Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 7.1.1
Report Generated On: Wed, 6 Jul 2022 08:07:51 GMT
Dependencies Scanned: 32 (18 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2022-07-06T08:07:17
NVD CVE Modified: 2022-07-06T05:00:01
VersionCheckOn: 2022-06-26T20:05:49

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
checker-qual-3.12.0.jar		pkg:maven/org.checkerframework/checker-qual@3.12.0		48
error_prone_annotations-2.11.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0		23
failureaccess-1.0.1.jar		pkg:maven/com.google.guava/failureaccess@1.0.1		30
guava-31.1-jre.jar	cpe:2.3:a:google:guava:31.1:::::::*	pkg:maven/com.google.guava/guava@31.1-jre	Highest	27
j2objc-annotations-1.3.jar		pkg:maven/com.google.j2objc/j2objc-annotations@1.3		24
jackson-core-2.13.3.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.13.3:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3	Low	51
jackson-databind-2.13.3.jar	cpe:2.3:a:fasterxml:jackson-databind:2.13.3:::::::* cpe:2.3:a:fasterxml:jackson-modules-java8:2.13.3:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3	Highest	45
jackson-dataformat-properties-2.13.3.jar	cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.13.3:::::::*	pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-properties@2.13.3	Highest	41
jackson-dataformat-yaml-2.13.3.jar	cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.13.3:::::::* cpe:2.3:a:yaml_project:yaml:2.13.3:::::::*	pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.3	Highest	43
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar		pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava		13
netty-common-4.1.77.Final.jar (shaded: org.jctools:jctools-core:3.1.0)		pkg:maven/org.jctools/jctools-core@3.1.0		9
netty-transport-4.1.77.Final.jar	cpe:2.3:a:netty:netty:4.1.77:::::::*	pkg:maven/io.netty/netty-transport@4.1.77.Final	Highest	32
slf4j-api-1.7.36.jar		pkg:maven/org.slf4j/slf4j-api@1.7.36		29
snakeyaml-1.30.jar	cpe:2.3:a:snakeyaml_project:snakeyaml:1.30:::::::* cpe:2.3:a:yaml_project:yaml:1.30:::::::*	pkg:maven/org.yaml/snakeyaml@1.30	Highest	46
vertx-core-4.3.1.jar	cpe:2.3:a:eclipse:vert.x:4.3.1:::::::*	pkg:maven/io.vertx/vertx-core@4.3.1	High	36
vertx-web-client-4.3.1.jar		pkg:maven/io.vertx/vertx-web-client@4.3.1		31
vertx-web-common-4.3.1.jar		pkg:maven/io.vertx/vertx-web-common@4.3.1		31

Dependencies

checker-qual-3.12.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.12.0/checker-qual-3.12.0.jar
MD5: ab1ae0e2f2f63601597a5a96fca8a54f
SHA1: d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5
SHA256:ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org	Medium
Version	file	version	3.12.0	High
Version	Manifest	Bundle-Version	3.12.0	High
Version	Manifest	Implementation-Version	3.12.0	High
Version	pom	version	3.12.0	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.12.0 (Confidence:High)

error_prone_annotations-2.11.0.jar

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.11.0/error_prone_annotations-2.11.0.jar
MD5: 656ad66261b7e7ea472ed0ffeea773ea
SHA1: c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69
SHA256:721cb91842b46fa056847d104d5225c8b8e1e8b62263b993051e1e5a0137b7ec
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.11.0	High
Version	pom	version	2.11.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0 (Confidence:High)

failureaccess-1.0.1.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar
MD5: 091883993ef5bfa91da01dcc8fc52236
SHA1: 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA256:a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.1	High
Version	Manifest	Bundle-Version	1.0.1	High
Version	pom	parent-version	1.0.1	Low
Version	pom	version	1.0.1	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.1 (Confidence:High)

guava-31.1-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/guava/31.1-jre/guava-31.1-jre.jar
MD5: e37782d974104aa3b0a7bee9927c8042
SHA1: 60458f877d055d0c9114d9e1a2efb737b4bc282c
SHA256:a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.common	Medium
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	common	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.common	Medium
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	31.1-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@31.1-jre (Confidence:High)
cpe:2.3:a:google:guava:31.1:*:*:*:*:*:*:* (Confidence:Highest)

j2objc-annotations-1.3.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/1.3/j2objc-annotations-1.3.jar
MD5: 5fa4ec4ec0c5aa70af8a7d4922df1931
SHA1: ba035118bc8bac37d7eff77700720999acd9986d
SHA256:21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	google	Highest
Vendor	jar	package name	google	Low
Vendor	jar	package name	j2objc	Highest
Vendor	jar	package name	j2objc	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	jar	package name	j2objc	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	1.3	High
Version	pom	version	1.3	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@1.3 (Confidence:High)

jackson-core-2.13.3.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.13.3/jackson-core-2.13.3.jar
MD5: 9a6679e6a2f7d601a9f212576fda550c
SHA1: a27014716e4421684416e5fa83d896ddb87002da
SHA256:ab119a8ea3cc69472ebc0e870b849bfbbe536ad57d613dc38453ccd592ca6a3d
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-core	High
Vendor	jar	package name	base	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	json	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	Manifest	implementation-build-date	2022-05-14 14:38:40+0000	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-core	Highest
Vendor	pom	artifactid	jackson-core	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	Jackson-core	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Product	file	name	jackson-core	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	base	Highest
Product	jar	package name	core	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	filter	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	json	Highest
Product	jar	package name	version	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	Manifest	implementation-build-date	2022-05-14 14:38:40+0000	Low
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	multi-release	true	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	specification-title	Jackson-core	Medium
Product	pom	artifactid	jackson-core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	Jackson-core	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson-core	High
Version	file	version	2.13.3	High
Version	Manifest	Bundle-Version	2.13.3	High
Version	Manifest	Implementation-Version	2.13.3	High
Version	pom	version	2.13.3	Highest

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.13.3:*:*:*:*:*:*:* (Confidence:Low)

jackson-databind-2.13.3.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.13.3/jackson-databind-2.13.3.jar
MD5: e35e2adf33b2eed8e9f538a911244175
SHA1: 56deb9ea2c93a7a556b3afbedd616d342963464e
SHA256:6444bf08d8cd4629740afc3db1276938f494728deb663ce585c4e91f6b45eb84
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-databind	High
Vendor	jar	package name	databind	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	implementation-build-date	2022-05-14 14:56:14+0000	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-databind	Highest
Vendor	pom	artifactid	jackson-databind	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	jackson-databind	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Product	file	name	jackson-databind	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	databind	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	Manifest	implementation-build-date	2022-05-14 14:56:14+0000	Low
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	multi-release	true	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	artifactid	jackson-databind	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	jackson-databind	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Version	file	version	2.13.3	High
Version	Manifest	Bundle-Version	2.13.3	High
Version	Manifest	Implementation-Version	2.13.3	High
Version	pom	version	2.13.3	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.13.3:*:*:*:*:*:*:* (Confidence:Low)

jackson-dataformat-properties-2.13.3.jar

Description:

Support for reading and writing content of "Java Properties" style
configuration files as if there was implied nesting structure (by default using dots as separators).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-properties/2.13.3/jackson-dataformat-properties-2.13.3.jar
MD5: fc329a568d1ec9855a83b55718c46394
SHA1: 1f2824ed336013669df33e2b5045fce3041f91a4
SHA256:24c61456d9b6b89bdcfa491d2966d53f8e57080df9e95caf34840803b4a00c8a
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-dataformat-properties	High
Vendor	jar	package name	dataformat	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson-dataformats-text	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-properties	Medium
Vendor	Manifest	implementation-build-date	2022-05-14 17:31:00+0000	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.dataformat	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-dataformat-properties	Highest
Vendor	pom	artifactid	jackson-dataformat-properties	Low
Vendor	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Vendor	pom	name	Jackson-dataformat-Properties	High
Vendor	pom	parent-artifactid	jackson-dataformats-text	Low
Vendor	pom	url	http://github.com/FasterXML/jackson-dataformats-text	Highest
Product	file	name	jackson-dataformat-properties	High
Product	jar	package name	dataformat	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson-dataformats-text	Low
Product	Manifest	Bundle-Name	Jackson-dataformat-Properties	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-properties	Medium
Product	Manifest	implementation-build-date	2022-05-14 17:31:00+0000	Low
Product	Manifest	Implementation-Title	Jackson-dataformat-Properties	High
Product	Manifest	multi-release	true	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	Jackson-dataformat-Properties	Medium
Product	pom	artifactid	jackson-dataformat-properties	Highest
Product	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Product	pom	name	Jackson-dataformat-Properties	High
Product	pom	parent-artifactid	jackson-dataformats-text	Medium
Product	pom	url	http://github.com/FasterXML/jackson-dataformats-text	Medium
Version	file	version	2.13.3	High
Version	Manifest	Bundle-Version	2.13.3	High
Version	Manifest	Implementation-Version	2.13.3	High
Version	pom	version	2.13.3	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-properties@2.13.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.13.3:*:*:*:*:*:*:* (Confidence:Highest)

jackson-dataformat-yaml-2.13.3.jar

Description:

Support for reading and writing YAML-encoded data via Jackson abstractions.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.13.3/jackson-dataformat-yaml-2.13.3.jar
MD5: a0efd232421d0be6f209d26a498c00bf
SHA1: 9363ded5441b1fee62d5be0604035690ca759a2a
SHA256:d164dad0b4e25aea7db8f96f4ba356af570ccc1a9c188a0b4cd2dda595231636
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-dataformat-yaml	High
Vendor	jar	package name	dataformat	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	yaml	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Vendor	Manifest	implementation-build-date	2022-05-14 17:31:00+0000	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.dataformat	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-dataformat-yaml	Highest
Vendor	pom	artifactid	jackson-dataformat-yaml	Low
Vendor	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Vendor	pom	name	Jackson-dataformat-YAML	High
Vendor	pom	parent-artifactid	jackson-dataformats-text	Low
Vendor	pom	url	FasterXML/jackson-dataformats-text	Highest
Product	file	name	jackson-dataformat-yaml	High
Product	jar	package name	dataformat	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	yaml	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Product	Manifest	Bundle-Name	Jackson-dataformat-YAML	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Product	Manifest	implementation-build-date	2022-05-14 17:31:00+0000	Low
Product	Manifest	Implementation-Title	Jackson-dataformat-YAML	High
Product	Manifest	multi-release	true	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	Jackson-dataformat-YAML	Medium
Product	pom	artifactid	jackson-dataformat-yaml	Highest
Product	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Product	pom	name	Jackson-dataformat-YAML	High
Product	pom	parent-artifactid	jackson-dataformats-text	Medium
Product	pom	url	FasterXML/jackson-dataformats-text	High
Version	file	version	2.13.3	High
Version	Manifest	Bundle-Version	2.13.3	High
Version	Manifest	Implementation-Version	2.13.3	High
Version	pom	version	2.13.3	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.13.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:yaml_project:yaml:2.13.3:*:*:*:*:*:*:* (Confidence:Highest)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	listenablefuture	High
Vendor	pom	artifactid	listenablefuture	Highest
Vendor	pom	artifactid	listenablefuture	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava ListenableFuture only	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	listenablefuture	High
Product	pom	artifactid	listenablefuture	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava ListenableFuture only	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	pom	parent-version	9999.0-empty-to-avoid-conflict-with-guava	Low
Version	pom	version	9999.0-empty-to-avoid-conflict-with-guava	Highest

Identifiers

pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava (Confidence:High)

netty-common-4.1.77.Final.jar (shaded: org.jctools:jctools-core:3.1.0)

Description:

Java Concurrency Tools Core Library

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/netty/netty-common/4.1.77.Final/netty-common-4.1.77.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 08e7326c64d7fd6ae4ea32e7eb4e5b79
SHA1: 9deceaba814dea198202b04fe0eec0d2dbf69ea9
SHA256:acaf1b4c366f6794a734288a2c003f16af90a9c479cf4d7daade689764e4fb47
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	jctools-core	Low
Vendor	pom	groupid	org.jctools	Highest
Vendor	pom	name	Java Concurrency Tools Core Library	High
Vendor	pom	url	JCTools	Highest
Product	pom	artifactid	jctools-core	Highest
Product	pom	groupid	org.jctools	Highest
Product	pom	name	Java Concurrency Tools Core Library	High
Product	pom	url	JCTools	High
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/org.jctools/jctools-core@3.1.0 (Confidence:High)

netty-transport-4.1.77.Final.jar

Description:

Netty is an asynchronous event-driven network application framework for    rapid development of maintainable high performance protocol servers and    clients.

License:

https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/io/netty/netty-transport/4.1.77.Final/netty-transport-4.1.77.Final.jar
MD5: fbecfcb90b7e178dfd0795d3a4b24b54
SHA1: 2a3373bbd20d520c821f210bd5ee886788512043
SHA256:034cdf7d81feaad9977c3d8b4fc05611952bc9861dfb9085b8962e2c1de582aa
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	netty-transport	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	netty	Highest
Vendor	Manifest	automatic-module-name	io.netty.transport	Medium
Vendor	Manifest	bundle-docurl	https://netty.io/	Low
Vendor	Manifest	bundle-symbolicname	io.netty.transport	Medium
Vendor	Manifest	implementation-url	https://netty.io/netty-transport/	Low
Vendor	Manifest	Implementation-Vendor	The Netty Project	High
Vendor	Manifest	Implementation-Vendor-Id	io.netty	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	artifactid	netty-transport	Highest
Vendor	pom	artifactid	netty-transport	Low
Vendor	pom	groupid	io.netty	Highest
Vendor	pom	name	Netty/Transport	High
Vendor	pom	parent-artifactid	netty-parent	Low
Product	file	name	netty-transport	High
Product	jar	package name	io	Highest
Product	jar	package name	netty	Highest
Product	Manifest	automatic-module-name	io.netty.transport	Medium
Product	Manifest	bundle-docurl	https://netty.io/	Low
Product	Manifest	Bundle-Name	Netty/Transport	Medium
Product	Manifest	bundle-symbolicname	io.netty.transport	Medium
Product	Manifest	Implementation-Title	Netty/Transport	High
Product	Manifest	implementation-url	https://netty.io/netty-transport/	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	artifactid	netty-transport	Highest
Product	pom	groupid	io.netty	Highest
Product	pom	name	Netty/Transport	High
Product	pom	parent-artifactid	netty-parent	Medium
Version	Manifest	Bundle-Version	4.1.77.Final	High
Version	Manifest	Implementation-Version	4.1.77.Final	High
Version	pom	version	4.1.77.Final	Highest

Related Dependencies

netty-buffer-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-buffer/4.1.77.Final/netty-buffer-4.1.77.Final.jar
- MD5: e4d870093f5464a55ec314b909ef9c03
- SHA1: d97571f99e5e739d86824d0df99f35d295276b5f
- SHA256: 41b7ddc4dd124c7e75af33a13a426fda4e1ec87c387cd234971e7df4c0b51c26
- pkg:maven/io.netty/netty-buffer@4.1.77.Final
netty-codec-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec/4.1.77.Final/netty-codec-4.1.77.Final.jar
- MD5: 7df4d0e74385504a639ed8c9ffbf8336
- SHA1: 4efc5f59335301d6ba0d7cd31dd10651119b03c8
- SHA256: 84e4e01dd5b345311e971289b5bc08c0dfd6054a28d16853f0416943c9a3e458
- pkg:maven/io.netty/netty-codec@4.1.77.Final
netty-codec-dns-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-dns/4.1.77.Final/netty-codec-dns-4.1.77.Final.jar
- MD5: 8e0551ab90f9c794dd5f06e75eb8e194
- SHA1: a0a9bc85703efbab626fb8642e08e221b59dc604
- SHA256: fa5ec958f02c2c52c470789afa7e5a5d9b49068dbf51ea87608704ad3fe3ee4d
- pkg:maven/io.netty/netty-codec-dns@4.1.77.Final
netty-codec-http-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-http/4.1.77.Final/netty-codec-http-4.1.77.Final.jar
- MD5: 1a0e4e1e33d2dc29006649da84dac2d2
- SHA1: c5ac5afa9af5b4dc0e8bdbfd686979af77ebdb3c
- SHA256: 96f6726f1f47273415665e8bf18f3b4ae28572fcb8845a7fe6e6d7ffdb8c48d2
- pkg:maven/io.netty/netty-codec-http@4.1.77.Final
netty-codec-http2-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-http2/4.1.77.Final/netty-codec-http2-4.1.77.Final.jar
- MD5: 3f14bfaa4282ad08ccfcf89858d94dad
- SHA1: 9e58eeeacc74f8ad2b2acb240b1f01d2c40159d7
- SHA256: f2c3c1dc919fd694d1c4015143316811ed3c70edc6b0586851190305c2723296
- pkg:maven/io.netty/netty-codec-http2@4.1.77.Final
netty-codec-socks-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-socks/4.1.77.Final/netty-codec-socks-4.1.77.Final.jar
- MD5: 92b8878b559f7a888c14910e0ca367b6
- SHA1: 17bb510aa545fc73a18ab804c594593e32de1a1d
- SHA256: e16610cdb4e51ed85f1b7f6e935e98a45cb42774f4693aa8e71a5fdf6ba652a7
- pkg:maven/io.netty/netty-codec-socks@4.1.77.Final
netty-common-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-common/4.1.77.Final/netty-common-4.1.77.Final.jar
- MD5: c0fe65266d70074e8a82e48db581a848
- SHA1: ea0fc20f4e6178966b9d62017b7fcb83dfe0e713
- SHA256: 40dd9b5ef14878f050a1f7f4d5647d53473f134e349665b47243bde56de7a51f
- pkg:maven/io.netty/netty-common@4.1.77.Final
netty-handler-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-handler/4.1.77.Final/netty-handler-4.1.77.Final.jar
- MD5: a11c1ffacef7002473eff817f4907041
- SHA1: 47a81089de03635a27f509f3e4e13386ae1db275
- SHA256: 7911becd4850ff3fc3d93b4be7c468a2f6444fb48c17eec03c807856faf11e0a
- pkg:maven/io.netty/netty-handler@4.1.77.Final
netty-handler-proxy-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-handler-proxy/4.1.77.Final/netty-handler-proxy-4.1.77.Final.jar
- MD5: d38034d3cc7a5318486812bbba8aeb64
- SHA1: d1ac0d95b770098c46b6679fbfd417ae277012d4
- SHA256: e708ea428347a6489a3c8d090b02237ea7dca365836f0a8aabfe7ca453f46662
- pkg:maven/io.netty/netty-handler-proxy@4.1.77.Final
netty-resolver-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-resolver/4.1.77.Final/netty-resolver-4.1.77.Final.jar
- MD5: ed36d0e6f0696b6d676387b499a0f403
- SHA1: 4a239dbf8d8bb5f98aa51462c35011c0516395fd
- SHA256: 0161cfe9544b3656ed0de67d8937828101859e94bcd0caaf58d21ac7011eabd4
- pkg:maven/io.netty/netty-resolver@4.1.77.Final
netty-resolver-dns-4.1.77.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-resolver-dns/4.1.77.Final/netty-resolver-dns-4.1.77.Final.jar
- MD5: a5c0b1334374e0cf642d3b79c2256602
- SHA1: aad506ab6804e2720771634e2de2a065fa678126
- SHA256: 2468177423bd814fa363f741ad2434a989e429078714dfd729b5b896a14b501c
- pkg:maven/io.netty/netty-resolver-dns@4.1.77.Final

Identifiers

pkg:maven/io.netty/netty-transport@4.1.77.Final (Confidence:High)
cpe:2.3:a:netty:netty:4.1.77:*:*:*:*:*:*:* (Confidence:Highest)

slf4j-api-1.7.36.jar

Description:

The slf4j API

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar
MD5: 872da51f5de7f3923da4de871d57fd85
SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14
SHA256:d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	1.7.36	High
Version	Manifest	Bundle-Version	1.7.36	High
Version	Manifest	Implementation-Version	1.7.36	High
Version	pom	version	1.7.36	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.36 (Confidence:High)

snakeyaml-1.30.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/1.30/snakeyaml-1.30.jar
MD5: ba063b8ef3a8bfd591a1b56451166b14
SHA1: 8fde7fe2586328ac3c68db92045e1c8759125000
SHA256:f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	snakeyaml	High
Vendor	jar	package name	emitter	Highest
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	snakeyaml	Highest
Vendor	jar	package name	yaml	Highest
Vendor	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	artifactid	snakeyaml	Highest
Vendor	pom	artifactid	snakeyaml	Low
Vendor	pom	developer email	alexander.maslov@gmail.com	Low
Vendor	pom	developer email	jordanangold@gmail.com	Low
Vendor	pom	developer email	public.somov@gmail.com	Low
Vendor	pom	developer id	asomov	Medium
Vendor	pom	developer id	Jordan	Medium
Vendor	pom	developer id	maslovalex	Medium
Vendor	pom	developer name	Alexander Maslov	Medium
Vendor	pom	developer name	Andrey Somov	Medium
Vendor	pom	developer name	Jordan Angold	Medium
Vendor	pom	groupid	org.yaml	Highest
Vendor	pom	name	SnakeYAML	High
Vendor	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Highest
Product	file	name	snakeyaml	High
Product	jar	package name	emitter	Highest
Product	jar	package name	parser	Highest
Product	jar	package name	snakeyaml	Highest
Product	jar	package name	yaml	Highest
Product	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	artifactid	snakeyaml	Highest
Product	pom	developer email	alexander.maslov@gmail.com	Low
Product	pom	developer email	jordanangold@gmail.com	Low
Product	pom	developer email	public.somov@gmail.com	Low
Product	pom	developer id	asomov	Low
Product	pom	developer id	Jordan	Low
Product	pom	developer id	maslovalex	Low
Product	pom	developer name	Alexander Maslov	Low
Product	pom	developer name	Andrey Somov	Low
Product	pom	developer name	Jordan Angold	Low
Product	pom	groupid	org.yaml	Highest
Product	pom	name	SnakeYAML	High
Product	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Medium
Version	file	version	1.30	High
Version	pom	version	1.30	Highest

Identifiers

pkg:maven/org.yaml/snakeyaml@1.30 (Confidence:High)
cpe:2.3:a:snakeyaml_project:snakeyaml:1.30:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:yaml_project:yaml:1.30:*:*:*:*:*:*:* (Confidence:Highest)

vertx-core-4.3.1.jar

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
Eclipse Public License - v 2.0: http://www.eclipse.org/legal/epl-v20.html

File Path: /home/runner/.m2/repository/io/vertx/vertx-core/4.3.1/vertx-core-4.3.1.jar
MD5: 9acf248fad2f003a79d81d34bf0c3445
SHA1: c9389cee2c5b4788695529aba557cac6efde28e5
SHA256:820748c003b57e1df2528fd921d4511fb6040b9e3c2ba8a1d7f0ab302d9b5c1f
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	vertx-core	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	vertx	Highest
Vendor	Manifest	automatic-module-name	io.vertx.core	Medium
Vendor	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-core	Low
Vendor	Manifest	Implementation-Vendor	Eclipse	High
Vendor	Manifest	Implementation-Vendor-Id	io.vertx	Medium
Vendor	Manifest	maven-artifact-id	vertx-core	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	Eclipse	Low
Vendor	pom	artifactid	vertx-core	Highest
Vendor	pom	artifactid	vertx-core	Low
Vendor	pom	groupid	io.vertx	Highest
Vendor	pom	name	Vert.x Core	High
Vendor	pom	parent-artifactid	vertx-parent	Low
Product	file	name	vertx-core	High
Product	jar	package name	core	Highest
Product	jar	package name	http	Highest
Product	jar	package name	io	Highest
Product	jar	package name	vertx	Highest
Product	Manifest	automatic-module-name	io.vertx.core	Medium
Product	Manifest	Implementation-Title	Vert.x Core	High
Product	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-core	Low
Product	Manifest	maven-artifact-id	vertx-core	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Vert.x Core	Medium
Product	pom	artifactid	vertx-core	Highest
Product	pom	groupid	io.vertx	Highest
Product	pom	name	Vert.x Core	High
Product	pom	parent-artifactid	vertx-parent	Medium
Version	file	version	4.3.1	High
Version	Manifest	Implementation-Version	4.3.1	High
Version	Manifest	maven-version	4.3.1	Medium
Version	pom	parent-version	4.3.1	Low
Version	pom	version	4.3.1	Highest

Related Dependencies

Identifiers

pkg:maven/io.vertx/vertx-core@4.3.1 (Confidence:High)
cpe:2.3:a:eclipse:vert.x:4.3.1:*:*:*:*:*:*:* (Confidence:High)

vertx-web-client-4.3.1.jar

File Path: /home/runner/.m2/repository/io/vertx/vertx-web-client/4.3.1/vertx-web-client-4.3.1.jar
MD5: fa35b0a7c854214fb7f69abc3b1f49fd
SHA1: 345636b5ebac901d257a8e138b49bb05054c7361
SHA256:62a05178d618a493773305aac63132ffe1639a0296059b2253e8f4ecef2b48f6
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	vertx-web-client	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	vertx	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	automatic-module-name	io.vertx.web.client	Medium
Vendor	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web-client	Low
Vendor	Manifest	Implementation-Vendor	Eclipse	High
Vendor	Manifest	Implementation-Vendor-Id	io.vertx	Medium
Vendor	Manifest	maven-artifact-id	vertx-web-client	Low
Vendor	Manifest	specification-vendor	Eclipse	Low
Vendor	pom	artifactid	vertx-web-client	Highest
Vendor	pom	artifactid	vertx-web-client	Low
Vendor	pom	groupid	io.vertx	Highest
Vendor	pom	parent-artifactid	vertx-web-parent	Low
Product	file	name	vertx-web-client	High
Product	jar	package name	ext	Highest
Product	jar	package name	io	Highest
Product	jar	package name	vertx	Highest
Product	jar	package name	web	Highest
Product	Manifest	automatic-module-name	io.vertx.web.client	Medium
Product	Manifest	Implementation-Title	vertx-web-client	High
Product	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web-client	Low
Product	Manifest	maven-artifact-id	vertx-web-client	Low
Product	Manifest	specification-title	vertx-web-client	Medium
Product	pom	artifactid	vertx-web-client	Highest
Product	pom	groupid	io.vertx	Highest
Product	pom	parent-artifactid	vertx-web-parent	Medium
Version	file	version	4.3.1	High
Version	Manifest	Implementation-Version	4.3.1	High
Version	Manifest	maven-version	4.3.1	Medium
Version	pom	version	4.3.1	Highest

Identifiers

pkg:maven/io.vertx/vertx-web-client@4.3.1 (Confidence:High)

vertx-web-common-4.3.1.jar

File Path: /home/runner/.m2/repository/io/vertx/vertx-web-common/4.3.1/vertx-web-common-4.3.1.jar
MD5: 9cc4883241500b14dffedbff5aacb1af
SHA1: 09d6a9724b42ae53b0bf32d3e09aefa4e5dd4450
SHA256:b561345bf74deba6a641170306b8bdfb582b569f7b2bc40e3f334f9be71ab8db
Referenced In Project/Scope:JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	vertx-web-common	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	vertx	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	automatic-module-name	io.vertx.web.common	Medium
Vendor	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web-common	Low
Vendor	Manifest	Implementation-Vendor	Eclipse	High
Vendor	Manifest	Implementation-Vendor-Id	io.vertx	Medium
Vendor	Manifest	maven-artifact-id	vertx-web-common	Low
Vendor	Manifest	specification-vendor	Eclipse	Low
Vendor	pom	artifactid	vertx-web-common	Highest
Vendor	pom	artifactid	vertx-web-common	Low
Vendor	pom	groupid	io.vertx	Highest
Vendor	pom	parent-artifactid	vertx-web-parent	Low
Product	file	name	vertx-web-common	High
Product	jar	package name	ext	Highest
Product	jar	package name	io	Highest
Product	jar	package name	vertx	Highest
Product	jar	package name	web	Highest
Product	Manifest	automatic-module-name	io.vertx.web.common	Medium
Product	Manifest	Implementation-Title	vertx-web-common	High
Product	Manifest	implementation-url	http://nexus.sonatype.org/oss-repository-hosting.html/vertx-parent/vertx-ext/vertx-ext-parent/vertx-web-parent/vertx-web-common	Low
Product	Manifest	maven-artifact-id	vertx-web-common	Low
Product	Manifest	specification-title	vertx-web-common	Medium
Product	pom	artifactid	vertx-web-common	Highest
Product	pom	groupid	io.vertx	Highest
Product	pom	parent-artifactid	vertx-web-parent	Medium
Version	file	version	4.3.1	High
Version	Manifest	Implementation-Version	4.3.1	High
Version	Manifest	maven-version	4.3.1	Medium
Version	pom	version	4.3.1	Highest

Identifiers

pkg:maven/io.vertx/vertx-web-common@4.3.1 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: JWT Validator - Vertx

uk.co.spudsoft:jwt-validator-vertx:0.0.9

Summary

Dependencies

checker-qual-3.12.0.jar

Evidence

Identifiers

error_prone_annotations-2.11.0.jar

Evidence

Identifiers

failureaccess-1.0.1.jar

Evidence

Identifiers

guava-31.1-jre.jar

Evidence

Identifiers

j2objc-annotations-1.3.jar

Evidence

Identifiers

jackson-core-2.13.3.jar

Evidence

Related Dependencies

Identifiers

jackson-databind-2.13.3.jar

Evidence

Identifiers

jackson-dataformat-properties-2.13.3.jar

Evidence

Identifiers

jackson-dataformat-yaml-2.13.3.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Evidence

Identifiers

netty-common-4.1.77.Final.jar (shaded: org.jctools:jctools-core:3.1.0)

Evidence

Identifiers

netty-transport-4.1.77.Final.jar

Evidence

Related Dependencies

Identifiers

slf4j-api-1.7.36.jar

Evidence

Identifiers

snakeyaml-1.30.jar

Evidence

Identifiers

vertx-core-4.3.1.jar

Evidence

Related Dependencies

Identifiers

vertx-web-client-4.3.1.jar

Evidence

Identifiers

vertx-web-common-4.3.1.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor