2025-01-31T22:55:30Z OWASP Foundation CycloneDX Maven plugin 2.6.1 c31373a2f4276beba7de6dfab877b85b 8d6e08152ed0f8fb511f237be7e6e53db2d8f1d6 4265a10877121df5add55a9d49fea53f55f218929c286b4aa536d22a36ea0bcc 990c98865e1c9d6d1cb3ae19d846881c9fff022c36cf9497b6e2112b689e16dc9e4bfa575cb9d7fe7e8328438d629840 1ebbf8ecd80d82817d1f1e78aa6324807f2dd3d49f0135026f4b7902a1cea58ea7489f2a21d8c44d09e09581290aeb1621a3763993be651342018ec13c91be88 OWASP Foundation org.cyclonedx cyclonedx-maven-plugin 2.7.2 The CycloneDX Maven plugin generates CycloneDX Software Bill of Materials (SBOM) containing the aggregate of all direct and transitive dependencies of a project. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.2?type=maven-plugin https://owasp.org/https://github.com/CycloneDX/cyclonedx-maven-plugin/actionshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/CycloneDX/cyclonedx-maven-plugin/issueshttps://github.com/CycloneDX/cyclonedx-maven-plugin.git OWASP Foundation org.cyclonedx cyclonedx-core-java 7.2.0 The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs. required bf745e75e722f91d6da7d004144e884e 23cd84b44a118a3c72792c9ab412dea4a4491c08 59a245a4b0e295bf3464f69891da1428a66556db7279be4e495e4c564e362acb 34216f40846a2e950fbbae58d8879f14bbed0fcea07528363e1fd56af533f65205bb03ae5738c12815fb07471c31eb3a 306c66d93b81242edfa08a67bbc699e383ecfdbf780d2270d427eccf4b95b4a7a91deee52988593698de43b28cbdbf1ba69ff048c3232cd5da8c14b88446f402 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.cyclonedx/cyclonedx-core-java@7.2.0?type=jar https://owasp.org/https://github.com/CycloneDX/cyclonedx-core-java/actionshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/CycloneDX/cyclonedx-core-java/issueshttps://github.com/CycloneDX/cyclonedx-core-java.git The Apache Software Foundation commons-io commons-io 2.11.0 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required 3b4b7ccfaeceeac240b804839ee1a1ca a2503f302b11ebde7ebc3df41daebe0e4eea3689 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908 114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f 5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10 Apache-2.0 pkg:maven/commons-io/commons-io@2.11.0?type=jar https://issues.apache.org/jira/browse/IOhttps://gitbox.apache.org/repos/asf?p=commons-io.githttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 com.github.package-url packageurl-java 1.4.1 The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a "mostly universal" URL. required f8b3a23e6402d317b612251c83d292e7 0a0d1009191c1cf6b04f40d26e4717596f3a90e0 8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2 791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3 ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b MIT https://opensource.org/licenses/MIT pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar https://travis-ci.com/package-url/packageurl-javahttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/package-url/packageurl-java/issueshttps://github.com/package-url/packageurl-java.git FasterXML com.fasterxml.jackson.dataformat jackson-dataformat-xml 2.13.3 Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos. d2215f4b13497b9cced1f981ada9d6f6 ec52dc41977a927a6ff175042576d716cd55c7c5 ab7aa994b1c514ca37e9721f0e79bb20d9aa31df9f9d8286cbd2b9e71235e44e 224ea9166e185c8abe942bc691c3756cd41794ae46772fb0f4eb523ea21333d1b25498af75881bc5010d7a2fe56214df 778b2358401997b03416998b534a99545c26d1256478e1992977cadea250a7796d09e63fd908ddd68362a11de563fe9ef6d6d064fd9f95c83c673080599f58c0 Apache-2.0 pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar http://github.com/FasterXML/jackson-dataformat-xmlhttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.jackson.core jackson-core 2.13.3 Core Jackson processing abstractions (aka Streaming API), implementation for JSON 9a6679e6a2f7d601a9f212576fda550c a27014716e4421684416e5fa83d896ddb87002da ab119a8ea3cc69472ebc0e870b849bfbbe536ad57d613dc38453ccd592ca6a3d 7b96a15f15eb9a44795c632313503677e0e65615d31922861138ee059defb1db31dbd98144a6474c25fa69de1c60f7d7 d5337db908b2c56dcb911e3d1a5f671456c13f254fe8d2a620823bc15b2db6aaa8325a86b436b5d181f2584b533158fd14d140b98305ac252f8dfd9a627da859 Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar http://github.com/FasterXML/jackson-corehttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.jackson.core jackson-annotations 2.13.3 Core annotations used for value types, used by Jackson data binding package. 3fb8ee542a62a113fa7474fe88bb97e8 7198b3aac15285a49e218e08441c5f70af00fc51 5326a6fbcde7cf8817f36c254101cd45f6acea4258518cd3c80ee5b89f4e4b9b 245c29f5dff5e7677c7f614df69de1072dbb56717fe88890128dfd6479994bb9a81a9917d41a2831a9a96e6d12aa3bb1 7f89b142068879b5fd96e4cb947313b3b39c1dbead43480307360a212fdb5347046b14fbc9b94c480034a4826fdd2a821686ebd121d774d55795326eaa1c95fd Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar http://github.com/FasterXML/jackson-annotationshttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.jackson.core jackson-databind 2.13.3 General data-binding functionality for Jackson: works on core streaming API e35e2adf33b2eed8e9f538a911244175 56deb9ea2c93a7a556b3afbedd616d342963464e 6444bf08d8cd4629740afc3db1276938f494728deb663ce585c4e91f6b45eb84 38a8c81bc7a37315428697ab761f4c12b409046247414532fc68e37bb2a70e0d0a50b555dd20a251c6f63a85dfe536bc dd6daeb7481bab4641adf71552774dd143039dc856aa6e3e5805c1964fecc69eb18a2fd8201e16ebebb92549edb7f10d1f9a50391ed9a120f867b675a6d4d4ff Apache-2.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar http://github.com/FasterXML/jackson-databindhttp://fasterxml.com/https://oss.sonatype.org/service/local/staging/deploy/maven2/ fasterxml.com org.codehaus.woodstox stax2-api 4.2.1 tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. af8377bc7882332e22456616a9f164f6 a3f7325c52240418c2ba257b103c3c550e140c83 678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579 97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da 00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d The BSD License http://www.opensource.org/licenses/bsd-license.php pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar http://fasterxml.comhttp://github.com/FasterXML/stax2-apihttps://oss.sonatype.org/service/local/staging/deploy/maven2/ FasterXML com.fasterxml.woodstox woodstox-core 6.2.7 Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs 098c3f8d7d3dd78284086bbfa1a12d05 86622cfd0a9933628b6b876d0c92589148d3b42e dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037 4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae 25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075 Apache-2.0 pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar http://fasterxml.comhttps://github.com/FasterXML/woodstox/issueshttps://github.com/FasterXML/woodstoxhttps://oss.sonatype.org/service/local/staging/deploy/maven2/ com.networknt json-schema-validator 1.0.72 A json schema validator that supports draft v4, v6, v7 and v2019-09 f0d10b124bc1e23a5a52c6c2bd899571 77c4f5ced04d846a2134b9e56325e8b9cfc01724 260647c459cc7de269b2a8f576e5693e434df888fd4801e92365fe18b9992cbc 03ad63243f87279fc76bae1e892f70fc99906fc47933b8eccef10df10d04d6b9a5a43d9e07f3bba0b02a9146db24a341 4dcb973a48d89e0cae94ec56540e5e872997fa9c6f0f8822e2343001c696654798aa565b9dffcd33e63be4dee5c6aefd7fd502c33619b216a8ccd907d9e4e13f Apache-2.0 pkg:maven/com.networknt/json-schema-validator@1.0.72?type=jar https://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/networknt/json-schema-validator/issues com.ethlo.time itu 1.7.0 Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format 4f9277e3108caa3314836d8f20f9cf94 00c6977b9d42efa3f8c95c31db5313a96ffc1724 55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7 f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8 Apache-2.0 pkg:maven/com.ethlo.time/itu@1.7.0?type=jar https://oss.sonatype.org/service/local/staging/deploy/maven2/ The Apache Software Foundation commons-codec commons-codec 1.15 The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. optional 303baf002ce6d382198090aedd9d79a2 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63 05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0 da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787 Apache-2.0 pkg:maven/commons-codec/commons-codec@1.15?type=jar https://issues.apache.org/jira/browse/CODEChttps://github.com/apache/commons-codechttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://issues.apache.org/jira/browse/LANGhttps://gitbox.apache.org/repos/asf?p=commons-lang.githttps://builds.apache.org/https://mail-archives.apache.org/mod_mbox/commons-user/https://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 javax.inject javax.inject 1 The javax.inject API 289075e48b909e9e74e6c915b3631d2e 6975da39a7040257bd51d21a231b76c915872d38 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190 e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e Apache-2.0 pkg:maven/javax.inject/javax.inject@1?type=jar http://code.google.com/p/atinject/source/checkout Codehaus Plexus org.codehaus.plexus plexus-utils 3.3.1 A collection of various utility classes to ease working with strings, files, command lines, XML and more. required 89d7dce81b0f90f469c7eec197ce299c 9b41b2b76b1bfe3774411fe22f5868058a9fc822 4b570fcdbe5a894f249d2eb9b929358a9c88c3e548d227a80010461930222f2a 9b309b0ec1ef0ac3804cb674942294cde9d9bbde8cd2b509694b4bbc4522baaf9a8e7ec889277e1006179b0bde3bd63e eb63a68de5f48cb33f9ad7dd2a94969db2341ba05d385656a301c7c2de392cabb960ee442bd1a4b19cbc3ebde5b7b00a95b7ee4d7766309053e9e937b007eb0d Apache-2.0 pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar http://github.com/codehaus-plexus/plexus-utils/issueshttp://github.com/codehaus-plexus/plexus-utilshttp://codehaus-plexus.github.io/https://oss.sonatype.org/service/local/staging/deploy/maven2/http://archive.plexus.codehaus.org/user QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.qos.chhttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j The Apache Software Foundation org.apache.maven.shared maven-dependency-tree 3.2.0 A tree-based API for resolution of Maven project dependencies required 8ba689823847f668283077c69726d0a1 dc1dcdfbfbcca93ab165880538badd3d748bf59d 03d3102672863761c2a39da09c444cc7dea74cc4a9efa2107f8f0bfd2519d330 b7d9a2137a0f751d1aa1a27a15e31a1ec646b17f8e9bf51c0bef36811762f10ca2e608d7f35bfea891de9e442b495fb0 74c003551104c454ae40169fffe622c22330a64900c57633a6be6e242650a8a68626ab355f96f70c489e252d73c01e92f046e0fc969fddb99955804dbd02e72e Apache-2.0 pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.0?type=jar https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-treehttps://lists.apache.org/list.html?users@maven.apache.orghttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 The Eclipse Foundation org.eclipse.aether aether-util 1.0.0.v20140518 A collection of utility classes to ease usage of the repository system. 08495ee7ecf90f0b528e7d65471532af 7df5ba98ce8b78985d75fdd8c2981fe69234ef85 aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984 f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946 ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e EPL-1.0 pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar http://www.eclipse.org/https://hudson.eclipse.org/aether/job/aether-core/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aetherhttp://dev.eclipse.org/mhonarc/lists/aether-dev/http://git.eclipse.org/c/aether/aether-core.git/tree/ The Eclipse Foundation org.eclipse.aether aether-api 1.0.0.v20140518 The application programming interface for the repository system. b05ef5410dad83a4e9ba50e08e0dbbf4 be68e917f454dcd841865ad7cf9b7615b26a51f7 84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773 44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f 41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e EPL-1.0 pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar http://www.eclipse.org/https://hudson.eclipse.org/aether/job/aether-core/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aetherhttp://dev.eclipse.org/mhonarc/lists/aether-dev/http://git.eclipse.org/c/aether/aether-core.git/tree/ The Apache Software Foundation org.apache.maven.shared maven-dependency-analyzer 1.13.0 Analyzes the dependencies of a project for undeclared or unused artifacts. required 2199773ce7bc3ac8f013f218e88834d3 bfa2abe32ed2db005675e722cdb25d0839744d7d de94746420db9dd6febb8fdc602d79234e476b23150ad7eed8ba9a70e2aecaa9 6de5dce0255a9096ac18c652ee24b8b79d4318f35d32056aa9562b434984dc4c37ee5ce9e4d7c9bb50f044b3ff5dd865 8d76abb41b6bee19e94b25a117b386d6f24a80f9ca28f9ff008c6b97bcdd8ed50b923901442cd6d5bd5d8462a28c74570cc5eadc7d4f97f800010e920de01012 Apache-2.0 pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-analyzer/https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzerhttps://lists.apache.org/list.html?users@maven.apache.orghttps://www.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2 OW2 org.ow2.asm asm 9.3 ASM, a very small and fast Java bytecode manipulation framework e1c3b96035117ab516ffe0de9bd696e0 8e6300ef51c1d801a7ed62d07cd221aca3a90640 1263369b59e29c943918de11d6d6152e2ec6085ce63e5710516f8c67d368e4bc 304aa6673d587a68a06dd8601c6db0dc4d387f89a058b7600459522d94780e9e8d87a2778604fc41b81c43a57bf49ad6 04362f50a2b66934c2635196bf8e6bd2adbe4435f312d1d97f4733c911e070f5693941a70f586928437043d01d58994325e63744e71886ae53a62c824927a4d4 BSD-3-Clause https://opensource.org/licenses/BSD-3-Clause pkg:maven/org.ow2.asm/asm@9.3?type=jar http://www.ow2.org/https://gitlab.ow2.org/asm/asm/issueshttps://mail.ow2.org/wws/arc/asm/https://gitlab.ow2.org/asm/asm/