Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Event Processing Maven Plugin

com.tibco.ep:ep-maven-plugin:2.3.0

Scan Information (show all):

Analysis Exceptions


Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
aether-util-0.9.0.M2.jarpkg:maven/org.eclipse.aether/aether-util@0.9.0.M2 026
aircompressor-0.27.jarpkg:maven/io.airlift/aircompressor@0.27 029
aopalliance-1.0.jarpkg:maven/aopalliance/aopalliance@1.0 020
asm-6.1.1.jarpkg:maven/org.ow2.asm/asm@6.1.1 053
classworlds-1.1.jarpkg:maven/classworlds/classworlds@1.1 052
commons-codec-1.18.0.jarpkg:maven/commons-codec/commons-codec@1.18.0 0121
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest84
commons-compress-1.26.2.jarcpe:2.3:a:apache:commons_compress:1.26.2:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-compress@1.26.2 0Highest109
commons-io-2.15.1.jarcpe:2.3:a:apache:commons_io:2.15.1:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.15.1 0Highest125
commons-lang-2.6.jarpkg:maven/commons-lang/commons-lang@2.6 0122
commons-lang3-3.14.0.jarpkg:maven/org.apache.commons/commons-lang3@3.14.0 0145
doxia-logging-api-1.4.jarpkg:maven/org.apache.maven.doxia/doxia-logging-api@1.4 027
doxia-sink-api-1.4.jarpkg:maven/org.apache.maven.doxia/doxia-sink-api@1.4 027
failureaccess-1.0.2.jarpkg:maven/com.google.guava/failureaccess@1.0.2 032
file-management-3.0.0.jarpkg:maven/org.apache.maven.shared/file-management@3.0.0 026
guava-33.2.1-jre.jarcpe:2.3:a:google:guava:33.2.1:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@33.2.1-jre 0Highest27
guice-5.1.0.jarpkg:maven/com.google.inject/guice@5.1.0 034
hamcrest-core-1.3.jarpkg:maven/org.hamcrest/hamcrest-core@1.3 024
javax.inject-1.jarpkg:maven/javax.inject/javax.inject@1 020
junit-4.13.2.jarcpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:*pkg:maven/junit/junit@4.13.2 0Low53
maven-archiver-3.6.1.jarpkg:maven/org.apache.maven/maven-archiver@3.6.1 029
maven-artifact-3.9.9.jarpkg:maven/org.apache.maven/maven-artifact@3.9.9 026
maven-artifact-transfer-0.9.1.jarpkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.9.1 030
maven-assembly-plugin-3.7.1.jarpkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1 029
maven-builder-support-3.9.9.jarpkg:maven/org.apache.maven/maven-builder-support@3.9.9 024
maven-common-artifact-filters-3.3.2.jarpkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2 029
maven-compat-3.9.9.jarpkg:maven/org.apache.maven/maven-compat@3.9.9 024
maven-core-3.9.9.jarcpe:2.3:a:apache:maven:3.9.9:*:*:*:*:*:*:*pkg:maven/org.apache.maven/maven-core@3.9.9 0Highest24
maven-dependency-analyzer-1.10.jarpkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.10 030
maven-dependency-plugin-3.1.1.jarpkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1 030
maven-dependency-tree-3.0.1.jarpkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1 030
maven-filtering-3.3.2.jarpkg:maven/org.apache.maven.shared/maven-filtering@3.3.2 0563
maven-model-3.9.9.jarpkg:maven/org.apache.maven/maven-model@3.9.9 026
maven-model-builder-3.9.9.jarpkg:maven/org.apache.maven/maven-model-builder@3.9.9 032
maven-plugin-annotations-3.15.1.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1 026
maven-plugin-api-3.9.9.jarpkg:maven/org.apache.maven/maven-plugin-api@3.9.9 026
maven-repository-metadata-3.9.9.jarpkg:maven/org.apache.maven/maven-repository-metadata@3.9.9 026
maven-resolver-api-1.9.22.jarpkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22 034
maven-resolver-impl-1.9.22.jarpkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22 032
maven-resolver-named-locks-1.9.22.jarpkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22 033
maven-resolver-provider-3.9.9.jarpkg:maven/org.apache.maven/maven-resolver-provider@3.9.9 026
maven-resolver-spi-1.9.22.jarpkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22 032
maven-resolver-util-1.9.22.jarpkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22 036
maven-settings-3.9.9.jarpkg:maven/org.apache.maven/maven-settings@3.9.9 026
maven-settings-builder-3.9.9.jarpkg:maven/org.apache.maven/maven-settings-builder@3.9.9 026
maven-shared-io-3.0.0.jarpkg:maven/org.apache.maven.shared/maven-shared-io@3.0.0 028
maven-shared-utils-3.4.2.jarcpe:2.3:a:apache:maven_shared_utils:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:3.4.2:*:*:*:*:*:*:*
pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2 0Highest29
org.eclipse.sisu.inject-0.9.0.M3.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3 034
org.eclipse.sisu.plexus-0.9.0.M3.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3 029
plexus-archiver-4.10.0.jarcpe:2.3:a:codehaus-plexus:plexus-archiver:4.10.0:*:*:*:*:*:*:*pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0 0Highest29
plexus-build-api-0.0.7.jarpkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7 026
plexus-cipher-2.0.jarpkg:maven/org.codehaus.plexus/plexus-cipher@2.0 020
plexus-classworlds-2.9.0.jarpkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0 035
plexus-component-annotations-2.1.0.jarpkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0 027
plexus-container-default-1.0-alpha-30.jar (shaded: org.codehaus.plexus:plexus-component-api:1.0-alpha-30)pkg:maven/org.codehaus.plexus/plexus-component-api@1.0-alpha-30 09
plexus-container-default-1.0-alpha-30.jarpkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-30 023
plexus-interpolation-1.28.jarpkg:maven/org.codehaus.plexus/plexus-interpolation@1.28 027
plexus-io-3.4.2.jarpkg:maven/org.codehaus.plexus/plexus-io@3.4.2 024
plexus-sec-dispatcher-2.0.jarcpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:*pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0 0Highest20
plexus-utils-4.0.2.jarcpe:2.3:a:codehaus-plexus:plexus-utils:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:4.0.2:*:*:*:*:*:*:*
pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2 0Highest219
plexus-xml-3.0.0.jarpkg:maven/org.codehaus.plexus/plexus-xml@3.0.0 024
slf4j-api-1.7.26.jarpkg:maven/org.slf4j/slf4j-api@1.7.26 025
surefire-api-2.4.3.jar (shaded: org.codehaus.plexus:plexus-utils:1.5.1)cpe:2.3:a:codehaus-plexus:plexus-utils:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:1.5.1:*:*:*:*:*:*:*
pkg:maven/org.codehaus.plexus/plexus-utils@1.5.1CRITICAL3Highest12
surefire-api-2.4.3.jarpkg:maven/org.apache.maven.surefire/surefire-api@2.4.3 025
wagon-provider-api-3.5.3.jarcpe:2.3:a:apache:maven_wagon:3.5.3:*:*:*:*:*:*:*pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3 0Highest26
xz-1.9.jarpkg:maven/org.tukaani/xz@1.9 033
zstd-jni-1.5.6-3.jarpkg:maven/com.github.luben/zstd-jni@1.5.6-3 043
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll 04
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll 04
zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll 04

Dependencies (vulnerable)

aether-util-0.9.0.M2.jar

Description:

    A collection of utility classes to ease usage of the repository system.
  

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /Users/kysmith/.m2/repository/org/eclipse/aether/aether-util/0.9.0.M2/aether-util-0.9.0.M2.jar
MD5: fc6315129d2e2063e2f2725e6337587f
SHA1: b957089deb654647da320ad7507b0a4b5ce23813
SHA256:7d62b0fdef90196ec4b2947f5973d750bfd3935785244e77cc06780131c404e9
Referenced In Project/Scope: Event Processing Maven Plugin:compile
aether-util-0.9.0.M2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

aircompressor-0.27.jar

Description:

Compression algorithms

License:

Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /Users/kysmith/.m2/repository/io/airlift/aircompressor/0.27/aircompressor-0.27.jar
MD5: 2c1137bd68ec7a65655fc1adca94742b
SHA1: 5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d
SHA256:fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
aircompressor-0.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain
File Path: /Users/kysmith/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope: Event Processing Maven Plugin:provided
aopalliance-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

asm-6.1.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD: http://asm.ow2.org/license.html
File Path: /Users/kysmith/.m2/repository/org/ow2/asm/asm/6.1.1/asm-6.1.1.jar
MD5: 04b72e489b64c54d5776ab59f330bd23
SHA1: 264754515362d92acd39e8d40395f6b8dee7bc08
SHA256:dd3b546415dd4bade2ebe3b47c7828ab0623ee2336604068e2d81023f9f8d833
Referenced In Project/Scope: Event Processing Maven Plugin:compile
asm-6.1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

classworlds-1.1.jar

File Path: /Users/kysmith/.m2/repository/classworlds/classworlds/1.1/classworlds-1.1.jar
MD5: c20629baa65f1f2948b37aa393b0310b
SHA1: 60c708f55deeb7c5dfce8a7886ef09cbc1388eca
SHA256:4e3e0ad158ec60917e0de544c550f31cd65d5a97c3af1c1968bf427e4a9df2e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
classworlds-1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

commons-codec-1.18.0.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/commons-codec/commons-codec/1.18.0/commons-codec-1.18.0.jar
MD5: 2abf189633424b9292fd57a3192c0ed5
SHA1: ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f
SHA256:ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-codec-1.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

commons-compress-1.26.2.jar

Description:

Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.jar
MD5: d2c5abbd0a822c0b79cf4f03ead483ee
SHA1: eb1f823447af685208e684fce84783b43517960c
SHA256:9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-compress-1.26.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

commons-io-2.15.1.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/commons-io/commons-io/2.15.1/commons-io-2.15.1.jar
MD5: 84351f7991a0e6722f00e96a4ccc376f
SHA1: f11560da189ab563a5c8e351941415430e9304ea
SHA256:a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-io-2.15.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

commons-lang-2.6.jar

Description:

        Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.
    

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/commons-lang/commons-lang/2.6/commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
SHA256:50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-lang-2.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

commons-lang3-3.14.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/apache/commons/commons-lang3/3.14.0/commons-lang3-3.14.0.jar
MD5: 4e5c3f5e6b0b965ef241d7d72ac8971f
SHA1: 1ed471194b02f2c6cb734a0cd6f6f107c673afae
SHA256:7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c
Referenced In Project/Scope: Event Processing Maven Plugin:compile
commons-lang3-3.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

doxia-logging-api-1.4.jar

Description:

Doxia Logging API.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/doxia/doxia-logging-api/1.4/doxia-logging-api-1.4.jar
MD5: 3800c4a113c3f657c5d7653fb5695a53
SHA1: fd0ab30404ac0fca5f672eee70acf5d17a1ea856
SHA256:2c422e154f748d9c1cba6730b6304db48a19de09772aa0b7ca34240e5ec714ac
Referenced In Project/Scope: Event Processing Maven Plugin:compile
doxia-logging-api-1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

doxia-sink-api-1.4.jar

Description:

Doxia Sink API.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/doxia/doxia-sink-api/1.4/doxia-sink-api-1.4.jar
MD5: 4f8f19a149fd8a48ebefedcc5e9aafc1
SHA1: 3cfed174cabb086426a9043da49a70526ff40d16
SHA256:c72be063877e0713b9169231e4db62579f7e93b15eeb5806df8e694fc38a415e
Referenced In Project/Scope: Event Processing Maven Plugin:compile
doxia-sink-api-1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

failureaccess-1.0.2.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).
  

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar
MD5: 3f75955b49b6758fd6d1e1bd9bf777b3
SHA1: c4a06a64e650562f30b7bf9aaec1bfed43aca12b
SHA256:8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064
Referenced In Project/Scope: Event Processing Maven Plugin:provided
failureaccess-1.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

file-management-3.0.0.jar

Description:

API to collect files from a given directory using several include/exclude rules.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/file-management/3.0.0/file-management-3.0.0.jar
MD5: 52e384d43eac94eb5111ea3251e06217
SHA1: 065d87e03797af7bb5bb199d4d8b50f83cbea3ce
SHA256:a37db9f4108b019a96b4fee8c6becaea64a3e755d5d21a904a8549501c7fc065
Referenced In Project/Scope: Event Processing Maven Plugin:compile
file-management-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

guava-33.2.1-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.
  

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.jar
MD5: 872309e5982530bdc7e68096c0d53cd2
SHA1: 818e780da2c66c63bbb6480fef1f3855eeafa3e4
SHA256:452b2d9787b7d366fa8cf5ed9a1c40404542d05effa7a598da03bbbbb76d9f31
Referenced In Project/Scope: Event Processing Maven Plugin:provided
guava-33.2.1-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

guice-5.1.0.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/com/google/inject/guice/5.1.0/guice-5.1.0.jar
MD5: 2560169296aa94492af34af2115e9511
SHA1: da25056c694c54ba16e78e4fc35f17fc60f0d1b4
SHA256:4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26
Referenced In Project/Scope: Event Processing Maven Plugin:provided
guice-5.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

hamcrest-core-1.3.jar

Description:

    This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.
  

File Path: /Users/kysmith/.m2/repository/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar
MD5: 6393363b47ddcbba82321110c3e07519
SHA1: 42a25dc3219429f0e5d060061f71acb49bf010a0
SHA256:66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9
Referenced In Project/Scope: Event Processing Maven Plugin:compile
hamcrest-core-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/junit/junit@4.13.2

Identifiers

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: Event Processing Maven Plugin:provided
javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

junit-4.13.2.jar

Description:

JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /Users/kysmith/.m2/repository/junit/junit/4.13.2/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: Event Processing Maven Plugin:compile
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-archiver-3.6.1.jar

Description:

Provides utility methods for creating JARs and other archive files from a Maven project.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-archiver/3.6.1/maven-archiver-3.6.1.jar
MD5: a2fdb930b0fd117baa7ebda5742e60f6
SHA1: 7797346a0cfdac37326e0bcd04eca32c0f76b429
SHA256:a5fd6e2121c0a3f5e5cafdf336e21ba2e67a2cf7e781f69e3b8ae28215832823
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-archiver-3.6.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

maven-artifact-3.9.9.jar

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-artifact/3.9.9/maven-artifact-3.9.9.jar
MD5: fcb27c2b8225edec3f2356973fa39e98
SHA1: a130ec431ef32e12a4424f9b074735bb58e15d2d
SHA256:30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-artifact-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Identifiers

maven-artifact-transfer-0.9.1.jar

Description:

An API to install, deploy and resolving artifacts with Maven 3

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-artifact-transfer/0.9.1/maven-artifact-transfer-0.9.1.jar
MD5: b65e70a00149a44404b54cc2e73754b4
SHA1: b8f0866112547e3f7ea0e683ac50905dae046be0
SHA256:6a2d37c58a6b1b9dd8a5a2e28b5320f63d03245830712f0000342abe3de34ef5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-artifact-transfer-0.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

maven-assembly-plugin-3.7.1.jar

Description:

A Maven plugin to create archives of your project's sources, classes, dependencies etc. from flexible assembly descriptors.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugins/maven-assembly-plugin/3.7.1/maven-assembly-plugin-3.7.1.jar
MD5: d77bb9e0c42d8f5e9b8a28e04c21c0c0
SHA1: 59d01f9b253b851821446c76bed9b5b4eaa6adc8
SHA256:1d65f810ae5de6141ff73c659dae6f9db6bad83c76b811d977eb3798a6dc1d0f
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-assembly-plugin-3.7.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-builder-support-3.9.9.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-builder-support/3.9.9/maven-builder-support-3.9.9.jar
MD5: 0266bb9314b63d9fde8aff0d190f48d6
SHA1: 812c13c808e42c54d3f4abdaab603e5262bf8ab8
SHA256:2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-builder-support-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-common-artifact-filters-3.3.2.jar

Description:

A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-common-artifact-filters/3.3.2/maven-common-artifact-filters-3.3.2.jar
MD5: 5b8bd8a1933dbfa8f9a00029255cf99b
SHA1: c1cb1bc78ae8c6a6e64da833d4a9afbda5e0834a
SHA256:2be8b810cf0937ff4bb7bef8ce78a8faad17ca2182751055ac7df54d5510b908
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-common-artifact-filters-3.3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

maven-compat-3.9.9.jar

Description:

Maven2 classes maintained as compatibility layer.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-compat/3.9.9/maven-compat-3.9.9.jar
MD5: 7995aefbc294eebb239a5962b404a169
SHA1: 95ce2fe8bea6341c36a1ff01dc80e1cbdfeeffc7
SHA256:1138ab05f1be7034b90251dd32ad58262970f92d2ec4dc142301dd17efb46121
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-compat-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-core-3.9.9.jar

Description:

Maven Core classes.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-core/3.9.9/maven-core-3.9.9.jar
MD5: eed2eb37f03ccdea7ef9dab069c0b5d8
SHA1: b58645e3f14348024b05735c171425e19d30c02e
SHA256:7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-core-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-dependency-analyzer-1.10.jar

Description:

    Analyzes the dependencies of a project for undeclared or unused artifacts.
  

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-dependency-analyzer/1.10/maven-dependency-analyzer-1.10.jar
MD5: 8e7f9e272fd68f2d45c89b3b15136e9d
SHA1: 0a7378d4cb2d73e403df605f289197afb1b6a437
SHA256:37c8634fbee43fc1eee7e7a09b2328bcb5523a03d348b8e47154444c14677a81
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-analyzer-1.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

maven-dependency-plugin-3.1.1.jar

Description:

Provides utility goals to work with dependencies like copying, unpacking, analyzing, resolving and many more.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugins/maven-dependency-plugin/3.1.1/maven-dependency-plugin-3.1.1.jar
MD5: a2fac1f3e4ac36699e4473a5c3ac7115
SHA1: e348af6765ac0b96de98983f9ac96df3649f0b69
SHA256:5513748d0fc1ff44b19b7df936b051265dd0357341b37232052c89b89c8ac500
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-plugin-3.1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-dependency-tree-3.0.1.jar

Description:

A tree-based API for resolution of Maven project dependencies

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-dependency-tree/3.0.1/maven-dependency-tree-3.0.1.jar
MD5: 5c94d3d8b896f0e9f29295fd46cffaa0
SHA1: e9ae9966f1d3a238004c8b15ca4fd0e03d405424
SHA256:c7d0968a60678fcabd3f6e7ef32812c77f14bb964e66f4ae2b907d4efd675067
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-dependency-tree-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

maven-filtering-3.3.2.jar

Description:

A component to assist in filtering of resource files with properties from a Maven project.

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-filtering/3.3.2/maven-filtering-3.3.2.jar
MD5: 416dfdda99fabb27e688f9e5008ccbb9
SHA1: 23bc154ea06ccdf2623650e5339ef3aa1c38f2f5
SHA256:96739b6e16cd6b04529f4527553e92909090f42c222e2401e1df7e7da0cd1e50
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-filtering-3.3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

maven-model-3.9.9.jar

Description:

Model for Maven POM (Project Object Model)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-model/3.9.9/maven-model-3.9.9.jar
MD5: 813d4aceaaa8e16f8a83c95a96afa22c
SHA1: 585bff8f220ddc1c08c5263b7dee26c49fc7df94
SHA256:8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-model-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Identifiers

maven-model-builder-3.9.9.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-model-builder/3.9.9/maven-model-builder-3.9.9.jar
MD5: a48ea3e9ceec85a9bff88e88048148d9
SHA1: 6dcd87768eb615301aef0c2221dd168a2d36bc7b
SHA256:a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-model-builder-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-plugin-annotations-3.15.1.jar

Description:

Java annotations to use in Mojos

File Path: /Users/kysmith/.m2/repository/org/apache/maven/plugin-tools/maven-plugin-annotations/3.15.1/maven-plugin-annotations-3.15.1.jar
MD5: 0723da1364961f527fbfce10c8b9c7dd
SHA1: ca287d08819d5d87f3a06b8f065a79eb33c3ecc3
SHA256:b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-plugin-annotations-3.15.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-plugin-api-3.9.9.jar

Description:

The API for plugins - Mojos - development.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-plugin-api/3.9.9/maven-plugin-api-3.9.9.jar
MD5: 0bf1ae393ffac0c034ce8f3a4b7fc406
SHA1: 7e06aef37b14f8452928e5efaa88bcf2ee8aed02
SHA256:2b491d38db45b0e8eef522e8f7889a3366e546e58b376b07fcb56e34c424e932
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-plugin-api-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

maven-repository-metadata-3.9.9.jar

Description:

Per-directory local and remote repository metadata.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-repository-metadata/3.9.9/maven-repository-metadata-3.9.9.jar
MD5: d341cdcc9abac2d01546301a305f12b3
SHA1: 33a43f0af3371225d1dcaaa20a824df59c692172
SHA256:137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-repository-metadata-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-api-1.9.22.jar

Description:

The application programming interface for the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-api/1.9.22/maven-resolver-api-1.9.22.jar
MD5: c59d27b3750461be99f8d38e1f503f56
SHA1: 756660687ea077b85be02b019d593ef2758e7db6
SHA256:63f5f665e44a09ef55463b3b91fda0b78ff07dd24b1060d56e79c10b6e32cbfb
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-resolver-api-1.9.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-impl-1.9.22.jar

Description:

An implementation of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-impl/1.9.22/maven-resolver-impl-1.9.22.jar
MD5: 965f1348220f046c6cbde059c971685d
SHA1: 19b7a728c9000f8db615f64552d95fe74b413617
SHA256:e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-resolver-impl-1.9.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-named-locks-1.9.22.jar

Description:

A synchronization utility implementation using Named locks.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-named-locks/1.9.22/maven-resolver-named-locks-1.9.22.jar
MD5: 3d3855f4775bc27f9962f999ea88919b
SHA1: 121433b079aad9be7ed266b19f2122eeb0e2d111
SHA256:0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-resolver-named-locks-1.9.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-provider-3.9.9.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-resolver-provider/3.9.9/maven-resolver-provider-3.9.9.jar
MD5: ea2fccfc4c499dbaa570a26da14050d9
SHA1: ea361822cd25ae6c9153c594aef805e853031224
SHA256:5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-resolver-provider-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-spi-1.9.22.jar

Description:

The service provider interface for repository system implementations and repository connectors.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-spi/1.9.22/maven-resolver-spi-1.9.22.jar
MD5: 7ae784f1d4088fff396386ed6966cafc
SHA1: c3101acaa4ec053557028cf1917f1d22112b100d
SHA256:99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-resolver-spi-1.9.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-resolver-util-1.9.22.jar

Description:

A collection of utility classes to ease usage of the repository system.

License:

"Apache-2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /Users/kysmith/.m2/repository/org/apache/maven/resolver/maven-resolver-util/1.9.22/maven-resolver-util-1.9.22.jar
MD5: 4e84c0379667d2436a99fced60a74b5d
SHA1: d5febed69ca2fe0dacffec95b6cb0760b0270fd1
SHA256:4aaea1584c39294ca926fc474723d9684473609ef4490c4eb169d6ea7daca6b5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-resolver-util-1.9.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-settings-3.9.9.jar

Description:

Maven Settings model.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-settings/3.9.9/maven-settings-3.9.9.jar
MD5: a5eede8fe9b01b7bb3c6dad06a738365
SHA1: a82024d87a107965ae274d944c844c9186ff410d
SHA256:68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-settings-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-settings-builder-3.9.9.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/maven-settings-builder/3.9.9/maven-settings-builder-3.9.9.jar
MD5: 4fb4ae61642d42cba66821d8698a670a
SHA1: 71a9bee9618839ffaf7c0de3b53ac1c408b57ae0
SHA256:094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373
Referenced In Project/Scope: Event Processing Maven Plugin:provided
maven-settings-builder-3.9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

maven-shared-io-3.0.0.jar

Description:

API for I/O support like logging, download or file scanning.

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-shared-io/3.0.0/maven-shared-io-3.0.0.jar
MD5: cd048096ba02afa72cebb76d39e4bde0
SHA1: fe598062dbcf95ac9eba77840f86d2ff25d81f55
SHA256:7f9d12b2d569ccde2cacd22a39e301b20f82567b80e21d625c5f4d93dc09c2c7
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-shared-io-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

maven-shared-utils-3.4.2.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: /Users/kysmith/.m2/repository/org/apache/maven/shared/maven-shared-utils/3.4.2/maven-shared-utils-3.4.2.jar
MD5: 53a038f77a81cb5816ad2b1c7daa8711
SHA1: bfa28296272a5915b08de9f11f34a94b0a818fd0
SHA256:b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487
Referenced In Project/Scope: Event Processing Maven Plugin:compile
maven-shared-utils-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-slf4j-provider@3.9.9

Identifiers

org.eclipse.sisu.inject-0.9.0.M3.jar

Description:

JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /Users/kysmith/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M3/org.eclipse.sisu.inject-0.9.0.M3.jar
MD5: 643a13084e0ac59cdda06319e1b348ea
SHA1: 3665002ba4d16dfa779ef658a63d0608c4bd898b
SHA256:15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522
Referenced In Project/Scope: Event Processing Maven Plugin:provided
org.eclipse.sisu.inject-0.9.0.M3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

org.eclipse.sisu.plexus-0.9.0.M3.jar

Description:

Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container

License:

"Eclipse Public License, Version 2.0";link="https://www.eclipse.org/legal/epl-v20.html"
File Path: /Users/kysmith/.m2/repository/org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M3/org.eclipse.sisu.plexus-0.9.0.M3.jar
MD5: 964e7bc9837b270566f18b87af65f5d7
SHA1: b493c7abcc6e04fa0a6a20d489a3db0395c76f70
SHA256:c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e
Referenced In Project/Scope: Event Processing Maven Plugin:provided
org.eclipse.sisu.plexus-0.9.0.M3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Identifiers

plexus-archiver-4.10.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-archiver/4.10.0/plexus-archiver-4.10.0.jar
MD5: 46a7cede88b793dbc9cbe9fd82d68368
SHA1: d63e385ae6ded05eef954102f0cd1137b2baab81
SHA256:4c07814ff4a39199999ae82bba1e38aa4f25637467fcac6a66ed63a76535799a
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-archiver-4.10.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

plexus-build-api-0.0.7.jar

File Path: /Users/kysmith/.m2/repository/org/sonatype/plexus/plexus-build-api/0.0.7/plexus-build-api-0.0.7.jar
MD5: 49f0f8c6bdf2687e358870a4fc1559c6
SHA1: e6ba5cd4bfd8de00235af936e7f63eb24ed436e6
SHA256:934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-build-api-0.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

plexus-cipher-2.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-cipher/2.0/plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope: Event Processing Maven Plugin:provided
plexus-cipher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

plexus-classworlds-2.9.0.jar

Description:

A class loader framework

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-classworlds/2.9.0/plexus-classworlds-2.9.0.jar
MD5: 64e4ee5a1298f866d00f705e02058200
SHA1: ace0820f34de49f69511f5263bcebb09fac9731a
SHA256:1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-classworlds-2.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Identifiers

plexus-component-annotations-2.1.0.jar

Description:

    Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.
  

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar
MD5: 141fd7a2ae613cb17d25ecd54b43eb3f
SHA1: 2f2147a6cc6a119a1b51a96f31d45c557f6244b9
SHA256:bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-component-annotations-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

plexus-container-default-1.0-alpha-30.jar (shaded: org.codehaus.plexus:plexus-component-api:1.0-alpha-30)

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-container-default/1.0-alpha-30/plexus-container-default-1.0-alpha-30.jar/META-INF/maven/org.codehaus.plexus/plexus-component-api/pom.xml
MD5: 081a9cf2cfc29605fad2110ae2656a1c
SHA1: efb3642d47427637d031258c853618028546dfcc
SHA256:a0f23a7447b705dfd8a92b5b6435938403b9ccdc9a8d769134d41cd571b015c8
Referenced In Project/Scope: Event Processing Maven Plugin:compile

Identifiers

plexus-container-default-1.0-alpha-30.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-container-default/1.0-alpha-30/plexus-container-default-1.0-alpha-30.jar
MD5: af35f8c80bbf8deaaa382bd530c40939
SHA1: 669d4ba8e898e37987eb5e30b121ed1d62c5b7b8
SHA256:ef5fa49aeb90df9cac923435577dc9c2701a18ba29191b6e407e7870795eea35
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-container-default-1.0-alpha-30.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-dependency-plugin@3.1.1

Identifiers

plexus-interpolation-1.28.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-interpolation/1.28/plexus-interpolation-1.28.jar
MD5: 68fd3527539ddb2a42e2e776ad8240b7
SHA1: 90d3608cd99f21717a581f036a1c69ff762f5ed6
SHA256:ab2a8715570438a2e4164d85ad3e8d489eabc38ea5093c2eb8ab7f58403535b5
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-interpolation-1.28.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

plexus-io-3.4.2.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-io/3.4.2/plexus-io-3.4.2.jar
MD5: 77515ce571e8169c13220c506ad177a4
SHA1: 40deb3076e4597f1ef973dc794f3a510fa3a942d
SHA256:6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-io-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

plexus-sec-dispatcher-2.0.jar

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-sec-dispatcher/2.0/plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope: Event Processing Maven Plugin:provided
plexus-sec-dispatcher-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-core@3.9.9

Identifiers

plexus-utils-4.0.2.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines and
    more.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-utils/4.0.2/plexus-utils-4.0.2.jar
MD5: 4cfdd73e436702d319d551a44fcea500
SHA1: 9526a9548b302572f23337fcc217fb4cc713b9c3
SHA256:8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-utils-4.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-plugin-api@3.9.9

Identifiers

plexus-xml-3.0.0.jar

Description:

A collection of various utility classes to ease working with XML in Maven 3.

File Path: /Users/kysmith/.m2/repository/org/codehaus/plexus/plexus-xml/3.0.0/plexus-xml-3.0.0.jar
MD5: cccca4a03a8367cd20e4efaead5fba0b
SHA1: d16b91678bc3734276886132923d6919c935c9f7
SHA256:d2622dc9339b16f5b8c9cad2add440e965831d0e16f19ae1de24e1202b0de536
Referenced In Project/Scope: Event Processing Maven Plugin:compile
plexus-xml-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

slf4j-api-1.7.26.jar

Description:

The slf4j API

File Path: /Users/kysmith/.m2/repository/org/slf4j/slf4j-api/1.7.26/slf4j-api-1.7.26.jar
MD5: 60ec8751be37d54a2aa1b6178f87b968
SHA1: 77100a62c2e6f04b53977b9f541044d7d722693d
SHA256:6d9e5b86cfd1dd44c676899285b5bb4fa0d371cf583e8164f9c8a0366553242b
Referenced In Project/Scope: Event Processing Maven Plugin:provided
slf4j-api-1.7.26.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

surefire-api-2.4.3.jar (shaded: org.codehaus.plexus:plexus-utils:1.5.1)

File Path: /Users/kysmith/.m2/repository/org/apache/maven/surefire/surefire-api/2.4.3/surefire-api-2.4.3.jar/META-INF/maven/org.codehaus.plexus/plexus-utils/pom.xml
MD5: 4d0ef59ee3f74d8200277cbe592ee585
SHA1: 2a0b3470063440066d3b8a084340ce07dbdbfedc
SHA256:e237bba8d1c65c171b5fe8774a2ff817525df6315b929a2085cf70cff15b1b58
Referenced In Project/Scope: Event Processing Maven Plugin:compile

Identifiers

CVE-2017-1000487  

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv3:
  • Base Score: CRITICAL (9.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
  • Base Score: HIGH (7.5)
  • Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P

References:

Vulnerable Software & Versions:

CVE-2022-4244  

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2022-4245  

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
CWE-611 Improper Restriction of XML External Entity Reference, CWE-91 XML Injection (aka Blind XPath Injection)

CVSSv3:
  • Base Score: MEDIUM (4.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

surefire-api-2.4.3.jar

File Path: /Users/kysmith/.m2/repository/org/apache/maven/surefire/surefire-api/2.4.3/surefire-api-2.4.3.jar
MD5: 6c810bfd0dbdea75d84cfb541e4bd8f4
SHA1: 3716608c23136d71be2efc5dcbcd2ef80e510076
SHA256:34ba3098cd356df55daf2a3d6d486050648777fbcb029e15333f9795cce57362
Referenced In Project/Scope: Event Processing Maven Plugin:compile
surefire-api-2.4.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.tibco.ep/ep-maven-plugin@2.3.0

Identifiers

wagon-provider-api-3.5.3.jar

Description:

Maven Wagon API that defines the contract between different Wagon implementations

File Path: /Users/kysmith/.m2/repository/org/apache/maven/wagon/wagon-provider-api/3.5.3/wagon-provider-api-3.5.3.jar
MD5: 55a4be47ca51799ae3c18ed521f296df
SHA1: 39c44ebb3945dee359665272d8acb83f9460491b
SHA256:5e72000338945ed3e96f8e4f578d1d0672e1af7e19c0e9014197ae5b31af3ef4
Referenced In Project/Scope: Event Processing Maven Plugin:compile
wagon-provider-api-3.5.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven/maven-compat@3.9.9

Identifiers

xz-1.9.jar

Description:

XZ data compression

License:

Public Domain
File Path: /Users/kysmith/.m2/repository/org/tukaani/xz/1.9/xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Project/Scope: Event Processing Maven Plugin:runtime
xz-1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

zstd-jni-1.5.6-3.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar
MD5: 67b722d1bc7f256235ddf32a320c1d0c
SHA1: 823b794106e4bcb80110f49408d1641231f25927
SHA256:f72ede1b39258faf81277dc58de30c71cbae4253732558d2ce10b53d8b5763d5
Referenced In Project/Scope: Event Processing Maven Plugin:runtime
zstd-jni-1.5.6-3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-assembly-plugin@3.7.1

Identifiers

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/aarch64/libzstd-jni-1.5.6-3.dll
MD5: f4fc7646f51fe2c46c3fa26643c9ead7
SHA1: 146beeec8191555aa01eb5d7b2de3d28785e6783
SHA256:8370bd9ab4f31d9e78ca260cf55f7bdd9ab30bb2dedda59d55ef616b6d6d2c5a
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Identifiers

  • None

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/amd64/libzstd-jni-1.5.6-3.dll
MD5: 24680c3cda47bb2961843d7ad2bbdcc3
SHA1: 24be85a38aaf6a2efd34154f7d75a008d353bcf4
SHA256:e79322262fb12a06b4cc98838c795899f65b88f3ac38ac3d00a282dd11b65602
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Identifiers

  • None

zstd-jni-1.5.6-3.jar: libzstd-jni-1.5.6-3.dll

File Path: /Users/kysmith/.m2/repository/com/github/luben/zstd-jni/1.5.6-3/zstd-jni-1.5.6-3.jar/win/x86/libzstd-jni-1.5.6-3.dll
MD5: 8574b41785d6407215ba3aa54995039a
SHA1: 1a2a9087783b495697fa76dbd08e63449569854f
SHA256:53a53266de250a7d0166c0c730f3dea45b4015723cb180e2ba0b239f2a34e13c
Referenced In Project/Scope: Event Processing Maven Plugin:runtime

Identifiers

  • None


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.