Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 6.1.1
Report Generated On: Sat, 10 Apr 2021 10:58:39 +0200
Dependencies Scanned: 14 (13 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2021-04-10T10:56:40
NVD CVE Modified: 2021-04-10T02:01:43
VersionCheckOn: 2021-03-15T17:11:58

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
activation-1.1.1.jar		pkg:maven/javax.activation/activation@1.1.1		25
javax.inject-1.jar		pkg:maven/javax.inject/javax.inject@1		19
jaxb-api-2.2.11.jar		pkg:maven/javax.xml.bind/jaxb-api@2.2.11		42
jaxb-core-2.2.11.jar		pkg:maven/com.sun.xml.bind/jaxb-core@2.2.11 pkg:maven/org.glassfish.jaxb/jaxb-core@2.2.11		44
jaxb-core-2.2.11.jar (shaded: com.sun.istack:istack-commons-runtime:2.21)		pkg:maven/com.sun.istack/istack-commons-runtime@2.21		11
jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:txw2:2.2.11)		pkg:maven/org.glassfish.jaxb/txw2@2.2.11		11
jaxb-impl-2.2.11.jar		pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.11		40
jaxb-impl-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-runtime:2.2.11)		pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.2.11		11
jcl-over-slf4j-1.7.30.jar		pkg:maven/org.slf4j/jcl-over-slf4j@1.7.30		33
jul-to-slf4j-1.7.30.jar		pkg:maven/org.slf4j/jul-to-slf4j@1.7.30		28
logback-core-1.2.3.jar	cpe:2.3:a:logback:logback:1.2.3:::::::*	pkg:maven/ch.qos.logback/logback-core@1.2.3	Highest	32
lombok-1.18.18.jar		pkg:maven/org.projectlombok/lombok@1.18.18		24
slf4j-api-1.7.30.jar		pkg:maven/org.slf4j/slf4j-api@1.7.30		29

Dependencies

activation-1.1.1.jar

Description:

The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data

License:

COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0: https://glassfish.dev.java.net/public/CDDLv1.0.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/activation/activation/1.1.1/activation-1.1.1.jar
MD5: 46a37512971d8eca81c3fcf245bf07d2
SHA1: 485de3a253e23f645037828c07f1d7f1af40763a
SHA256:ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	Sun Microsystems, Inc.	Low
Vendor	file	name	activation	High
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	extension-name	javax.activation	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	jar	package name	sun	Highest
Vendor	pom	artifactid	activation	Low
Vendor	pom	groupid	javax.activation	Highest
Vendor	pom	name	JavaBeans(TM) Activation Framework	High
Vendor	pom	url	http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp	Highest
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	Implementation-Vendor	Sun Microsystems, Inc.	High
Product	file	name	activation	High
Product	pom	url	http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp	Medium
Product	jar	package name	activation	Highest
Product	Manifest	specification-title	JavaBeans(TM) Activation Framework Specification	Medium
Product	jar	package name	javax	Highest
Product	Manifest	extension-name	javax.activation	Medium
Product	pom	artifactid	activation	Highest
Product	pom	groupid	javax.activation	Highest
Product	pom	name	JavaBeans(TM) Activation Framework	High
Version	Manifest	Implementation-Version	1.1.1	High
Version	pom	version	1.1.1	Highest
Version	file	version	1.1.1	High

Identifiers

pkg:maven/javax.activation/activation@1.1.1 (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	javax.inject	Highest
Vendor	file	name	javax.inject-1	High
Vendor	pom	name	javax.inject	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	inject	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	javax	Low
Product	file	name	javax.inject-1	High
Product	pom	groupid	javax.inject	Highest
Product	pom	name	javax.inject	High
Product	jar	package name	javax	Highest
Product	pom	url	http://code.google.com/p/atinject/	Medium
Product	jar	package name	inject	Highest
Product	pom	artifactid	javax.inject	Highest
Product	jar	package name	inject	Low
Version	pom	version	1	Highest
Version	file	version	1	Medium

Identifiers

pkg:maven/javax.inject/javax.inject@1 (Confidence:High)

jaxb-api-2.2.11.jar

Description:

JAXB (JSR 222) API

License:

CDDL 1.1: https://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: https://glassfish.java.net/public/CDDL+GPL_1_1.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/xml/bind/jaxb-api/2.2.11/jaxb-api-2.2.11.jar
MD5: 5983d1e2ec1a9b0604575cd9e9582591
SHA1: 32274d4244967ff43e7a5d967743d94ed3d2aea7
SHA256:273d82f8653b53ad9d00ce2b2febaef357e79a273560e796ff3fcfec765f8910
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bind	Highest
Vendor	pom	artifactid	jaxb-api	Low
Vendor	pom	url	http://jaxb.java.net/	Highest
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	pom	name	Java Architecture for XML Binding	High
Vendor	jar	package name	jaxb	Highest
Vendor	jar	package name	xml	Highest
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	jar	package name	javax	Highest
Vendor	Manifest	bundle-symbolicname	jaxb-api	Medium
Vendor	Manifest	implementation-build-id	tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000	Low
Vendor	file	name	jaxb-api	High
Vendor	pom	organization name	Oracle Corporation	High
Vendor	pom	groupid	javax.xml.bind	Highest
Vendor	Manifest	extension-name	javax.xml.bind	Medium
Vendor	pom	organization url	http://www.oracle.com/	Medium
Product	jar	package name	bind	Highest
Product	Manifest	Bundle-Name	jaxb-api	Medium
Product	Manifest	specification-title	Java Architecture for XML Binding	Medium
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	pom	name	Java Architecture for XML Binding	High
Product	pom	url	http://jaxb.java.net/	Medium
Product	jar	package name	jaxb	Highest
Product	jar	package name	xml	Highest
Product	pom	parent-groupid	net.java	Medium
Product	pom	artifactid	jaxb-api	Highest
Product	pom	organization name	Oracle Corporation	Low
Product	jar	package name	javax	Highest
Product	Manifest	bundle-symbolicname	jaxb-api	Medium
Product	Manifest	implementation-build-id	tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000	Low
Product	file	name	jaxb-api	High
Product	Manifest	extension-name	javax.xml.bind	Medium
Product	pom	groupid	javax.xml.bind	Highest
Product	pom	organization url	http://www.oracle.com/	Low
Version	pom	parent-version	2.2.11	Low
Version	Manifest	Bundle-Version	2.2.11	High
Version	Manifest	specification-version	2.2.11	High
Version	pom	version	2.2.11	Highest
Version	file	version	2.2.11	High

Identifiers

pkg:maven/javax.xml.bind/jaxb-api@2.2.11 (Confidence:High)

jaxb-core-2.2.11.jar

Description:

Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies.

License:

http://glassfish.java.net/public/CDDL+GPL_1_1.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar
MD5: c5eca4e58a75eabe3379926803421bab
SHA1: c3f87d654f8d5943cd08592f3f758856544d279a
SHA256:b13da0c655a3d590a2a945553648c407e6347648c9f7a3f811b7b3a8a1974baa
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bind	Highest
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	parent-artifactid	jaxb-bundles	Low
Vendor	file	name	jaxb-core	High
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-symbolicname	com.sun.xml.bind.jaxb-core	Medium
Vendor	jar	package name	sun	Highest
Vendor	pom	groupid	glassfish.jaxb	Highest
Vendor	pom	groupid	sun.xml.bind	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.oracle	Medium
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	jar	package name	xml	Highest
Vendor	pom	name	JAXB Core	High
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	Manifest	git-revision	f92ac5110f00752578034111d2f8a10bb0c466e3	Low
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	pom	artifactid	jaxb-core	Low
Vendor	pom	parent-artifactid	jaxb-parent	Low
Vendor	pom	name	Old JAXB Core	High
Vendor	pom	groupid	com.sun.xml.bind	Highest
Product	jar	package name	bind	Highest
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	file	name	jaxb-core	High
Product	Manifest	Implementation-Title	JAXB Implementation	High
Product	Manifest	bundle-symbolicname	com.sun.xml.bind.jaxb-core	Medium
Product	Manifest	specification-title	Java Architecture for XML Binding	Medium
Product	jar	package name	sun	Highest
Product	pom	groupid	glassfish.jaxb	Highest
Product	pom	groupid	sun.xml.bind	Highest
Product	Manifest	Bundle-Name	Old JAXB Core	Medium
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	jar	package name	xml	Highest
Product	pom	name	JAXB Core	High
Product	pom	artifactid	jaxb-core	Highest
Product	Manifest	git-revision	f92ac5110f00752578034111d2f8a10bb0c466e3	Low
Product	pom	parent-artifactid	jaxb-parent	Medium
Product	pom	name	Old JAXB Core	High
Product	pom	parent-artifactid	jaxb-bundles	Medium
Version	Manifest	build-id	2.2.11	Medium
Version	Manifest	Bundle-Version	2.2.11	High
Version	Manifest	Implementation-Version	2.2.11	High
Version	Manifest	major-version	2.2.11	Medium
Version	pom	version	2.2.11	Highest
Version	file	version	2.2.11	High

Identifiers

pkg:maven/com.sun.xml.bind/jaxb-core@2.2.11 (Confidence:High)
pkg:maven/org.glassfish.jaxb/jaxb-core@2.2.11 (Confidence:High)

jaxb-core-2.2.11.jar (shaded: com.sun.istack:istack-commons-runtime:2.21)

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar/META-INF/maven/com.sun.istack/istack-commons-runtime/pom.xml
MD5: caebf95d1d57fc0321b36137e246e192
SHA1: 04c234cf684a202c5c9bb7f0a198ba97e958f8f4
SHA256:ebe7137b5fbfd050545f9a7f3f339ae55beb0b53755071b4fd62aa024c626d1c
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	sun.istack	Highest
Vendor	pom	parent-groupid	com.sun.istack	Medium
Vendor	pom	parent-artifactid	istack-commons	Low
Vendor	pom	name	istack common utility code runtime	High
Vendor	pom	artifactid	istack-commons-runtime	Low
Product	pom	parent-artifactid	istack-commons	Medium
Product	pom	groupid	sun.istack	Highest
Product	pom	artifactid	istack-commons-runtime	Highest
Product	pom	parent-groupid	com.sun.istack	Medium
Product	pom	name	istack common utility code runtime	High
Version	pom	version	2.21	Highest

Identifiers

pkg:maven/com.sun.istack/istack-commons-runtime@2.21 (Confidence:High)

jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:txw2:2.2.11)

Description:

        TXW is a library that allows you to write XML documents.

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/txw2/pom.xml
MD5: 83d24d59202baf2810daa01739963822
SHA1: 4be03527dbf2428f7ea99fb9c2f50f089dffad5e
SHA256:8514cb724b4fca59a5cf272b632e539bd0a0f3cacf1844082d0a173a86406bd8
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	artifactid	txw2	Low
Vendor	pom	groupid	glassfish.jaxb	Highest
Vendor	pom	name	TXW2 Runtime	High
Vendor	pom	parent-artifactid	jaxb-txw-parent	Low
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	pom	artifactid	txw2	Highest
Product	pom	groupid	glassfish.jaxb	Highest
Product	pom	name	TXW2 Runtime	High
Product	pom	parent-artifactid	jaxb-txw-parent	Medium
Version	pom	version	2.2.11	Highest

Identifiers

pkg:maven/org.glassfish.jaxb/txw2@2.2.11 (Confidence:High)

jaxb-impl-2.2.11.jar

Description:

Old JAXB Runtime module. Contains sources required for runtime processing.

License:

http://glassfish.java.net/public/CDDL+GPL_1_1.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-impl/2.2.11/jaxb-impl-2.2.11.jar
MD5: bea06b3ee5ef2c338beac9187b7782f3
SHA1: a49ce57aee680f9435f49ba6ef427d38c93247a6
SHA256:f91793a96f185a2fc004c86a37086f060985854ce6b19935e03c4de51e3201d2
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bind	Highest
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	parent-artifactid	jaxb-bundles	Low
Vendor	Manifest	originally-created-by	Apache Maven 3.0.4	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	jar	package name	sun	Highest
Vendor	pom	groupid	sun.xml.bind	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.oracle	Medium
Vendor	pom	artifactid	jaxb-impl	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	jar	package name	xml	Highest
Vendor	Manifest	bundle-symbolicname	com.sun.xml.bind.jaxb-impl	Medium
Vendor	pom	name	Old JAXB Runtime	High
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	Manifest	git-revision	f92ac5110f00752578034111d2f8a10bb0c466e3	Low
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	file	name	jaxb-impl	High
Vendor	pom	groupid	com.sun.xml.bind	Highest
Product	jar	package name	bind	Highest
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	Manifest	Bundle-Name	Old JAXB Runtime	Medium
Product	pom	artifactid	jaxb-impl	Highest
Product	Manifest	Implementation-Title	JAXB Implementation	High
Product	Manifest	originally-created-by	Apache Maven 3.0.4	Low
Product	Manifest	specification-title	Java Architecture for XML Binding	Medium
Product	jar	package name	sun	Highest
Product	pom	groupid	sun.xml.bind	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	jar	package name	xml	Highest
Product	Manifest	bundle-symbolicname	com.sun.xml.bind.jaxb-impl	Medium
Product	pom	name	Old JAXB Runtime	High
Product	Manifest	git-revision	f92ac5110f00752578034111d2f8a10bb0c466e3	Low
Product	file	name	jaxb-impl	High
Product	pom	parent-artifactid	jaxb-bundles	Medium
Version	Manifest	build-id	2.2.11	Medium
Version	Manifest	Bundle-Version	2.2.11	High
Version	Manifest	Implementation-Version	2.2.11	High
Version	Manifest	major-version	2.2.11	Medium
Version	pom	version	2.2.11	Highest
Version	file	version	2.2.11	High

Identifiers

pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.11 (Confidence:High)

jaxb-impl-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-runtime:2.2.11)

Description:

JAXB (JSR 222) Reference Implementation

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-impl/2.2.11/jaxb-impl-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/jaxb-runtime/pom.xml
MD5: fa2e4dc2609e6a4d96418f4ac6519e8d
SHA1: 6a1651361e4c2392aff30da0df648187f670f8cb
SHA256:e5327b31b595ab8143e97836d5ccdf85feb91e7ff5666f7b26913632facca4aa
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	artifactid	jaxb-runtime	Low
Vendor	pom	name	JAXB Runtime	High
Vendor	pom	parent-artifactid	jaxb-runtime-parent	Low
Vendor	pom	groupid	glassfish.jaxb	Highest
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	pom	parent-artifactid	jaxb-runtime-parent	Medium
Product	pom	name	JAXB Runtime	High
Product	pom	groupid	glassfish.jaxb	Highest
Product	pom	artifactid	jaxb-runtime	Highest
Version	pom	version	2.2.11	Highest

Identifiers

pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.2.11 (Confidence:High)

jcl-over-slf4j-1.7.30.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/1.7.30/jcl-over-slf4j-1.7.30.jar
MD5: 69ad224b2feb6f86554fe8997b9c3d4b
SHA1: cd92524ea19d27e5b94ecd251e1af729cffdfe15
SHA256:71e9ee37b9e4eb7802a2acc5f41728a4cf3915e7483d798db3b4ff2ec8847c50
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	file	name	jcl-over-slf4j	High
Vendor	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	jcl-over-slf4j	High
Product	Manifest	Bundle-Name	jcl-over-slf4j	Medium
Product	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	apache	Highest
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@1.7.30 (Confidence:High)

jul-to-slf4j-1.7.30.jar

Description:

JUL to SLF4J bridge

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar
MD5: f2c78cb93d70dc5dea0c50f36ace09c1
SHA1: d58bebff8cbf70ff52b59208586095f467656c30
SHA256:bbcbfdaa72572255c4f85207a9bfdb24358dc993e41252331bd4d0913e4988b9
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bridge	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	name	JUL to SLF4J bridge	High
Vendor	file	name	jul-to-slf4j	High
Vendor	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	jar	package name	slf4j	Highest
Vendor	pom	artifactid	jul-to-slf4j	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	jar	package name	bridge	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	pom	name	JUL to SLF4J bridge	High
Product	file	name	jul-to-slf4j	High
Product	Manifest	Bundle-Name	jul-to-slf4j	Medium
Product	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	artifactid	jul-to-slf4j	Highest
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/jul-to-slf4j@1.7.30 (Confidence:High)

logback-core-1.2.3.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar
MD5: 841fc80c6edff60d947a3872a2db4d45
SHA1: 864344400c3d4d92dfeb0a305dc87d953677c03c
SHA256:5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	pom	parent-artifactid	logback-parent	Low
Vendor	jar	package name	logback	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	jar	package name	qos	Highest
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	pom	artifactid	logback-core	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	pom	name	Logback Core Module	High
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	jar	package name	ch	Highest
Vendor	jar	package name	core	Highest
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	file	name	logback-core	High
Product	pom	parent-artifactid	logback-parent	Medium
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	jar	package name	logback	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	qos	Highest
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	pom	name	Logback Core Module	High
Product	jar	package name	ch	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	artifactid	logback-core	Highest
Product	jar	package name	core	Highest
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Version	Manifest	Bundle-Version	1.2.3	High
Version	pom	version	1.2.3	Highest
Version	file	version	1.2.3	High

Related Dependencies

Identifiers

pkg:maven/ch.qos.logback/logback-core@1.2.3 (Confidence:High)
cpe:2.3:a:logback:logback:1.2.3:*:*:*:*:*:*:* (Confidence:Highest)

lombok-1.18.18.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.18/lombok-1.18.18.jar
MD5: 6a157cf72924f8d135dcd6c571bf0405
SHA1: 481f5bfed3ae29f656eedfe9e98c8365b8ba5c57
SHA256:601ec46206e0f9cac2c0583b3350e79f095419c395e991c761640f929038e9cc
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	name	Project Lombok	High
Vendor	jar	package name	tostring	Highest
Vendor	file	name	lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	pom	groupid	projectlombok	Highest
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	pom	name	Project Lombok	High
Product	jar	package name	tostring	Highest
Product	file	name	lombok	High
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	url	https://projectlombok.org	Medium
Product	Manifest	automatic-module-name	lombok	Medium
Product	pom	groupid	projectlombok	Highest
Version	file	version	1.18.18	High
Version	Manifest	lombok-version	1.18.18	Medium
Version	pom	version	1.18.18	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.18 (Confidence:High)

slf4j-api-1.7.30.jar

Description:

The slf4j API

File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar
MD5: f8be00da99bc4ab64c79ab1e2be7cb7c
SHA1: b5a4b6d16ab13e34a88fae84c35cd5d68cac922c
SHA256:cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57
Referenced In Project/Scope:blueMarine II :: MusicBrainz :: Data Model:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	file	name	slf4j-api	High
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	pom	artifactid	slf4j-api	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	jar	package name	slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	groupid	slf4j	Highest
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	slf4j-api	High
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	slf4j	Highest
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	pom	name	SLF4J API Module	High
Product	pom	artifactid	slf4j-api	Highest
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	groupid	slf4j	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	pom	version	1.7.30	Highest
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.30 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: blueMarine II :: MusicBrainz :: Data Model

it.tidalwave.bluemarine2:it-tidalwave-bluemarine2-musicbrainz-datamodel:1.1-ALPHA-1

Summary

Dependencies

activation-1.1.1.jar

Evidence

Identifiers

javax.inject-1.jar

Evidence

Identifiers

jaxb-api-2.2.11.jar

Evidence

Identifiers

jaxb-core-2.2.11.jar

Evidence

Identifiers

jaxb-core-2.2.11.jar (shaded: com.sun.istack:istack-commons-runtime:2.21)

Evidence

Identifiers

jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:txw2:2.2.11)

Evidence

Identifiers

jaxb-impl-2.2.11.jar

Evidence

Identifiers

jaxb-impl-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-runtime:2.2.11)

Evidence

Identifiers

jcl-over-slf4j-1.7.30.jar

Evidence

Identifiers

jul-to-slf4j-1.7.30.jar

Evidence

Identifiers

logback-core-1.2.3.jar

Evidence

Related Dependencies

Identifiers

lombok-1.18.18.jar

Evidence

Identifiers

slf4j-api-1.7.30.jar

Evidence

Identifiers