Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.47.0/error_prone_annotations-2.47.0.jar MD5: e1998cc98f6edc175da7f53961d1579e SHA1: e64e70c8e2b5a30ce7f1b6c9e3eb7016881e0411 SHA256:5364bc6f22e72e98195e406a58d3ba1c09ffa11dea0729592cb870dc2de4056d
Referenced In Project/Scope: JWT Validator - Vertx:compile
error_prone_annotations-2.47.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.6.0-jre
Contains
com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
InternalFutures. Most users will never need to use this artifact. Its
classes are conceptually a part of Guava, but they're in this separate
artifact so that Android libraries can use them without pulling in all of
Guava (just as they can use ListenableFuture by depending on the
listenablefuture artifact).
File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar MD5: 29a782e90f6b37218b18bb880d2a8f4a SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: JWT Validator - Vertx:compile
failureaccess-1.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.6.0-jre
Evidence
Type
Source
Name
Value
Confidence
Vendor
file
name
failureaccess
High
Vendor
jar
package name
common
Highest
Vendor
jar
package name
concurrent
Highest
Vendor
jar
package name
google
Highest
Vendor
jar
package name
util
Highest
Vendor
Manifest
build-jdk-spec
17
Low
Vendor
Manifest
bundle-docurl
https://github.com/google/guava/
Low
Vendor
Manifest
bundle-symbolicname
com.google.guava.failureaccess
Medium
Vendor
Manifest
multi-release
true
Low
Vendor
pom
artifactid
failureaccess
Highest
Vendor
pom
artifactid
failureaccess
Low
Vendor
pom
groupid
com.google.guava
Highest
Vendor
pom
name
Guava InternalFutureFailureAccess and InternalFutures
High
Vendor
pom
parent-artifactid
guava-parent
Low
Product
file
name
failureaccess
High
Product
jar
package name
common
Highest
Product
jar
package name
concurrent
Highest
Product
jar
package name
google
Highest
Product
jar
package name
util
Highest
Product
Manifest
build-jdk-spec
17
Low
Product
Manifest
bundle-docurl
https://github.com/google/guava/
Low
Product
Manifest
Bundle-Name
Guava InternalFutureFailureAccess and InternalFutures
Medium
Product
Manifest
bundle-symbolicname
com.google.guava.failureaccess
Medium
Product
Manifest
multi-release
true
Low
Product
pom
artifactid
failureaccess
Highest
Product
pom
groupid
com.google.guava
Highest
Product
pom
name
Guava InternalFutureFailureAccess and InternalFutures
File Path: /home/runner/.m2/repository/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar MD5: 34a4f258ed23d2e876a6e4666bb3b1c5 SHA1: c376b13067cc99a5774403530953f7b05a91e218 SHA256:dc573e1fca4fd5454f4a5fd3d7da2df03002876a4175bafc14a95980dd7713b3
Referenced In Project/Scope: JWT Validator - Vertx:compile
guava-33.6.0-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar MD5: abe8bd3abff622b9a8b15c3a737aa741 SHA1: a892ca9507839bbdb900d64310ac98256cab992f SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: JWT Validator - Vertx:compile
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.6.0-jre
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.22/jackson-annotations-2.22.jar MD5: 04c11c456fd1e21b9a21c25c665109cc SHA1: 15c67f9498d6934cff9510fc70c5a12e52290457 SHA256:21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-annotations-2.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.22.1/jackson-core-2.22.1.jar MD5: 09e866bcd73613665ef49f5086704fb1 SHA1: da7ffb60088d7e8f37ecdd3b617520971cc7b9bf SHA256:941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-core-2.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-core/3.1.5/jackson-core-3.1.5.jar MD5: ed1c26680ceec80183239a74ef15a838 SHA1: ccd7eb3269b8d33bc097b36770f367cdfe2f1150 SHA256:9431b7fa2673bbb618c11d865fe15e13222fd182a214ff998cb7e56afd8f35d2
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-core-3.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.22.1/jackson-databind-2.22.1.jar MD5: df2dcf8d581836d48aae7387311cba93 SHA1: 9e2fb91831cce9cb9262909cd76647508949f232 SHA256:7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-databind-2.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-databind/3.1.5/jackson-databind-3.1.5.jar MD5: 7b399cbb2bea1429c46c1b8c73af42b9 SHA1: 782178f0b1fe088803c03b85eb9a406f60519044 SHA256:3a2338d996fd3056791df8d335fa9ba8a62a706ed4245ecf81b3e583df37d08a
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-databind-3.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.22.1/jackson-dataformat-yaml-2.22.1.jar MD5: 8348dc064a58fb2ae67371764b634812 SHA1: af5fde2414e4a8d2617e7890f7068c26b5b66a33 SHA256:cc3a0e540791a9a1cbcd7584767b84572ffda0b72823856558f47dea69ae8ed1
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-dataformat-yaml-2.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.22.1/jackson-datatype-jsr310-2.22.1.jar MD5: 4dd3e0a2be3f88d720f9214954ed59b6 SHA1: 3377a0589c1b0e62bbe245ac8e9f56fa7d7b8bb9 SHA256:85da45b7e5e565418963ff8f0dcb184365b0557c15468933f4318dde5c3ce845
Referenced In Project/Scope: JWT Validator - Vertx:compile
jackson-datatype-jsr310-2.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar MD5: 9133aba420d0ca3b001dbb6ae9992cf6 SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507 SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: JWT Validator - Vertx:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.6.0-jre
An empty artifact that Guava depends on to signal that it is providing
ListenableFuture -- but is also available in a second "version" that
contains com.google.common.util.concurrent.ListenableFuture class, without
any other Guava classes. The idea is:
- If users want only ListenableFuture, they depend on listenablefuture-1.0.
- If users want all of Guava, they depend on guava, which, as of Guava
27.0, depends on
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
version number is enough for some build systems (notably, Gradle) to select
that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
conflict with the copy of ListenableFuture in guava itself. If users are
using an older version of Guava or a build system other than Gradle, they
may see class conflicts. If so, they can solve them by manually excluding
the listenablefuture artifact or manually forcing their build systems to
use 9999.0-....
File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar MD5: d094c22570d65e132c19cea5d352e381 SHA1: b421526c5f297295adef1c886e5246c39d4ac629 SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: JWT Validator - Vertx:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.6.0-jre
File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-classes/2.0.78.Final/netty-tcnative-classes-2.0.78.Final.jar MD5: 81661eca376719630527ed56323c301c SHA1: e99c3d87cbfe544813fb012d5dfbf078bde76244 SHA256:3ca66d8c6c0f003242f954cc1822a32445109ac25b8582840ba3d8e3c92f0a3e
Referenced In Project/Scope: JWT Validator - Vertx:compile
netty-tcnative-classes-2.0.78.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
File Path: /home/runner/.m2/repository/io/netty/netty-transport/4.2.16.Final/netty-transport-4.2.16.Final.jar MD5: d264fa6db3bc4aadc8b44ba4d4b650a6 SHA1: ae87a3bec51d503475a19fbd718bf777f2fc06c6 SHA256:cfa3f654caff906653385f4b7ddaa539d795b78f5711a622482b17d2b73484c0
Referenced In Project/Scope: JWT Validator - Vertx:compile
netty-transport-4.2.16.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.1.0-alpha1/slf4j-api-2.1.0-alpha1.jar MD5: 22d0512f94f321721b28b3365b2d7ea1 SHA1: 4e2525fc4327cc553c52e3937427c7cf2114735f SHA256:9ab7ffa646202b499d05995a3ec82f31bccb7a50345c1514d8cb42ec8ccea353
Referenced In Project/Scope: JWT Validator - Vertx:compile
slf4j-api-2.1.0-alpha1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.5/snakeyaml-2.5.jar MD5: 8d3b7581db5c7620db55183f33a4f2ad SHA1: 2d53ddec134280cb384c1e35d094e5f71c1f2316 SHA256:e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd
Referenced In Project/Scope: JWT Validator - Vertx:compile
snakeyaml-2.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1
File Path: /home/runner/.m2/repository/io/vertx/vertx-auth-common/5.1.5/vertx-auth-common-5.1.5.jar MD5: df6173b8124ea91ee53921e7ba522232 SHA1: 611784b531e7b60c94d8acb200daa40b9e99c95b SHA256:81f5f55b9b9e731640e83d7d191ed2095da25f4ea98d24ae243ea6cc192ba351
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-auth-common-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen/5.1.5/vertx-codegen-5.1.5.jar MD5: bc8742041dd38865605f8515e9e9d911 SHA1: 11c89be2ce1795f6f1c621da3e58b91f7a94c517 SHA256:15efa37231574d8339faf05987343773766fe1c8067369cfdbbfbf723417b52e
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-codegen-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-api/5.1.5/vertx-codegen-api-5.1.5.jar MD5: cb4db476e36bf8e1e11ef37bb9546131 SHA1: a14c5ebb09d57813c8389778b58d7c560cb29e13 SHA256:641011521cfa3f3546e16c252036ef4d89272c4f97bfb1d382bf1571435de648
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-codegen-api-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-codegen@5.1.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-json/5.1.5/vertx-codegen-json-5.1.5.jar MD5: 8bdcb629a1c0c7aaf89b7f4725680644 SHA1: 344e9200af1d44f8ac329ef0f8f3b18faf5bd4ac SHA256:98503c8723fb3c84e9c0e74b377aa8d597c6f0b72a39b862068984da70dd8652
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-codegen-json-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-codegen@5.1.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-processor/5.1.5/vertx-codegen-processor-5.1.5.jar MD5: 1a8a908c171b05ee6316a98b71fb74da SHA1: eeb8186887ab13cf53f26a0872ab6086029abf7d SHA256:e3bb96b06e52f18d7ed41ae999011d9ba41a77b773e65ee1f21ab9613dea39fc
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-codegen-processor-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-codegen@5.1.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-core/5.1.5/vertx-core-5.1.5.jar MD5: a83e82d2151b84bb356e151b18fffaa4 SHA1: 4b95f5d4e58c14095ba4b2b62d2f48c8cdcea61d SHA256:95614e23274a9110fc5399aa254c846ec52d6a75534e6c3a81b6ddda13e60552
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-core-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
Eclipse Public License - v 2.0: http://www.eclipse.org/legal/epl-v20.html
File Path: /home/runner/.m2/repository/io/vertx/vertx-web/5.1.5/vertx-web-5.1.5.jar MD5: d819b1a18f9cbf4338ecba05a4c25d71 SHA1: e3882ff972dbcfa5422f4783350a2c0d2f905bd6 SHA256:ce6333704df0a82f5b79e4469c05c2efbc62bd6b3f7bd717ce06d8c04f32121e
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-web-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-web-client/5.1.5/vertx-web-client-5.1.5.jar MD5: 6c68fb7b11b4c754e204c03da931be27 SHA1: 2ea037350df580c23dd393ed2a6eac8388644dad SHA256:94ae677cc8af6da5a0f397372d9812c52b20b6cd01beae91da3085d68c7b5b96
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-web-client-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.5
File Path: /home/runner/.m2/repository/io/vertx/vertx-web-common/5.1.5/vertx-web-common-5.1.5.jar MD5: 4a796255645d27a5269cf161ee285f40 SHA1: 649bc6c6e13c5b19a246e2a6763805d8605c5d9e SHA256:86022ff012c13ec2b6db2ee4060f425629f276262b533c071c4cb7bd6f55af47
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-web-common-5.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.1.5