0.9.1.jar

Description:

An API to install, deploy and resolving artifacts with Maven 3

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-artifact-transfer/0.9.1/maven-artifact-transfer-0.9.1.jar
MD5: b65e70a00149a44404b54cc2e73754b4
SHA1: b8f0866112547e3f7ea0e683ac50905dae046be0
SHA256:6a2d37c58a6b1b9dd8a5a2e28b5320f63d03245830712f0000342abe3de34ef5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-artifact-transfer-0.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-artifact-transfer	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	implementation-url	https://maven.apache.org/shared/maven-artifact-transfer/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.shared	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-artifact-transfer	Highest
Vendor	pom	artifactid	maven-artifact-transfer	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Artifact Transfer	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-artifact-transfer	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	Implementation-Title	Apache Maven Artifact Transfer	High
Product	Manifest	implementation-url	https://maven.apache.org/shared/maven-artifact-transfer/	Low
Product	Manifest	specification-title	Apache Maven Artifact Transfer	Medium
Product	pom	artifactid	maven-artifact-transfer	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Artifact Transfer	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	0.9.1	High
Version	Manifest	Implementation-Version	0.9.1	High
Version	pom	parent-version	0.9.1	Low
Version	pom	version	0.9.1	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.9.1 (Confidence:High)

maven-assembly-plugin-3.7.1.jar

Description:

A Maven plugin to create archives of your project's sources, classes, dependencies etc. from flexible assembly descriptors.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugins/maven-assembly-plugin/3.7.1/maven-assembly-plugin-3.7.1.jar
MD5: d77bb9e0c42d8f5e9b8a28e04c21c0c0
SHA1: 59d01f9b253b851821446c76bed9b5b4eaa6adc8
SHA256:1d65f810ae5de6141ff73c659dae6f9db6bad83c76b811d977eb3798a6dc1d0f
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-assembly-plugin-3.7.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-assembly-plugin	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	assembly	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugins	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-assembly-plugin	Highest
Vendor	pom	artifactid	maven-assembly-plugin	Low
Vendor	pom	groupid	org.apache.maven.plugins	Highest
Vendor	pom	name	Apache Maven Assembly Plugin	High
Vendor	pom	parent-artifactid	maven-plugins	Low
Product	file	name	maven-assembly-plugin	High
Product	jar	package name	apache	Highest
Product	jar	package name	assembly	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugins	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Apache Maven Assembly Plugin	High
Product	Manifest	specification-title	Apache Maven Assembly Plugin	Medium
Product	pom	artifactid	maven-assembly-plugin	Highest
Product	pom	groupid	org.apache.maven.plugins	Highest
Product	pom	name	Apache Maven Assembly Plugin	High
Product	pom	parent-artifactid	maven-plugins	Medium
Version	file	version	3.7.1	High
Version	Manifest	Implementation-Version	3.7.1	High
Version	pom	parent-version	3.7.1	Low
Version	pom	version	3.7.1	Highest

Identifiers

pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1 (Confidence:High)

maven-builder-support-3.9.9.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-builder-support/3.9.9/maven-builder-support-3.9.9.jar
MD5: 0266bb9314b63d9fde8aff0d190f48d6
SHA1: 812c13c808e42c54d3f4abdaab603e5262bf8ab8
SHA256:2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-builder-support-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-builder-support	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-builder-support	Highest
Vendor	pom	artifactid	maven-builder-support	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Builder Support	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-builder-support	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Builder Support	High
Product	Manifest	specification-title	Maven Builder Support	Medium
Product	pom	artifactid	maven-builder-support	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Builder Support	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-builder-support@3.9.9 (Confidence:High)

maven-common-artifact-filters-3.3.2.jar

Description:

A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-common-artifact-filters/3.3.2/maven-common-artifact-filters-3.3.2.jar
MD5: 5b8bd8a1933dbfa8f9a00029255cf99b
SHA1: c1cb1bc78ae8c6a6e64da833d4a9afbda5e0834a
SHA256:2be8b810cf0937ff4bb7bef8ce78a8faad17ca2182751055ac7df54d5510b908
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-common-artifact-filters-3.3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-common-artifact-filters	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-common-artifact-filters	Highest
Vendor	pom	artifactid	maven-common-artifact-filters	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Common Artifact Filters	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-common-artifact-filters	High
Product	jar	package name	apache	Highest
Product	jar	package name	artifact	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache Maven Common Artifact Filters	High
Product	Manifest	specification-title	Apache Maven Common Artifact Filters	Medium
Product	pom	artifactid	maven-common-artifact-filters	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Common Artifact Filters	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.3.2	High
Version	Manifest	Implementation-Version	3.3.2	High
Version	pom	parent-version	3.3.2	Low
Version	pom	version	3.3.2	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2 (Confidence:High)

maven-compat-3.9.9.jar

Description:

Maven2 classes maintained as compatibility layer.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-compat/3.9.9/maven-compat-3.9.9.jar
MD5: 7995aefbc294eebb239a5962b404a169
SHA1: 95ce2fe8bea6341c36a1ff01dc80e1cbdfeeffc7
SHA256:1138ab05f1be7034b90251dd32ad58262970f92d2ec4dc142301dd17efb46121
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-compat-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-compat	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-compat	Highest
Vendor	pom	artifactid	maven-compat	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Compat	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-compat	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Compat	High
Product	Manifest	specification-title	Maven Compat	Medium
Product	pom	artifactid	maven-compat	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Compat	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-compat@3.9.9 (Confidence:High)

maven-core-3.9.9.jar

Description:

Maven Core classes.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-core/3.9.9/maven-core-3.9.9.jar
MD5: eed2eb37f03ccdea7ef9dab069c0b5d8
SHA1: b58645e3f14348024b05735c171425e19d30c02e
SHA256:7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-core-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-core	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-core	Highest
Vendor	pom	artifactid	maven-core	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Core	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-core	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Core	High
Product	Manifest	specification-title	Maven Core	Medium
Product	pom	artifactid	maven-core	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Core	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-core@3.9.9 (Confidence:High)
cpe:2.3:a:apache:maven:3.9.9:*:*:*:*:*:*:* (Confidence:Highest)

maven-dependency-analyzer-1.10.jar

Description:

    Analyzes the dependencies of a project for undeclared or unused artifacts.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-dependency-analyzer/1.10/maven-dependency-analyzer-1.10.jar
MD5: 8e7f9e272fd68f2d45c89b3b15136e9d
SHA1: 0a7378d4cb2d73e403df605f289197afb1b6a437
SHA256:37c8634fbee43fc1eee7e7a09b2328bcb5523a03d348b8e47154444c14677a81
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-analyzer-1.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-dependency-analyzer	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	dependency	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	implementation-url	https://maven.apache.org/shared/maven-dependency-analyzer/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.shared	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-dependency-analyzer	Highest
Vendor	pom	artifactid	maven-dependency-analyzer	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Dependency Analyzer	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-dependency-analyzer	High
Product	jar	package name	apache	Highest
Product	jar	package name	dependency	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	Implementation-Title	Apache Maven Dependency Analyzer	High
Product	Manifest	implementation-url	https://maven.apache.org/shared/maven-dependency-analyzer/	Low
Product	Manifest	specification-title	Apache Maven Dependency Analyzer	Medium
Product	pom	artifactid	maven-dependency-analyzer	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Dependency Analyzer	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	1.10	High
Version	Manifest	Implementation-Version	1.10	High
Version	pom	parent-version	1.10	Low
Version	pom	version	1.10	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.10 (Confidence:High)

maven-dependency-plugin-3.1.1.jar

Description:

Provides utility goals to work with dependencies like copying, unpacking, analyzing, resolving and many more.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugins/maven-dependency-plugin/3.1.1/maven-dependency-plugin-3.1.1.jar
MD5: a2fac1f3e4ac36699e4473a5c3ac7115
SHA1: e348af6765ac0b96de98983f9ac96df3649f0b69
SHA256:5513748d0fc1ff44b19b7df936b051265dd0357341b37232052c89b89c8ac500
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-plugin-3.1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-dependency-plugin	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	dependency	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugins	Highest
Vendor	Manifest	implementation-url	https://maven.apache.org/plugins/maven-dependency-plugin/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.plugins	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-dependency-plugin	Highest
Vendor	pom	artifactid	maven-dependency-plugin	Low
Vendor	pom	groupid	org.apache.maven.plugins	Highest
Vendor	pom	name	Apache Maven Dependency Plugin	High
Vendor	pom	parent-artifactid	maven-plugins	Low
Product	file	name	maven-dependency-plugin	High
Product	jar	package name	apache	Highest
Product	jar	package name	dependency	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugins	Highest
Product	Manifest	Implementation-Title	Apache Maven Dependency Plugin	High
Product	Manifest	implementation-url	https://maven.apache.org/plugins/maven-dependency-plugin/	Low
Product	Manifest	specification-title	Apache Maven Dependency Plugin	Medium
Product	pom	artifactid	maven-dependency-plugin	Highest
Product	pom	groupid	org.apache.maven.plugins	Highest
Product	pom	name	Apache Maven Dependency Plugin	High
Product	pom	parent-artifactid	maven-plugins	Medium
Version	file	version	3.1.1	High
Version	Manifest	Implementation-Version	3.1.1	High
Version	pom	parent-version	3.1.1	Low
Version	pom	version	3.1.1	Highest

Identifiers

pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1 (Confidence:High)

maven-dependency-tree-3.0.1.jar

Description:

A tree-based API for resolution of Maven project dependencies

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-dependency-tree/3.0.1/maven-dependency-tree-3.0.1.jar
MD5: 5c94d3d8b896f0e9f29295fd46cffaa0
SHA1: e9ae9966f1d3a238004c8b15ca4fd0e03d405424
SHA256:c7d0968a60678fcabd3f6e7ef32812c77f14bb964e66f4ae2b907d4efd675067
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-tree-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-dependency-tree	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	dependency	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	implementation-url	https://maven.apache.org/shared/maven-dependency-tree/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.shared	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-dependency-tree	Highest
Vendor	pom	artifactid	maven-dependency-tree	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Dependency Tree	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-dependency-tree	High
Product	jar	package name	apache	Highest
Product	jar	package name	dependency	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	Implementation-Title	Apache Maven Dependency Tree	High
Product	Manifest	implementation-url	https://maven.apache.org/shared/maven-dependency-tree/	Low
Product	Manifest	specification-title	Apache Maven Dependency Tree	Medium
Product	pom	artifactid	maven-dependency-tree	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Dependency Tree	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.0.1	High
Version	Manifest	Implementation-Version	3.0.1	High
Version	pom	parent-version	3.0.1	Low
Version	pom	version	3.0.1	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1 (Confidence:High)

maven-filtering-3.3.2.jar

Description:

A component to assist in filtering of resource files with properties from a Maven project.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-filtering/3.3.2/maven-filtering-3.3.2.jar
MD5: 416dfdda99fabb27e688f9e5008ccbb9
SHA1: 23bc154ea06ccdf2623650e5339ef3aa1c38f2f5
SHA256:96739b6e16cd6b04529f4527553e92909090f42c222e2401e1df7e7da0cd1e50
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-filtering	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	filtering	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-filtering	Highest
Vendor	pom	artifactid	maven-filtering	Low
Vendor	pom	developer email	adangel@apache.org	Low
Vendor	pom	developer email	agudian@apache.org	Low
Vendor	pom	developer email	aheritier@apache.org	Low
Vendor	pom	developer email	andham@apache.org	Low
Vendor	pom	developer email	baerrach@apache.org	Low
Vendor	pom	developer email	bdemers@apache.org	Low
Vendor	pom	developer email	bentmann@apache.org	Low
Vendor	pom	developer email	bimargulies@apache.org	Low
Vendor	pom	developer email	bmarwell@apache.org	Low
Vendor	pom	developer email	brett@apache.org	Low
Vendor	pom	developer email	brianf@apache.org	Low
Vendor	pom	developer email	carlos@apache.org	Low
Vendor	pom	developer email	chrisgwarp@apache.org	Low
Vendor	pom	developer email	cstamas@apache.org	Low
Vendor	pom	developer email	dantran@apache.org	Low
Vendor	pom	developer email	dbradicich@apache.org	Low
Vendor	pom	developer email	dennisl@apache.org	Low
Vendor	pom	developer email	dfabulich@apache.org	Low
Vendor	pom	developer email	dkulp@apache.org	Low
Vendor	pom	developer email	elharo@apache.org	Low
Vendor	pom	developer email	eolivelli@apache.org	Low
Vendor	pom	developer email	epunzalan@apache.org	Low
Vendor	pom	developer email	evenisse@apache.org	Low
Vendor	pom	developer email	fgiust@apache.org	Low
Vendor	pom	developer email	gboue@apache.org	Low
Vendor	pom	developer email	gnodet@apache.org	Low
Vendor	pom	developer email	godin@apache.org	Low
Vendor	pom	developer email	handyande@apache.org	Low
Vendor	pom	developer email	hboutemy@apache.org	Low
Vendor	pom	developer email	henning@apache.org	Low
Vendor	pom	developer email	igor@ifedorenko.com	Low
Vendor	pom	developer email	imod@apache.org	Low
Vendor	pom	developer email	jason@maven.org	Low
Vendor	pom	developer email	jdcasey@apache.org	Low
Vendor	pom	developer email	jmcconnell@apache.org	Low
Vendor	pom	developer email	joakime@apache.org	Low
Vendor	pom	developer email	jruiz@apache.org	Low
Vendor	pom	developer email	jtolentino@apache.org	Low
Vendor	pom	developer email	kenney@apache.org	Low
Vendor	pom	developer email	khmarbaise@apache.org	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	kwin@apache.org	Low
Vendor	pom	developer email	ltheussl@apache.org	Low
Vendor	pom	developer email	markh@apache.org	Low
Vendor	pom	developer email	martinkanters@apache.org	Low
Vendor	pom	developer email	mfriedenhagen@apache.org	Low
Vendor	pom	developer email	michaelo@apache.org	Low
Vendor	pom	developer email	mmoser@apache.org	Low
Vendor	pom	developer email	mperham@gmail.com	Low
Vendor	pom	developer email	mthmulders@apache.org	Low
Vendor	pom	developer email	olamy@apache.org	Low
Vendor	pom	developer email	pgier@apache.org	Low
Vendor	pom	developer email	pschneider@gmail.com	Low
Vendor	pom	developer email	ptahchiev@apache.org	Low
Vendor	pom	developer email	rafale@apache.org	Low
Vendor	pom	developer email	rfscholte@apache.org	Low
Vendor	pom	developer email	rgoers@apache.org	Low
Vendor	pom	developer email	schulte@apache.org	Low
Vendor	pom	developer email	simonetripodi@apache.org	Low
Vendor	pom	developer email	sjaranowski@apache.org	Low
Vendor	pom	developer email	slachiewicz@apache.org	Low
Vendor	pom	developer email	snicoll@apache.org	Low
Vendor	pom	developer email	sor@apache.org	Low
Vendor	pom	developer email	stephenc@apache.org	Low
Vendor	pom	developer email	struberg@apache.org	Low
Vendor	pom	developer email	tchemit@apache.org	Low
Vendor	pom	developer email	tibordigana@apache.org	Low
Vendor	pom	developer email	trygvis@apache.org	Low
Vendor	pom	developer email	vmassol@apache.org	Low
Vendor	pom	developer email	vsiveton@apache.org	Low
Vendor	pom	developer email	wfay@apache.org	Low
Vendor	pom	developer email	wsmoak@apache.org	Low
Vendor	pom	developer id	adangel	Medium
Vendor	pom	developer id	agudian	Medium
Vendor	pom	developer id	aheritier	Medium
Vendor	pom	developer id	andham	Medium
Vendor	pom	developer id	aramirez	Medium
Vendor	pom	developer id	baerrach	Medium
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	bdemers	Medium
Vendor	pom	developer id	bellingard	Medium
Vendor	pom	developer id	bentmann	Medium
Vendor	pom	developer id	bimargulies	Medium
Vendor	pom	developer id	bmarwell	Medium
Vendor	pom	developer id	brett	Medium
Vendor	pom	developer id	brianf	Medium
Vendor	pom	developer id	carlos	Medium
Vendor	pom	developer id	chrisgwarp	Medium
Vendor	pom	developer id	chrisjs	Medium
Vendor	pom	developer id	cstamas	Medium
Vendor	pom	developer id	dantran	Medium
Vendor	pom	developer id	dblevins	Medium
Vendor	pom	developer id	dbradicich	Medium
Vendor	pom	developer id	dennisl	Medium
Vendor	pom	developer id	dfabulich	Medium
Vendor	pom	developer id	dkulp	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	elharo	Medium
Vendor	pom	developer id	eolivelli	Medium
Vendor	pom	developer id	epunzalan	Medium
Vendor	pom	developer id	evenisse	Medium
Vendor	pom	developer id	felipeal	Medium
Vendor	pom	developer id	fgiust	Medium
Vendor	pom	developer id	gboue	Medium
Vendor	pom	developer id	gnodet	Medium
Vendor	pom	developer id	godin	Medium
Vendor	pom	developer id	handyande	Medium
Vendor	pom	developer id	hboutemy	Medium
Vendor	pom	developer id	henning	Medium
Vendor	pom	developer id	ifedorenko	Medium
Vendor	pom	developer id	imod	Medium
Vendor	pom	developer id	jdcasey	Medium
Vendor	pom	developer id	jjensen	Medium
Vendor	pom	developer id	jmcconnell	Medium
Vendor	pom	developer id	joakime	Medium
Vendor	pom	developer id	jruiz	Medium
Vendor	pom	developer id	jstrachan	Medium
Vendor	pom	developer id	jtolentino	Medium
Vendor	pom	developer id	jvanzyl	Medium
Vendor	pom	developer id	kenney	Medium
Vendor	pom	developer id	khmarbaise	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	kwin	Medium
Vendor	pom	developer id	ltheussl	Medium
Vendor	pom	developer id	markh	Medium
Vendor	pom	developer id	martinkanters	Medium
Vendor	pom	developer id	mauro	Medium
Vendor	pom	developer id	mfriedenhagen	Medium
Vendor	pom	developer id	michaelo	Medium
Vendor	pom	developer id	mkleint	Medium
Vendor	pom	developer id	mmoser	Medium
Vendor	pom	developer id	mperham	Medium
Vendor	pom	developer id	mthmulders	Medium
Vendor	pom	developer id	nicolas	Medium
Vendor	pom	developer id	oching	Medium
Vendor	pom	developer id	ogusakov	Medium
Vendor	pom	developer id	olamy	Medium
Vendor	pom	developer id	pgier	Medium
Vendor	pom	developer id	pschneider	Medium
Vendor	pom	developer id	ptahchiev	Medium
Vendor	pom	developer id	rafale	Medium
Vendor	pom	developer id	rfscholte	Medium
Vendor	pom	developer id	rgoers	Medium
Vendor	pom	developer id	rinku	Medium
Vendor	pom	developer id	schulte	Medium
Vendor	pom	developer id	shinobu	Medium
Vendor	pom	developer id	simonetripodi	Medium
Vendor	pom	developer id	sjaranowski	Medium
Vendor	pom	developer id	slachiewicz	Medium
Vendor	pom	developer id	smorgrav	Medium
Vendor	pom	developer id	snicoll	Medium
Vendor	pom	developer id	sor	Medium
Vendor	pom	developer id	stephenc	Medium
Vendor	pom	developer id	struberg	Medium
Vendor	pom	developer id	tchemit	Medium
Vendor	pom	developer id	tibordigana	Medium
Vendor	pom	developer id	trygvis	Medium
Vendor	pom	developer id	vmassol	Medium
Vendor	pom	developer id	vsiveton	Medium
Vendor	pom	developer id	wfay	Medium
Vendor	pom	developer id	wsmoak	Medium
Vendor	pom	developer name	Allan Q. Ramirez	Medium
Vendor	pom	developer name	Anders Hammar	Medium
Vendor	pom	developer name	Andreas Dangel	Medium
Vendor	pom	developer name	Andreas Gudian	Medium
Vendor	pom	developer name	Andrew Williams	Medium
Vendor	pom	developer name	Arnaud Héritier	Medium
Vendor	pom	developer name	Barrie Treloar	Medium
Vendor	pom	developer name	Benjamin Bentmann	Medium
Vendor	pom	developer name	Benjamin Marwell	Medium
Vendor	pom	developer name	Benson Margulies	Medium
Vendor	pom	developer name	Brett Porter	Medium
Vendor	pom	developer name	Brian Demers	Medium
Vendor	pom	developer name	Brian Fox	Medium
Vendor	pom	developer name	Carlos Sanchez	Medium
Vendor	pom	developer name	Chris Graham	Medium
Vendor	pom	developer name	Chris Stevenson	Medium
Vendor	pom	developer name	Christian Schulte	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Damian Bradicich	Medium
Vendor	pom	developer name	Dan Tran	Medium
Vendor	pom	developer name	Daniel Fabulich	Medium
Vendor	pom	developer name	Daniel Kulp	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	David Blevins	Medium
Vendor	pom	developer name	Dennis Lundberg	Medium
Vendor	pom	developer name	Dominik Bartholdi	Medium
Vendor	pom	developer name	Edwin Punzalan	Medium
Vendor	pom	developer name	Elliotte Rusty Harold	Medium
Vendor	pom	developer name	Emmanuel Venisse	Medium
Vendor	pom	developer name	Enrico Olivelli	Medium
Vendor	pom	developer name	Ernesto Tolentino Jr.	Medium
Vendor	pom	developer name	Evgeny Mandrikov	Medium
Vendor	pom	developer name	Fabrice Bellingard	Medium
Vendor	pom	developer name	Fabrizio Giustina	Medium
Vendor	pom	developer name	Felipe Leme	Medium
Vendor	pom	developer name	Guillaume Boué	Medium
Vendor	pom	developer name	Guillaume Nodet	Medium
Vendor	pom	developer name	Henning Schmiedehausen	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Hervé Boutemy	Medium
Vendor	pom	developer name	Igor Fedorenko	Medium
Vendor	pom	developer name	James Strachan	Medium
Vendor	pom	developer name	Jason van Zyl	Medium
Vendor	pom	developer name	Jeff Jensen	Medium
Vendor	pom	developer name	Jesse McConnell	Medium
Vendor	pom	developer name	Joakim Erdfelt	Medium
Vendor	pom	developer name	John Casey	Medium
Vendor	pom	developer name	Johnny Ruiz III	Medium
Vendor	pom	developer name	Karl Heinz Marbaise	Medium
Vendor	pom	developer name	Kenney Westerhof	Medium
Vendor	pom	developer name	Konrad Windszus	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Lukas Theussl	Medium
Vendor	pom	developer name	Maarten Mulders	Medium
Vendor	pom	developer name	Manfred Moser	Medium
Vendor	pom	developer name	Maria Odea B. Ching	Medium
Vendor	pom	developer name	Mark Hobson	Medium
Vendor	pom	developer name	Mark Struberg	Medium
Vendor	pom	developer name	Martin Kanters	Medium
Vendor	pom	developer name	Mauro Talevi	Medium
Vendor	pom	developer name	Michael Osipov	Medium
Vendor	pom	developer name	Mike Perham	Medium
Vendor	pom	developer name	Milos Kleint	Medium
Vendor	pom	developer name	Mirko Friedenhagen	Medium
Vendor	pom	developer name	Nicolas de Loof	Medium
Vendor	pom	developer name	Oleg Gusakov	Medium
Vendor	pom	developer name	Olivier Lamy	Medium
Vendor	pom	developer name	Patrick Schneider	Medium
Vendor	pom	developer name	Paul Gier	Medium
Vendor	pom	developer name	Petar Tahchiev	Medium
Vendor	pom	developer name	Rahul Thakur	Medium
Vendor	pom	developer name	Ralph Goers	Medium
Vendor	pom	developer name	Raphaël Piéroni	Medium
Vendor	pom	developer name	Robert Scholte	Medium
Vendor	pom	developer name	Shinobu Kuwai	Medium
Vendor	pom	developer name	Simone Tripodi	Medium
Vendor	pom	developer name	Slawomir Jaranowski	Medium
Vendor	pom	developer name	Stephane Nicoll	Medium
Vendor	pom	developer name	Stephen Connolly	Medium
Vendor	pom	developer name	Sylwester Lachiewicz	Medium
Vendor	pom	developer name	Tamas Cservenak	Medium
Vendor	pom	developer name	Tibor Digaňa	Medium
Vendor	pom	developer name	Tony Chemit	Medium
Vendor	pom	developer name	Torbjorn Eikli Smorgrav	Medium
Vendor	pom	developer name	Trygve Laugstol	Medium
Vendor	pom	developer name	Vincent Massol	Medium
Vendor	pom	developer name	Vincent Siveton	Medium
Vendor	pom	developer name	Wayne Fay	Medium
Vendor	pom	developer name	Wendy Smoak	Medium
Vendor	pom	developer org	ASF	Medium
Vendor	pom	developer org	CodeLutin	Medium
Vendor	pom	developer org	Cognizant Netcentric	Medium
Vendor	pom	developer org	Dexem	Medium
Vendor	pom	developer org	Diennea	Medium
Vendor	pom	developer org	IBM	Medium
Vendor	pom	developer org	Info Support	Medium
Vendor	pom	developer org	Intuit	Medium
Vendor	pom	developer org	JPoint	Medium
Vendor	pom	developer org	Neonics	Medium
Vendor	pom	developer org	openmind	Medium
Vendor	pom	developer org	Red Hat	Medium
Vendor	pom	developer org	SonarSource	Medium
Vendor	pom	developer org	Sonatype	Medium
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Filtering	High
Vendor	pom	organization name	The Apache Software Foundation	High
Vendor	pom	organization url	https://www.apache.org/	Medium
Vendor	pom	parent-artifactid	maven-shared-components	Low
Vendor	pom	url	https://maven.apache.org/shared/maven-filtering/	Highest
Product	file	name	maven-filtering	High
Product	jar	package name	apache	Highest
Product	jar	package name	filtering	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Apache Maven Filtering	High
Product	Manifest	specification-title	Apache Maven Filtering	Medium
Product	pom	artifactid	maven-filtering	Highest
Product	pom	developer email	adangel@apache.org	Low
Product	pom	developer email	agudian@apache.org	Low
Product	pom	developer email	aheritier@apache.org	Low
Product	pom	developer email	andham@apache.org	Low
Product	pom	developer email	baerrach@apache.org	Low
Product	pom	developer email	bdemers@apache.org	Low
Product	pom	developer email	bentmann@apache.org	Low
Product	pom	developer email	bimargulies@apache.org	Low
Product	pom	developer email	bmarwell@apache.org	Low
Product	pom	developer email	brett@apache.org	Low
Product	pom	developer email	brianf@apache.org	Low
Product	pom	developer email	carlos@apache.org	Low
Product	pom	developer email	chrisgwarp@apache.org	Low
Product	pom	developer email	cstamas@apache.org	Low
Product	pom	developer email	dantran@apache.org	Low
Product	pom	developer email	dbradicich@apache.org	Low
Product	pom	developer email	dennisl@apache.org	Low
Product	pom	developer email	dfabulich@apache.org	Low
Product	pom	developer email	dkulp@apache.org	Low
Product	pom	developer email	elharo@apache.org	Low
Product	pom	developer email	eolivelli@apache.org	Low
Product	pom	developer email	epunzalan@apache.org	Low
Product	pom	developer email	evenisse@apache.org	Low
Product	pom	developer email	fgiust@apache.org	Low
Product	pom	developer email	gboue@apache.org	Low
Product	pom	developer email	gnodet@apache.org	Low
Product	pom	developer email	godin@apache.org	Low
Product	pom	developer email	handyande@apache.org	Low
Product	pom	developer email	hboutemy@apache.org	Low
Product	pom	developer email	henning@apache.org	Low
Product	pom	developer email	igor@ifedorenko.com	Low
Product	pom	developer email	imod@apache.org	Low
Product	pom	developer email	jason@maven.org	Low
Product	pom	developer email	jdcasey@apache.org	Low
Product	pom	developer email	jmcconnell@apache.org	Low
Product	pom	developer email	joakime@apache.org	Low
Product	pom	developer email	jruiz@apache.org	Low
Product	pom	developer email	jtolentino@apache.org	Low
Product	pom	developer email	kenney@apache.org	Low
Product	pom	developer email	khmarbaise@apache.org	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	kwin@apache.org	Low
Product	pom	developer email	ltheussl@apache.org	Low
Product	pom	developer email	markh@apache.org	Low
Product	pom	developer email	martinkanters@apache.org	Low
Product	pom	developer email	mfriedenhagen@apache.org	Low
Product	pom	developer email	michaelo@apache.org	Low
Product	pom	developer email	mmoser@apache.org	Low
Product	pom	developer email	mperham@gmail.com	Low
Product	pom	developer email	mthmulders@apache.org	Low
Product	pom	developer email	olamy@apache.org	Low
Product	pom	developer email	pgier@apache.org	Low
Product	pom	developer email	pschneider@gmail.com	Low
Product	pom	developer email	ptahchiev@apache.org	Low
Product	pom	developer email	rafale@apache.org	Low
Product	pom	developer email	rfscholte@apache.org	Low
Product	pom	developer email	rgoers@apache.org	Low
Product	pom	developer email	schulte@apache.org	Low
Product	pom	developer email	simonetripodi@apache.org	Low
Product	pom	developer email	sjaranowski@apache.org	Low
Product	pom	developer email	slachiewicz@apache.org	Low
Product	pom	developer email	snicoll@apache.org	Low
Product	pom	developer email	sor@apache.org	Low
Product	pom	developer email	stephenc@apache.org	Low
Product	pom	developer email	struberg@apache.org	Low
Product	pom	developer email	tchemit@apache.org	Low
Product	pom	developer email	tibordigana@apache.org	Low
Product	pom	developer email	trygvis@apache.org	Low
Product	pom	developer email	vmassol@apache.org	Low
Product	pom	developer email	vsiveton@apache.org	Low
Product	pom	developer email	wfay@apache.org	Low
Product	pom	developer email	wsmoak@apache.org	Low
Product	pom	developer id	adangel	Low
Product	pom	developer id	agudian	Low
Product	pom	developer id	aheritier	Low
Product	pom	developer id	andham	Low
Product	pom	developer id	aramirez	Low
Product	pom	developer id	baerrach	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	bdemers	Low
Product	pom	developer id	bellingard	Low
Product	pom	developer id	bentmann	Low
Product	pom	developer id	bimargulies	Low
Product	pom	developer id	bmarwell	Low
Product	pom	developer id	brett	Low
Product	pom	developer id	brianf	Low
Product	pom	developer id	carlos	Low
Product	pom	developer id	chrisgwarp	Low
Product	pom	developer id	chrisjs	Low
Product	pom	developer id	cstamas	Low
Product	pom	developer id	dantran	Low
Product	pom	developer id	dblevins	Low
Product	pom	developer id	dbradicich	Low
Product	pom	developer id	dennisl	Low
Product	pom	developer id	dfabulich	Low
Product	pom	developer id	dkulp	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	elharo	Low
Product	pom	developer id	eolivelli	Low
Product	pom	developer id	epunzalan	Low
Product	pom	developer id	evenisse	Low
Product	pom	developer id	felipeal	Low
Product	pom	developer id	fgiust	Low
Product	pom	developer id	gboue	Low
Product	pom	developer id	gnodet	Low
Product	pom	developer id	godin	Low
Product	pom	developer id	handyande	Low
Product	pom	developer id	hboutemy	Low
Product	pom	developer id	henning	Low
Product	pom	developer id	ifedorenko	Low
Product	pom	developer id	imod	Low
Product	pom	developer id	jdcasey	Low
Product	pom	developer id	jjensen	Low
Product	pom	developer id	jmcconnell	Low
Product	pom	developer id	joakime	Low
Product	pom	developer id	jruiz	Low
Product	pom	developer id	jstrachan	Low
Product	pom	developer id	jtolentino	Low
Product	pom	developer id	jvanzyl	Low
Product	pom	developer id	kenney	Low
Product	pom	developer id	khmarbaise	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	kwin	Low
Product	pom	developer id	ltheussl	Low
Product	pom	developer id	markh	Low
Product	pom	developer id	martinkanters	Low
Product	pom	developer id	mauro	Low
Product	pom	developer id	mfriedenhagen	Low
Product	pom	developer id	michaelo	Low
Product	pom	developer id	mkleint	Low
Product	pom	developer id	mmoser	Low
Product	pom	developer id	mperham	Low
Product	pom	developer id	mthmulders	Low
Product	pom	developer id	nicolas	Low
Product	pom	developer id	oching	Low
Product	pom	developer id	ogusakov	Low
Product	pom	developer id	olamy	Low
Product	pom	developer id	pgier	Low
Product	pom	developer id	pschneider	Low
Product	pom	developer id	ptahchiev	Low
Product	pom	developer id	rafale	Low
Product	pom	developer id	rfscholte	Low
Product	pom	developer id	rgoers	Low
Product	pom	developer id	rinku	Low
Product	pom	developer id	schulte	Low
Product	pom	developer id	shinobu	Low
Product	pom	developer id	simonetripodi	Low
Product	pom	developer id	sjaranowski	Low
Product	pom	developer id	slachiewicz	Low
Product	pom	developer id	smorgrav	Low
Product	pom	developer id	snicoll	Low
Product	pom	developer id	sor	Low
Product	pom	developer id	stephenc	Low
Product	pom	developer id	struberg	Low
Product	pom	developer id	tchemit	Low
Product	pom	developer id	tibordigana	Low
Product	pom	developer id	trygvis	Low
Product	pom	developer id	vmassol	Low
Product	pom	developer id	vsiveton	Low
Product	pom	developer id	wfay	Low
Product	pom	developer id	wsmoak	Low
Product	pom	developer name	Allan Q. Ramirez	Low
Product	pom	developer name	Anders Hammar	Low
Product	pom	developer name	Andreas Dangel	Low
Product	pom	developer name	Andreas Gudian	Low
Product	pom	developer name	Andrew Williams	Low
Product	pom	developer name	Arnaud Héritier	Low
Product	pom	developer name	Barrie Treloar	Low
Product	pom	developer name	Benjamin Bentmann	Low
Product	pom	developer name	Benjamin Marwell	Low
Product	pom	developer name	Benson Margulies	Low
Product	pom	developer name	Brett Porter	Low
Product	pom	developer name	Brian Demers	Low
Product	pom	developer name	Brian Fox	Low
Product	pom	developer name	Carlos Sanchez	Low
Product	pom	developer name	Chris Graham	Low
Product	pom	developer name	Chris Stevenson	Low
Product	pom	developer name	Christian Schulte	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Damian Bradicich	Low
Product	pom	developer name	Dan Tran	Low
Product	pom	developer name	Daniel Fabulich	Low
Product	pom	developer name	Daniel Kulp	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	David Blevins	Low
Product	pom	developer name	Dennis Lundberg	Low
Product	pom	developer name	Dominik Bartholdi	Low
Product	pom	developer name	Edwin Punzalan	Low
Product	pom	developer name	Elliotte Rusty Harold	Low
Product	pom	developer name	Emmanuel Venisse	Low
Product	pom	developer name	Enrico Olivelli	Low
Product	pom	developer name	Ernesto Tolentino Jr.	Low
Product	pom	developer name	Evgeny Mandrikov	Low
Product	pom	developer name	Fabrice Bellingard	Low
Product	pom	developer name	Fabrizio Giustina	Low
Product	pom	developer name	Felipe Leme	Low
Product	pom	developer name	Guillaume Boué	Low
Product	pom	developer name	Guillaume Nodet	Low
Product	pom	developer name	Henning Schmiedehausen	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Hervé Boutemy	Low
Product	pom	developer name	Igor Fedorenko	Low
Product	pom	developer name	James Strachan	Low
Product	pom	developer name	Jason van Zyl	Low
Product	pom	developer name	Jeff Jensen	Low
Product	pom	developer name	Jesse McConnell	Low
Product	pom	developer name	Joakim Erdfelt	Low
Product	pom	developer name	John Casey	Low
Product	pom	developer name	Johnny Ruiz III	Low
Product	pom	developer name	Karl Heinz Marbaise	Low
Product	pom	developer name	Kenney Westerhof	Low
Product	pom	developer name	Konrad Windszus	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Lukas Theussl	Low
Product	pom	developer name	Maarten Mulders	Low
Product	pom	developer name	Manfred Moser	Low
Product	pom	developer name	Maria Odea B. Ching	Low
Product	pom	developer name	Mark Hobson	Low
Product	pom	developer name	Mark Struberg	Low
Product	pom	developer name	Martin Kanters	Low
Product	pom	developer name	Mauro Talevi	Low
Product	pom	developer name	Michael Osipov	Low
Product	pom	developer name	Mike Perham	Low
Product	pom	developer name	Milos Kleint	Low
Product	pom	developer name	Mirko Friedenhagen	Low
Product	pom	developer name	Nicolas de Loof	Low
Product	pom	developer name	Oleg Gusakov	Low
Product	pom	developer name	Olivier Lamy	Low
Product	pom	developer name	Patrick Schneider	Low
Product	pom	developer name	Paul Gier	Low
Product	pom	developer name	Petar Tahchiev	Low
Product	pom	developer name	Rahul Thakur	Low
Product	pom	developer name	Ralph Goers	Low
Product	pom	developer name	Raphaël Piéroni	Low
Product	pom	developer name	Robert Scholte	Low
Product	pom	developer name	Shinobu Kuwai	Low
Product	pom	developer name	Simone Tripodi	Low
Product	pom	developer name	Slawomir Jaranowski	Low
Product	pom	developer name	Stephane Nicoll	Low
Product	pom	developer name	Stephen Connolly	Low
Product	pom	developer name	Sylwester Lachiewicz	Low
Product	pom	developer name	Tamas Cservenak	Low
Product	pom	developer name	Tibor Digaňa	Low
Product	pom	developer name	Tony Chemit	Low
Product	pom	developer name	Torbjorn Eikli Smorgrav	Low
Product	pom	developer name	Trygve Laugstol	Low
Product	pom	developer name	Vincent Massol	Low
Product	pom	developer name	Vincent Siveton	Low
Product	pom	developer name	Wayne Fay	Low
Product	pom	developer name	Wendy Smoak	Low
Product	pom	developer org	ASF	Low
Product	pom	developer org	CodeLutin	Low
Product	pom	developer org	Cognizant Netcentric	Low
Product	pom	developer org	Dexem	Low
Product	pom	developer org	Diennea	Low
Product	pom	developer org	IBM	Low
Product	pom	developer org	Info Support	Low
Product	pom	developer org	Intuit	Low
Product	pom	developer org	JPoint	Low
Product	pom	developer org	Neonics	Low
Product	pom	developer org	openmind	Low
Product	pom	developer org	Red Hat	Low
Product	pom	developer org	SonarSource	Low
Product	pom	developer org	Sonatype	Low
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Filtering	High
Product	pom	organization name	The Apache Software Foundation	Low
Product	pom	organization url	https://www.apache.org/	Low
Product	pom	parent-artifactid	maven-shared-components	Medium
Product	pom	url	https://maven.apache.org/shared/maven-filtering/	Medium
Version	file	version	3.3.2	High
Version	Manifest	Implementation-Version	3.3.2	High
Version	pom	parent-version	3.3.2	Low
Version	pom	version	3.3.2	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-filtering@3.3.2 (Confidence:High)

maven-model-3.9.9.jar

Description:

Model for Maven POM (Project Object Model)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-model/3.9.9/maven-model-3.9.9.jar
MD5: 813d4aceaaa8e16f8a83c95a96afa22c
SHA1: 585bff8f220ddc1c08c5263b7dee26c49fc7df94
SHA256:8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-model-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model	Highest
Vendor	pom	artifactid	maven-model	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Model	High
Product	Manifest	specification-title	Maven Model	Medium
Product	pom	artifactid	maven-model	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model@3.9.9 (Confidence:High)

maven-model-builder-3.9.9.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-model-builder/3.9.9/maven-model-builder-3.9.9.jar
MD5: a48ea3e9ceec85a9bff88e88048148d9
SHA1: 6dcd87768eb615301aef0c2221dd168a2d36bc7b
SHA256:a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-model-builder-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-model-builder	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	inheritance	Highest
Vendor	jar	package name	interpolation	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	model	Highest
Vendor	jar	package name	profile	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-model-builder	Highest
Vendor	pom	artifactid	maven-model-builder	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Model Builder	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-model-builder	High
Product	jar	package name	apache	Highest
Product	jar	package name	inheritance	Highest
Product	jar	package name	interpolation	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	model	Highest
Product	jar	package name	profile	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Model Builder	High
Product	Manifest	specification-title	Maven Model Builder	Medium
Product	pom	artifactid	maven-model-builder	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Model Builder	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-model-builder@3.9.9 (Confidence:High)

maven-plugin-annotations-3.15.1.jar

Description:

Java annotations to use in Mojos

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugin-tools/maven-plugin-annotations/3.15.1/maven-plugin-annotations-3.15.1.jar
MD5: 0723da1364961f527fbfce10c8b9c7dd
SHA1: ca287d08819d5d87f3a06b8f065a79eb33c3ecc3
SHA256:b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-plugin-annotations-3.15.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-annotations	Highest
Vendor	pom	artifactid	maven-plugin-annotations	Low
Vendor	pom	groupid	org.apache.maven.plugin-tools	Highest
Vendor	pom	name	Maven Plugin Tools Java Annotations	High
Vendor	pom	parent-artifactid	maven-plugin-tools	Low
Product	file	name	maven-plugin-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Maven Plugin Tools Java Annotations	High
Product	Manifest	specification-title	Maven Plugin Tools Java Annotations	Medium
Product	pom	artifactid	maven-plugin-annotations	Highest
Product	pom	groupid	org.apache.maven.plugin-tools	Highest
Product	pom	name	Maven Plugin Tools Java Annotations	High
Product	pom	parent-artifactid	maven-plugin-tools	Medium
Version	file	version	3.15.1	High
Version	Manifest	Implementation-Version	3.15.1	High
Version	pom	version	3.15.1	Highest

Identifiers

pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1 (Confidence:High)

maven-plugin-api-3.9.9.jar

Description:

The API for plugins - Mojos - development.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-plugin-api/3.9.9/maven-plugin-api-3.9.9.jar
MD5: 0bf1ae393ffac0c034ce8f3a4b7fc406
SHA1: 7e06aef37b14f8452928e5efaa88bcf2ee8aed02
SHA256:2b491d38db45b0e8eef522e8f7889a3366e546e58b376b07fcb56e34c424e932
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-plugin-api-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-plugin-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	plugin	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-plugin-api	Highest
Vendor	pom	artifactid	maven-plugin-api	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Plugin API	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-plugin-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	plugin	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Plugin API	High
Product	Manifest	specification-title	Maven Plugin API	Medium
Product	pom	artifactid	maven-plugin-api	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Plugin API	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-plugin-api@3.9.9 (Confidence:High)

maven-repository-metadata-3.9.9.jar

Description:

Per-directory local and remote repository metadata.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-repository-metadata/3.9.9/maven-repository-metadata-3.9.9.jar
MD5: d341cdcc9abac2d01546301a305f12b3
SHA1: 33a43f0af3371225d1dcaaa20a824df59c692172
SHA256:137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-repository-metadata-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-repository-metadata	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-repository-metadata	Highest
Vendor	pom	artifactid	maven-repository-metadata	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Repository Metadata Model	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-repository-metadata	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	repository	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Repository Metadata Model	High
Product	Manifest	specification-title	Maven Repository Metadata Model	Medium
Product	pom	artifactid	maven-repository-metadata	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Repository Metadata Model	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9 (Confidence:High)

maven-resolver-api-1.9.22.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-api/1.9.22/maven-resolver-api-1.9.22.jar
MD5: c59d27b3750461be99f8d38e1f503f56
SHA1: 756660687ea077b85be02b019d593ef2758e7db6
SHA256:63f5f665e44a09ef55463b3b91fda0b78ff07dd24b1060d56e79c10b6e32cbfb
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-api	High
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-api/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.api	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-api	Highest
Vendor	pom	artifactid	maven-resolver-api	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver API	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-api	High
Product	jar	package name	artifact	Highest
Product	jar	package name	repository	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-api/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver API	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.api	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver API	High
Product	Manifest	specification-title	Maven Artifact Resolver API	Medium
Product	pom	artifactid	maven-resolver-api	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver API	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.22	High
Version	Manifest	Bundle-Version	1.9.22	High
Version	Manifest	Implementation-Version	1.9.22	High
Version	pom	version	1.9.22	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22 (Confidence:High)

maven-resolver-impl-1.9.22.jar

Description:

An implementation of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-impl/1.9.22/maven-resolver-impl-1.9.22.jar
MD5: 965f1348220f046c6cbde059c971685d
SHA1: 19b7a728c9000f8db615f64552d95fe74b413617
SHA256:e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-impl	High
Vendor	jar	package name	impl	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.impl	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-impl/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.impl	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-impl	Highest
Vendor	pom	artifactid	maven-resolver-impl	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Implementation	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-impl	High
Product	jar	package name	impl	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.impl	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-impl/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Implementation	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.impl	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Implementation	High
Product	Manifest	specification-title	Maven Artifact Resolver Implementation	Medium
Product	pom	artifactid	maven-resolver-impl	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Implementation	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.22	High
Version	Manifest	Bundle-Version	1.9.22	High
Version	Manifest	Implementation-Version	1.9.22	High
Version	pom	version	1.9.22	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22 (Confidence:High)

maven-resolver-named-locks-1.9.22.jar

Description:

A synchronization utility implementation using Named locks.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-named-locks/1.9.22/maven-resolver-named-locks-1.9.22.jar
MD5: 3d3855f4775bc27f9962f999ea88919b
SHA1: 121433b079aad9be7ed266b19f2122eeb0e2d111
SHA256:0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-named-locks	High
Vendor	jar	package name	named	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.named.locks	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-named-locks/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.named.locks	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-named-locks	Highest
Vendor	pom	artifactid	maven-resolver-named-locks	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Named Locks	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-named-locks	High
Product	jar	package name	named	Highest
Product	jar	package name	support	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.named.locks	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-named-locks/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Named Locks	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.named.locks	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Named Locks	High
Product	Manifest	specification-title	Maven Artifact Resolver Named Locks	Medium
Product	pom	artifactid	maven-resolver-named-locks	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Named Locks	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.22	High
Version	Manifest	Bundle-Version	1.9.22	High
Version	Manifest	Implementation-Version	1.9.22	High
Version	pom	version	1.9.22	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22 (Confidence:High)

maven-resolver-provider-3.9.9.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-resolver-provider/3.9.9/maven-resolver-provider-3.9.9.jar
MD5: ea2fccfc4c499dbaa570a26da14050d9
SHA1: ea361822cd25ae6c9153c594aef805e853031224
SHA256:5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-resolver-provider-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-provider	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	repository	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-provider	Highest
Vendor	pom	artifactid	maven-resolver-provider	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Artifact Resolver Provider	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-resolver-provider	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	repository	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Artifact Resolver Provider	High
Product	Manifest	specification-title	Maven Artifact Resolver Provider	Medium
Product	pom	artifactid	maven-resolver-provider	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Artifact Resolver Provider	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9 (Confidence:High)

maven-resolver-spi-1.9.22.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-spi/1.9.22/maven-resolver-spi-1.9.22.jar
MD5: 7ae784f1d4088fff396386ed6966cafc
SHA1: c3101acaa4ec053557028cf1917f1d22112b100d
SHA256:99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-spi	High
Vendor	jar	package name	spi	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.spi	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-spi/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.spi	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-spi	Highest
Vendor	pom	artifactid	maven-resolver-spi	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver SPI	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-spi	High
Product	jar	package name	spi	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.spi	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-spi/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver SPI	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.spi	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver SPI	High
Product	Manifest	specification-title	Maven Artifact Resolver SPI	Medium
Product	pom	artifactid	maven-resolver-spi	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver SPI	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.22	High
Version	Manifest	Bundle-Version	1.9.22	High
Version	Manifest	Implementation-Version	1.9.22	High
Version	pom	version	1.9.22	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22 (Confidence:High)

maven-resolver-util-1.9.22.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"

File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-util/1.9.22/maven-resolver-util-1.9.22.jar
MD5: 4e84c0379667d2436a99fced60a74b5d
SHA1: d5febed69ca2fe0dacffec95b6cb0760b0270fd1
SHA256:4aaea1584c39294ca926fc474723d9684473609ef4490c4eb169d6ea7daca6b5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-resolver-util	High
Vendor	jar	package name	artifact	Highest
Vendor	jar	package name	repository	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	automatic-module-name	org.apache.maven.resolver.util	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Vendor	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-util/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.maven.resolver.util	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-resolver-util	Highest
Vendor	pom	artifactid	maven-resolver-util	Low
Vendor	pom	groupid	org.apache.maven.resolver	Highest
Vendor	pom	name	Maven Artifact Resolver Utilities	High
Vendor	pom	parent-artifactid	maven-resolver	Low
Product	file	name	maven-resolver-util	High
Product	jar	package name	artifact	Highest
Product	jar	package name	repository	Highest
Product	jar	package name	util	Highest
Product	Manifest	automatic-module-name	org.apache.maven.resolver.util	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-developers	khmarbaise;email="khmarbaise@apache.org";name="Karl Heinz Marbaise";roles="PMC Chair";timezone="+1",aheritier;email="aheritier@apache.org";name="Arnaud Héritier";roles="PMC Member";timezone="+1",andham;email="andham@apache.org";name="Anders Hammar";roles="PMC Member";timezone="+1",baerrach;email="baerrach@apache.org";name="Barrie Treloar";roles="PMC Member";timezone="Australia/Adelaide",bimargulies;email="bimargulies@apache.org";name="Benson Margulies";roles="PMC Member";timezone="America/New_York",bmarwell;email="bmarwell@apache.org";name="Benjamin Marwell";organization=ASF;roles="PMC Member";timezone="Europe/Berlin",brianf;email="brianf@apache.org";name="Brian Fox";organization=Sonatype;roles="PMC Member";timezone=-5,cstamas;email="cstamas@apache.org";name="Tamas Cservenak";roles="PMC Member";timezone="+1",dennisl;email="dennisl@apache.org";name="Dennis Lundberg";organization=ASF;roles="PMC Member";timezone="+1",dkulp;email="dkulp@apache.org";name="Daniel Kulp";organization=ASF;roles="PMC Member";timezone=-5,evenisse;email="evenisse@apache.org";name="Emmanuel Venisse";organization=ASF;roles="PMC Member";timezone="+1",gboue;email="gboue@apache.org";name="Guillaume Boué";roles="PMC Member";timezone="Europe/Paris",gnodet;email="gnodet@apache.org";name="Guillaume Nodet";organization="Red Hat";roles="PMC Member";timezone="Europe/Paris",henning;email="henning@apache.org";name="Henning Schmiedehausen";organization=ASF;roles="PMC Member";timezone="America/Los_Angeles",hboutemy;email="hboutemy@apache.org";name="Hervé Boutemy";organization=ASF;roles="PMC Member";timezone="Europe/Paris",ifedorenko;email="igor@ifedorenko.com";name="Igor Fedorenko";organization=Sonatype;roles="PMC Member";timezone=-5,jvanzyl;email="jason@maven.org";name="Jason van Zyl";roles="PMC Member";timezone=-5,krosenvold;email="krosenvold@apache.org";name="Kristian Rosenvold";roles="PMC Member";timezone="+1",kwin;email="kwin@apache.org";name="Konrad Windszus";organization="Cognizant Netcentric";roles="PMC Member";timezone="Europe/Berlin",mkleint;name="Milos Kleint";roles="PMC Member",mthmulders;email="mthmulders@apache.org";name="Maarten Mulders";organization="Info Support";roles="PMC Member";timezone="Europe/Amsterdam",olamy;email="olamy@apache.org";name="Olivier Lamy";roles="PMC Member";timezone="Australia/Brisbane",michaelo;email="michaelo@apache.org";name="Michael Osipov";roles="PMC Member";timezone="Europe/Berlin",rfscholte;email="rfscholte@apache.org";name="Robert Scholte";roles="PMC Member";timezone="Europe/Amsterdam",rgoers;email="rgoers@apache.org";name="Ralph Goers";organization=Intuit;roles="PMC Member";timezone=-8,sjaranowski;email="sjaranowski@apache.org";name="Slawomir Jaranowski";roles="PMC Member";timezone="Europe/Warsaw",stephenc;email="stephenc@apache.org";name="Stephen Connolly";roles="PMC Member";timezone=0,slachiewicz;email="slachiewicz@apache.org";name="Sylwester Lachiewicz";roles="PMC Member";timezone="Europe/Warsaw",struberg;email="struberg@apache.org";name="Mark Struberg";roles="PMC Member",tibordigana;email="tibordigana@apache.org";name="Tibor Digaňa";roles="PMC Member";timezone="Europe/Bratislava",vsiveton;email="vsiveton@apache.org";name="Vincent Siveton";organization=ASF;roles="PMC Member";timezone=-5,wfay;email="wfay@apache.org";name="Wayne Fay";organization=ASF;roles="PMC Member";timezone=-6,adangel;email="adangel@apache.org";name="Andreas Dangel";roles=Committer;timezone="Europe/Berlin",bdemers;email="bdemers@apache.org";name="Brian Demers";organization=Sonatype;roles=Committer;timezone=-5,bellingard;name="Fabrice Bellingard";roles=Committer,bentmann;email="bentmann@apache.org";name="Benjamin Bentmann";organization=Sonatype;roles=Committer;timezone="+1",chrisgwarp;email="chrisgwarp@apache.org";name="Chris Graham";roles=Committer;timezone="Australia/Melbourne",dantran;email="dantran@apache.org";name="Dan Tran";roles=Committer;timezone=-8,dbradicich;email="dbradicich@apache.org";name="Damian Bradicich";organization=Sonatype;roles=Committer;timezone=-5,brett;email="brett@apache.org";name="Brett Porter";organization=ASF;roles=Committer;timezone="+10",dfabulich;email="dfabulich@apache.org";name="Daniel Fabulich";roles=Committer;timezone=-8,eolivelli;email="eolivelli@apache.org";name="Enrico Olivelli";organization=Diennea;roles=Committer;timezone="Europe/Rome",fgiust;email="fgiust@apache.org";name="Fabrizio Giustina";organization=openmind;roles=Committer;timezone="+1",godin;email="godin@apache.org";name="Evgeny Mandrikov";organization=SonarSource;roles=Committer;timezone="+3",handyande;email="handyande@apache.org";name="Andrew Williams";roles=Committer;timezone=0,imod;email="imod@apache.org";name="Dominik Bartholdi";roles=Committer;timezone="Europe/Zurich",jjensen;name="Jeff Jensen";roles=Committer,ltheussl;email="ltheussl@apache.org";name="Lukas Theussl";roles=Committer;timezone="+1",markh;email="markh@apache.org";name="Mark Hobson";roles=Committer;timezone=0,martinkanters;email="martinkanters@apache.org";name="Martin Kanters";organization=JPoint;roles=Committer;timezone="Europe/Amsterdam",mauro;name="Mauro Talevi";roles=Committer,mfriedenhagen;email="mfriedenhagen@apache.org";name="Mirko Friedenhagen";roles=Committer;timezone="+1",mmoser;email="mmoser@apache.org";name="Manfred Moser";roles=Committer;timezone=-8,nicolas;name="Nicolas de Loof";roles=Committer,oching;name="Maria Odea B. Ching";roles=Committer,pgier;email="pgier@apache.org";name="Paul Gier";organization="Red Hat";roles=Committer;timezone=-6,ptahchiev;email="ptahchiev@apache.org";name="Petar Tahchiev";roles=Committer;timezone="+2",rafale;email="rafale@apache.org";name="Raphaël Piéroni";organization=Dexem;roles=Committer;timezone="+1",schulte;email="schulte@apache.org";name="Christian Schulte";roles=Committer;timezone="Europe/Berlin",snicoll;email="snicoll@apache.org";name="Stephane Nicoll";roles=Committer;timezone="+1",simonetripodi;email="simonetripodi@apache.org";name="Simone Tripodi";roles=Committer;timezone="+1",sor;email="sor@apache.org";name="Christian Stein";roles=Committer;timezone="Europe/Berlin",tchemit;email="tchemit@apache.org";name="Tony Chemit";organization=CodeLutin;roles=Committer;timezone="Europe/Paris",vmassol;email="vmassol@apache.org";name="Vincent Massol";organization=ASF;roles=Committer;timezone="+1",elharo;email="elharo@apache.org";name="Elliotte Rusty Harold";roles=Committer;timezone="America/New_York",agudian;email="agudian@apache.org";name="Andreas Gudian";roles=Emeritus;timezone="Europe/Berlin",aramirez;name="Allan Q. Ramirez";roles=Emeritus,bayard;name="Henri Yandell";roles=Emeritus,carlos;email="carlos@apache.org";name="Carlos Sanchez";organization=ASF;roles=Emeritus;timezone="+1",chrisjs;name="Chris Stevenson";roles=Emeritus,dblevins;name="David Blevins";roles=Emeritus,dlr;name="Daniel Rall";roles=Emeritus,epunzalan;email="epunzalan@apache.org";name="Edwin Punzalan";roles=Emeritus;timezone=-8,felipeal;name="Felipe Leme";roles=Emeritus,jdcasey;email="jdcasey@apache.org";name="John Casey";organization=ASF;roles=Emeritus;timezone=-6,jmcconnell;email="jmcconnell@apache.org";name="Jesse McConnell";organization=ASF;roles=Emeritus;timezone=-6,joakime;email="joakime@apache.org";name="Joakim Erdfelt";organization=ASF;roles=Emeritus;timezone=-5,jruiz;email="jruiz@apache.org";name="Johnny Ruiz III";roles=Emeritus,jstrachan;name="James Strachan";roles=Emeritus,jtolentino;email="jtolentino@apache.org";name="Ernesto Tolentino Jr.";organization=ASF;roles=Emeritus;timezone="+8",kenney;email="kenney@apache.org";name="Kenney Westerhof";organization=Neonics;roles=Emeritus;timezone="+1",mperham;email="mperham@gmail.com";name="Mike Perham";organization=IBM;roles=Emeritus;timezone=-6,ogusakov;name="Oleg Gusakov";roles=Emeritus,pschneider;email="pschneider@gmail.com";name="Patrick Schneider";roles=Emeritus;timezone=-6,rinku;name="Rahul Thakur";roles=Emeritus,shinobu;name="Shinobu Kuwai";roles=Emeritus,smorgrav;name="Torbjorn Eikli Smorgrav";roles=Emeritus,trygvis;email="trygvis@apache.org";name="Trygve Laugstol";organization=ASF;roles=Emeritus;timezone="+1",wsmoak;email="wsmoak@apache.org";name="Wendy Smoak";roles=Emeritus;timezone=-7	Low
Product	Manifest	bundle-docurl	https://maven.apache.org/resolver/maven-resolver-util/	Low
Product	Manifest	Bundle-Name	Maven Artifact Resolver Utilities	Medium
Product	Manifest	bundle-symbolicname	org.apache.maven.resolver.util	Medium
Product	Manifest	Implementation-Title	Maven Artifact Resolver Utilities	High
Product	Manifest	specification-title	Maven Artifact Resolver Utilities	Medium
Product	pom	artifactid	maven-resolver-util	Highest
Product	pom	groupid	org.apache.maven.resolver	Highest
Product	pom	name	Maven Artifact Resolver Utilities	High
Product	pom	parent-artifactid	maven-resolver	Medium
Version	file	version	1.9.22	High
Version	Manifest	Bundle-Version	1.9.22	High
Version	Manifest	Implementation-Version	1.9.22	High
Version	pom	version	1.9.22	Highest

Identifiers

pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22 (Confidence:High)

maven-settings-3.9.9.jar

Description:

Maven Settings model.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-settings/3.9.9/maven-settings-3.9.9.jar
MD5: a5eede8fe9b01b7bb3c6dad06a738365
SHA1: a82024d87a107965ae274d944c844c9186ff410d
SHA256:68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-settings-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-settings	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	settings	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-settings	Highest
Vendor	pom	artifactid	maven-settings	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Settings	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-settings	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	settings	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Settings	High
Product	Manifest	specification-title	Maven Settings	Medium
Product	pom	artifactid	maven-settings	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Settings	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-settings@3.9.9 (Confidence:High)

maven-settings-builder-3.9.9.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-settings-builder/3.9.9/maven-settings-builder-3.9.9.jar
MD5: 4fb4ae61642d42cba66821d8698a670a
SHA1: 71a9bee9618839ffaf7c0de3b53ac1c408b57ae0
SHA256:094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-settings-builder-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-settings-builder	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	settings	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-settings-builder	Highest
Vendor	pom	artifactid	maven-settings-builder	Low
Vendor	pom	groupid	org.apache.maven	Highest
Vendor	pom	name	Maven Settings Builder	High
Vendor	pom	parent-artifactid	maven	Low
Product	file	name	maven-settings-builder	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	settings	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Maven Settings Builder	High
Product	Manifest	specification-title	Maven Settings Builder	Medium
Product	pom	artifactid	maven-settings-builder	Highest
Product	pom	groupid	org.apache.maven	Highest
Product	pom	name	Maven Settings Builder	High
Product	pom	parent-artifactid	maven	Medium
Version	file	version	3.9.9	High
Version	Manifest	Implementation-Version	3.9.9	High
Version	pom	version	3.9.9	Highest

Identifiers

pkg:maven/org.apache.maven/maven-settings-builder@3.9.9 (Confidence:High)

maven-shared-io-3.0.0.jar

Description:

API for I/O support like logging, download or file scanning.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-shared-io/3.0.0/maven-shared-io-3.0.0.jar
MD5: cd048096ba02afa72cebb76d39e4bde0
SHA1: fe598062dbcf95ac9eba77840f86d2ff25d81f55
SHA256:7f9d12b2d569ccde2cacd22a39e301b20f82567b80e21d625c5f4d93dc09c2c7
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-shared-io-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-shared-io	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.shared	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-shared-io	Highest
Vendor	pom	artifactid	maven-shared-io	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Shared I/O API	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-shared-io	High
Product	jar	package name	apache	Highest
Product	jar	package name	io	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	Manifest	Implementation-Title	Apache Maven Shared I/O API	High
Product	Manifest	specification-title	Apache Maven Shared I/O API	Medium
Product	pom	artifactid	maven-shared-io	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Shared I/O API	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-shared-io@3.0.0 (Confidence:High)

maven-shared-utils-3.4.2.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-shared-utils/3.4.2/maven-shared-utils-3.4.2.jar
MD5: 53a038f77a81cb5816ad2b1c7daa8711
SHA1: bfa28296272a5915b08de9f11f34a94b0a818fd0
SHA256:b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-shared-utils-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-slf4j-provider@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maven-shared-utils	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	shared	Highest
Vendor	jar	package name	utils	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	maven-shared-utils	Highest
Vendor	pom	artifactid	maven-shared-utils	Low
Vendor	pom	groupid	org.apache.maven.shared	Highest
Vendor	pom	name	Apache Maven Shared Utils	High
Vendor	pom	parent-artifactid	maven-shared-components	Low
Product	file	name	maven-shared-utils	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	shared	Highest
Product	jar	package name	utils	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Apache Maven Shared Utils	High
Product	Manifest	specification-title	Apache Maven Shared Utils	Medium
Product	pom	artifactid	maven-shared-utils	Highest
Product	pom	groupid	org.apache.maven.shared	Highest
Product	pom	name	Apache Maven Shared Utils	High
Product	pom	parent-artifactid	maven-shared-components	Medium
Version	file	version	3.4.2	High
Version	Manifest	Implementation-Version	3.4.2	High
Version	pom	parent-version	3.4.2	Low
Version	pom	version	3.4.2	Highest

Identifiers

pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2 (Confidence:High)
cpe:2.3:a:apache:maven_shared_utils:3.4.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:3.4.2:*:*:*:*:*:*:* (Confidence:Highest)

org.eclipse.sisu.inject-0.9.0.M3.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"

File Path: /Users/kysmith/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M3/org.eclipse.sisu.inject-0.9.0.M3.jar
MD5: 643a13084e0ac59cdda06319e1b348ea
SHA1: 3665002ba4d16dfa779ef658a63d0608c4bd898b
SHA256:15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.inject	High
Vendor	jar	package name	dynamic	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	sisu	Highest
Vendor	jar	package name	wiring	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.inject	Low
Vendor	pom	artifactid	org.eclipse.sisu.inject	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.inject	High
Product	jar	package name	dynamic	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	inject	Highest
Product	jar	package name	sisu	Highest
Product	jar	package name	sonatype	Highest
Product	jar	package name	wiring	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Inject (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.inject;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.inject	Highest
Product	pom	artifactid	org.eclipse.sisu.inject	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	parent-artifactid	sisu-inject	Medium
Version	Manifest	Bundle-Version	0.9.0.M3	High
Version	pom	version	0.9.0.M3	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3 (Confidence:High)

org.eclipse.sisu.plexus-0.9.0.M3.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"

File Path: /Users/kysmith/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M3/org.eclipse.sisu.plexus-0.9.0.M3.jar
MD5: 964e7bc9837b270566f18b87af65f5d7
SHA1: b493c7abcc6e04fa0a6a20d489a3db0395c76f70
SHA256:c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e
Referenced In Project/Scope: Event Processing Maven Plugin:provided
pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.sisu.plexus	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sisu	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Vendor	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Vendor	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Vendor	pom	artifactid	eclipse.sisu.plexus	Low
Vendor	pom	artifactid	org.eclipse.sisu.plexus	Highest
Vendor	pom	groupid	org.eclipse.sisu	Highest
Vendor	pom	parent-artifactid	sisu-inject	Low
Product	file	name	org.eclipse.sisu.plexus	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	sisu	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-copyright	Copyright (c) 2010-present Sonatype, Inc. and others	Low
Product	Manifest	bundle-developers	mcculls;name="Stuart McCulloch",cstamas;name="Tamas Cservenak",kwin;name="Konrad Windszus"	Low
Product	Manifest	bundle-docurl	http://www.eclipse.org/sisu/	Low
Product	Manifest	Bundle-Name	Sisu-Plexus (Incubation)	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.sisu.plexus;singleton:=true	Medium
Product	pom	artifactid	eclipse.sisu.plexus	Highest
Product	pom	artifactid	org.eclipse.sisu.plexus	Highest
Product	pom	groupid	org.eclipse.sisu	Highest
Product	pom	parent-artifactid	sisu-inject	Medium
Version	Manifest	Bundle-Version	0.9.0.M3	High
Version	pom	version	0.9.0.M3	Highest

Identifiers

pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3 (Confidence:High)

plexus-archiver-4.10.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-archiver/4.10.0/plexus-archiver-4.10.0.jar
MD5: 46a7cede88b793dbc9cbe9fd82d68368
SHA1: d63e385ae6ded05eef954102f0cd1137b2baab81
SHA256:4c07814ff4a39199999ae82bba1e38aa4f25637467fcac6a66ed63a76535799a
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-archiver-4.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-archiver	High
Vendor	jar	package name	archiver	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-archiver	Highest
Vendor	pom	artifactid	plexus-archiver	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Archiver Component	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-archiver/	Highest
Product	file	name	plexus-archiver	High
Product	jar	package name	archiver	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	Implementation-Title	Plexus Archiver Component	High
Product	Manifest	specification-title	Plexus Archiver Component	Medium
Product	pom	artifactid	plexus-archiver	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Archiver Component	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-archiver/	Medium
Version	file	version	4.10.0	High
Version	Manifest	Implementation-Version	4.10.0	High
Version	pom	parent-version	4.10.0	Low
Version	pom	version	4.10.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0 (Confidence:High)
cpe:2.3:a:codehaus-plexus:plexus-archiver:4.10.0:*:*:*:*:*:*:* (Confidence:Highest)

plexus-build-api-0.0.7.jar

File Path: /Users/kysmith/.m2/repository/org/sonatype/plexus/plexus-build-api/0.0.7/plexus-build-api-0.0.7.jar
MD5: 49f0f8c6bdf2687e358870a4fc1559c6
SHA1: e6ba5cd4bfd8de00235af936e7f63eb24ed436e6
SHA256:934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-build-api-0.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-build-api	High
Vendor	jar	package name	build	Highest
Vendor	jar	package name	build	Low
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	plexus	Low
Vendor	jar	package name	sonatype	Highest
Vendor	jar	package name	sonatype	Low
Vendor	pom	artifactid	plexus-build-api	Highest
Vendor	pom	artifactid	plexus-build-api	Low
Vendor	pom	groupid	org.sonatype.plexus	Highest
Vendor	pom	parent-artifactid	spice-parent	Low
Vendor	pom	parent-groupid	org.sonatype.spice	Medium
Product	file	name	plexus-build-api	High
Product	jar	package name	build	Highest
Product	jar	package name	build	Low
Product	jar	package name	incremental	Low
Product	jar	package name	plexus	Highest
Product	jar	package name	plexus	Low
Product	jar	package name	sonatype	Highest
Product	pom	artifactid	plexus-build-api	Highest
Product	pom	groupid	org.sonatype.plexus	Highest
Product	pom	parent-artifactid	spice-parent	Medium
Product	pom	parent-groupid	org.sonatype.spice	Medium
Version	file	version	0.0.7	High
Version	pom	parent-version	0.0.7	Low
Version	pom	version	0.0.7	Highest

Identifiers

pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7 (Confidence:High)

plexus-cipher-2.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: Event Processing Maven Plugin:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-cipher	High
Vendor	jar	package name	cipher	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	plexus-cipher	Highest
Vendor	pom	artifactid	plexus-cipher	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Cipher: encryption/decryption Component	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-cipher	High
Product	jar	package name	cipher	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	plexus-cipher	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Cipher: encryption/decryption Component	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	2.0	High
Version	pom	parent-version	2.0	Low
Version	pom	version	2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-cipher@2.0 (Confidence:High)

plexus-classworlds-2.9.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-classworlds/2.9.0/plexus-classworlds-2.9.0.jar
MD5: 64e4ee5a1298f866d00f705e02058200
SHA1: ace0820f34de49f69511f5263bcebb09fac9731a
SHA256:1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-classworlds	High
Vendor	jar	package name	classworlds	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	23	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-classworlds	Highest
Vendor	pom	artifactid	plexus-classworlds	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Classworlds	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Highest
Product	file	name	plexus-classworlds	High
Product	jar	package name	classworlds	Highest
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	23	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Classworlds	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.classworlds	Medium
Product	Manifest	Implementation-Title	Plexus Classworlds	High
Product	Manifest	specification-title	Plexus Classworlds	Medium
Product	pom	artifactid	plexus-classworlds	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Classworlds	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-classworlds/	Medium
Version	file	version	2.9.0	High
Version	Manifest	Bundle-Version	2.9.0	High
Version	Manifest	Implementation-Version	2.9.0	High
Version	pom	parent-version	2.9.0	Low
Version	pom	version	2.9.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0 (Confidence:High)

plexus-component-annotations-2.1.0.jar

Description:

    Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar
MD5: 141fd7a2ae613cb17d25ecd54b43eb3f
SHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9
SHA256:bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-component-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	codehaus	Low
Vendor	jar	package name	component	Highest
Vendor	jar	package name	component	Low
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	plexus	Low
Vendor	pom	artifactid	plexus-component-annotations	Highest
Vendor	pom	artifactid	plexus-component-annotations	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus :: Component Annotations	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	file	name	plexus-component-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	codehaus	Highest
Product	jar	package name	component	Highest
Product	jar	package name	component	Low
Product	jar	package name	plexus	Highest
Product	jar	package name	plexus	Low
Product	pom	artifactid	plexus-component-annotations	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus :: Component Annotations	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	file	version	2.1.0	High
Version	pom	version	2.1.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0 (Confidence:High)

plexus-container-default-1.0-alpha-30.jar (shaded: org.codehaus.plexus:plexus-component-api:1.0-alpha-30)

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-container-default/1.0-alpha-30/plexus-container-default-1.0-alpha-30.jar/META-INF/maven/org.codehaus.plexus/plexus-component-api/pom.xml
MD5: 081a9cf2cfc29605fad2110ae2656a1c
SHA1: efb3642d47427637d031258c853618028546dfcc
SHA256:a0f23a7447b705dfd8a92b5b6435938403b9ccdc9a8d769134d41cd571b015c8
Referenced In Project/Scope: Event Processing Maven Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	plexus-component-api	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Component API	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	pom	artifactid	plexus-component-api	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Component API	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	pom	version	1.0-alpha-30	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-component-api@1.0-alpha-30 (Confidence:High)

plexus-container-default-1.0-alpha-30.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-container-default/1.0-alpha-30/plexus-container-default-1.0-alpha-30.jar
MD5: af35f8c80bbf8deaaa382bd530c40939
SHA1: 669d4ba8e898e37987eb5e30b121ed1d62c5b7b8
SHA256:ef5fa49aeb90df9cac923435577dc9c2701a18ba29191b6e407e7870795eea35
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-container-default-1.0-alpha-30.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-container-default	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	codehaus	Low
Vendor	jar	package name	component	Low
Vendor	jar	package name	container	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	plexus	Low
Vendor	pom	artifactid	plexus-container-default	Highest
Vendor	pom	artifactid	plexus-container-default	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Default Plexus Container	High
Vendor	pom	parent-artifactid	plexus-containers	Low
Product	file	name	plexus-container-default	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	component	Low
Product	jar	package name	container	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	plexus	Low
Product	pom	artifactid	plexus-container-default	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Default Plexus Container	High
Product	pom	parent-artifactid	plexus-containers	Medium
Version	pom	version	1.0-alpha-30	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30 (Confidence:High)

plexus-interpolation-1.28.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-interpolation/1.28/plexus-interpolation-1.28.jar
MD5: 68fd3527539ddb2a42e2e776ad8240b7
SHA1: 90d3608cd99f21717a581f036a1c69ff762f5ed6
SHA256:ab2a8715570438a2e4164d85ad3e8d489eabc38ea5093c2eb8ab7f58403535b5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-interpolation	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	interpolation	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	23	Low
Vendor	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Vendor	Manifest	bundle-symbolicname	org.codehaus.plexus.interpolation	Medium
Vendor	pom	artifactid	plexus-interpolation	Highest
Vendor	pom	artifactid	plexus-interpolation	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Interpolation API	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-interpolation	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	interpolation	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	23	Low
Product	Manifest	bundle-docurl	https://codehaus-plexus.github.io/	Low
Product	Manifest	Bundle-Name	Plexus Interpolation API	Medium
Product	Manifest	bundle-symbolicname	org.codehaus.plexus.interpolation	Medium
Product	pom	artifactid	plexus-interpolation	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Interpolation API	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	1.28	High
Version	pom	parent-version	1.28	Low
Version	pom	version	1.28	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28 (Confidence:High)

plexus-io-3.4.2.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-io/3.4.2/plexus-io-3.4.2.jar
MD5: 77515ce571e8169c13220c506ad177a4
SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942d
SHA256:6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-io	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	components	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	pom	artifactid	plexus-io	Highest
Vendor	pom	artifactid	plexus-io	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus IO Components	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-io	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	components	Highest
Product	jar	package name	io	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	pom	artifactid	plexus-io	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus IO Components	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	3.4.2	High
Version	pom	parent-version	3.4.2	Low
Version	pom	version	3.4.2	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-io@3.4.2 (Confidence:High)

plexus-sec-dispatcher-2.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: Event Processing Maven Plugin:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-sec-dispatcher	High
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	sec	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	plexus-sec-dispatcher	Highest
Vendor	pom	artifactid	plexus-sec-dispatcher	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Security Dispatcher Component	High
Vendor	pom	parent-artifactid	plexus	Low
Product	file	name	plexus-sec-dispatcher	High
Product	jar	package name	plexus	Highest
Product	jar	package name	sec	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	plexus-sec-dispatcher	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Security Dispatcher Component	High
Product	pom	parent-artifactid	plexus	Medium
Version	file	version	2.0	High
Version	pom	parent-version	2.0	Low
Version	pom	version	2.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0 (Confidence:High)
cpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:* (Confidence:Highest)

plexus-utils-4.0.2.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-utils/4.0.2/plexus-utils-4.0.2.jar
MD5: 4cfdd73e436702d319d551a44fcea500
SHA1: 9526a9548b302572f23337fcc217fb4cc713b9c3
SHA256:8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697
Referenced In Project/Scope: Event Processing Maven Plugin:compile
pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-utils	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	plexus	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Codehaus Plexus	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Codehaus Plexus	Low
Vendor	pom	artifactid	plexus-utils	Highest
Vendor	pom	artifactid	plexus-utils	Low
Vendor	pom	developer email	1983-01-06@gmx.net	Low
Vendor	pom	developer email	agudian@apache.org	Low
Vendor	pom	developer email	andy@handyande.co.uk	Low
Vendor	pom	developer email	apache@kav.dk	Low
Vendor	pom	developer email	belingueres@gmail.com	Low
Vendor	pom	developer email	brett@codehaus.org	Low
Vendor	pom	developer email	bwalding@codehaus.org	Low
Vendor	pom	developer email	carlos@codehaus.org	Low
Vendor	pom	developer email	dan@envoisolutions.com	Low
Vendor	pom	developer email	evenisse@codehaus.org	Low
Vendor	pom	developer email	gnodet@apache.org	Low
Vendor	pom	developer email	hboutemy@apache.org	Low
Vendor	pom	developer email	james@jamestaylor.org	Low
Vendor	pom	developer email	jason@maven.org	Low
Vendor	pom	developer email	jdcasey@codehaus.org	Low
Vendor	pom	developer email	joakim@erdfelt.com	Low
Vendor	pom	developer email	kenney@codehaus.org	Low
Vendor	pom	developer email	khmarbaise@apache.org	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	kwin@apache.org	Low
Vendor	pom	developer email	mhw@kremvax.net	Low
Vendor	pom	developer email	mmaczka@interia.pl	Low
Vendor	pom	developer email	olamy@codehaus.org	Low
Vendor	pom	developer email	olegy@codehaus.org	Low
Vendor	pom	developer email	rahul.thakur.xdev@gmail.com	Low
Vendor	pom	developer email	sjaranowski@apache.org	Low
Vendor	pom	developer email	slachiewicz@apache.org	Low
Vendor	pom	developer email	trygvis@codehaus.org	Low
Vendor	pom	developer email	vsiveton@codehaus.org	Low
Vendor	pom	developer id	agudian	Medium
Vendor	pom	developer id	belingueres	Medium
Vendor	pom	developer id	brett	Medium
Vendor	pom	developer id	bwalding	Medium
Vendor	pom	developer id	carlos	Medium
Vendor	pom	developer id	dandiep	Medium
Vendor	pom	developer id	evenisse	Medium
Vendor	pom	developer id	gnodet	Medium
Vendor	pom	developer id	handyande	Medium
Vendor	pom	developer id	hboutemy	Medium
Vendor	pom	developer id	jdcasey	Medium
Vendor	pom	developer id	joakime	Medium
Vendor	pom	developer id	jtaylor	Medium
Vendor	pom	developer id	jvanzyl	Medium
Vendor	pom	developer id	kasper	Medium
Vendor	pom	developer id	kaz	Medium
Vendor	pom	developer id	kenney	Medium
Vendor	pom	developer id	khmarbaise	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	kwin	Medium
Vendor	pom	developer id	mhw	Medium
Vendor	pom	developer id	michael-o	Medium
Vendor	pom	developer id	michal	Medium
Vendor	pom	developer id	olamy	Medium
Vendor	pom	developer id	oleg	Medium
Vendor	pom	developer id	rahul	Medium
Vendor	pom	developer id	sjaranowski	Medium
Vendor	pom	developer id	slachiewicz	Medium
Vendor	pom	developer id	trygvis	Medium
Vendor	pom	developer id	vsiveton	Medium
Vendor	pom	developer name	Andreas Gudian	Medium
Vendor	pom	developer name	Andrew Williams	Medium
Vendor	pom	developer name	Ben Walding	Medium
Vendor	pom	developer name	Brett Porter	Medium
Vendor	pom	developer name	Carlos Sanchez	Medium
Vendor	pom	developer name	Dan Diephouse	Medium
Vendor	pom	developer name	Emmanuel Venisse	Medium
Vendor	pom	developer name	Gabriel Belingueres	Medium
Vendor	pom	developer name	Guillaume Nodet	Medium
Vendor	pom	developer name	Hervé Boutemy	Medium
Vendor	pom	developer name	James Taylor	Medium
Vendor	pom	developer name	Jason van Zyl	Medium
Vendor	pom	developer name	Joakim Erdfelt	Medium
Vendor	pom	developer name	John Casey	Medium
Vendor	pom	developer name	Karl Heinz Marbaise	Medium
Vendor	pom	developer name	Kasper Nielsen	Medium
Vendor	pom	developer name	Kenney Westerhof	Medium
Vendor	pom	developer name	Konrad Windszus	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Mark Wilkinson	Medium
Vendor	pom	developer name	Michael Osipov	Medium
Vendor	pom	developer name	Michal Maczka	Medium
Vendor	pom	developer name	Oleg Gusakov	Medium
Vendor	pom	developer name	Olivier Lamy	Medium
Vendor	pom	developer name	Pete Kazmier	Medium
Vendor	pom	developer name	Rahul Thakur	Medium
Vendor	pom	developer name	Slawomir Jaranowski	Medium
Vendor	pom	developer name	Sylwester Lachiewicz	Medium
Vendor	pom	developer name	Trygve Laugstøl	Medium
Vendor	pom	developer name	Vincent Siveton	Medium
Vendor	pom	developer org	ASF	Medium
Vendor	pom	developer org	Envoi solutions	Medium
Vendor	pom	developer org	Walding Consulting Services	Medium
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	organization name	Codehaus Plexus	High
Vendor	pom	organization url	https://codehaus-plexus.github.io/	Medium
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Highest
Product	file	name	plexus-utils	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	org	Highest
Product	jar	package name	plexus	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Plexus Common Utilities	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Plexus Common Utilities	Medium
Product	pom	artifactid	plexus-utils	Highest
Product	pom	developer email	1983-01-06@gmx.net	Low
Product	pom	developer email	agudian@apache.org	Low
Product	pom	developer email	andy@handyande.co.uk	Low
Product	pom	developer email	apache@kav.dk	Low
Product	pom	developer email	belingueres@gmail.com	Low
Product	pom	developer email	brett@codehaus.org	Low
Product	pom	developer email	bwalding@codehaus.org	Low
Product	pom	developer email	carlos@codehaus.org	Low
Product	pom	developer email	dan@envoisolutions.com	Low
Product	pom	developer email	evenisse@codehaus.org	Low
Product	pom	developer email	gnodet@apache.org	Low
Product	pom	developer email	hboutemy@apache.org	Low
Product	pom	developer email	james@jamestaylor.org	Low
Product	pom	developer email	jason@maven.org	Low
Product	pom	developer email	jdcasey@codehaus.org	Low
Product	pom	developer email	joakim@erdfelt.com	Low
Product	pom	developer email	kenney@codehaus.org	Low
Product	pom	developer email	khmarbaise@apache.org	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	kwin@apache.org	Low
Product	pom	developer email	mhw@kremvax.net	Low
Product	pom	developer email	mmaczka@interia.pl	Low
Product	pom	developer email	olamy@codehaus.org	Low
Product	pom	developer email	olegy@codehaus.org	Low
Product	pom	developer email	rahul.thakur.xdev@gmail.com	Low
Product	pom	developer email	sjaranowski@apache.org	Low
Product	pom	developer email	slachiewicz@apache.org	Low
Product	pom	developer email	trygvis@codehaus.org	Low
Product	pom	developer email	vsiveton@codehaus.org	Low
Product	pom	developer id	agudian	Low
Product	pom	developer id	belingueres	Low
Product	pom	developer id	brett	Low
Product	pom	developer id	bwalding	Low
Product	pom	developer id	carlos	Low
Product	pom	developer id	dandiep	Low
Product	pom	developer id	evenisse	Low
Product	pom	developer id	gnodet	Low
Product	pom	developer id	handyande	Low
Product	pom	developer id	hboutemy	Low
Product	pom	developer id	jdcasey	Low
Product	pom	developer id	joakime	Low
Product	pom	developer id	jtaylor	Low
Product	pom	developer id	jvanzyl	Low
Product	pom	developer id	kasper	Low
Product	pom	developer id	kaz	Low
Product	pom	developer id	kenney	Low
Product	pom	developer id	khmarbaise	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	kwin	Low
Product	pom	developer id	mhw	Low
Product	pom	developer id	michael-o	Low
Product	pom	developer id	michal	Low
Product	pom	developer id	olamy	Low
Product	pom	developer id	oleg	Low
Product	pom	developer id	rahul	Low
Product	pom	developer id	sjaranowski	Low
Product	pom	developer id	slachiewicz	Low
Product	pom	developer id	trygvis	Low
Product	pom	developer id	vsiveton	Low
Product	pom	developer name	Andreas Gudian	Low
Product	pom	developer name	Andrew Williams	Low
Product	pom	developer name	Ben Walding	Low
Product	pom	developer name	Brett Porter	Low
Product	pom	developer name	Carlos Sanchez	Low
Product	pom	developer name	Dan Diephouse	Low
Product	pom	developer name	Emmanuel Venisse	Low
Product	pom	developer name	Gabriel Belingueres	Low
Product	pom	developer name	Guillaume Nodet	Low
Product	pom	developer name	Hervé Boutemy	Low
Product	pom	developer name	James Taylor	Low
Product	pom	developer name	Jason van Zyl	Low
Product	pom	developer name	Joakim Erdfelt	Low
Product	pom	developer name	John Casey	Low
Product	pom	developer name	Karl Heinz Marbaise	Low
Product	pom	developer name	Kasper Nielsen	Low
Product	pom	developer name	Kenney Westerhof	Low
Product	pom	developer name	Konrad Windszus	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Mark Wilkinson	Low
Product	pom	developer name	Michael Osipov	Low
Product	pom	developer name	Michal Maczka	Low
Product	pom	developer name	Oleg Gusakov	Low
Product	pom	developer name	Olivier Lamy	Low
Product	pom	developer name	Pete Kazmier	Low
Product	pom	developer name	Rahul Thakur	Low
Product	pom	developer name	Slawomir Jaranowski	Low
Product	pom	developer name	Sylwester Lachiewicz	Low
Product	pom	developer name	Trygve Laugstøl	Low
Product	pom	developer name	Vincent Siveton	Low
Product	pom	developer org	ASF	Low
Product	pom	developer org	Envoi solutions	Low
Product	pom	developer org	Walding Consulting Services	Low
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Common Utilities	High
Product	pom	organization name	Codehaus Plexus	Low
Product	pom	organization url	https://codehaus-plexus.github.io/	Low
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-utils/	Medium
Version	file	version	4.0.2	High
Version	Manifest	Implementation-Version	4.0.2	High
Version	pom	parent-version	4.0.2	Low
Version	pom	version	4.0.2	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2 (Confidence:High)
cpe:2.3:a:codehaus-plexus:plexus-utils:4.0.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:4.0.2:*:*:*:*:*:*:* (Confidence:Highest)

plexus-xml-3.0.0.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-xml/3.0.0/plexus-xml-3.0.0.jar
MD5: cccca4a03a8367cd20e4efaead5fba0b
SHA1: d16b91678bc3734276886132923d6919c935c9f7
SHA256:d2622dc9339b16f5b8c9cad2add440e965831d0e16f19ae1de24e1202b0de536
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-xml-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	plexus-xml	High
Vendor	jar	package name	codehaus	Highest
Vendor	jar	package name	plexus	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	artifactid	plexus-xml	Highest
Vendor	pom	artifactid	plexus-xml	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus XML Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Highest
Product	file	name	plexus-xml	High
Product	jar	package name	codehaus	Highest
Product	jar	package name	plexus	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	pom	artifactid	plexus-xml	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus XML Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	https://codehaus-plexus.github.io/plexus-xml/	Medium
Version	file	version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0 (Confidence:High)

slf4j-api-1.7.26.jar

Description:

The slf4j API

File Path: /Users/kysmith/.m2/repository/org/slf4j/slf4j-api/1.7.26/slf4j-api-1.7.26.jar
MD5: 60ec8751be37d54a2aa1b6178f87b968
SHA1: 77100a62c2e6f04b53977b9f541044d7d722693d
SHA256:6d9e5b86cfd1dd44c676899285b5bb4fa0d371cf583e8164f9c8a0366553242b
Referenced In Project/Scope: Event Processing Maven Plugin:provided
slf4j-api-1.7.26.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	1.7.26	High
Version	Manifest	Bundle-Version	1.7.26	High
Version	Manifest	Implementation-Version	1.7.26	High
Version	pom	version	1.7.26	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.26 (Confidence:High)

surefire-api-2.4.3.jar (shaded: org.codehaus.plexus:plexus-utils:1.5.1)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/surefire/surefire-api/2.4.3/surefire-api-2.4.3.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml
MD5: 4d0ef59ee3f74d8200277cbe592ee585
SHA1: 2a0b3470063440066d3b8a084340ce07dbdbfedc
SHA256:e237bba8d1c65c171b5fe8774a2ff817525df6315b929a2085cf70cff15b1b58
Referenced In Project/Scope: Event Processing Maven Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	plexus-utils	Low
Vendor	pom	groupid	org.codehaus.plexus	Highest
Vendor	pom	name	Plexus Common Utilities	High
Vendor	pom	parent-artifactid	plexus	Low
Vendor	pom	url	http://plexus.codehaus.org/plexus-utils	Highest
Product	pom	artifactid	plexus-utils	Highest
Product	pom	groupid	org.codehaus.plexus	Highest
Product	pom	name	Plexus Common Utilities	High
Product	pom	parent-artifactid	plexus	Medium
Product	pom	url	http://plexus.codehaus.org/plexus-utils	Medium
Version	pom	parent-version	1.5.1	Low
Version	pom	version	1.5.1	Highest

Identifiers

pkg:maven/org.codehaus.plexus/plexus-utils@1.5.1 (Confidence:High)
cpe:2.3:a:codehaus-plexus:plexus-utils:1.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:utils_project:utils:1.5.1:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2017-1000487

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv3:

Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A

CVSSv2:

Base Score: HIGH (7.5)
Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P

References:

OSSINDEX - [CVE-2017-1000487] CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000487
OSSIndex - https://access.redhat.com/security/cve/cve-2017-1000487
OSSIndex - https://issues.apache.org/jira/browse/MSHARED-297
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY
cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:codehaus-plexus:plexus-utils:*:*:*:*:*:*:*:* versions up to (excluding) 3.0.16

CVE-2022-4244

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-4244] CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4244
OSSIndex - https://bugzilla.redhat.com/show_bug.cgi?id=2149841
OSSIndex - https://github.com/codehaus-plexus/plexus-utils/issues/4
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
secalert@redhat.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions: (show all)

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)

CVSSv3:

Base Score: MEDIUM (4.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A

References:

af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
secalert@redhat.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY
secalert@redhat.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions: (show all)

surefire-api-2.4.3.jar

File Path: /Users/kysmith/.m2/repository/org/apache/maven/surefire/surefire-api/2.4.3/surefire-api-2.4.3.jar
MD5: 6c810bfd0dbdea75d84cfb541e4bd8f4
SHA1: 3716608c23136d71be2efc5dcbcd2ef80e510076
SHA256:34ba3098cd356df55daf2a3d6d486050648777fbcb029e15333f9795cce57362
Referenced In Project/Scope: Event Processing Maven Plugin:compile
surefire-api-2.4.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	surefire-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	surefire	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.maven.surefire	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	surefire-api	Highest
Vendor	pom	artifactid	surefire-api	Low
Vendor	pom	groupid	org.apache.maven.surefire	Highest
Vendor	pom	name	SureFire API	High
Vendor	pom	parent-artifactid	surefire	Low
Product	file	name	surefire-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	surefire	Highest
Product	Manifest	Implementation-Title	SureFire API	High
Product	Manifest	specification-title	SureFire API	Medium
Product	pom	artifactid	surefire-api	Highest
Product	pom	groupid	org.apache.maven.surefire	Highest
Product	pom	name	SureFire API	High
Product	pom	parent-artifactid	surefire	Medium
Version	file	version	2.4.3	High
Version	Manifest	Implementation-Version	2.4.3	High
Version	pom	version	2.4.3	Highest

Identifiers

pkg:maven/org.apache.maven.surefire/surefire-api@2.4.3 (Confidence:High)

wagon-provider-api-3.5.3.jar

Description:

Maven Wagon API that defines the contract between different Wagon implementations

File Path: /Users/kysmith/.m2/repository/org/apache/maven/wagon/wagon-provider-api/3.5.3/wagon-provider-api-3.5.3.jar
MD5: 55a4be47ca51799ae3c18ed521f296df
SHA1: 39c44ebb3945dee359665272d8acb83f9460491b
SHA256:5e72000338945ed3e96f8e4f578d1d0672e1af7e19c0e9014197ae5b31af3ef4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
wagon-provider-api-3.5.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-compat@3.9.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	wagon-provider-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	maven	Highest
Vendor	jar	package name	wagon	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	wagon-provider-api	Highest
Vendor	pom	artifactid	wagon-provider-api	Low
Vendor	pom	groupid	org.apache.maven.wagon	Highest
Vendor	pom	name	Apache Maven Wagon :: API	High
Vendor	pom	parent-artifactid	wagon	Low
Product	file	name	wagon-provider-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	maven	Highest
Product	jar	package name	wagon	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache Maven Wagon :: API	High
Product	Manifest	specification-title	Apache Maven Wagon :: API	Medium
Product	pom	artifactid	wagon-provider-api	Highest
Product	pom	groupid	org.apache.maven.wagon	Highest
Product	pom	name	Apache Maven Wagon :: API	High
Product	pom	parent-artifactid	wagon	Medium
Version	file	version	3.5.3	High
Version	Manifest	Implementation-Version	3.5.3	High
Version	pom	version	3.5.3	Highest

Identifiers

pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3 (Confidence:High)
cpe:2.3:a:apache:maven_wagon:3.5.3:*:*:*:*:*:*:* (Confidence:Highest)

xz-1.9.jar

Description:

XZ data compression

License:

Public Domain

File Path: /Users/kysmith/.m2/repository/org/tukaani/xz/1.9/xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Project/Scope: Event Processing Maven Plugin:runtime
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xz	High
Vendor	jar	package name	tukaani	Highest
Vendor	jar	package name	xz	Highest
Vendor	Manifest	bundle-docurl	https://tukaani.org/xz/java.html	Low
Vendor	Manifest	bundle-symbolicname	org.tukaani.xz	Medium
Vendor	Manifest	implementation-url	https://tukaani.org/xz/java.html	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	xz	Highest
Vendor	pom	artifactid	xz	Low
Vendor	pom	developer email	lasse.collin@tukaani.org	Low
Vendor	pom	developer name	Lasse Collin	Medium
Vendor	pom	groupid	org.tukaani	Highest
Vendor	pom	name	XZ for Java	High
Vendor	pom	url	https://tukaani.org/xz/java.html	Highest
Product	file	name	xz	High
Product	jar	package name	tukaani	Highest
Product	jar	package name	xz	Highest
Product	Manifest	bundle-docurl	https://tukaani.org/xz/java.html	Low
Product	Manifest	Bundle-Name	XZ data compression	Medium
Product	Manifest	bundle-symbolicname	org.tukaani.xz	Medium
Product	Manifest	Implementation-Title	XZ data compression	High
Product	Manifest	implementation-url	https://tukaani.org/xz/java.html	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	xz	Highest
Product	pom	developer email	lasse.collin@tukaani.org	Low
Product	pom	developer name	Lasse Collin	Low
Product	pom	groupid	org.tukaani	Highest
Product	pom	name	XZ for Java	High
Product	pom	url	https://tukaani.org/xz/java.html	Medium
Version	file	version	1.9	High
Version	Manifest	Bundle-Version	1.9	High
Version	Manifest	Implementation-Version	1.9	High
Version	pom	version	1.9	Highest

Identifiers

pkg:maven/org.tukaani/xz@1.9 (Confidence:High)

zstd-jni-1.5.6-3.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar
MD5: 67b722d1bc7f256235ddf32a320c1d0c
SHA1: 823b794106e4bcb80110f49408d1641231f25927
SHA256:f72ede1b39258faf81277dc58de30c71cbae4253732558d2ce10b53d8b5763d5
Referenced In Project/Scope: Event Processing Maven Plugin:runtime
pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	zstd-jni	High
Vendor	jar	package name	github	Highest
Vendor	jar	package name	luben	Highest
Vendor	jar	package name	zstd	Highest
Vendor	Manifest	automatic-module-name	com.github.luben.zstd_jni	Medium
Vendor	Manifest	bundle-nativecode	darwin/x86_64/libzstd-jni-1.5.6-3.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.6-3.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.6-3.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.6-3.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.6-3.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.6-3.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.6-3.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.6-3.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=x86	Low
Vendor	Manifest	bundle-symbolicname	com.github.luben.zstd-jni	Medium
Vendor	Manifest	Implementation-Vendor	com.github.luben	High
Vendor	Manifest	Implementation-Vendor-Id	com.github.luben	Medium
Vendor	Manifest	specification-vendor	com.github.luben	Low
Vendor	pom	artifactid	zstd-jni	Highest
Vendor	pom	artifactid	zstd-jni	Low
Vendor	pom	developer email	karavelov@gmail.com	Low
Vendor	pom	developer id	karavelov	Medium
Vendor	pom	developer name	Luben Karavelov	Medium
Vendor	pom	developer org	com.github.luben	Medium
Vendor	pom	developer org URL	https://github.com/luben	Medium
Vendor	pom	groupid	com.github.luben	Highest
Vendor	pom	name	zstd-jni	High
Vendor	pom	organization name	com.github.luben	High
Vendor	pom	url	luben/zstd-jni	Highest
Product	file	name	zstd-jni	High
Product	jar	package name	github	Highest
Product	jar	package name	luben	Highest
Product	jar	package name	zstd	Highest
Product	Manifest	automatic-module-name	com.github.luben.zstd_jni	Medium
Product	Manifest	Bundle-Name	zstd-jni	Medium
Product	Manifest	bundle-nativecode	darwin/x86_64/libzstd-jni-1.5.6-3.dylib;osname=MacOS;osname=MacOSX;processor=x86_64,darwin/aarch64/libzstd-jni-1.5.6-3.dylib;osname=MacOS;osname=MacOSX;processor=aarch64,freebsd/amd64/libzstd-jni-1.5.6-3.so;osname=FreeBSD;processor=amd64,freebsd/i386/libzstd-jni-1.5.6-3.so;osname=FreeBSD;processor=i386,linux/aarch64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=aarch64,linux/amd64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=amd64,linux/arm/libzstd-jni-1.5.6-3.so;osname=Linux;processor=arm,linux/i386/libzstd-jni-1.5.6-3.so;osname=Linux;processor=i386,linux/mips64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=mips64,linux/loongarch64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=loongarch64,linux/ppc64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=ppc64,linux/ppc64le/libzstd-jni-1.5.6-3.so;osname=Linux;processor=ppc64le,linux/riscv64/libzstd-jni-1.5.6-3.so;osname=Linux;processor=riscv64,linux/s390x/libzstd-jni-1.5.6-3.so;osname=Linux;processor=s390x,win/amd64/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=amd64,win/aarch64/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=aarch64,win/x86/libzstd-jni-1.5.6-3.dll;osname=Win32;processor=x86	Low
Product	Manifest	bundle-symbolicname	com.github.luben.zstd-jni	Medium
Product	Manifest	Implementation-Title	zstd-jni	High
Product	Manifest	specification-title	zstd-jni	Medium
Product	pom	artifactid	zstd-jni	Highest
Product	pom	developer email	karavelov@gmail.com	Low
Product	pom	developer id	karavelov	Low
Product	pom	developer name	Luben Karavelov	Low
Product	pom	developer org	com.github.luben	Low
Product	pom	developer org URL	https://github.com/luben	Low
Product	pom	groupid	com.github.luben	Highest
Product	pom	name	zstd-jni	High
Product	pom	organization name	com.github.luben	Low
Product	pom	url	luben/zstd-jni	High
Version	Manifest	Implementation-Version	1.5.6-3	High
Version	pom	version	1.5.6-3	Highest

Identifiers

pkg:maven/com.github.luben/zstd-jni@1.5.6-3 (Confidence:High)

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/aarch64/libzstd-jni-1.5.6-3.dll
MD5: f4fc7646f51fe2c46c3fa26643c9ead7
SHA1: 146beeec8191555aa01eb5d7b2de3d28785e6783
SHA256:8370bd9ab4f31d9e78ca260cf55f7bdd9ab30bb2dedda59d55ef616b6d6d2c5a
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Evidence

Identifiers

None

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/amd64/libzstd-jni-1.5.6-3.dll
MD5: 24680c3cda47bb2961843d7ad2bbdcc3
SHA1: 24be85a38aaf6a2efd34154f7d75a008d353bcf4
SHA256:e79322262fb12a06b4cc98838c795899f65b88f3ac38ac3d00a282dd11b65602
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Evidence

Identifiers

None

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/x86/libzstd-jni-1.5.6-3.dll
MD5: 8574b41785d6407215ba3aa54995039a
SHA1: 1a2a9087783b495697fa76dbd08e63449569854f
SHA256:53a53266de250a7d0166c0c730f3dea45b4015723cb180e2ba0b239f2a34e13c
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Event Processing Maven Plugin

com.tibco.ep:ep-maven-plugin:2.3.0

Analysis Exceptions

Could not execute .NET AssemblyAnalyzer, is the dotnet 8.0 runtime or sdk installed?

Summary

Dependencies (vulnerable)

aether-util-0.9.0.M2.jar

Evidence

Identifiers

aircompressor-0.27.jar

Evidence

Identifiers

aopalliance-1.0.jar

Evidence

Identifiers

asm-6.1.1.jar

Evidence

Identifiers

classworlds-1.1.jar

Evidence

Identifiers

commons-codec-1.18.0.jar

Evidence

Identifiers

commons-collections-3.2.2.jar

Evidence

Identifiers

commons-compress-1.26.2.jar

Evidence

Identifiers

commons-io-2.15.1.jar

Evidence

Identifiers

commons-lang-2.6.jar

Evidence

Identifiers

commons-lang3-3.14.0.jar

Evidence

Identifiers

doxia-logging-api-1.4.jar

Evidence

Identifiers

doxia-sink-api-1.4.jar

Evidence

Identifiers

failureaccess-1.0.2.jar

Evidence

Identifiers

file-management-3.0.0.jar

Evidence

Identifiers

guava-33.2.1-jre.jar

Evidence

Identifiers

guice-5.1.0.jar

Evidence

Identifiers

hamcrest-core-1.3.jar

Evidence

Identifiers

javax.inject-1.jar

Evidence

Identifiers

junit-4.13.2.jar

Evidence

Identifiers

maven-archiver-3.6.1.jar

Evidence

Identifiers

maven-artifact-3.9.9.jar

Evidence

Identifiers

maven-artifact-transfer-0.9.1.jar

Evidence

Identifiers

maven-assembly-plugin-3.7.1.jar

Evidence

Identifiers

maven-builder-support-3.9.9.jar

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor