Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 6.1.1
Report Generated On: Sat, 10 Apr 2021 11:06:47 +0200
Dependencies Scanned: 7 (6 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2021-04-10T10:56:40
NVD CVE Modified: 2021-04-10T02:01:43
VersionCheckOn: 2021-03-15T17:11:58

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
javax.inject-1.jar		pkg:maven/javax.inject/javax.inject@1		19
jcl-over-slf4j-1.7.30.jar		pkg:maven/org.slf4j/jcl-over-slf4j@1.7.30		33
jul-to-slf4j-1.7.30.jar		pkg:maven/org.slf4j/jul-to-slf4j@1.7.30		28
logback-core-1.2.3.jar	cpe:2.3:a:logback:logback:1.2.3:::::::*	pkg:maven/ch.qos.logback/logback-core@1.2.3	Highest	32
lombok-1.18.18.jar		pkg:maven/org.projectlombok/lombok@1.18.18		24
slf4j-api-1.7.30.jar		pkg:maven/org.slf4j/slf4j-api@1.7.30		29

Dependencies

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope:blueMarine II :: Plugins (modules):compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	javax.inject	Highest
Vendor	file	name	javax.inject-1	High
Vendor	pom	name	javax.inject	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	inject	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	javax	Low
Product	file	name	javax.inject-1	High
Product	pom	groupid	javax.inject	Highest
Product	pom	name	javax.inject	High
Product	jar	package name	javax	Highest
Product	pom	url	http://code.google.com/p/atinject/	Medium
Product	jar	package name	inject	Highest
Product	pom	artifactid	javax.inject	Highest
Product	jar	package name	inject	Low
Version	pom	version	1	Highest
Version	file	version	1	Medium

Identifiers

pkg:maven/javax.inject/javax.inject@1 (Confidence:High)

jcl-over-slf4j-1.7.30.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/1.7.30/jcl-over-slf4j-1.7.30.jar
MD5: 69ad224b2feb6f86554fe8997b9c3d4b
SHA1: cd92524ea19d27e5b94ecd251e1af729cffdfe15
SHA256:71e9ee37b9e4eb7802a2acc5f41728a4cf3915e7483d798db3b4ff2ec8847c50
Referenced In Project/Scope:blueMarine II :: Plugins (modules):runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	file	name	jcl-over-slf4j	High
Vendor	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	jcl-over-slf4j	High
Product	Manifest	Bundle-Name	jcl-over-slf4j	Medium
Product	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	apache	Highest
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@1.7.30 (Confidence:High)

jul-to-slf4j-1.7.30.jar

Description:

JUL to SLF4J bridge

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar
MD5: f2c78cb93d70dc5dea0c50f36ace09c1
SHA1: d58bebff8cbf70ff52b59208586095f467656c30
SHA256:bbcbfdaa72572255c4f85207a9bfdb24358dc993e41252331bd4d0913e4988b9
Referenced In Project/Scope:blueMarine II :: Plugins (modules):runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bridge	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	name	JUL to SLF4J bridge	High
Vendor	file	name	jul-to-slf4j	High
Vendor	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	jar	package name	slf4j	Highest
Vendor	pom	artifactid	jul-to-slf4j	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	jar	package name	bridge	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	pom	name	JUL to SLF4J bridge	High
Product	file	name	jul-to-slf4j	High
Product	Manifest	Bundle-Name	jul-to-slf4j	Medium
Product	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	artifactid	jul-to-slf4j	Highest
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/jul-to-slf4j@1.7.30 (Confidence:High)

logback-core-1.2.3.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar
MD5: 841fc80c6edff60d947a3872a2db4d45
SHA1: 864344400c3d4d92dfeb0a305dc87d953677c03c
SHA256:5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22
Referenced In Project/Scope:blueMarine II :: Plugins (modules):runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	pom	parent-artifactid	logback-parent	Low
Vendor	jar	package name	logback	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	jar	package name	qos	Highest
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	pom	artifactid	logback-core	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	pom	name	Logback Core Module	High
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	jar	package name	ch	Highest
Vendor	jar	package name	core	Highest
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	file	name	logback-core	High
Product	pom	parent-artifactid	logback-parent	Medium
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	jar	package name	logback	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	qos	Highest
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	pom	name	Logback Core Module	High
Product	jar	package name	ch	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	artifactid	logback-core	Highest
Product	jar	package name	core	Highest
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Version	Manifest	Bundle-Version	1.2.3	High
Version	pom	version	1.2.3	Highest
Version	file	version	1.2.3	High

Related Dependencies

Identifiers

pkg:maven/ch.qos.logback/logback-core@1.2.3 (Confidence:High)
cpe:2.3:a:logback:logback:1.2.3:*:*:*:*:*:*:* (Confidence:Highest)

lombok-1.18.18.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.18/lombok-1.18.18.jar
MD5: 6a157cf72924f8d135dcd6c571bf0405
SHA1: 481f5bfed3ae29f656eedfe9e98c8365b8ba5c57
SHA256:601ec46206e0f9cac2c0583b3350e79f095419c395e991c761640f929038e9cc
Referenced In Project/Scope:blueMarine II :: Plugins (modules):provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	name	Project Lombok	High
Vendor	jar	package name	tostring	Highest
Vendor	file	name	lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	pom	groupid	projectlombok	Highest
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	pom	name	Project Lombok	High
Product	jar	package name	tostring	Highest
Product	file	name	lombok	High
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	url	https://projectlombok.org	Medium
Product	Manifest	automatic-module-name	lombok	Medium
Product	pom	groupid	projectlombok	Highest
Version	file	version	1.18.18	High
Version	Manifest	lombok-version	1.18.18	Medium
Version	pom	version	1.18.18	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.18 (Confidence:High)

slf4j-api-1.7.30.jar

Description:

The slf4j API

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar
MD5: f8be00da99bc4ab64c79ab1e2be7cb7c
SHA1: b5a4b6d16ab13e34a88fae84c35cd5d68cac922c
SHA256:cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57
Referenced In Project/Scope:blueMarine II :: Plugins (modules):compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	file	name	slf4j-api	High
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	pom	artifactid	slf4j-api	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	jar	package name	slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	slf4j-api	High
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	slf4j	Highest
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	pom	name	SLF4J API Module	High
Product	pom	artifactid	slf4j-api	Highest
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.30 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: blueMarine II :: Plugins (modules)

it.tidalwave.bluemarine2:bluemarine2-plugins-modules:1.1-ALPHA-1

Summary

Dependencies

javax.inject-1.jar

Evidence

Identifiers

jcl-over-slf4j-1.7.30.jar

Evidence

Identifiers

jul-to-slf4j-1.7.30.jar

Evidence

Identifiers

logback-core-1.2.3.jar

Evidence

Related Dependencies

Identifiers

lombok-1.18.18.jar

Evidence

Identifiers

slf4j-api-1.7.30.jar

Evidence

Identifiers