Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 11.1.1
Report Generated On: Thu, 19 Dec 2024 00:12:47 +0100
Dependencies Scanned: 94 (73 unique)
Vulnerable Dependencies: 6
Vulnerabilities Found: 14
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2024-12-18T23:40:13+01
NVD API Last Modified: 2024-12-18T22:27:39Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
HikariCP-4.0.3.jar		pkg:maven/com.zaxxer/HikariCP@4.0.3		0		38
antlr-2.7.7.jar		pkg:maven/antlr/antlr@2.7.7		0		24
aspectjrt-1.9.20.1.jar		pkg:maven/org.aspectj/aspectjrt@1.9.20.1		0		37
betterbeansbinding-core-1.3.0.jar		pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-core@1.3.0		0		21
betterbeansbinding-el-1.3.0.jar		pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-el@1.3.0		0		23
betterbeansbinding-swingbinding-1.3.0.jar		pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-swingbinding@1.3.0		0		23
byte-buddy-1.12.23.jar		pkg:maven/net.bytebuddy/byte-buddy@1.12.23		0		29
byte-buddy-1.15.0.jar		pkg:maven/net.bytebuddy/byte-buddy@1.15.0		0		29
byte-buddy-agent-1.15.0.jar		pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.0		0		33
classmate-1.5.1.jar		pkg:maven/com.fasterxml/classmate@1.5.1		0		54
h2-2.3.232.jar	cpe:2.3:a:h2database:h2:2.3.232:::::::*	pkg:maven/com.h2database/h2@2.3.232	MEDIUM	1	Highest	44
h2-2.3.232.jar: data.zip: table.js				0		0
h2-2.3.232.jar: data.zip: tree.js				0		0
hibernate-commons-annotations-5.1.2.Final.jar		pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final		0		44
hibernate-core-5.6.15.Final.jar	cpe:2.3:a:hibernate:hibernate_orm:5.6.15:::::::*	pkg:maven/org.hibernate/hibernate-core@5.6.15.Final		0	Low	44
istack-commons-runtime-3.0.12.jar		pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12		0		33
it-tidalwave-messagebus-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24		0		24
it-tidalwave-role-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24		0		24
it-tidalwave-role-spring-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24		0		26
it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24		0		26
it-tidalwave-thesefoolishthings-examples-finderexample1-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24		0		26
it-tidalwave-util-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24		0		24
it-tidalwave-util-test-3.2-ALPHA-24.jar		pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24		0		26
jakarta.activation-1.2.2.jar		pkg:maven/com.sun.activation/jakarta.activation@1.2.2		0		33
jakarta.annotation-api-1.3.5.jar	cpe:2.3:a:oracle:projects:1.3.5:::::::*	pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5		0	Low	35
jakarta.persistence-api-2.2.3.jar		pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3		0		38
jakarta.transaction-api-1.3.3.jar	cpe:2.3:a:oracle:projects:1.3.3:::::::*	pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3		0	Low	48
jakarta.xml.bind-api-2.3.3.jar		pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3		0		33
jandex-2.4.2.Final.jar		pkg:maven/org.jboss/jandex@2.4.2.Final		0		42
java-diff-utils-4.15.jar	cpe:2.3:a:utils_project:utils:4.15:::::::*	pkg:maven/io.github.java-diff-utils/java-diff-utils@4.15		0	Highest	21
javax.activation-api-1.2.0.jar		pkg:maven/javax.activation/javax.activation-api@1.2.0		0		39
javax.annotation-api-1.3.2.jar		pkg:maven/javax.annotation/javax.annotation-api@1.3.2		0		48
javax.inject-1.jar		pkg:maven/javax.inject/javax.inject@1		0		20
javax.persistence-api-2.2.jar		pkg:maven/javax.persistence/javax.persistence-api@2.2		0		31
jaxb-api-2.3.1.jar		pkg:maven/javax.xml.bind/jaxb-api@2.3.1		0		35
jaxb-runtime-2.3.9.jar		pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9		0		47
jboss-logging-3.4.3.Final.jar		pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final		0		43
jboss-transaction-api_1.2_spec-1.1.1.Final.jar		pkg:maven/org.jboss.spec.javax.transaction/jboss-transaction-api_1.2_spec@1.1.1.Final		0		39
jcl-over-slf4j-2.0.16.jar		pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16		0		31
jcommander-1.82.jar		pkg:maven/com.beust/jcommander@1.82		0		26
jquery-3.7.1.jar		pkg:maven/org.webjars/jquery@3.7.1		0		21
jquery-3.7.1.jar: jquery.js				0		0
jquery-3.7.1.jar: jquery.min.js				0		0
jquery-3.7.1.jar: jquery.slim.js				0		0
jquery-3.7.1.jar: jquery.slim.min.js				0		0
jquery-3.7.1.jar: webjars-requirejs.js				0		0
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		0		17
jul-to-slf4j-2.0.16.jar		pkg:maven/org.slf4j/jul-to-slf4j@2.0.16		0		31
log4j-api-2.17.2.jar	cpe:2.3:a:apache:log4j:2.17.2:::::::*	pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2		0	Highest	44
log4j-to-slf4j-2.17.2.jar		pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2		0		44
logback-core-1.5.12.jar	cpe:2.3:a:qos:logback:1.5.12:::::::*	pkg:maven/ch.qos.logback/logback-core@1.5.12		0	Highest	39
lombok-1.18.36.jar		pkg:maven/org.projectlombok/lombok@1.18.36		0		36
lombok-1.18.36.jar: mavenEcjBootstrapAgent.jar				0		7
mockito-core-5.13.0.jar		pkg:maven/org.mockito/mockito-core@5.13.0		0		41
mxparser-1.2.2.jar		pkg:maven/io.github.x-stream/mxparser@1.2.2		0		58
objenesis-3.3.jar		pkg:maven/org.objenesis/objenesis@3.3		0		27
slf4j-api-2.0.16.jar		pkg:maven/org.slf4j/slf4j-api@2.0.16		0		29
snakeyaml-1.30.jar	cpe:2.3:a:snakeyaml_project:snakeyaml:1.30:::::::*	pkg:maven/org.yaml/snakeyaml@1.30	CRITICAL	7	Highest	44
spotbugs-annotations-3.1.9.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9		0		53
spring-boot-2.7.18.jar	cpe:2.3:a:vmware:spring_boot:2.7.18:::::::*	pkg:maven/org.springframework.boot/spring-boot@2.7.18		0	Highest	38
spring-core-5.3.31.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.31:::::::* cpe:2.3:a:springsource:spring_framework:5.3.31:::::::* cpe:2.3:a:vmware:spring_framework:5.3.31:::::::*	pkg:maven/org.springframework/spring-core@5.3.31	MEDIUM	1	Highest	37
spring-core-5.3.37.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.37:::::::* cpe:2.3:a:springsource:spring_framework:5.3.37:::::::* cpe:2.3:a:vmware:spring_framework:5.3.37:::::::*	pkg:maven/org.springframework/spring-core@5.3.37	MEDIUM	1	Highest	37
spring-data-commons-2.7.18.jar	cpe:2.3:a:pivotal_software:spring_data_commons:2.7.18:::::::*	pkg:maven/org.springframework.data/spring-data-commons@2.7.18		0	Highest	30
spring-data-jpa-2.7.18.jar	cpe:2.3:a:pivotal_software:spring_data_jpa:2.7.18:::::::*	pkg:maven/org.springframework.data/spring-data-jpa@2.7.18		0	Highest	32
spring-expression-5.3.31.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.31:::::::* cpe:2.3:a:springsource:spring_framework:5.3.31:::::::* cpe:2.3:a:vmware:spring_framework:5.3.31:::::::*	pkg:maven/org.springframework/spring-expression@5.3.31	MEDIUM	2	Highest	37
spring-expression-5.3.37.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.37:::::::* cpe:2.3:a:springsource:spring_framework:5.3.37:::::::* cpe:2.3:a:vmware:spring_framework:5.3.37:::::::*	pkg:maven/org.springframework/spring-expression@5.3.37	MEDIUM	2	Highest	37
testng-7.10.2.jar	cpe:2.3:a:testng_project:testng:7.10.2:::::::*	pkg:maven/org.testng/testng@7.10.2		0	Highest	47
testng-7.10.2.jar: jquery-3.6.0.min.js				0		0
testng-7.10.2.jar: testng-reports.js				0		0
testng-7.10.2.jar: testng-reports2.js				0		0
txw2-2.3.9.jar		pkg:maven/org.glassfish.jaxb/txw2@2.3.9		0		35
xmlpull-1.1.3.1.jar		pkg:maven/xmlpull/xmlpull@1.1.3.1		0		18
xstream-1.4.21.jar	cpe:2.3:a:xstream_project:xstream:1.4.21:::::::*	pkg:maven/com.thoughtworks.xstream/xstream@1.4.21		0	Highest	55

Dependencies (vulnerable)

HikariCP-4.0.3.jar

Description:

Ultimate JDBC Connection Pool

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar
MD5: e725642926105cd1bbf4ad7fdff5d5a9
SHA1: 107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f
SHA256:7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	HikariCP	High
Vendor	jar	package name	pool	Highest
Vendor	jar	package name	zaxxer	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Vendor	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	pom	artifactid	HikariCP	Highest
Vendor	pom	artifactid	HikariCP	Low
Vendor	pom	developer email	brett.wooldridge@gmail.com	Low
Vendor	pom	developer name	Brett Wooldridge	Medium
Vendor	pom	groupid	com.zaxxer	Highest
Vendor	pom	name	HikariCP	High
Vendor	pom	organization name	Zaxxer.com	High
Vendor	pom	organization url	brettwooldridge	Medium
Vendor	pom	url	brettwooldridge/HikariCP	Highest
Product	file	name	HikariCP	High
Product	jar	package name	11	Highest
Product	jar	package name	pool	Highest
Product	jar	package name	zaxxer	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Product	Manifest	Bundle-Name	HikariCP	Medium
Product	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	pom	artifactid	HikariCP	Highest
Product	pom	developer email	brett.wooldridge@gmail.com	Low
Product	pom	developer name	Brett Wooldridge	Low
Product	pom	groupid	com.zaxxer	Highest
Product	pom	name	HikariCP	High
Product	pom	organization name	Zaxxer.com	Low
Product	pom	url	brettwooldridge	High
Product	pom	url	brettwooldridge/HikariCP	High
Version	file	version	4.0.3	High
Version	Manifest	Bundle-Version	4.0.3	High
Version	pom	version	4.0.3	Highest

Identifiers

pkg:maven/com.zaxxer/HikariCP@4.0.3 (Confidence:High)

antlr-2.7.7.jar

Description:

    A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.

License:

BSD License: http://www.antlr.org/license.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/antlr/antlr/2.7.7/antlr-2.7.7.jar
MD5: f8f1352c52a4c6a500b597596501fc64
SHA1: 83cd2cd674a217ade95a4bb83a8a14f351f48bd0
SHA256:88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.hibernate/hibernate-core@5.6.15.Final
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	antlr	High
Vendor	jar	package name	actions	Highest
Vendor	jar	package name	antlr	Highest
Vendor	jar	package name	antlr	Low
Vendor	jar	package name	java	Highest
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	python	Highest
Vendor	pom	artifactid	antlr	Highest
Vendor	pom	artifactid	antlr	Low
Vendor	pom	groupid	antlr	Highest
Vendor	pom	name	AntLR Parser Generator	High
Vendor	pom	url	http://www.antlr.org/	Highest
Product	file	name	antlr	High
Product	jar	package name	actions	Highest
Product	jar	package name	antlr	Highest
Product	jar	package name	java	Highest
Product	jar	package name	parser	Highest
Product	jar	package name	python	Highest
Product	pom	artifactid	antlr	Highest
Product	pom	groupid	antlr	Highest
Product	pom	name	AntLR Parser Generator	High
Product	pom	url	http://www.antlr.org/	Medium
Version	file	version	2.7.7	High
Version	pom	version	2.7.7	Highest

Identifiers

pkg:maven/antlr/antlr@2.7.7 (Confidence:High)

aspectjrt-1.9.20.1.jar

Description:

The AspectJ runtime is a small library necessary to run Java programs enhanced by AspectJ aspects during a previous
		compile-time or post-compile-time (binary weaving) build step.

License:

Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/aspectj/aspectjrt/1.9.20.1/aspectjrt-1.9.20.1.jar
MD5: 6398abe3162564b5b87e7a3ce4dfd204
SHA1: 26954e413fd6e4278c5720abe29726a904f14bc8
SHA256:1921492949907e700a8918a21d51a508c421d08461652b77daab89cf0e6291d5
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	aspectjrt	High
Vendor	jar	package name	aspectj	Highest
Vendor	jar	package name	aspects	Highest
Vendor	jar	package name	runtime	Highest
Vendor	Manifest	automatic-module-name	org.aspectj.runtime	Medium
Vendor	manifest: org/aspectj/lang/	Implementation-Vendor	https://www.eclipse.org/aspectj/	Medium
Vendor	pom	artifactid	aspectjrt	Highest
Vendor	pom	artifactid	aspectjrt	Low
Vendor	pom	developer email	aclement@vmware.com	Low
Vendor	pom	developer email	kriegaex@aspectj.dev	Low
Vendor	pom	developer id	aclement	Medium
Vendor	pom	developer id	kriegaex	Medium
Vendor	pom	developer name	Alexander Kriegisch	Medium
Vendor	pom	developer name	Andy Clement	Medium
Vendor	pom	groupid	org.aspectj	Highest
Vendor	pom	name	AspectJ Runtime	High
Vendor	pom	url	https://www.eclipse.org/aspectj/	Highest
Product	file	name	aspectjrt	High
Product	jar	package name	aspectj	Highest
Product	jar	package name	aspects	Highest
Product	jar	package name	runtime	Highest
Product	Manifest	automatic-module-name	org.aspectj.runtime	Medium
Product	manifest: org/aspectj/lang/	Implementation-Title	org.aspectj.runtime	Medium
Product	manifest: org/aspectj/lang/	Specification-Title	AspectJ Runtime Classes	Medium
Product	pom	artifactid	aspectjrt	Highest
Product	pom	developer email	aclement@vmware.com	Low
Product	pom	developer email	kriegaex@aspectj.dev	Low
Product	pom	developer id	aclement	Low
Product	pom	developer id	kriegaex	Low
Product	pom	developer name	Alexander Kriegisch	Low
Product	pom	developer name	Andy Clement	Low
Product	pom	groupid	org.aspectj	Highest
Product	pom	name	AspectJ Runtime	High
Product	pom	url	https://www.eclipse.org/aspectj/	Medium
Version	file	version	1.9.20.1	High
Version	manifest: org/aspectj/lang/	Implementation-Version	1.9.20.1	Medium
Version	pom	version	1.9.20.1	Highest

Identifiers

pkg:maven/org.aspectj/aspectjrt@1.9.20.1 (Confidence:High)

betterbeansbinding-core-1.3.0.jar

Description:

Keeping JavaBeans in sync.

License:

http://www.gnu.org/licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/betterbeansbinding/betterbeansbinding-core/1.3.0/betterbeansbinding-core-1.3.0.jar
MD5: a4ed4664612ece2fdff12bf5f21accc8
SHA1: ba454e7173845a67ba7f9e9478af4a9e43700b7b
SHA256:da366781ce264f2facefc922b858382dc1b82b551a777c6df6106a9349763080
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Swing:compile
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	betterbeansbinding-core	High
Vendor	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Vendor	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-core	Medium
Vendor	Manifest	implementation-build	unknown	Low
Vendor	pom	artifactid	betterbeansbinding-core	Highest
Vendor	pom	artifactid	betterbeansbinding-core	Low
Vendor	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Vendor	pom	name	BetterBeansBinding Core	High
Vendor	pom	parent-artifactid	betterbeansbinding	Low
Product	file	name	betterbeansbinding-core	High
Product	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Product	Manifest	Bundle-Name	BetterBeansBinding Core	Medium
Product	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-core	Medium
Product	Manifest	implementation-build	unknown	Low
Product	pom	artifactid	betterbeansbinding-core	Highest
Product	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Product	pom	name	BetterBeansBinding Core	High
Product	pom	parent-artifactid	betterbeansbinding	Medium
Version	file	version	1.3.0	High
Version	Manifest	Bundle-Version	1.3.0	High
Version	pom	version	1.3.0	Highest

Identifiers

pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-core@1.3.0 (Confidence:High)

betterbeansbinding-el-1.3.0.jar

Description:

Keeping JavaBeans in sync.

License:

http://www.gnu.org/licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/betterbeansbinding/betterbeansbinding-el/1.3.0/betterbeansbinding-el-1.3.0.jar
MD5: 63cad21fb9a2b5a837b11e881eeeda22
SHA1: f285f3cd2b41cbde08a45095ca3be862d7ef7adf
SHA256:b19e603cc5e959f2bde777f9f992ea63e59fef211c650d3bf4bf707ed741a84f
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Swing:compile
pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-core@1.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	betterbeansbinding-el	High
Vendor	jar	package name	el	Highest
Vendor	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Vendor	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-el	Medium
Vendor	Manifest	implementation-build	unknown	Low
Vendor	pom	artifactid	betterbeansbinding-el	Highest
Vendor	pom	artifactid	betterbeansbinding-el	Low
Vendor	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Vendor	pom	name	BetterBeansBinding EL	High
Vendor	pom	parent-artifactid	betterbeansbinding	Low
Product	file	name	betterbeansbinding-el	High
Product	jar	package name	el	Highest
Product	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Product	Manifest	Bundle-Name	BetterBeansBinding EL	Medium
Product	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-el	Medium
Product	Manifest	implementation-build	unknown	Low
Product	pom	artifactid	betterbeansbinding-el	Highest
Product	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Product	pom	name	BetterBeansBinding EL	High
Product	pom	parent-artifactid	betterbeansbinding	Medium
Version	file	version	1.3.0	High
Version	Manifest	Bundle-Version	1.3.0	High
Version	pom	version	1.3.0	Highest

Identifiers

pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-el@1.3.0 (Confidence:High)

betterbeansbinding-swingbinding-1.3.0.jar

Description:

Keeping JavaBeans in sync.

License:

http://www.gnu.org/licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/betterbeansbinding/betterbeansbinding-swingbinding/1.3.0/betterbeansbinding-swingbinding-1.3.0.jar
MD5: 73e42607d80f5e24e9be17e4e3952184
SHA1: d865d0482b48bd900099fc5c84c02892766ff375
SHA256:053cdb906c0d366df9e4851ce2528f200ba97fda2d7d6769dabe7012dcc83d29
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Swing:compile
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	betterbeansbinding-swingbinding	High
Vendor	jar	package name	swingbinding	Highest
Vendor	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Vendor	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-swingbinding	Medium
Vendor	Manifest	implementation-build	unknown	Low
Vendor	pom	artifactid	betterbeansbinding-swingbinding	Highest
Vendor	pom	artifactid	betterbeansbinding-swingbinding	Low
Vendor	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Vendor	pom	name	BetterBeansBinding SwingBinding	High
Vendor	pom	parent-artifactid	betterbeansbinding	Low
Product	file	name	betterbeansbinding-swingbinding	High
Product	jar	package name	swingbinding	Highest
Product	Manifest	bundle-docurl	http://www.tidalwave.it	Low
Product	Manifest	Bundle-Name	BetterBeansBinding SwingBinding	Medium
Product	Manifest	bundle-symbolicname	it.tidalwave.betterbeansbinding.betterbeansbinding-swingbinding	Medium
Product	Manifest	implementation-build	unknown	Low
Product	pom	artifactid	betterbeansbinding-swingbinding	Highest
Product	pom	groupid	it.tidalwave.betterbeansbinding	Highest
Product	pom	name	BetterBeansBinding SwingBinding	High
Product	pom	parent-artifactid	betterbeansbinding	Medium
Version	file	version	1.3.0	High
Version	Manifest	Bundle-Version	1.3.0	High
Version	pom	version	1.3.0	Highest

Identifiers

pkg:maven/it.tidalwave.betterbeansbinding/betterbeansbinding-swingbinding@1.3.0 (Confidence:High)

byte-buddy-1.12.23.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/net/bytebuddy/byte-buddy/1.12.23/byte-buddy-1.12.23.jar
MD5: bdf44dc7543f6bf2728b6e7d32e3bf8c
SHA1: d470526e8c4566c04e9ae5d3ccb62d1a7aa58986
SHA256:0433a8e4efcc5e137ceb6e7e1d83c2f1f95057c13b66fb92a901f883cb4df4b4
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.mockito/mockito-core@5.13.0
pkg:maven/org.hibernate/hibernate-entitymanager@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	build	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy	High
Product	jar	package name	asm	Highest
Product	jar	package name	build	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.12.23	High
Version	Manifest	Bundle-Version	1.12.23	High
Version	pom	version	1.12.23	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.12.23 (Confidence:High)

byte-buddy-1.15.0.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/net/bytebuddy/byte-buddy/1.15.0/byte-buddy-1.15.0.jar
MD5: e830b0eae8ae0e4b7df4f4ddba23fbe1
SHA1: a5b1159b91c5334015de0f22ab4b1188cd42bbff
SHA256:c743cfb4db1e6c67af6297fbe32a3ad94710884cde4c7eecb1bad7d820d4f2ba
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile
pkg:maven/org.mockito/mockito-core@5.13.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	build	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy	High
Product	jar	package name	asm	Highest
Product	jar	package name	build	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.15.0	High
Version	Manifest	Bundle-Version	1.15.0	High
Version	pom	version	1.15.0	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.15.0 (Confidence:High)

byte-buddy-agent-1.15.0.jar

Description:

The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/net/bytebuddy/byte-buddy-agent/1.15.0/byte-buddy-agent-1.15.0.jar
MD5: a207cc7dadc16dad523a33145669b9e2
SHA1: e32740c43acebaac9d55b86399ecf6a5df3c17fb
SHA256:3399a0fdf7ba3f1386ebf831a706037428f1b1af81d653c25cf8a8fde2e4d2ea
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile
pkg:maven/org.mockito/mockito-core@5.13.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy-agent	High
Vendor	jar	package name	agent	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	can-retransform-classes	true	Low
Vendor	Manifest	can-set-native-method-prefix	true	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy-agent	Highest
Vendor	pom	artifactid	byte-buddy-agent	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy agent	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy-agent	High
Product	jar	package name	agent	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy agent	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	Manifest	can-retransform-classes	true	Low
Product	Manifest	can-set-native-method-prefix	true	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy-agent	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy agent	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.15.0	High
Version	Manifest	Bundle-Version	1.15.0	High
Version	pom	version	1.15.0	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.0 (Confidence:High)

classmate-1.5.1.jar

Description:

Library for introspecting types with full generic information
        including resolving of field and method types.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/fasterxml/classmate/1.5.1/classmate-1.5.1.jar
MD5: e91fcd30ba329fd1b0b6dc5321fd067c
SHA1: 3fe0bed568c62df5e89f4f174c101eab25345b6c
SHA256:aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.hibernate/hibernate-core@5.6.15.Final
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	classmate	High
Vendor	jar	package name	classmate	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	types	Highest
Vendor	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/java-classmate	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Vendor	Manifest	implementation-build-date	2019-10-19 22:46:35+0000	Low
Vendor	Manifest	Implementation-Vendor	fasterxml.com	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml	Medium
Vendor	Manifest	specification-vendor	fasterxml.com	Low
Vendor	pom	artifactid	classmate	Highest
Vendor	pom	artifactid	classmate	Low
Vendor	pom	developer email	blangel@ocheyedan.net	Low
Vendor	pom	developer email	tatu@fasterxml.com	Low
Vendor	pom	developer id	blangel	Medium
Vendor	pom	developer id	tatu	Medium
Vendor	pom	developer name	Brian Langel	Medium
Vendor	pom	developer name	Tatu Saloranta	Medium
Vendor	pom	groupid	com.fasterxml	Highest
Vendor	pom	name	ClassMate	High
Vendor	pom	organization name	fasterxml.com	High
Vendor	pom	organization url	https://fasterxml.com	Medium
Vendor	pom	parent-artifactid	oss-parent	Low
Vendor	pom	url	FasterXML/java-classmate	Highest
Product	file	name	classmate	High
Product	jar	package name	classmate	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	types	Highest
Product	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/java-classmate	Low
Product	Manifest	Bundle-Name	ClassMate	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Product	Manifest	implementation-build-date	2019-10-19 22:46:35+0000	Low
Product	Manifest	Implementation-Title	ClassMate	High
Product	Manifest	specification-title	ClassMate	Medium
Product	pom	artifactid	classmate	Highest
Product	pom	developer email	blangel@ocheyedan.net	Low
Product	pom	developer email	tatu@fasterxml.com	Low
Product	pom	developer id	blangel	Low
Product	pom	developer id	tatu	Low
Product	pom	developer name	Brian Langel	Low
Product	pom	developer name	Tatu Saloranta	Low
Product	pom	groupid	com.fasterxml	Highest
Product	pom	name	ClassMate	High
Product	pom	organization name	fasterxml.com	Low
Product	pom	organization url	https://fasterxml.com	Low
Product	pom	parent-artifactid	oss-parent	Medium
Product	pom	url	FasterXML/java-classmate	High
Version	file	version	1.5.1	High
Version	Manifest	Bundle-Version	1.5.1	High
Version	Manifest	Implementation-Version	1.5.1	High
Version	pom	parent-version	1.5.1	Low
Version	pom	version	1.5.1	Highest

Identifiers

pkg:maven/com.fasterxml/classmate@1.5.1 (Confidence:High)

h2-2.3.232.jar

Description:

H2 Database Engine

License:

MPL 2.0: https://www.mozilla.org/en-US/MPL/2.0/
EPL 1.0: https://opensource.org/licenses/eclipse-1.0.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/h2database/h2/2.3.232/h2-2.3.232.jar
MD5: 756154ae197457f2995b89c11bc9b2c3
SHA1: 4fcc05d966ccdb2812ae8b9a718f69226c0cf4e2
SHA256:8dae62d22db8982c3dcb3826edb9c727c5d302063a67eef7d63d82de401f07d3
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	h2	High
Vendor	jar	package name	database	Highest
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	h2	Highest
Vendor	Manifest	automatic-module-name	com.h2database	Medium
Vendor	Manifest	bundle-category	jdbc	Low
Vendor	Manifest	bundle-symbolicname	com.h2database	Medium
Vendor	Manifest	implementation-url	https://h2database.com	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Vendor	pom	artifactid	h2	Highest
Vendor	pom	artifactid	h2	Low
Vendor	pom	developer email	thomas.tom.mueller at gmail dot com	Low
Vendor	pom	developer id	thomas.tom.mueller	Medium
Vendor	pom	developer name	Thomas Mueller	Medium
Vendor	pom	groupid	com.h2database	Highest
Vendor	pom	name	H2 Database Engine	High
Vendor	pom	url	https://h2database.com	Highest
Product	file	name	h2	High
Product	jar	package name	database	Highest
Product	jar	package name	engine	Highest
Product	jar	package name	h2	Highest
Product	jar	package name	jdbc	Highest
Product	jar	package name	org	Highest
Product	jar	package name	service	Highest
Product	Manifest	automatic-module-name	com.h2database	Medium
Product	Manifest	bundle-category	jdbc	Low
Product	Manifest	Bundle-Name	H2 Database Engine	Medium
Product	Manifest	bundle-symbolicname	com.h2database	Medium
Product	Manifest	Implementation-Title	H2 Database Engine	High
Product	Manifest	implementation-url	https://h2database.com	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Product	pom	artifactid	h2	Highest
Product	pom	developer email	thomas.tom.mueller at gmail dot com	Low
Product	pom	developer id	thomas.tom.mueller	Low
Product	pom	developer name	Thomas Mueller	Low
Product	pom	groupid	com.h2database	Highest
Product	pom	name	H2 Database Engine	High
Product	pom	url	https://h2database.com	Medium
Version	file	version	2.3.232	High
Version	Manifest	Bundle-Version	2.3.232	High
Version	Manifest	Implementation-Version	2.3.232	High
Version	pom	version	2.3.232	Highest

Identifiers

pkg:maven/com.h2database/h2@2.3.232 (Confidence:High)
cpe:2.3:a:h2database:h2:2.3.232:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2018-14335 (OSSINDEX)

h2database - Improper Link Resolution Before File Access

The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CWE-59 Improper Link Resolution Before File Access ('Link Following')

CVSSv3:

Base Score: MEDIUM (6.0)
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:com.h2database:h2:2.3.232:*:*:*:*:*:*:*

h2-2.3.232.jar: data.zip: table.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/h2database/h2/2.3.232/h2-2.3.232.jar/org/h2/util/data.zip/org/h2/server/web/res/table.js
MD5: 8973a8c183f3455d8c4fe07a9a963429
SHA1: 4b32bb0b435151f899abdc8a98dab8f844b10b94
SHA256:807d50c7d28cc022b174774cfaff3d1c8b39ea04c1e260ddb6265e7fc0660910
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

Evidence

Identifiers

None

h2-2.3.232.jar: data.zip: tree.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/h2database/h2/2.3.232/h2-2.3.232.jar/org/h2/util/data.zip/org/h2/server/web/res/tree.js
MD5: 8105bba99dd1db86cb1cf23b2556a620
SHA1: 1c00b802f6cb1013cb0ed40eec6a98b5ba4cd0e7
SHA256:c5602b0b3488bb7d61959228a224a5f806f2749d67f9cdc182327fe069b94238
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

Evidence

Identifiers

None

hibernate-commons-annotations-5.1.2.Final.jar

Description:

Common reflection code used in support of annotation processing

License:

GNU Library General Public License v2.1 or later: http://www.opensource.org/licenses/LGPL-2.1

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/hibernate/common/hibernate-commons-annotations/5.1.2.Final/hibernate-commons-annotations-5.1.2.Final.jar
MD5: 2a2490b3eb8e7585a6a899d27d7ed43f
SHA1: e59ffdbc6ad09eeb33507b39ffcf287679a498c8
SHA256:1c7ce712b2679fea0a5441eb02a04144297125b768944819be0765befb996275
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.hibernate/hibernate-core@5.6.15.Final
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hibernate-commons-annotations	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	common	Highest
Vendor	jar	package name	hibernate	Highest
Vendor	jar	package name	reflection	Highest
Vendor	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Vendor	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Vendor	Manifest	implementation-url	http://hibernate.org	Low
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	pom	artifactid	hibernate-commons-annotations	Highest
Vendor	pom	artifactid	hibernate-commons-annotations	Low
Vendor	pom	developer id	hibernate-team	Medium
Vendor	pom	developer name	The Hibernate Development Team	Medium
Vendor	pom	developer org	Hibernate.org	Medium
Vendor	pom	developer org URL	http://hibernate.org	Medium
Vendor	pom	groupid	org.hibernate.common	Highest
Vendor	pom	name	Hibernate Commons Annotations	High
Vendor	pom	organization name	Hibernate.org	High
Vendor	pom	organization url	http://hibernate.org	Medium
Vendor	pom	url	http://hibernate.org	Highest
Product	file	name	hibernate-commons-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	common	Highest
Product	jar	package name	hibernate	Highest
Product	jar	package name	reflection	Highest
Product	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Product	Manifest	Bundle-Name	hibernate-commons-annotations	Medium
Product	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Product	Manifest	implementation-url	http://hibernate.org	Low
Product	pom	artifactid	hibernate-commons-annotations	Highest
Product	pom	developer id	hibernate-team	Low
Product	pom	developer name	The Hibernate Development Team	Low
Product	pom	developer org	Hibernate.org	Low
Product	pom	developer org URL	http://hibernate.org	Low
Product	pom	groupid	org.hibernate.common	Highest
Product	pom	name	Hibernate Commons Annotations	High
Product	pom	organization name	Hibernate.org	Low
Product	pom	organization url	http://hibernate.org	Low
Product	pom	url	http://hibernate.org	Medium
Version	Manifest	Bundle-Version	5.1.2.Final	High
Version	Manifest	Implementation-Version	5.1.2.Final	High
Version	pom	version	5.1.2.Final	Highest

Identifiers

pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final (Confidence:High)

hibernate-core-5.6.15.Final.jar

Description:

Hibernate's core ORM functionality

License:

GNU Library General Public License v2.1 or later: https://www.opensource.org/licenses/LGPL-2.1

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/hibernate/hibernate-core/5.6.15.Final/hibernate-core-5.6.15.Final.jar
MD5: 0bc0673435fbabce62a7a0d5fe967fd8
SHA1: ab14b7cef1fdff654ca81923048a6034d6c7cfa7
SHA256:9b5a7e1faf094d98c9e33b6a27c4cae42e52f65b139091c08b9a0b4a9858b207
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hibernate-core	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	hibernate	Highest
Vendor	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Vendor	Manifest	bundle-docurl	https://hibernate.org/orm/5.6	Low
Vendor	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Vendor	Manifest	implementation-url	https://hibernate.org/orm	Low
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	Manifest	specification-vendor	Hibernate.org	Low
Vendor	pom	artifactid	hibernate-core	Highest
Vendor	pom	artifactid	hibernate-core	Low
Vendor	pom	developer id	hibernate-team	Medium
Vendor	pom	developer name	The Hibernate Development Team	Medium
Vendor	pom	developer org	Hibernate.org	Medium
Vendor	pom	developer org URL	https://hibernate.org	Medium
Vendor	pom	groupid	org.hibernate	Highest
Vendor	pom	name	Hibernate ORM - hibernate-core	High
Vendor	pom	organization name	Hibernate.org	High
Vendor	pom	organization url	https://hibernate.org	Medium
Vendor	pom	url	https://hibernate.org/orm	Highest
Product	file	name	hibernate-core	High
Product	hint analyzer	product	orm	Highest
Product	jar	package name	hibernate	Highest
Product	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Product	Manifest	bundle-docurl	https://hibernate.org/orm/5.6	Low
Product	Manifest	Bundle-Name	hibernate-core	Medium
Product	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Product	Manifest	Implementation-Title	hibernate-core	High
Product	Manifest	implementation-url	https://hibernate.org/orm	Low
Product	Manifest	specification-title	hibernate-core	Medium
Product	pom	artifactid	hibernate-core	Highest
Product	pom	developer id	hibernate-team	Low
Product	pom	developer name	The Hibernate Development Team	Low
Product	pom	developer org	Hibernate.org	Low
Product	pom	developer org URL	https://hibernate.org	Low
Product	pom	groupid	org.hibernate	Highest
Product	pom	name	Hibernate ORM - hibernate-core	High
Product	pom	organization name	Hibernate.org	Low
Product	pom	organization url	https://hibernate.org	Low
Product	pom	url	https://hibernate.org/orm	Medium
Version	Manifest	Bundle-Version	5.6.15.Final	High
Version	Manifest	Implementation-Version	5.6.15.Final	High
Version	pom	version	5.6.15.Final	Highest

Related Dependencies

Identifiers

pkg:maven/org.hibernate/hibernate-core@5.6.15.Final (Confidence:High)
cpe:2.3:a:hibernate:hibernate_orm:5.6.15:*:*:*:*:*:*:* (Confidence:Low)

istack-commons-runtime-3.0.12.jar

Description:

istack common utility code

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/sun/istack/istack-commons-runtime/3.0.12/istack-commons-runtime-3.0.12.jar
MD5: 1952bd76321f8580cfaa57e332a68287
SHA1: cbbe1a62b0cc6c85972e99d52aaee350153dc530
SHA256:27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.hibernate/hibernate-core@5.6.15.Final
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	istack-commons-runtime	High
Vendor	jar	package name	com	Highest
Vendor	jar	package name	istack	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	com.sun.istack.commons-runtime	Medium
Vendor	Manifest	implementation-build-id	3.0.12 - 7ed1368	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	com.sun.istack	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	istack-commons-runtime	Highest
Vendor	pom	artifactid	istack-commons-runtime	Low
Vendor	pom	groupid	com.sun.istack	Highest
Vendor	pom	name	istack common utility code runtime	High
Vendor	pom	parent-artifactid	istack-commons	Low
Product	file	name	istack-commons-runtime	High
Product	jar	package name	com	Highest
Product	jar	package name	istack	Highest
Product	jar	package name	sun	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	istack common utility code runtime	Medium
Product	Manifest	bundle-symbolicname	com.sun.istack.commons-runtime	Medium
Product	Manifest	implementation-build-id	3.0.12 - 7ed1368	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	istack-commons-runtime	Highest
Product	pom	groupid	com.sun.istack	Highest
Product	pom	name	istack common utility code runtime	High
Product	pom	parent-artifactid	istack-commons	Medium
Version	file	version	3.0.12	High
Version	Manifest	Bundle-Version	3.0.12	High
Version	Manifest	implementation-build-id	3.0.12	Low
Version	pom	version	3.0.12	Highest

Identifiers

pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12 (Confidence:High)

it-tidalwave-messagebus-3.2-ALPHA-24.jar

Description:

        An abstract description of a simple message bus to be used within an application.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-messagebus/3.2-ALPHA-24/it-tidalwave-messagebus-3.2-ALPHA-24.jar
MD5: 50b1d43125bcfe8461d6424559d75365
SHA1: 5efb75d2584bea889cf804d51a774334329f96e4
SHA256:05f8fda2fa5832d3dac5d4359c3ae2e35d2250cb5144b7c9261c87e80b5706ce
Referenced In Projects/Scopes:

TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-messagebus	High
Vendor	jar	package name	it	Highest
Vendor	jar	package name	messagebus	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-messagebus	Highest
Vendor	pom	artifactid	it-tidalwave-messagebus	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: MessageBus	High
Vendor	pom	parent-artifactid	modules	Low
Product	file	name	it-tidalwave-messagebus	High
Product	jar	package name	it	Highest
Product	jar	package name	messagebus	Highest
Product	jar	package name	tidalwave	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: MessageBus	High
Product	Manifest	specification-title	TheseFoolishThings :: MessageBus	Medium
Product	pom	artifactid	it-tidalwave-messagebus	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: MessageBus	High
Product	pom	parent-artifactid	modules	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-role-3.2-ALPHA-24.jar

Description:

        Roles are a powerful way for designing complex behaviours while keeping good practices such as Single Responsibility, Dependency Inversion and
        Interface Segregation.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role/3.2-ALPHA-24/it-tidalwave-role-3.2-ALPHA-24.jar
MD5: 03c70042a28ce3c67af0117708e78a8d
SHA1: cb965781b67b40d6c7f3e09bbe5a59ef934bb0fc
SHA256:0ff4eb4ccb233cbfb65c89ce121e3fc2b6d907d4d1d494133e0dd49b8fe45551
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-role	High
Vendor	jar	package name	it	Highest
Vendor	jar	package name	role	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-role	Highest
Vendor	pom	artifactid	it-tidalwave-role	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Roles	High
Vendor	pom	parent-artifactid	modules	Low
Product	file	name	it-tidalwave-role	High
Product	jar	package name	it	Highest
Product	jar	package name	role	Highest
Product	jar	package name	tidalwave	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Roles	High
Product	Manifest	specification-title	TheseFoolishThings :: Roles	Medium
Product	pom	artifactid	it-tidalwave-role	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Roles	High
Product	pom	parent-artifactid	modules	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-role-spring-3.2-ALPHA-24.jar

Description:

        Specific Spring support for DCI roles.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role-spring/3.2-ALPHA-24/it-tidalwave-role-spring-3.2-ALPHA-24.jar
MD5: 2f14e90a953ccc7bbaeb3e8961e7a693
SHA1: 7bd5a5916099ac476a3d7eeb4955d59eb2151144
SHA256:070b8113493b8970adbd2253168c82e8312e7ed59a767bf516766f455b958882
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-role-spring	High
Vendor	jar	package name	it	Highest
Vendor	jar	package name	role	Highest
Vendor	jar	package name	spring	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-role-spring	Highest
Vendor	pom	artifactid	it-tidalwave-role-spring	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Roles :: Spring	High
Vendor	pom	parent-artifactid	modules	Low
Product	file	name	it-tidalwave-role-spring	High
Product	jar	package name	it	Highest
Product	jar	package name	role	Highest
Product	jar	package name	spring	Highest
Product	jar	package name	tidalwave	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Roles :: Spring	High
Product	Manifest	specification-title	TheseFoolishThings :: Roles :: Spring	Medium
Product	pom	artifactid	it-tidalwave-role-spring	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Roles :: Spring	High
Product	pom	parent-artifactid	modules	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-24.jar

Description:

        This module provides sample data structures used by other examples.

TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-thesefoolishthings-examples-data	High
Vendor	jar	package name	examples	Highest
Vendor	jar	package name	it	Highest
Vendor	jar	package name	thesefoolishthings	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-thesefoolishthings-examples-data	Highest
Vendor	pom	artifactid	it-tidalwave-thesefoolishthings-examples-data	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Examples :: Data	High
Vendor	pom	parent-artifactid	thesefoolishthings-examples	Low
Product	file	name	it-tidalwave-thesefoolishthings-examples-data	High
Product	jar	package name	examples	Highest
Product	jar	package name	it	Highest
Product	jar	package name	thesefoolishthings	Highest
Product	jar	package name	tidalwave	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Examples :: Data	High
Product	Manifest	specification-title	TheseFoolishThings :: Examples :: Data	Medium
Product	pom	artifactid	it-tidalwave-thesefoolishthings-examples-data	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Examples :: Data	High
Product	pom	parent-artifactid	thesefoolishthings-examples	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-thesefoolishthings-examples-finderexample1-3.2-ALPHA-24.jar

Description:

        A simple example of Finder usage.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1/3.2-ALPHA-24/it-tidalwave-thesefoolishthings-examples-finderexample1-3.2-ALPHA-24.jar
MD5: fde34529841dde98f9d6e34676adb201
SHA1: 3224e9f3a7725a390471b2fbd3f868db1d53d4f6
SHA256:90c7d938e1cded61cd0a6951316516033e4027965d99e259f13c2783ac5df158
Referenced In Project/Scope: TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
it-tidalwave-thesefoolishthings-examples-finderexample1-3.2-ALPHA-24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-thesefoolishthings-examples-finderexample1	High
Vendor	jar	package name	examples	Highest
Vendor	jar	package name	it	Highest
Vendor	jar	package name	thesefoolishthings	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-thesefoolishthings-examples-finderexample1	Highest
Vendor	pom	artifactid	it-tidalwave-thesefoolishthings-examples-finderexample1	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Examples :: Finder :: In-memory Finder	High
Vendor	pom	parent-artifactid	thesefoolishthings-examples	Low
Product	file	name	it-tidalwave-thesefoolishthings-examples-finderexample1	High
Product	jar	package name	examples	Highest
Product	jar	package name	it	Highest
Product	jar	package name	thesefoolishthings	Highest
Product	jar	package name	tidalwave	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Examples :: Finder :: In-memory Finder	High
Product	Manifest	specification-title	TheseFoolishThings :: Examples :: Finder :: In-memory Finder	Medium
Product	pom	artifactid	it-tidalwave-thesefoolishthings-examples-finderexample1	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Examples :: Finder :: In-memory Finder	High
Product	pom	parent-artifactid	thesefoolishthings-examples	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-util-3.2-ALPHA-24.jar

Description:

        A collection of common utilities.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util/3.2-ALPHA-24/it-tidalwave-util-3.2-ALPHA-24.jar
MD5: 1bd6e1d7d3b38390d73e52d60125ad65
SHA1: 77df5aa3f7b6a1647c7ac73b70dfd1ea047afc8e
SHA256:1cd466c22b0df169f21e90380f111449507fddef314d9fb829b7ed4068b6d34b
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-util	High
Vendor	jar	package name	it	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-util	Highest
Vendor	pom	artifactid	it-tidalwave-util	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Utilities	High
Vendor	pom	parent-artifactid	modules	Low
Product	file	name	it-tidalwave-util	High
Product	jar	package name	it	Highest
Product	jar	package name	tidalwave	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Utilities	High
Product	Manifest	specification-title	TheseFoolishThings :: Utilities	Medium
Product	pom	artifactid	it-tidalwave-util	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Utilities	High
Product	pom	parent-artifactid	modules	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24 (Confidence:High)

it-tidalwave-util-test-3.2-ALPHA-24.jar

Description:

        Miscellaneous utilities for testing.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util-test/3.2-ALPHA-24/it-tidalwave-util-test-3.2-ALPHA-24.jar
MD5: 7e3905d448c300bf5794e833c3454e03
SHA1: e52747b2c214e8c2b5d298a0cfd6e5fce9f70f44
SHA256:d7ead438b21335f9d3f34e856c3ad7255607c253ee926f1af892940205dc9276
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/thesefoolishthings-examples@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	it-tidalwave-util-test	High
Vendor	jar	package name	it	Highest
Vendor	jar	package name	test	Highest
Vendor	jar	package name	tidalwave	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	Tidalwave s.a.s.	High
Vendor	Manifest	specification-vendor	Tidalwave s.a.s.	Low
Vendor	pom	artifactid	it-tidalwave-util-test	Highest
Vendor	pom	artifactid	it-tidalwave-util-test	Low
Vendor	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Vendor	pom	name	TheseFoolishThings :: Test Utilities	High
Vendor	pom	parent-artifactid	modules	Low
Product	file	name	it-tidalwave-util-test	High
Product	jar	package name	it	Highest
Product	jar	package name	test	Highest
Product	jar	package name	tidalwave	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	TheseFoolishThings :: Test Utilities	High
Product	Manifest	specification-title	TheseFoolishThings :: Test Utilities	Medium
Product	pom	artifactid	it-tidalwave-util-test	Highest
Product	pom	groupid	it.tidalwave.thesefoolishthings	Highest
Product	pom	name	TheseFoolishThings :: Test Utilities	High
Product	pom	parent-artifactid	modules	Medium
Version	pom	version	3.2-ALPHA-24	Highest

Identifiers

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24 (Confidence:High)

jakarta.activation-1.2.2.jar

Description:

Jakarta Activation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar
MD5: 0b8bee3bf29b9a015f8b992035581a7c
SHA1: 74548703f9851017ce2f556066659438019e7eb5
SHA256:02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:runtime
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:runtime

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	com.sun.activation.jakarta.activation	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation	Highest
Vendor	pom	artifactid	jakarta.activation	Low
Vendor	pom	groupid	com.sun.activation	Highest
Vendor	pom	name	Jakarta Activation	High
Vendor	pom	parent-artifactid	all	Low
Product	file	name	jakarta.activation	High
Product	jar	package name	activation	Highest
Product	jar	package name	javax	Highest
Product	jar	package name	sun	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation	Medium
Product	Manifest	bundle-symbolicname	com.sun.activation.jakarta.activation	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	Implementation-Title	javax.activation	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation	Highest
Product	pom	groupid	com.sun.activation	Highest
Product	pom	name	Jakarta Activation	High
Product	pom	parent-artifactid	all	Medium
Version	file	version	1.2.2	High
Version	Manifest	Bundle-Version	1.2.2	High
Version	Manifest	Implementation-Version	1.2.2	High
Version	pom	version	1.2.2	Highest

Identifiers

pkg:maven/com.sun.activation/jakarta.activation@1.2.2 (Confidence:High)

jakarta.annotation-api-1.3.5.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar
MD5: 8b165cf58df5f8c2a222f637c0a07c97
SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d
SHA256:85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.annotation-api	High
Vendor	jar	package name	annotation	Highest
Vendor	Manifest	automatic-module-name	java.annotation	Medium
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Vendor	Manifest	extension-name	jakarta.annotation	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.annotation-api	Highest
Vendor	pom	artifactid	jakarta.annotation-api	Low
Vendor	pom	developer name	Linda De Michiel	Medium
Vendor	pom	developer org	Oracle Corp.	Medium
Vendor	pom	groupid	jakarta.annotation	Highest
Vendor	pom	name	Jakarta Annotations API	High
Vendor	pom	parent-artifactid	ca-parent	Low
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Highest
Product	file	name	jakarta.annotation-api	High
Product	jar	package name	annotation	Highest
Product	Manifest	automatic-module-name	java.annotation	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Annotations API	Medium
Product	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Product	Manifest	extension-name	jakarta.annotation	Medium
Product	pom	artifactid	jakarta.annotation-api	Highest
Product	pom	developer name	Linda De Michiel	Low
Product	pom	developer org	Oracle Corp.	Low
Product	pom	groupid	jakarta.annotation	Highest
Product	pom	name	Jakarta Annotations API	High
Product	pom	parent-artifactid	ca-parent	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Medium
Version	file	version	1.3.5	High
Version	Manifest	Bundle-Version	1.3.5	High
Version	Manifest	Implementation-Version	1.3.5	High
Version	pom	version	1.3.5	Highest

Identifiers

pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5 (Confidence:High)
cpe:2.3:a:oracle:projects:1.3.5:*:*:*:*:*:*:* (Confidence:Low)

jakarta.persistence-api-2.2.3.jar

Description:

Jakarta Persistence 2.2 API jar

License:

Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/persistence/jakarta.persistence-api/2.2.3/jakarta.persistence-api-2.2.3.jar
MD5: e0a655f398f8e68e0afebb0f71fba4e5
SHA1: 8f6ea5daedc614f07a3654a455660145286f024e
SHA256:0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.persistence-api	High
Vendor	jar	package name	persistence	Highest
Vendor	Manifest	automatic-module-name	java.persistence	Medium
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Vendor	Manifest	extension-name	jakarta.persistence	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.persistence-api	Highest
Vendor	pom	artifactid	jakarta.persistence-api	Low
Vendor	pom	developer id	lukasj	Medium
Vendor	pom	developer name	Lukas Jungmann	Medium
Vendor	pom	developer org	Oracle, Inc.	Medium
Vendor	pom	groupid	jakarta.persistence	Highest
Vendor	pom	name	Jakarta Persistence API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	eclipse-ee4j/jpa-api	Highest
Product	file	name	jakarta.persistence-api	High
Product	jar	package name	persistence	Highest
Product	Manifest	automatic-module-name	java.persistence	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Persistence API jar	Medium
Product	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Product	Manifest	extension-name	jakarta.persistence	Medium
Product	pom	artifactid	jakarta.persistence-api	Highest
Product	pom	developer id	lukasj	Low
Product	pom	developer name	Lukas Jungmann	Low
Product	pom	developer org	Oracle, Inc.	Low
Product	pom	groupid	jakarta.persistence	Highest
Product	pom	name	Jakarta Persistence API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	eclipse-ee4j/jpa-api	High
Version	file	version	2.2.3	High
Version	Manifest	Bundle-Version	2.2.3	High
Version	Manifest	Implementation-Version	2.2.3	High
Version	pom	parent-version	2.2.3	Low
Version	pom	version	2.2.3	Highest

Identifiers

pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3 (Confidence:High)

jakarta.transaction-api-1.3.3.jar

Description:

Jakarta Transactions

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.jar
MD5: cc45726045cc9a0728f803f9db4c90c4
SHA1: c4179d48720a1e87202115fbed6089bdc4195405
SHA256:0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.transaction-api	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	transaction	Highest
Vendor	Manifest	automatic-module-name	java.transaction	Medium
Vendor	Manifest	bundle-docurl	https://github.com/eclipse-ee4j	Low
Vendor	Manifest	bundle-symbolicname	jakarta.transaction-api	Medium
Vendor	Manifest	extension-name	javax.transaction	Medium
Vendor	Manifest	Implementation-Vendor	EE4J Community	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	jakarta.transaction-api	Highest
Vendor	pom	artifactid	jakarta.transaction-api	Low
Vendor	pom	developer id	stephen_felts	Medium
Vendor	pom	developer name	Stephen Felts	Medium
Vendor	pom	developer org	Oracle, Inc.	Medium
Vendor	pom	groupid	jakarta.transaction	Highest
Vendor	pom	name	API	High
Vendor	pom	name	${extension.name} API	High
Vendor	pom	organization name	EE4J Community	High
Vendor	pom	organization url	eclipse-ee4j	Medium
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.jta	Highest
Product	file	name	jakarta.transaction-api	High
Product	jar	package name	javax	Highest
Product	jar	package name	transaction	Highest
Product	Manifest	automatic-module-name	java.transaction	Medium
Product	Manifest	bundle-docurl	https://github.com/eclipse-ee4j	Low
Product	Manifest	Bundle-Name	javax.transaction API	Medium
Product	Manifest	bundle-symbolicname	jakarta.transaction-api	Medium
Product	Manifest	extension-name	javax.transaction	Medium
Product	pom	artifactid	jakarta.transaction-api	Highest
Product	pom	developer id	stephen_felts	Low
Product	pom	developer name	Stephen Felts	Low
Product	pom	developer org	Oracle, Inc.	Low
Product	pom	groupid	jakarta.transaction	Highest
Product	pom	name	API	High
Product	pom	name	${extension.name} API	High
Product	pom	organization name	EE4J Community	Low
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	eclipse-ee4j	High
Product	pom	url	https://projects.eclipse.org/projects/ee4j.jta	Medium
Version	file	version	1.3.3	High
Version	Manifest	Bundle-Version	1.3.3	High
Version	Manifest	Implementation-Version	1.3.3	High
Version	pom	parent-version	1.3.3	Low
Version	pom	version	1.3.3	Highest

Identifiers

pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3 (Confidence:High)
cpe:2.3:a:oracle:projects:1.3.3:*:*:*:*:*:*:* (Confidence:Low)

jakarta.xml.bind-api-2.3.3.jar

Description:

Jakarta XML Binding API 2.3 Design Specification

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar
MD5: 61286918ca0192e9f87d1358aef718dd
SHA1: 48e3b9cfc10752fba3521d6511f4165bea951801
SHA256:c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.xml.bind-api	High
Vendor	jar	package name	bind	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Vendor	Manifest	extension-name	jakarta.xml.bind	Medium
Vendor	Manifest	implementation-build-id	2.3.3-RELEASE-fd06b2b	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.xml.bind-api	Highest
Vendor	pom	artifactid	jakarta.xml.bind-api	Low
Vendor	pom	groupid	jakarta.xml.bind	Highest
Vendor	pom	name	Jakarta XML Binding API	High
Vendor	pom	parent-artifactid	jakarta.xml.bind-api-parent	Low
Product	file	name	jakarta.xml.bind-api	High
Product	jar	package name	bind	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta XML Binding API	Medium
Product	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Product	Manifest	extension-name	jakarta.xml.bind	Medium
Product	Manifest	implementation-build-id	2.3.3-RELEASE-fd06b2b	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	jakarta.xml.bind-api	Highest
Product	pom	groupid	jakarta.xml.bind	Highest
Product	pom	name	Jakarta XML Binding API	High
Product	pom	parent-artifactid	jakarta.xml.bind-api-parent	Medium
Version	file	version	2.3.3	High
Version	Manifest	Bundle-Version	2.3.3	High
Version	Manifest	Implementation-Version	2.3.3	High
Version	pom	version	2.3.3	Highest

Identifiers

pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3 (Confidence:High)

jandex-2.4.2.Final.jar

Description:

Parent POM for JBoss projects. Provides default project build configuration.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jboss/jandex/2.4.2.Final/jandex-2.4.2.Final.jar
MD5: 489f7a97d2ed7ae34ea56d01b3566d57
SHA1: 1e1c385990b258ff1a24c801e84aebbacf70eb39
SHA256:3f2ce55c7d71e744581488dc5105806aa8084c08e6e916a019bab8f8698994f0
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jandex	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	indexer	Highest
Vendor	jar	package name	jandex	Highest
Vendor	jar	package name	jboss	Highest
Vendor	Manifest	automatic-module-name	org.jboss.jandex	Medium
Vendor	Manifest	build-timestamp	Čt, 6 Led 2022 17:31:47 +0100	Low
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Vendor	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	Manifest	Implementation-Vendor-Id	org.jboss	Medium
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	pom	artifactid	jandex	Highest
Vendor	pom	artifactid	jandex	Low
Vendor	pom	groupid	org.jboss	Highest
Vendor	pom	name	Java Annotation Indexer	High
Vendor	pom	parent-artifactid	jboss-parent	Low
Product	file	name	jandex	High
Product	jar	package name	indexer	Highest
Product	jar	package name	jandex	Highest
Product	jar	package name	jboss	Highest
Product	Manifest	automatic-module-name	org.jboss.jandex	Medium
Product	Manifest	build-timestamp	Čt, 6 Led 2022 17:31:47 +0100	Low
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	Bundle-Name	Java Annotation Indexer	Medium
Product	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Product	Manifest	Implementation-Title	Java Annotation Indexer	High
Product	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Product	Manifest	os-arch	amd64	Low
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	Java Annotation Indexer	Medium
Product	pom	artifactid	jandex	Highest
Product	pom	groupid	org.jboss	Highest
Product	pom	name	Java Annotation Indexer	High
Product	pom	parent-artifactid	jboss-parent	Medium
Version	Manifest	Bundle-Version	2.4.2.Final	High
Version	Manifest	Implementation-Version	2.4.2.Final	High
Version	pom	parent-version	2.4.2.Final	Low
Version	pom	version	2.4.2.Final	Highest

Identifiers

pkg:maven/org.jboss/jandex@2.4.2.Final (Confidence:High)

java-diff-utils-4.15.jar

Description:

The DiffUtils library for computing diffs, applying patches, generationg side-by-side view in Java.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/java-diff-utils/java-diff-utils/4.15/java-diff-utils-4.15.jar
MD5: 7307001832630cebc9ea88620d4af2d8
SHA1: a8b782ac93bf6c714526ac880adef7c52a87dad7
SHA256:964c69e3a23a892db2778ae6806aa1d42f81230032bd8e4982dc8620582ee6b7
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	java-diff-utils	High
Vendor	jar	package name	github	Highest
Vendor	Manifest	automatic-module-name	io.github.javadiffutils	Medium
Vendor	Manifest	bundle-symbolicname	io.github.java-diff-utils	Medium
Vendor	pom	artifactid	java-diff-utils	Highest
Vendor	pom	artifactid	java-diff-utils	Low
Vendor	pom	groupid	io.github.java-diff-utils	Highest
Vendor	pom	name	java-diff-utils	High
Vendor	pom	parent-artifactid	java-diff-utils-parent	Low
Product	file	name	java-diff-utils	High
Product	jar	package name	diffutils	Highest
Product	jar	package name	github	Highest
Product	Manifest	automatic-module-name	io.github.javadiffutils	Medium
Product	Manifest	Bundle-Name	java-diff-utils	Medium
Product	Manifest	bundle-symbolicname	io.github.java-diff-utils	Medium
Product	pom	artifactid	java-diff-utils	Highest
Product	pom	groupid	io.github.java-diff-utils	Highest
Product	pom	name	java-diff-utils	High
Product	pom	parent-artifactid	java-diff-utils-parent	Medium
Version	file	version	4.15	High
Version	pom	version	4.15	Highest

Identifiers

pkg:maven/io.github.java-diff-utils/java-diff-utils@4.15 (Confidence:High)
cpe:2.3:a:utils_project:utils:4.15:*:*:*:*:*:*:* (Confidence:Highest)

javax.activation-api-1.2.0.jar

Description:

JavaBeans Activation Framework API jar

License:

https://github.com/javaee/activation/blob/master/LICENSE.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar
MD5: 5e50e56bcf4a3ef3bc758f69f7643c3b
SHA1: 85262acf3ca9816f9537ca47d5adeabaead7cb16
SHA256:43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393
Referenced In Project/Scope: TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	automatic-module-name	java.activation	Medium
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	javax.activation-api	Medium
Vendor	Manifest	extension-name	javax.activation	Medium
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	pom	artifactid	javax.activation-api	Highest
Vendor	pom	artifactid	javax.activation-api	Low
Vendor	pom	groupid	javax.activation	Highest
Vendor	pom	name	JavaBeans Activation Framework API jar	High
Vendor	pom	parent-artifactid	all	Low
Vendor	pom	parent-groupid	com.sun.activation	Medium
Product	file	name	javax.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	javax	Highest
Product	Manifest	automatic-module-name	java.activation	Medium
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	JavaBeans Activation Framework API jar	Medium
Product	Manifest	bundle-symbolicname	javax.activation-api	Medium
Product	Manifest	extension-name	javax.activation	Medium
Product	Manifest	Implementation-Title	javax.activation.javax.activation-api	High
Product	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Product	Manifest	specification-title	javax.activation.javax.activation-api	Medium
Product	pom	artifactid	javax.activation-api	Highest
Product	pom	groupid	javax.activation	Highest
Product	pom	name	JavaBeans Activation Framework API jar	High
Product	pom	parent-artifactid	all	Medium
Product	pom	parent-groupid	com.sun.activation	Medium
Version	file	version	1.2.0	High
Version	Manifest	Bundle-Version	1.2.0	High
Version	Manifest	Implementation-Version	1.2.0	High
Version	pom	version	1.2.0	Highest

Identifiers

pkg:maven/javax.activation/javax.activation-api@1.2.0 (Confidence:High)

javax.annotation-api-1.3.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings (modules):compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: MessageBus:compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Utilities:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/it.tidalwave.thesefoolishthings/thesefoolishthings-examples@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/modules@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.annotation-api	High
Vendor	jar	package name	annotation	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	automatic-module-name	java.annotation	Medium
Vendor	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Vendor	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Vendor	Manifest	extension-name	javax.annotation	Medium
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	javax.annotation-api	Highest
Vendor	pom	artifactid	javax.annotation-api	Low
Vendor	pom	developer id	ldemichiel	Medium
Vendor	pom	developer name	Linda De Michiel	Medium
Vendor	pom	developer org	Oracle Corp.	Medium
Vendor	pom	groupid	javax.annotation	Highest
Vendor	pom	name	API	High
Vendor	pom	name	${extension.name} API	High
Vendor	pom	organization name	GlassFish Community	High
Vendor	pom	organization url	https://javaee.github.io/glassfish	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	url	http://jcp.org/en/jsr/detail?id=250	Highest
Product	file	name	javax.annotation-api	High
Product	jar	package name	annotation	Highest
Product	jar	package name	javax	Highest
Product	Manifest	automatic-module-name	java.annotation	Medium
Product	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Product	Manifest	Bundle-Name	javax.annotation API	Medium
Product	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Product	Manifest	extension-name	javax.annotation	Medium
Product	pom	artifactid	javax.annotation-api	Highest
Product	pom	developer id	ldemichiel	Low
Product	pom	developer name	Linda De Michiel	Low
Product	pom	developer org	Oracle Corp.	Low
Product	pom	groupid	javax.annotation	Highest
Product	pom	name	API	High
Product	pom	name	${extension.name} API	High
Product	pom	organization name	GlassFish Community	Low
Product	pom	organization url	https://javaee.github.io/glassfish	Low
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	url	http://jcp.org/en/jsr/detail?id=250	Medium
Version	file	version	1.3.2	High
Version	Manifest	Bundle-Version	1.3.2	High
Version	Manifest	Implementation-Version	1.3.2	High
Version	pom	parent-version	1.3.2	Low
Version	pom	version	1.3.2	Highest

Identifiers

pkg:maven/javax.annotation/javax.annotation-api@1.3.2 (Confidence:High)

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.inject-1	High
Vendor	jar	package name	inject	Highest
Vendor	jar	package name	inject	Low
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	javax	Low
Vendor	pom	artifactid	javax.inject	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	pom	groupid	javax.inject	Highest
Vendor	pom	name	javax.inject	High
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Product	file	name	javax.inject-1	High
Product	jar	package name	inject	Highest
Product	jar	package name	inject	Low
Product	jar	package name	javax	Highest
Product	pom	artifactid	javax.inject	Highest
Product	pom	groupid	javax.inject	Highest
Product	pom	name	javax.inject	High
Product	pom	url	http://code.google.com/p/atinject/	Medium
Version	file	version	1	Medium
Version	pom	version	1	Highest

Identifiers

pkg:maven/javax.inject/javax.inject@1 (Confidence:High)

javax.persistence-api-2.2.jar

Description:

Java(TM) Persistence API

License:

Eclipse Public License v1.0: http://www.eclipse.org/legal/epl-v10.html
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/persistence/javax.persistence-api/2.2/javax.persistence-api-2.2.jar
MD5: e6520b3435f5b6d58eee415b5542abf8
SHA1: 25665ac8c0b62f50e6488173233239120fc52c96
SHA256:5578b71b37999a5eaed3fea0d14aa61c60c6ec6328256f2b63472f336318baf4
Referenced In Project/Scope: TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.persistence-api	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	persistence	Highest
Vendor	Manifest	automatic-module-name	java.persistence	Medium
Vendor	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Vendor	Manifest	extension-name	javax.persistence	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.oracle	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	javax.persistence-api	Highest
Vendor	pom	artifactid	javax.persistence-api	Low
Vendor	pom	groupid	javax.persistence	Highest
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	url	javaee/jpa-spec	Highest
Product	file	name	javax.persistence-api	High
Product	jar	package name	javax	Highest
Product	jar	package name	persistence	Highest
Product	Manifest	automatic-module-name	java.persistence	Medium
Product	Manifest	Bundle-Name	Java(TM) Persistence API jar	Medium
Product	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Product	Manifest	extension-name	javax.persistence	Medium
Product	pom	artifactid	javax.persistence-api	Highest
Product	pom	groupid	javax.persistence	Highest
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	url	javaee/jpa-spec	High
Version	file	version	2.2	High
Version	Manifest	Bundle-Version	2.2	High
Version	Manifest	Implementation-Version	2.2	High
Version	pom	parent-version	2.2	Low
Version	pom	version	2.2	Highest

Identifiers

pkg:maven/javax.persistence/javax.persistence-api@2.2 (Confidence:High)

jaxb-api-2.3.1.jar

Description:

JAXB (JSR 222) API

License:

https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar
MD5: bcf270d320f645ad19f5edb60091e87f
SHA1: 8531ad5ac454cc2deb9d4d32c40c4d7451939b5d
SHA256:88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06
Referenced In Project/Scope: TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jaxb-api	High
Vendor	jar	package name	bind	Highest
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	jaxb	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	Manifest	bundle-symbolicname	jaxb-api	Medium
Vendor	Manifest	extension-name	javax.xml.bind	Medium
Vendor	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	jaxb-api	Highest
Vendor	pom	artifactid	jaxb-api	Low
Vendor	pom	groupid	javax.xml.bind	Highest
Vendor	pom	parent-artifactid	jaxb-api-parent	Low
Product	file	name	jaxb-api	High
Product	jar	package name	bind	Highest
Product	jar	package name	javax	Highest
Product	jar	package name	jaxb	Highest
Product	jar	package name	xml	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	Manifest	Bundle-Name	jaxb-api	Medium
Product	Manifest	bundle-symbolicname	jaxb-api	Medium
Product	Manifest	extension-name	javax.xml.bind	Medium
Product	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	jaxb-api	Medium
Product	pom	artifactid	jaxb-api	Highest
Product	pom	groupid	javax.xml.bind	Highest
Product	pom	parent-artifactid	jaxb-api-parent	Medium
Version	file	version	2.3.1	High
Version	Manifest	Bundle-Version	2.3.1	High
Version	pom	version	2.3.1	Highest

Identifiers

pkg:maven/javax.xml.bind/jaxb-api@2.3.1 (Confidence:High)

jaxb-runtime-2.3.9.jar

Description:

JAXB (JSR 222) Reference Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/glassfish/jaxb/jaxb-runtime/2.3.9/jaxb-runtime-2.3.9.jar
MD5: 9383286160dde0e1a0fec25aee8a44ef
SHA1: 9d42b4f19df7e20b625b2044a7de81d95f6dff29
SHA256:ba88e5bde7c0d878c3e1f2ec2fcabaf51d201eaf93b3bb9cfecfc1f11b2304d4
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jaxb-runtime	High
Vendor	jar	package name	bind	Highest
Vendor	jar	package name	com	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar	package name	xml	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.jaxb.runtime	Medium
Vendor	Manifest	git-revision	143ffd0	Low
Vendor	Manifest	implementation-build-id	2.3.9 - 143ffd0	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish.jaxb	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	jaxb-runtime	Highest
Vendor	pom	artifactid	jaxb-runtime	Low
Vendor	pom	groupid	org.glassfish.jaxb	Highest
Vendor	pom	name	JAXB Runtime	High
Vendor	pom	parent-artifactid	jaxb-runtime-parent	Low
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	url	https://eclipse-ee4j.github.io/jaxb-ri/	Highest
Product	file	name	jaxb-runtime	High
Product	jar	package name	9	Highest
Product	jar	package name	bind	Highest
Product	jar	package name	com	Highest
Product	jar	package name	sun	Highest
Product	jar	package name	xml	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	JAXB Runtime	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.jaxb.runtime	Medium
Product	Manifest	git-revision	143ffd0	Low
Product	Manifest	implementation-build-id	2.3.9 - 143ffd0	Low
Product	Manifest	Implementation-Title	Jakarta XML Binding Implementation	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Jakarta XML Binding	Medium
Product	pom	artifactid	jaxb-runtime	Highest
Product	pom	groupid	org.glassfish.jaxb	Highest
Product	pom	name	JAXB Runtime	High
Product	pom	parent-artifactid	jaxb-runtime-parent	Medium
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	pom	url	https://eclipse-ee4j.github.io/jaxb-ri/	Medium
Version	file	version	2.3.9	High
Version	Manifest	build-id	2.3.9	Medium
Version	Manifest	Bundle-Version	2.3.9	High
Version	Manifest	implementation-build-id	2.3.9	Low
Version	Manifest	Implementation-Version	2.3.9	High
Version	Manifest	major-version	2.3.9	Medium
Version	pom	version	2.3.9	Highest

Identifiers

pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 (Confidence:High)

jboss-logging-3.4.3.Final.jar

Description:

The JBoss Logging Framework

License:

Apache License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jboss/logging/jboss-logging/3.4.3.Final/jboss-logging-3.4.3.Final.jar
MD5: b298d4b79e591843c1eb1458ea79f070
SHA1: c4bd7e12a745c0e7f6cf98c45cdcdf482fd827ea
SHA256:0b324cca4d550060e51e70cc0045a6cce62f264278ec1f5082aafeb670fcac49
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.hibernate/hibernate-entitymanager@5.6.15.Final
pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jboss-logging	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	jboss	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	automatic-module-name	org.jboss.logging	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Vendor	Manifest	implementation-url	http://www.jboss.org	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	pom	artifactid	jboss-logging	Highest
Vendor	pom	artifactid	jboss-logging	Low
Vendor	pom	groupid	org.jboss.logging	Highest
Vendor	pom	name	JBoss Logging 3	High
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	parent-groupid	org.jboss	Medium
Vendor	pom	url	http://www.jboss.org	Highest
Product	file	name	jboss-logging	High
Product	jar	package name	jboss	Highest
Product	jar	package name	logging	Highest
Product	Manifest	automatic-module-name	org.jboss.logging	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	Bundle-Name	JBoss Logging 3	Medium
Product	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Product	Manifest	Implementation-Title	JBoss Logging 3	High
Product	Manifest	implementation-url	http://www.jboss.org	Low
Product	Manifest	os-arch	amd64	Low
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	JBoss Logging 3	Medium
Product	pom	artifactid	jboss-logging	Highest
Product	pom	groupid	org.jboss.logging	Highest
Product	pom	name	JBoss Logging 3	High
Product	pom	parent-artifactid	jboss-parent	Medium
Product	pom	parent-groupid	org.jboss	Medium
Product	pom	url	http://www.jboss.org	Medium
Version	Manifest	Bundle-Version	3.4.3.Final	High
Version	Manifest	Implementation-Version	3.4.3.Final	High
Version	pom	parent-version	3.4.3.Final	Low
Version	pom	version	3.4.3.Final	Highest

Identifiers

pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final (Confidence:High)

jboss-transaction-api_1.2_spec-1.1.1.Final.jar

Description:

The Java Transaction 1.2 API classes

License:

Common Development and Distribution License: http://repository.jboss.org/licenses/cddl.txt
GNU General Public License, Version 2 with the Classpath Exception: http://repository.jboss.org/licenses/gpl-2.0-ce.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jboss/spec/javax/transaction/jboss-transaction-api_1.2_spec/1.1.1.Final/jboss-transaction-api_1.2_spec-1.1.1.Final.jar
MD5: 1e633c47138aba999d39692a31a1a124
SHA1: a8485cab9484dda36e9a8c319e76b5cc18797b58
SHA256:a310a50b9bdc44aaf36362dc9bb212235a147ffa8ef72dc9544a39c329eabbc3
Referenced In Project/Scope: TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jboss-transaction-api_1.2_spec-1.1.1.Final	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	transaction	Highest
Vendor	Manifest	automatic-module-name	java.transaction	Medium
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	bundle-symbolicname	org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec	Medium
Vendor	Manifest	implementation-url	http://www.jboss.org/jboss-transaction-api_1.2_spec	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	Manifest	Implementation-Vendor-Id	org.jboss.spec.javax.transaction	Medium
Vendor	Manifest	os-arch	x86	Low
Vendor	Manifest	os-name	Windows 10	Medium
Vendor	pom	artifactid	jboss-transaction-api_1.2_spec	Highest
Vendor	pom	artifactid	jboss-transaction-api_1.2_spec	Low
Vendor	pom	groupid	org.jboss.spec.javax.transaction	Highest
Vendor	pom	name	Java Transaction API	High
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	parent-groupid	org.jboss	Medium
Product	file	name	jboss-transaction-api_1.2_spec-1.1.1.Final	High
Product	jar	package name	javax	Highest
Product	jar	package name	transaction	Highest
Product	Manifest	automatic-module-name	java.transaction	Medium
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	Bundle-Name	Java Transaction API	Medium
Product	Manifest	bundle-symbolicname	org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec	Medium
Product	Manifest	Implementation-Title	Java Transaction API	High
Product	Manifest	implementation-url	http://www.jboss.org/jboss-transaction-api_1.2_spec	Low
Product	Manifest	os-arch	x86	Low
Product	Manifest	os-name	Windows 10	Medium
Product	Manifest	specification-title	JSR 907: Java Transaction API (JTA)	Medium
Product	pom	artifactid	jboss-transaction-api_1.2_spec	Highest
Product	pom	groupid	org.jboss.spec.javax.transaction	Highest
Product	pom	name	Java Transaction API	High
Product	pom	parent-artifactid	jboss-parent	Medium
Product	pom	parent-groupid	org.jboss	Medium
Version	Manifest	Bundle-Version	1.1.1.Final	High
Version	Manifest	Implementation-Version	1.1.1.Final	High
Version	pom	parent-version	1.1.1.Final	Low
Version	pom	version	1.1.1.Final	Highest

Identifiers

pkg:maven/org.jboss.spec.javax.transaction/jboss-transaction-api_1.2_spec@1.1.1.Final (Confidence:High)

jcl-over-slf4j-2.0.16.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/2.0.16/jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256:5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcl-over-slf4j	High
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	pom	artifactid	jcl-over-slf4j	Highest
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	jcl-over-slf4j	High
Product	jar	package name	9	Highest
Product	jar	package name	apache	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	JCL 1.2 implemented over SLF4J	Medium
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16 (Confidence:High)

jcommander-1.82.jar

Description:

Command line parsing library for Java

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/beust/jcommander/1.82/jcommander-1.82.jar
MD5: c350dc0db8aa038e6bbaf0050720d69c
SHA1: 0a7c5fef184d238065de38f81bbc6ee50cca2e21
SHA256:deeac157c8de6822878d85d0c7bc8467a19cc8484d37788f7804f039dde280b1
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile
pkg:maven/org.testng/testng@7.10.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcommander	High
Vendor	jar	package name	beust	Highest
Vendor	jar	package name	beust	Low
Vendor	jar	package name	jcommander	Highest
Vendor	jar	package name	jcommander	Low
Vendor	pom	artifactid	jcommander	Highest
Vendor	pom	artifactid	jcommander	Low
Vendor	pom	developer email	cedric@beust.com	Low
Vendor	pom	developer id	cbeust	Medium
Vendor	pom	developer name	Cedric Beust	Medium
Vendor	pom	groupid	com.beust	Highest
Vendor	pom	name	jcommander	High
Vendor	pom	url	https://jcommander.org	Highest
Product	file	name	jcommander	High
Product	jar	package name	beust	Highest
Product	jar	package name	jcommander	Highest
Product	jar	package name	jcommander	Low
Product	pom	artifactid	jcommander	Highest
Product	pom	developer email	cedric@beust.com	Low
Product	pom	developer id	cbeust	Low
Product	pom	developer name	Cedric Beust	Low
Product	pom	groupid	com.beust	Highest
Product	pom	name	jcommander	High
Product	pom	url	https://jcommander.org	Medium
Version	file	version	1.82	High
Version	pom	version	1.82	Highest

Identifiers

pkg:maven/com.beust/jcommander@1.82 (Confidence:High)

jquery-3.7.1.jar

Description:

WebJar for jQuery

License:

MIT License: https://github.com/jquery/jquery/blob/master/MIT-LICENSE.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar
MD5: bc444e0ba9afc1f621d54e6b687a5f9a
SHA1: 42088e652462c40a369b64d87e18e825644acfab
SHA256:262016dd3a559df87aefbe392804e9bf620787c9204c0ab8522d4c231ea65097
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime
pkg:maven/org.testng/testng@7.10.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jquery	High
Vendor	Manifest	build-jdk-spec	19	Low
Vendor	pom	artifactid	jquery	Highest
Vendor	pom	artifactid	jquery	Low
Vendor	pom	developer email	james@jamesward.org	Low
Vendor	pom	developer id	jamesward	Medium
Vendor	pom	developer name	James Ward	Medium
Vendor	pom	groupid	org.webjars	Highest
Vendor	pom	name	jquery	High
Vendor	pom	url	http://webjars.org	Highest
Product	file	name	jquery	High
Product	Manifest	build-jdk-spec	19	Low
Product	pom	artifactid	jquery	Highest
Product	pom	developer email	james@jamesward.org	Low
Product	pom	developer id	jamesward	Low
Product	pom	developer name	James Ward	Low
Product	pom	groupid	org.webjars	Highest
Product	pom	name	jquery	High
Product	pom	url	http://webjars.org	Medium
Version	file	version	3.7.1	High
Version	pom	version	3.7.1	Highest

Identifiers

pkg:maven/org.webjars/jquery@3.7.1 (Confidence:High)

jquery-3.7.1.jar: jquery.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar/META-INF/resources/webjars/jquery/3.7.1/jquery.js
MD5: 12e87d2f3a4c8b347ab13a0764d420a3
SHA1: 4be715e11048c057fdf2ee0fbbfad4dbf3504c55
SHA256:78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime

Evidence

Identifiers

None

jquery-3.7.1.jar: jquery.min.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar/META-INF/resources/webjars/jquery/3.7.1/jquery.min.js
MD5: 2c872dbe60f4ba70fb85356113d8b35e
SHA1: ee48592d1fff952fcf06ce0b666ed4785493afdc
SHA256:fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime

Evidence

Identifiers

None

jquery-3.7.1.jar: jquery.slim.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar/META-INF/resources/webjars/jquery/3.7.1/jquery.slim.js
MD5: d5e71829ecdc0456818e3b93f57b14a0
SHA1: e502aa0259449fc0f077ac15815a1eb81737dd85
SHA256:520bef37cbc19203b496e3d2525dacf13225392611a061405f88e50889bd01d7
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime

Evidence

Identifiers

None

jquery-3.7.1.jar: jquery.slim.min.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar/META-INF/resources/webjars/jquery/3.7.1/jquery.slim.min.js
MD5: af73dd50819a5fc22dff8b0ed2229d6c
SHA1: 8b1d5dbd114b9c92f4a20139e1aca3196d94814b
SHA256:9261efb3407e3a9096e4654750d8eff6b3a663422f48845c7fbcc65034c340cf
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime

Evidence

Identifiers

None

jquery-3.7.1.jar: webjars-requirejs.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/webjars/jquery/3.7.1/jquery-3.7.1.jar/META-INF/resources/webjars/jquery/3.7.1/webjars-requirejs.js
MD5: 30e1a7f167b667001f50e32ea87bf7b5
SHA1: d18dc733350ad3549af2df096599e824c10f777e
SHA256:daca7b23bc4d8302a8961373b92b78d36d5c85d730fc14130e29d55d976aa420
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime

Evidence

Identifiers

None

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings (modules):compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: MessageBus:compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Utilities:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

jul-to-slf4j-2.0.16.jar

Description:

JUL to SLF4J bridge

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/2.0.16/jul-to-slf4j-2.0.16.jar
MD5: 410ad2f2230e0150216d86e12a4af995
SHA1: 6d57da3e961daac65bcca0dd3def6cd11e48a24a
SHA256:0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jul-to-slf4j	High
Vendor	jar	package name	bridge	Highest
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	jul-to-slf4j	Highest
Vendor	pom	artifactid	jul-to-slf4j	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	JUL to SLF4J bridge	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	jul-to-slf4j	High
Product	jar	package name	bridge	Highest
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	JUL to SLF4J bridge	Medium
Product	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	Manifest	Implementation-Title	jul-to-slf4j	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	jul-to-slf4j	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	JUL to SLF4J bridge	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/jul-to-slf4j@2.0.16 (Confidence:High)

log4j-api-2.17.2.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/apache/logging/log4j/log4j-api/2.17.2/log4j-api-2.17.2.jar
MD5: 0c39d90e7819c92c111e447bdf786a90
SHA1: f42d6afa111b4dec5d2aea0fe2197240749a4ea6
SHA256:09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	log4j-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	log4j	Highest
Vendor	jar	package name	logging	Highest
Vendor	jar	package name	org	Highest
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	Manifest	log4jsigningusername	rgoers@apache.org	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	log4j-api	Highest
Vendor	pom	artifactid	log4j-api	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	pom	name	Apache Log4j API	High
Vendor	pom	parent-artifactid	log4j	Low
Product	file	name	log4j-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	log4j	Highest
Product	jar	package name	logging	Highest
Product	jar	package name	org	Highest
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	Manifest	Implementation-Title	Apache Log4j API	High
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	Manifest	log4jsigningusername	rgoers@apache.org	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	pom	artifactid	log4j-api	Highest
Product	pom	groupid	org.apache.logging.log4j	Highest
Product	pom	name	Apache Log4j API	High
Product	pom	parent-artifactid	log4j	Medium
Version	file	version	2.17.2	High
Version	Manifest	Bundle-Version	2.17.2	High
Version	Manifest	Implementation-Version	2.17.2	High
Version	Manifest	log4jreleaseversion	2.17.2	Medium
Version	pom	version	2.17.2	Highest

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2 (Confidence:High)
cpe:2.3:a:apache:log4j:2.17.2:*:*:*:*:*:*:* (Confidence:Highest)

log4j-to-slf4j-2.17.2.jar

Description:

The Apache Log4j binding between Log4j 2 API and SLF4J.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/apache/logging/log4j/log4j-to-slf4j/2.17.2/log4j-to-slf4j-2.17.2.jar
MD5: 14b27a4266c6d71c949cb4591ee463cc
SHA1: 17dd0fae2747d9a28c67bc9534108823d2376b46
SHA256:9bcfa5273527b950d79739d11e8f8080cfc881908fa2a946b4e891c0293094de
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	log4j-to-slf4j	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	logging	Highest
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	automatic-module-name	org.apache.logging.slf4j	Medium
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.to-slf4j	Medium
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-to-slf4j/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	Manifest	log4jsigningusername	rgoers@apache.org	Medium
Vendor	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	log4j-to-slf4j	Highest
Vendor	pom	artifactid	log4j-to-slf4j	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	pom	name	Apache Log4j to SLF4J Adapter	High
Vendor	pom	parent-artifactid	log4j	Low
Product	file	name	log4j-to-slf4j	High
Product	jar	package name	apache	Highest
Product	jar	package name	logging	Highest
Product	jar	package name	slf4j	Highest
Product	Manifest	automatic-module-name	org.apache.logging.slf4j	Medium
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	Bundle-Name	Apache Log4j to SLF4J Adapter	Medium
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.to-slf4j	Medium
Product	Manifest	Implementation-Title	Apache Log4j to SLF4J Adapter	High
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-to-slf4j/	Low
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	Manifest	log4jsigningusername	rgoers@apache.org	Medium
Product	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider"	Low
Product	Manifest	specification-title	Apache Log4j to SLF4J Adapter	Medium
Product	pom	artifactid	log4j-to-slf4j	Highest
Product	pom	groupid	org.apache.logging.log4j	Highest
Product	pom	name	Apache Log4j to SLF4J Adapter	High
Product	pom	parent-artifactid	log4j	Medium
Version	file	version	2.17.2	High
Version	Manifest	Bundle-Version	2.17.2	High
Version	Manifest	Implementation-Version	2.17.2	High
Version	Manifest	log4jreleaseversion	2.17.2	Medium
Version	pom	version	2.17.2	Highest

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2 (Confidence:High)

logback-core-1.5.12.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.5.12/logback-core-1.5.12.jar
MD5: e381425e2c7eb1b0b0f3fa93f6c67355
SHA1: 65b1fa25fe8d8e4bdc140e79eb67ac6741f775e2
SHA256:3f35b41621c2cbf72a9d9f3ce2270ba2040e4808bd6befdd720866e926d3e84a
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:runtime
TheseFoolishThings :: Examples :: DCI :: Swing:runtime
TheseFoolishThings :: Examples :: Data:runtime
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:runtime
TheseFoolishThings :: Examples :: DCI :: Displayable:runtime
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:runtime
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:runtime
TheseFoolishThings :: Examples (master):runtime
TheseFoolishThings :: Examples :: Finder :: Extended Finder:runtime

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/thesefoolishthings-examples@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	jar	package name	ch	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	logback	Highest
Vendor	jar	package name	qos	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	Manifest	Implementation-Vendor	QOS.ch	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.8	Low
Vendor	Manifest	specification-vendor	QOS.ch	Low
Vendor	pom	artifactid	logback-core	Highest
Vendor	pom	artifactid	logback-core	Low
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	pom	name	Logback Core Module	High
Vendor	pom	parent-artifactid	logback-parent	Low
Product	file	name	logback-core	High
Product	jar	package name	21	Highest
Product	jar	package name	ch	Highest
Product	jar	package name	core	Highest
Product	jar	package name	logback	Highest
Product	jar	package name	qos	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	Implementation-Title	Logback Core Module	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.8	Low
Product	Manifest	specification-title	Logback Core Module	Medium
Product	pom	artifactid	logback-core	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	name	Logback Core Module	High
Product	pom	parent-artifactid	logback-parent	Medium
Version	file	version	1.5.12	High
Version	Manifest	Bundle-Version	1.5.12	High
Version	Manifest	Implementation-Version	1.5.12	High
Version	pom	version	1.5.12	Highest

Related Dependencies

Identifiers

pkg:maven/ch.qos.logback/logback-core@1.5.12 (Confidence:High)
cpe:2.3:a:qos:logback:1.5.12:*:*:*:*:*:*:* (Confidence:Highest)

lombok-1.18.36.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar
MD5: 92c08153ae16c161c8cc2cc8185d2724
SHA1: 5a30490a6e14977d97d9c73c924c1f1b5311ea95
SHA256:73b6b05b6a2d365b700bab08d30f94de9d336490bc0acce5b6181fef48cbf18e
Referenced In Projects/Scopes:

TheseFoolishThings :: Roles:provided
TheseFoolishThings :: MessageBus:provided
TheseFoolishThings :: Examples :: DCI :: Swing:provided
TheseFoolishThings :: Test Utilities:provided
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:provided
TheseFoolishThings :: MessageBus :: Spring:provided
TheseFoolishThings :: Examples :: Finder :: Extended Finder:provided
TheseFoolishThings :: Roles :: Spring:provided
TheseFoolishThings :: Examples (master):provided
TheseFoolishThings :: Examples :: Data:provided
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:provided
TheseFoolishThings :: Examples :: Finder :: JPA Finder:provided
TheseFoolishThings (modules):provided
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:provided
TheseFoolishThings :: Utilities:provided
TheseFoolishThings :: Examples :: DCI :: Displayable:provided
TheseFoolishThings :: Actors:provided

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/thesefoolishthings-examples@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/modules@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.36	High
Version	Manifest	lombok-version	1.18.36	Medium
Version	pom	version	1.18.36	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.36 (Confidence:High)

lombok-1.18.36.jar: mavenEcjBootstrapAgent.jar

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 27467519bf9615b24cad3b003c4353a9
SHA1: 37d92e0a726a67883ab94bee27c6f292e6318dcd
SHA256:9566d0706d6245cac3cdd9db6d1d81551aa3e727febcf64452c6db9701c40037
Referenced In Projects/Scopes:

TheseFoolishThings :: Roles:provided
TheseFoolishThings :: MessageBus:provided
TheseFoolishThings :: Examples :: DCI :: Swing:provided
TheseFoolishThings :: Test Utilities:provided
TheseFoolishThings :: Examples :: DCI :: Marshal XStream:provided
TheseFoolishThings :: MessageBus :: Spring:provided
TheseFoolishThings :: Examples :: Finder :: Extended Finder:provided
TheseFoolishThings :: Roles :: Spring:provided
TheseFoolishThings :: Examples (master):provided
TheseFoolishThings :: Examples :: Data:provided
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:provided
TheseFoolishThings :: Examples :: Finder :: JPA Finder:provided
TheseFoolishThings (modules):provided
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:provided
TheseFoolishThings :: Utilities:provided
TheseFoolishThings :: Examples :: DCI :: Displayable:provided
TheseFoolishThings :: Actors:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

mockito-core-5.13.0.jar

Description:

Mockito mock objects library core API and implementation

License:

MIT: https://opensource.org/licenses/MIT

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/mockito/mockito-core/5.13.0/mockito-core-5.13.0.jar
MD5: c864b3580f411640982bbf7700f57889
SHA1: bb2ba38657ce6fa72a13d96009d0b3bb9d7ddc1e
SHA256:f8a6dad9511fbc809c493b1840414e42172335e414bdbabe643dd2d53dae9a7e
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mockito-core	High
Vendor	jar	package name	and	Highest
Vendor	jar	package name	api	Highest
Vendor	jar	package name	mockito	Highest
Vendor	Manifest	automatic-module-name	org.mockito	Medium
Vendor	Manifest	bundle-symbolicname	org.mockito.mockito-core	Medium
Vendor	pom	artifactid	mockito-core	Highest
Vendor	pom	artifactid	mockito-core	Low
Vendor	pom	developer id	bric3	Medium
Vendor	pom	developer id	mockitoguy	Medium
Vendor	pom	developer id	raphw	Medium
Vendor	pom	developer id	TimvdLippe	Medium
Vendor	pom	developer name	Brice Dutheil	Medium
Vendor	pom	developer name	Rafael Winterhalter	Medium
Vendor	pom	developer name	Szczepan Faber	Medium
Vendor	pom	developer name	Tim van der Lippe	Medium
Vendor	pom	groupid	org.mockito	Highest
Vendor	pom	name	mockito-core	High
Vendor	pom	url	mockito/mockito	Highest
Product	file	name	mockito-core	High
Product	jar	package name	and	Highest
Product	jar	package name	api	Highest
Product	jar	package name	mockito	Highest
Product	Manifest	automatic-module-name	org.mockito	Medium
Product	Manifest	Bundle-Name	Mockito Mock Library for Java. Core bundle requires Byte Buddy and Objenesis.	Medium
Product	Manifest	bundle-symbolicname	org.mockito.mockito-core	Medium
Product	pom	artifactid	mockito-core	Highest
Product	pom	developer id	bric3	Low
Product	pom	developer id	mockitoguy	Low
Product	pom	developer id	raphw	Low
Product	pom	developer id	TimvdLippe	Low
Product	pom	developer name	Brice Dutheil	Low
Product	pom	developer name	Rafael Winterhalter	Low
Product	pom	developer name	Szczepan Faber	Low
Product	pom	developer name	Tim van der Lippe	Low
Product	pom	groupid	org.mockito	Highest
Product	pom	name	mockito-core	High
Product	pom	url	mockito/mockito	High
Version	file	version	5.13.0	High
Version	Manifest	Bundle-Version	5.13.0	High
Version	pom	version	5.13.0	Highest

Identifiers

pkg:maven/org.mockito/mockito-core@5.13.0 (Confidence:High)

mxparser-1.2.2.jar

Description:

    MXParser is a fork of xpp3_min 1.1.7 containing only the parser with merged changes of the Plexus fork.

License:

Indiana University Extreme! Lab Software License: https://raw.githubusercontent.com/x-stream/mxparser/master/LICENSE.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/x-stream/mxparser/1.2.2/mxparser-1.2.2.jar
MD5: 9d7e42409dfdcee9bd17903015bdeae2
SHA1: 476fb3b3bb3716cad797cd054ce45f89445794e9
SHA256:aeeee23a3303d811bca8790ea7f25b534314861c03cff36dafdcc2180969eb97
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/com.thoughtworks.xstream/xstream@1.4.21
pkg:maven/com.thoughtworks.xstream/xstream@1.4.21

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mxparser	High
Vendor	jar	package name	github	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	mxparser	Highest
Vendor	jar	package name	xstream	Highest
Vendor	Manifest	automatic-module-name	io.github.xstream.mxparser	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	mxparser	Medium
Vendor	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Vendor	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Vendor	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Vendor	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Vendor	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.202	Low
Vendor	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Vendor	Manifest	x-build-os	Linux	Low
Vendor	Manifest	x-build-time	2021-08-18T22:35:34Z	Low
Vendor	Manifest	x-builder	Maven 3.8.1	Low
Vendor	Manifest	x-compile-source	1.4	Low
Vendor	Manifest	x-compile-target	1.4	Low
Vendor	pom	artifactid	mxparser	Highest
Vendor	pom	artifactid	mxparser	Low
Vendor	pom	developer id	mxparser	Medium
Vendor	pom	developer name	XStream Committers	Medium
Vendor	pom	groupid	io.github.x-stream	Highest
Vendor	pom	name	MXParser	High
Vendor	pom	url	http://x-stream.github.io/mxparser	Highest
Product	file	name	mxparser	High
Product	jar	package name	github	Highest
Product	jar	package name	io	Highest
Product	jar	package name	mxparser	Highest
Product	jar	package name	xstream	Highest
Product	Manifest	automatic-module-name	io.github.xstream.mxparser	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	MXParser	Medium
Product	Manifest	bundle-symbolicname	mxparser	Medium
Product	Manifest	Implementation-Title	MXParser	High
Product	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Product	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Product	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Product	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Product	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.202	Low
Product	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Product	Manifest	specification-title	MXParser	Medium
Product	Manifest	x-build-os	Linux	Low
Product	Manifest	x-build-time	2021-08-18T22:35:34Z	Low
Product	Manifest	x-builder	Maven 3.8.1	Low
Product	Manifest	x-compile-source	1.4	Low
Product	Manifest	x-compile-target	1.4	Low
Product	pom	artifactid	mxparser	Highest
Product	pom	developer id	mxparser	Low
Product	pom	developer name	XStream Committers	Low
Product	pom	groupid	io.github.x-stream	Highest
Product	pom	name	MXParser	High
Product	pom	url	http://x-stream.github.io/mxparser	Medium
Version	file	version	1.2.2	High
Version	Manifest	Bundle-Version	1.2.2	High
Version	Manifest	Implementation-Version	1.2.2	High
Version	pom	version	1.2.2	Highest

Identifiers

pkg:maven/io.github.x-stream/mxparser@1.2.2 (Confidence:High)

objenesis-3.3.jar

Description:

A library for instantiating Java objects

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/objenesis/objenesis/3.3/objenesis-3.3.jar
MD5: ab0e0b2ab81affdd7f38bcc60fd85571
SHA1: 1049c09f1de4331e8193e579448d0916d75b7631
SHA256:02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:runtime
pkg:maven/org.mockito/mockito-core@5.13.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	objenesis	High
Vendor	jar	package name	objenesis	Highest
Vendor	Manifest	automatic-module-name	org.objenesis	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	org.objenesis	Medium
Vendor	Manifest	Implementation-Vendor	Joe Walnes, Henri Tremblay, Leonardo Mesquita	High
Vendor	Manifest	specification-vendor	Joe Walnes, Henri Tremblay, Leonardo Mesquita	Low
Vendor	pom	artifactid	objenesis	Highest
Vendor	pom	artifactid	objenesis	Low
Vendor	pom	groupid	org.objenesis	Highest
Vendor	pom	name	Objenesis	High
Vendor	pom	parent-artifactid	objenesis-parent	Low
Product	file	name	objenesis	High
Product	jar	package name	objenesis	Highest
Product	Manifest	automatic-module-name	org.objenesis	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Objenesis	Medium
Product	Manifest	bundle-symbolicname	org.objenesis	Medium
Product	Manifest	Implementation-Title	Objenesis	High
Product	Manifest	specification-title	Objenesis	Medium
Product	pom	artifactid	objenesis	Highest
Product	pom	groupid	org.objenesis	Highest
Product	pom	name	Objenesis	High
Product	pom	parent-artifactid	objenesis-parent	Medium
Version	file	version	3.3	High
Version	Manifest	Implementation-Version	3.3	High
Version	pom	version	3.3	Highest

Identifiers

pkg:maven/org.objenesis/objenesis@3.3 (Confidence:High)

slf4j-api-2.0.16.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: MessageBus:compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Utilities:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/ch.qos.logback/logback-classic@1.5.12
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

snakeyaml-1.30.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/yaml/snakeyaml/1.30/snakeyaml-1.30.jar
MD5: ba063b8ef3a8bfd591a1b56451166b14
SHA1: 8fde7fe2586328ac3c68db92045e1c8759125000
SHA256:f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	snakeyaml	High
Vendor	jar	package name	emitter	Highest
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	snakeyaml	Highest
Vendor	jar	package name	yaml	Highest
Vendor	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	pom	artifactid	snakeyaml	Highest
Vendor	pom	artifactid	snakeyaml	Low
Vendor	pom	developer email	alexander.maslov@gmail.com	Low
Vendor	pom	developer email	jordanangold@gmail.com	Low
Vendor	pom	developer email	public.somov@gmail.com	Low
Vendor	pom	developer id	asomov	Medium
Vendor	pom	developer id	Jordan	Medium
Vendor	pom	developer id	maslovalex	Medium
Vendor	pom	developer name	Alexander Maslov	Medium
Vendor	pom	developer name	Andrey Somov	Medium
Vendor	pom	developer name	Jordan Angold	Medium
Vendor	pom	groupid	org.yaml	Highest
Vendor	pom	name	SnakeYAML	High
Vendor	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Highest
Product	file	name	snakeyaml	High
Product	jar	package name	emitter	Highest
Product	jar	package name	parser	Highest
Product	jar	package name	snakeyaml	Highest
Product	jar	package name	yaml	Highest
Product	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	pom	artifactid	snakeyaml	Highest
Product	pom	developer email	alexander.maslov@gmail.com	Low
Product	pom	developer email	jordanangold@gmail.com	Low
Product	pom	developer email	public.somov@gmail.com	Low
Product	pom	developer id	asomov	Low
Product	pom	developer id	Jordan	Low
Product	pom	developer id	maslovalex	Low
Product	pom	developer name	Alexander Maslov	Low
Product	pom	developer name	Andrey Somov	Low
Product	pom	developer name	Jordan Angold	Low
Product	pom	groupid	org.yaml	Highest
Product	pom	name	SnakeYAML	High
Product	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Medium
Version	file	version	1.30	High
Version	pom	version	1.30	Highest

Identifiers

pkg:maven/org.yaml/snakeyaml@1.30 (Confidence:High)
cpe:2.3:a:snakeyaml_project:snakeyaml:1.30:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2022-1471

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

CWE-502 Deserialization of Untrusted Data, CWE-20 Improper Input Validation

CVSSv3:

Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-1471] CWE-20: Improper Input Validation
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-1471
OSSIndex - https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,THIRD_PARTY_ADVISORY
cve-coordination@google.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 2.0

CVE-2022-25857

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-25857] CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-25857
OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/525
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
report@snyk.io - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY
report@snyk.io - EXPLOIT,PATCH,THIRD_PARTY_ADVISORY
report@snyk.io - MAILING_LIST,THIRD_PARTY_ADVISORY
report@snyk.io - PATCH,THIRD_PARTY_ADVISORY
report@snyk.io - PATCH,THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.31

CVE-2022-38749

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:

Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-38749] CWE-121: Stack-based Buffer Overflow
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-38749
OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/525
OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
cve-coordination@google.com - MAILING_LIST,THIRD_PARTY_ADVISORY
cve-coordination@google.com - THIRD_PARTY_ADVISORY
cve-coordination@google.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.31

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:

Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-38751] CWE-121: Stack-based Buffer Overflow
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-38751
OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039
OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
cve-coordination@google.com - MAILING_LIST,THIRD_PARTY_ADVISORY
cve-coordination@google.com - THIRD_PARTY_ADVISORY
cve-coordination@google.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.31

CVE-2022-38752

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.

CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:

Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-38752] CWE-121: Stack-based Buffer Overflow
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-38752
OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081
OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081
OSSIndex - https://github.com/advisories/GHSA-9w3m-gqgf-c4p9
af854a3a-2127-422b-91ae-364da2661108 - PERMISSIONS_REQUIRED
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
cve-coordination@google.com - PERMISSIONS_REQUIRED
cve-coordination@google.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.32

CVE-2022-41854

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:

Base Score: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-41854] CWE-121: Stack-based Buffer Overflow
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-41854
OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.32

CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:

Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2022-38750] CWE-121: Stack-based Buffer Overflow
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-38750
OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027
OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY
cve-coordination@google.com - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve-coordination@google.com - MAILING_LIST,THIRD_PARTY_ADVISORY

Vulnerable Software & Versions:

cpe:2.3:a:snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:* versions up to (excluding) 1.31

spotbugs-annotations-3.1.9.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/github/spotbugs/spotbugs-annotations/3.1.9/spotbugs-annotations-3.1.9.jar
MD5: 56a1a81d69b6a111161bbce0e6dea26a
SHA1: 2ef5127efcc1a899aab8c66d449a631c9a99c469
SHA256:68c7c46b4299e94837e236ae742f399901a950fe910fe3ca710026753b5dd2e1
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings (modules):compile
TheseFoolishThings :: Roles:compile
TheseFoolishThings :: Actors:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Examples (master):compile
TheseFoolishThings :: MessageBus:compile
TheseFoolishThings :: Test Utilities:compile
TheseFoolishThings :: Examples :: Data:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
TheseFoolishThings :: Examples :: Finder :: In-memory Finder:compile
TheseFoolishThings :: Utilities:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: Examples :: Finder :: Extended Finder:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample3@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-swing@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/thesefoolishthings-examples@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/modules@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample2@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-finderexample1@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-actor@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	3.1.9	High
Version	Manifest	Bundle-Version	3.1.9	High
Version	pom	version	3.1.9	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9 (Confidence:High)

spring-boot-2.7.18.jar

Description:

Spring Boot

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot/2.7.18/spring-boot-2.7.18.jar
MD5: 0941c83c25204150f8bd73ae66c63fd1
SHA1: f6dbdd8da7c2bded63dff9b1f48d01a4923f20a0
SHA256:530f4e0fdfeb3a0e2b3a369d15cdea38fbdc1696f8b030c35a6ad65c27524950
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-boot	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	boot	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.boot	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	spring-boot	Highest
Vendor	pom	artifactid	spring-boot	Low
Vendor	pom	developer email	ask@spring.io	Low
Vendor	pom	developer name	Spring	Medium
Vendor	pom	developer org	VMware, Inc.	Medium
Vendor	pom	developer org URL	https://www.spring.io	Medium
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	pom	name	spring-boot	High
Vendor	pom	organization name	VMware, Inc.	High
Vendor	pom	organization url	https://spring.io	Medium
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Product	file	name	spring-boot	High
Product	jar	package name	boot	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.boot	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Spring Boot	High
Product	pom	artifactid	spring-boot	Highest
Product	pom	developer email	ask@spring.io	Low
Product	pom	developer name	Spring	Low
Product	pom	developer org	VMware, Inc.	Low
Product	pom	developer org URL	https://www.spring.io	Low
Product	pom	groupid	org.springframework.boot	Highest
Product	pom	name	spring-boot	High
Product	pom	organization name	VMware, Inc.	Low
Product	pom	organization url	https://spring.io	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Version	file	version	2.7.18	High
Version	Manifest	Implementation-Version	2.7.18	High
Version	pom	version	2.7.18	Highest

Related Dependencies

spring-boot-autoconfigure-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-autoconfigure/2.7.18/spring-boot-autoconfigure-2.7.18.jar
- MD5: e127e4ed0469cc5442d3c8e5e42e7988
- SHA1: 9cf147c6ca274c75b32556acdcba5a1de081ebcd
- SHA256: 1c4e0aadcb662b6149b536a2cf288003ffefe81a6cc69846e9f14976529a1b08
- pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18
spring-boot-starter-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-starter/2.7.18/spring-boot-starter-2.7.18.jar
- MD5: 03fc89fcd959a332de7cdc22e6bdc60d
- SHA1: e56b75105f9ace6df154fd47eeeeadc2f5791e56
- SHA256: f67a5d913defa764295b6a0d8d13573624e437eb34e97d88c0e76bf181656071
- pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
spring-boot-starter-aop-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-starter-aop/2.7.18/spring-boot-starter-aop-2.7.18.jar
- MD5: 162f85ee607889f5e4688b71820427ef
- SHA1: 8669fae56877e44bd26e35f641e0233bebe9239c
- SHA256: 7c10e48f2d2ecddafdb5485aedb9193438e418fc544ef8662680c082f69a9c08
- pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.7.18
spring-boot-starter-data-jpa-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-starter-data-jpa/2.7.18/spring-boot-starter-data-jpa-2.7.18.jar
- MD5: f7fd64bec96636a8cca7815130c61733
- SHA1: ffc6aa225da2a9987238ad88ae4550e5ee68da61
- SHA256: 2183eff6cdb42cc03f9057f092a56cf10c2f1d4eb0b9a0d0df9356f588250a74
- pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
spring-boot-starter-jdbc-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-starter-jdbc/2.7.18/spring-boot-starter-jdbc-2.7.18.jar
- MD5: 9ebecc3f273222a5f61f4778b1c6e5e0
- SHA1: 693aef24c422fbaa4ebb85db0f4491772edcd3dc
- SHA256: 962c4bc8d08eeba8e2d1bb784925fc3c7e923a406e50731a0e5873eaa1b923d1
- pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.18
spring-boot-starter-logging-2.7.18.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot-starter-logging/2.7.18/spring-boot-starter-logging-2.7.18.jar
- MD5: b812106a59ea242570f1c55d71982495
- SHA1: 19f7c255ba5255116f58c3bbaf52c7b88ea6af3e
- SHA256: 202c0894dbfdeff7be005597ff98288133a62fe7f5593be4938400482d19dcb7
- pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18

Identifiers

pkg:maven/org.springframework.boot/spring-boot@2.7.18 (Confidence:High)
cpe:2.3:a:vmware:spring_boot:2.7.18:*:*:*:*:*:*:* (Confidence:Highest)

spring-core-5.3.31.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.31/spring-core-5.3.31.jar
MD5: a9ef5a29eaa89fe909a0c4ed870d90a1
SHA1: 368e76f732a3c331b970f69cafec1525d27b34d3
SHA256:7013ed3da15a8d4be797f5c310f9aa1b196b97f2313bc41e60ef3f5627224fe9
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework/spring-beans@5.3.31
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework/spring-beans@5.3.31
pkg:maven/org.springframework/spring-beans@5.3.31

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	pom	artifactid	spring-core	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Core	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-core	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.core	Medium
Product	Manifest	Implementation-Title	spring-core	High
Product	pom	artifactid	spring-core	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Core	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	5.3.31	High
Version	Manifest	Implementation-Version	5.3.31	High
Version	pom	version	5.3.31	Highest

Related Dependencies

spring-aop-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aop/5.3.31/spring-aop-5.3.31.jar
- MD5: 48143a3242d23f66736e34cf1b5ad632
- SHA1: 3be929dbdb5f4516919ad09a3d3720d779bb65d9
- SHA256: 3f0c666f317abaa845fc3a24fba219b1f469716bf309cccd755eecb8fee20430
- pkg:maven/org.springframework/spring-aop@5.3.31
spring-aspects-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aspects/5.3.31/spring-aspects-5.3.31.jar
- MD5: 3ca7eb547165c058023242fa87ae54a4
- SHA1: 9bd8e781e08e1b02a78e867913b96bccd2bc5798
- SHA256: c427cce1bcd660d63183db5e2d204dcf05b9f56508a388b4c722702ccbc29581
- pkg:maven/org.springframework/spring-aspects@5.3.31
spring-beans-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-beans/5.3.31/spring-beans-5.3.31.jar
- MD5: b5fe5c018f96edf76b7e92b34668fa44
- SHA1: d27258849071b3b268ecc388eca35bbfcc586448
- SHA256: a8d6d99003d0a28049cba4273afbcfc64e1107ee3c33f67935853e9711544aa7
- pkg:maven/org.springframework/spring-beans@5.3.31
spring-context-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-context/5.3.31/spring-context-5.3.31.jar
- MD5: 6aa19e7e6a87b4ac8b649057315b1dd1
- SHA1: a2d6e76507f037ad835e8c2288dfedf28981999f
- SHA256: 38def055d1e22b5514b1cb19cef4474e5c1b0d2127c483e7d014bde87c4a4cf3
- pkg:maven/org.springframework/spring-context@5.3.31
spring-jcl-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-jcl/5.3.31/spring-jcl-5.3.31.jar
- MD5: 4d281617e07553792218e37c47b8bd8c
- SHA1: e7ab9ee590a195415dd6b898440d776b4c8db78c
- SHA256: eee0df6a25a9c56d228ea86272546aa5a0656caf2f14e7b375417b066abbc0db
- pkg:maven/org.springframework/spring-jcl@5.3.31
spring-jdbc-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-jdbc/5.3.31/spring-jdbc-5.3.31.jar
- MD5: a2481383358181809fcc8384cd9ec657
- SHA1: 9124850a2e396a33e5dbd5d1e891e105dac48633
- SHA256: 3cc06d5a00adff04a289d93bd5c4b7a2937eebab567e88af6ac1f0aeb5ef032c
- pkg:maven/org.springframework/spring-jdbc@5.3.31
spring-orm-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-orm/5.3.31/spring-orm-5.3.31.jar
- MD5: de7c7b9c77585239ed427b82e57cbf99
- SHA1: cb9b7ac171e680e3eaa2fb69e90a8595f8aa201b
- SHA256: 9d1941fc657ea2e8d9b01bf7408d434757ebc86d45e23ea4ad538a72b0fcbd0d
- pkg:maven/org.springframework/spring-orm@5.3.31
spring-tx-5.3.31.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-tx/5.3.31/spring-tx-5.3.31.jar
- MD5: 69f5a36a0e70489b2c0102862cdc13d9
- SHA1: 143e79385354fc7ffd9773a31ba989931ad9e920
- SHA256: 8e7835cf87a57ba93360d9badc45ae0a8bcbe0bc9e04a17433cbc8d00a9cf43c
- pkg:maven/org.springframework/spring-tx@5.3.31

Identifiers

pkg:maven/org.springframework/spring-core@5.3.31 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity

CVSSv3:

Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

References:

security@vmware.com - VENDOR_ADVISORY

Vulnerable Software & Versions: (show all)

spring-core-5.3.37.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.37/spring-core-5.3.37.jar
MD5: fbc5c33d34c54949e9f8cb07acf70e16
SHA1: a6664808571dcb93b2949c20c8af923a51946b1b
SHA256:fa368ec048ab821774c5259498462a53eb7c860c3ce876e427e1b18999efb4b8
Referenced In Projects/Scopes:

TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Test Utilities:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-messagebus-spring@3.2-ALPHA-24
pkg:maven/org.springframework/spring-context@5.3.37
pkg:maven/org.springframework/spring-beans@5.3.37

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	pom	artifactid	spring-core	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Core	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-core	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.core	Medium
Product	Manifest	Implementation-Title	spring-core	High
Product	pom	artifactid	spring-core	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Core	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	5.3.37	High
Version	Manifest	Implementation-Version	5.3.37	High
Version	pom	version	5.3.37	Highest

Related Dependencies

spring-aop-5.3.37.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aop/5.3.37/spring-aop-5.3.37.jar
- MD5: 20fde6f4b68cd04b8e8e938d5720968c
- SHA1: ab1d2ff858cd736e4671a5ea09f022bc3c96c06f
- SHA256: 48049480b96435a409e7bceda9b650ecbe58093a7d8e9cbcfe7f5b877a522c68
- pkg:maven/org.springframework/spring-aop@5.3.37
spring-aspects-5.3.37.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aspects/5.3.37/spring-aspects-5.3.37.jar
- MD5: 8e0f4b9da2aa04e836d9788e69331b8c
- SHA1: 8d6f269d6bfd5a8db90b34ab2c86a8e199423ba8
- SHA256: 25a4a9b7264d6ca82707eb2178afd24a5e2d1333b0c1d6c631a20b89b38fca7d
- pkg:maven/org.springframework/spring-aspects@5.3.37
spring-beans-5.3.37.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-beans/5.3.37/spring-beans-5.3.37.jar
- MD5: 4fb485d952d8c81af2110a73610dca09
- SHA1: baf443fbb94f9c0b8e3ab845c91898f1f8942741
- SHA256: 96df4350a77692095490b8eeb2e8d5df4c121d38e6a68f9e75e2aeefc9bf4b60
- pkg:maven/org.springframework/spring-beans@5.3.37
spring-context-5.3.37.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-context/5.3.37/spring-context-5.3.37.jar
- MD5: 0074542d9cedfedeb1c3f257fa130236
- SHA1: f0a6d6f9f3ecfff0eec8d6abccace14c5db97867
- SHA256: cb804389aac212f898f349dc066b5cdc35fd2fa27bc5278fa4e98debd9d97d94
- pkg:maven/org.springframework/spring-context@5.3.37
spring-jcl-5.3.37.jar
- File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-jcl/5.3.37/spring-jcl-5.3.37.jar
- MD5: 2a3f45b81c3f0d5ebbc4ae7ef99052c2
- SHA1: 34c730fcd794a9dd59e8a9bb1b2e019d52822584
- SHA256: 32e6f7d7e810e2582b39427f30f5b221954c8c37ddc25cd5e8497e544f9da918
- pkg:maven/org.springframework/spring-jcl@5.3.37

Identifiers

pkg:maven/org.springframework/spring-core@5.3.37 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity

CVSSv3:

Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

References:

security@vmware.com - VENDOR_ADVISORY

Vulnerable Software & Versions: (show all)

spring-data-commons-2.7.18.jar

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/data/spring-data-commons/2.7.18/spring-data-commons-2.7.18.jar
MD5: 92abbc5fc0193ed932a1ab973a249c8a
SHA1: e7cc3f9746e9439f3e33355b4d4ef262e5b136d1
SHA256:896e203a870b77a5a58f6c642fb9ba1cac858e013637ce3f9bffa9420e1f7f56
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
spring-data-commons-2.7.18.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-data-commons	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	data	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.data.commons	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	spring-data-commons	Highest
Vendor	pom	artifactid	spring-data-commons	Low
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	pom	name	Spring Data Core	High
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Product	file	name	spring-data-commons	High
Product	jar	package name	core	Highest
Product	jar	package name	data	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.data.commons	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Spring Data Core	High
Product	pom	artifactid	spring-data-commons	Highest
Product	pom	groupid	org.springframework.data	Highest
Product	pom	name	Spring Data Core	High
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	pom	parent-groupid	org.springframework.data.build	Medium
Version	file	version	2.7.18	High
Version	Manifest	Implementation-Version	2.7.18	High
Version	pom	version	2.7.18	Highest

Identifiers

pkg:maven/org.springframework.data/spring-data-commons@2.7.18 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_data_commons:2.7.18:*:*:*:*:*:*:* (Confidence:Highest)

spring-data-jpa-2.7.18.jar

Description:

Spring Data module for JPA repositories.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/data/spring-data-jpa/2.7.18/spring-data-jpa-2.7.18.jar
MD5: 60c555a859deadcc9383f2af49f9e289
SHA1: ad78adb26ea2e4f11589aa73c7b3eb473a16078c
SHA256:a16bbbf5721d9c35cbb21ef3f079ae2c28fd9cb8d9d6451cacc0fa917e44620d
Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile
spring-data-jpa-2.7.18.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-data-jpa	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	data	Highest
Vendor	jar	package name	jpa	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.data.jpa	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	spring-data-jpa	Highest
Vendor	pom	artifactid	spring-data-jpa	Low
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	pom	name	Spring Data JPA	High
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Vendor	pom	url	https://spring.io/projects/spring-data-jpa	Highest
Product	file	name	spring-data-jpa	High
Product	jar	package name	data	Highest
Product	jar	package name	jpa	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.data.jpa	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Spring Data JPA	High
Product	pom	artifactid	spring-data-jpa	Highest
Product	pom	groupid	org.springframework.data	Highest
Product	pom	name	Spring Data JPA	High
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	pom	parent-groupid	org.springframework.data.build	Medium
Product	pom	url	https://spring.io/projects/spring-data-jpa	Medium
Version	file	version	2.7.18	High
Version	Manifest	Implementation-Version	2.7.18	High
Version	pom	version	2.7.18	Highest

Identifiers

pkg:maven/org.springframework.data/spring-data-jpa@2.7.18 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_data_jpa:2.7.18:*:*:*:*:*:*:* (Confidence:Highest)

spring-expression-5.3.31.jar

Description:

Spring Expression Language (SpEL)

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-expression/5.3.31/spring-expression-5.3.31.jar
MD5: 9e309bb1a738acbd0ac9c9fc58931fd3
SHA1: 55637af1b186d1008890980c2876c5fc83599756
SHA256:e027f122b8a4e3030339068220bed02d1c9d397eb5897f1e33ba2f63b22591ac
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Swing:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework/spring-context@5.3.31
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24
pkg:maven/org.springframework/spring-context@5.3.31
pkg:maven/org.springframework/spring-context@5.3.31

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-expression	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	expression	Highest
Vendor	jar	package name	spel	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.expression	Medium
Vendor	pom	artifactid	spring-expression	Highest
Vendor	pom	artifactid	spring-expression	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Expression Language (SpEL)	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-expression	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	expression	Highest
Product	jar	package name	spel	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.expression	Medium
Product	Manifest	Implementation-Title	spring-expression	High
Product	pom	artifactid	spring-expression	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Expression Language (SpEL)	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	5.3.31	High
Version	Manifest	Implementation-Version	5.3.31	High
Version	pom	version	5.3.31	Highest

Identifiers

pkg:maven/org.springframework/spring-expression@5.3.31 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.31:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2024-38808 (OSSINDEX)

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.

Specifically, an application is vulnerable when the following is true:

  *  The application evaluates user-supplied SpEL expressions.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-38808 for details

CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv2:

Base Score: MEDIUM (5.300000190734863)
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

OSSINDEX - [CVE-2024-38808] CWE-770: Allocation of Resources Without Limits or Throttling
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38808
OSSIndex - https://spring.io/security/cve-2024-38808

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:org.springframework:spring-expression:5.3.31:*:*:*:*:*:*:*

CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity

CVSSv3:

Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

References:

security@vmware.com - VENDOR_ADVISORY

Vulnerable Software & Versions: (show all)

spring-expression-5.3.37.jar

Description:

Spring Expression Language (SpEL)

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-expression/5.3.37/spring-expression-5.3.37.jar
MD5: 4cb4ca755ad6d729b0fff17be4071014
SHA1: df34b75531291e192144bb08ae307540504fef19
SHA256:1b8bc056a122b49a6d80c3c024395bebdfada8353eae31b052da98963dabc00d
Referenced In Projects/Scopes:

TheseFoolishThings :: Roles :: Spring:compile
TheseFoolishThings :: MessageBus :: Spring:compile
TheseFoolishThings :: Test Utilities:compile

pkg:maven/org.springframework/spring-context@5.3.37
pkg:maven/org.springframework/spring-context@5.3.37
pkg:maven/org.springframework/spring-context@5.3.37

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-expression	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	expression	Highest
Vendor	jar	package name	spel	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.expression	Medium
Vendor	pom	artifactid	spring-expression	Highest
Vendor	pom	artifactid	spring-expression	Low
Vendor	pom	developer email	jhoeller@pivotal.io	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Expression Language (SpEL)	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-expression	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	expression	Highest
Product	jar	package name	spel	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.expression	Medium
Product	Manifest	Implementation-Title	spring-expression	High
Product	pom	artifactid	spring-expression	Highest
Product	pom	developer email	jhoeller@pivotal.io	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Expression Language (SpEL)	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	5.3.37	High
Version	Manifest	Implementation-Version	5.3.37	High
Version	pom	version	5.3.37	Highest

Identifiers

pkg:maven/org.springframework/spring-expression@5.3.37 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.37:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2024-38808 (OSSINDEX)

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.

Specifically, an application is vulnerable when the following is true:

  *  The application evaluates user-supplied SpEL expressions.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-38808 for details

CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv2:

Base Score: MEDIUM (5.300000190734863)
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

OSSINDEX - [CVE-2024-38808] CWE-770: Allocation of Resources Without Limits or Throttling
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-38808
OSSIndex - https://spring.io/security/cve-2024-38808

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:org.springframework:spring-expression:5.3.37:*:*:*:*:*:*:*

CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity

CVSSv3:

Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

References:

security@vmware.com - VENDOR_ADVISORY

Vulnerable Software & Versions: (show all)

testng-7.10.2.jar

Description:

Testing framework for Java

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/testng/testng/7.10.2/testng-7.10.2.jar
MD5: 166d606c04bdf9f4f2c0f4cc42ab362e
SHA1: 30742acada21960d4333a4204039fbdc6a92083a
SHA256:225fd56447f2e5e439db3b483a79cd9f294fad9f357f8352b12ee6a3411ebb15
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	testng	High
Vendor	jar	package name	testng	Highest
Vendor	Manifest	automatic-module-name	org.testng	Medium
Vendor	Manifest	bundle-symbolicname	org.testng	Medium
Vendor	Manifest	implementation-url	https://testng.org	Low
Vendor	Manifest	Implementation-Vendor	TestNG	High
Vendor	Manifest	Implementation-Vendor-Id	org.testng	Medium
Vendor	Manifest	specification-vendor	TestNG	Low
Vendor	pom	artifactid	testng	Highest
Vendor	pom	artifactid	testng	Low
Vendor	pom	developer email	cedric@beust.com	Low
Vendor	pom	developer email	julien@herr.fr	Low
Vendor	pom	developer email	krishnan.mahadevan1978@gmail.com	Low
Vendor	pom	developer id	cbeust	Medium
Vendor	pom	developer id	juherr	Medium
Vendor	pom	developer id	krmahadevan	Medium
Vendor	pom	developer name	Cedric Beust	Medium
Vendor	pom	developer name	Julien Herr	Medium
Vendor	pom	developer name	Krishnan Mahadevan	Medium
Vendor	pom	groupid	org.testng	Highest
Vendor	pom	name	testng	High
Vendor	pom	url	https://testng.org	Highest
Product	file	name	testng	High
Product	jar	package name	testng	Highest
Product	Manifest	automatic-module-name	org.testng	Medium
Product	Manifest	Bundle-Name	TestNG	Medium
Product	Manifest	bundle-symbolicname	org.testng	Medium
Product	Manifest	Implementation-Title	TestNG	High
Product	Manifest	implementation-url	https://testng.org	Low
Product	Manifest	specification-title	TestNG	Medium
Product	pom	artifactid	testng	Highest
Product	pom	developer email	cedric@beust.com	Low
Product	pom	developer email	julien@herr.fr	Low
Product	pom	developer email	krishnan.mahadevan1978@gmail.com	Low
Product	pom	developer id	cbeust	Low
Product	pom	developer id	juherr	Low
Product	pom	developer id	krmahadevan	Low
Product	pom	developer name	Cedric Beust	Low
Product	pom	developer name	Julien Herr	Low
Product	pom	developer name	Krishnan Mahadevan	Low
Product	pom	groupid	org.testng	Highest
Product	pom	name	testng	High
Product	pom	url	https://testng.org	Medium
Version	file	version	7.10.2	High
Version	Manifest	Bundle-Version	7.10.2	High
Version	Manifest	Implementation-Version	7.10.2	High
Version	pom	version	7.10.2	Highest

Identifiers

pkg:maven/org.testng/testng@7.10.2 (Confidence:High)
cpe:2.3:a:testng_project:testng:7.10.2:*:*:*:*:*:*:* (Confidence:Highest)

testng-7.10.2.jar: jquery-3.6.0.min.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/testng/testng/7.10.2/testng-7.10.2.jar/org/testng/jquery-3.6.0.min.js
MD5: 8fb8fee4fcc3cc86ff6c724154c49c42
SHA1: b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
SHA256:ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile

Evidence

Identifiers

None

testng-7.10.2.jar: testng-reports.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/testng/testng/7.10.2/testng-7.10.2.jar/org/testng/testng-reports.js
MD5: e18bdeef11d95e4802ca1e74ce8f4813
SHA1: 8e530ffd7c6528b0a47b4405b241181c09ed3534
SHA256:88d2a0988765ed96e51e5b0c5c63d6b9d25169a12d3c49003c2e87d98d0bdee2
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile

Evidence

Identifiers

None

testng-7.10.2.jar: testng-reports2.js

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/testng/testng/7.10.2/testng-7.10.2.jar/org/testng/testng-reports2.js
MD5: b45815e612fdfbeeffd1909e6551c84d
SHA1: 99dc7548ca6d9add4cc8d1022f392ccac385583b
SHA256:0cd0609bd983faf69e9eec6091de6a6e45400292a4f182fb9aa35a12acb7e852
Referenced In Project/Scope: TheseFoolishThings :: Test Utilities:compile

Evidence

Identifiers

None

txw2-2.3.9.jar

Description:

        TXW is a library that allows you to write XML documents.

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/glassfish/jaxb/txw2/2.3.9/txw2-2.3.9.jar
MD5: 5db04c7917b3c0a07862a7e63bfc1581
SHA1: 13a78453a89bf7d268382a520cba4d5435c5adfc
SHA256:973018b87af911ecf6e6d861dd0d6a477e4d8ae6a883ec5d073d3df1330b87f0
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: Finder :: JPA Finder:compile
TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.18
pkg:maven/org.hibernate/hibernate-core@5.6.15.Final

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	txw2	High
Vendor	jar	package name	sun	Highest
Vendor	jar	package name	txw	Highest
Vendor	jar	package name	txw2	Highest
Vendor	jar	package name	xml	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	git-revision	143ffd0	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.eclipse	Medium
Vendor	pom	artifactid	txw2	Highest
Vendor	pom	artifactid	txw2	Low
Vendor	pom	groupid	org.glassfish.jaxb	Highest
Vendor	pom	name	TXW2 Runtime	High
Vendor	pom	parent-artifactid	jaxb-txw-parent	Low
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	pom	url	https://eclipse-ee4j.github.io/jaxb-ri/	Highest
Product	file	name	txw2	High
Product	jar	package name	sun	Highest
Product	jar	package name	txw	Highest
Product	jar	package name	txw2	Highest
Product	jar	package name	xml	Highest
Product	Manifest	git-revision	143ffd0	Low
Product	Manifest	Implementation-Title	Jakarta XML Binding Implementation	High
Product	Manifest	specification-title	Jakarta XML Binding	Medium
Product	pom	artifactid	txw2	Highest
Product	pom	groupid	org.glassfish.jaxb	Highest
Product	pom	name	TXW2 Runtime	High
Product	pom	parent-artifactid	jaxb-txw-parent	Medium
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	pom	url	https://eclipse-ee4j.github.io/jaxb-ri/	Medium
Version	file	version	2.3.9	High
Version	Manifest	build-id	2.3.9	Medium
Version	Manifest	Implementation-Version	2.3.9	High
Version	Manifest	major-version	2.3.9	Medium
Version	pom	version	2.3.9	Highest

Identifiers

pkg:maven/org.glassfish.jaxb/txw2@2.3.9 (Confidence:High)

xmlpull-1.1.3.1.jar

License:

Public Domain: http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/xmlpull/xmlpull/1.1.3.1/xmlpull-1.1.3.1.jar
MD5: cc57dacc720eca721a50e78934b822d2
SHA1: 2b8e230d2ab644e4ecaa94db7cdedbc40c805dfa
SHA256:34e08ee62116071cbb69c0ed70d15a7a5b208d62798c59f2120bb8929324cb63
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/com.thoughtworks.xstream/xstream@1.4.21
pkg:maven/com.thoughtworks.xstream/xstream@1.4.21

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xmlpull	High
Vendor	jar	package name	v1	Low
Vendor	jar	package name	xmlpull	Highest
Vendor	jar	package name	xmlpull	Low
Vendor	pom	artifactid	xmlpull	Highest
Vendor	pom	artifactid	xmlpull	Low
Vendor	pom	groupid	xmlpull	Highest
Vendor	pom	name	XML Pull Parsing API	High
Vendor	pom	url	http://www.xmlpull.org	Highest
Product	file	name	xmlpull	High
Product	jar	package name	v1	Low
Product	jar	package name	xmlpull	Highest
Product	pom	artifactid	xmlpull	Highest
Product	pom	groupid	xmlpull	Highest
Product	pom	name	XML Pull Parsing API	High
Product	pom	url	http://www.xmlpull.org	Medium
Version	file	version	1.1.3.1	High
Version	pom	version	1.1.3.1	Highest

Identifiers

pkg:maven/xmlpull/xmlpull@1.1.3.1 (Confidence:High)

xstream-1.4.21.jar

Description:

XStream is a serialization library from Java objects to XML and back.

License:

BSD-3-Clause

File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/thoughtworks/xstream/xstream/1.4.21/xstream-1.4.21.jar
MD5: 767be88fc6ec4bb96e2906a17aab8e5b
SHA1: 65cb3e7f809b18b9aab43f2338ee5b320f72d7bd
SHA256:f56586f3de59ae2a49430acbc9f27942b8c5cebec9245c869fae7136733333ec
Referenced In Projects/Scopes:

TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile
TheseFoolishThings :: Examples :: DCI :: Displayable:compile

pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-24
pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-displayable@3.2-ALPHA-24

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	xstream	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	thoughtworks	Highest
Vendor	jar	package name	xstream	Highest
Vendor	Manifest	bundle-docurl	http://x-stream.github.io	Low
Vendor	Manifest	bundle-symbolicname	xstream	Medium
Vendor	Manifest	Implementation-Vendor	XStream	High
Vendor	Manifest	Implementation-Vendor-Id	com.thoughtworks.xstream	Medium
Vendor	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Vendor	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Vendor	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Vendor	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Vendor	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.202	Low
Vendor	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Vendor	Manifest	specification-vendor	XStream	Low
Vendor	Manifest	x-build-os	Linux	Low
Vendor	Manifest	x-build-time	2024-11-07T19:13:18Z	Low
Vendor	Manifest	x-builder	Maven 3.9.9	Low
Vendor	Manifest	x-compile-source	1.4	Low
Vendor	Manifest	x-compile-target	1.4	Low
Vendor	pom	artifactid	xstream	Highest
Vendor	pom	artifactid	xstream	Low
Vendor	pom	groupid	com.thoughtworks.xstream	Highest
Vendor	pom	name	XStream Core	High
Vendor	pom	parent-artifactid	xstream-parent	Low
Product	file	name	xstream	High
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	thoughtworks	Highest
Product	jar	package name	xml	Highest
Product	jar	package name	xstream	Highest
Product	Manifest	bundle-docurl	http://x-stream.github.io	Low
Product	Manifest	Bundle-Name	XStream Core	Medium
Product	Manifest	bundle-symbolicname	xstream	Medium
Product	Manifest	Implementation-Title	XStream Core	High
Product	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Product	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Product	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Product	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Product	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.202	Low
Product	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Product	Manifest	specification-title	XStream Core	Medium
Product	Manifest	x-build-os	Linux	Low
Product	Manifest	x-build-time	2024-11-07T19:13:18Z	Low
Product	Manifest	x-builder	Maven 3.9.9	Low
Product	Manifest	x-compile-source	1.4	Low
Product	Manifest	x-compile-target	1.4	Low
Product	pom	artifactid	xstream	Highest
Product	pom	groupid	com.thoughtworks.xstream	Highest
Product	pom	name	XStream Core	High
Product	pom	parent-artifactid	xstream-parent	Medium
Version	file	version	1.4.21	High
Version	Manifest	Bundle-Version	1.4.21	High
Version	Manifest	Implementation-Version	1.4.21	High
Version	pom	version	1.4.21	Highest

Identifiers

pkg:maven/com.thoughtworks.xstream/xstream@1.4.21 (Confidence:High)
cpe:2.3:a:xstream_project:xstream:1.4.21:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: TheseFoolishThings

it.tidalwave.thesefoolishthings:thesefoolishthings:3.2-ALPHA-24

Summary

Dependencies (vulnerable)

HikariCP-4.0.3.jar

Evidence

Identifiers

antlr-2.7.7.jar

Evidence

Identifiers

aspectjrt-1.9.20.1.jar

Evidence

Identifiers

betterbeansbinding-core-1.3.0.jar

Evidence

Identifiers

betterbeansbinding-el-1.3.0.jar

Evidence

Identifiers

betterbeansbinding-swingbinding-1.3.0.jar

Evidence

Identifiers

byte-buddy-1.12.23.jar

Evidence

Identifiers

byte-buddy-1.15.0.jar

Evidence

Identifiers

byte-buddy-agent-1.15.0.jar

Evidence

Identifiers

classmate-1.5.1.jar

Evidence

Identifiers

h2-2.3.232.jar

Evidence

Identifiers

Published Vulnerabilities

h2-2.3.232.jar: data.zip: table.js

Evidence

Identifiers

h2-2.3.232.jar: data.zip: tree.js

Evidence

Identifiers

hibernate-commons-annotations-5.1.2.Final.jar

Evidence

Identifiers

hibernate-core-5.6.15.Final.jar

Evidence

Related Dependencies

Identifiers

istack-commons-runtime-3.0.12.jar

Evidence

Identifiers

it-tidalwave-messagebus-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-role-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-role-spring-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-thesefoolishthings-examples-finderexample1-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-util-3.2-ALPHA-24.jar

Evidence

Identifiers

it-tidalwave-util-test-3.2-ALPHA-24.jar

Evidence

Identifiers

jakarta.activation-1.2.2.jar

Evidence

Identifiers

jakarta.annotation-api-1.3.5.jar

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor