4.0.0 org.owasp dependency-check-parent 4.0.2 pom utils core cli ant maven archetype build-reporting Dependency-Check https://github.com/jeremylong/DependencyCheck.git dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities. 2012 OWASP http://www.owasp.org Jeremy Long jeremy.long@owasp.org OWASP https://www.owasp.org/ architect developer Steve Springett Steve.Springett@owasp.org OWASP https://www.owasp.org/ developer Will Stranathan Will.Stranathan@owasp.org OWASP https://www.owasp.org/ developer Dale Visser dvisser@ida.org Institute for Defense Analyses https://www.ida.org/ developer Hugo Costa OWASP https://www.owasp.org/ logo design scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck scm:git:git@github.com:jeremylong/DependencyCheck.git HEAD github https://github.com/jeremylong/DependencyCheck/issues travis-ci https://travis-ci.org/jeremylong/DependencyCheck Dependency Check dependency-check+subscribe@googlegroups.com dependency-check+unsubscribe@googlegroups.com dependency-check@googlegroups.com https://groups.google.com/forum/?fromgroups#!forum/dependency-check The Apache Software License, Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt UTF-8 UTF-8 github 7.6.0 1.9.9 1.7.25 1.2.3 3.1.0 3.0.0 3.11.0 1.8 1.8 3.1.1 3.0.1 2.5 3.0.0 2.22.1 0.8.2 3.0.5 2.4 2.7 1.6 3.0.1u2 2.8.5 1.4.196 1.4 2.6 3.4 1.3 1.6.3 4.12 2.1 1.41 2.23.4 1.11.3 1.18 3.0.0 3.3.0 3.6.0 3.0 3.2.2 1.7 1.4 3.0.1 1.0.4 0.10.1 2.4.16 1.5 3.0.1 27.0.1-jre snapshot snapshot https://dependencycheck.jfrog.io/dependencycheck/libs-snapshot-local release release https://dependencycheck.jfrog.io/dependencycheck/libs-release-local gh-pages gh-pages https://jeremylong.github.io/DependencyCheck/ clean install org.codehaus.mojo appassembler-maven-plugin 2.0.0 org.jacoco jacoco-maven-plugin 0.8.2 org.apache.maven.plugins maven-assembly-plugin 3.1.0 org.apache.maven.plugins maven-clean-plugin 3.1.0 org.apache.maven.plugins maven-compiler-plugin 3.8.0 org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-enforcer-plugin 3.0.0-M2 org.codehaus.mojo animal-sniffer-maven-plugin 1.17 org.apache.maven.plugins maven-deploy-plugin 2.8.2 org.apache.maven.plugins maven-failsafe-plugin 2.22.1 org.apache.maven.plugins maven-gpg-plugin 1.6 org.apache.maven.plugins maven-install-plugin 2.5.2 org.apache.maven.plugins maven-jar-plugin 3.1.1 org.apache.maven.plugins maven-release-plugin 2.5.3 org.apache.maven.plugins maven-resources-plugin 3.1.0 org.owasp.maven-tools velocity-whitespace-resource-filter 1.0.0 org.apache.maven.plugins maven-site-plugin 3.7.1 org.apache.maven.plugins maven-surefire-plugin 2.22.1 org.apache.maven.plugins maven-antrun-plugin 1.8 org.apache.maven.plugins maven-source-plugin 3.0.1 org.apache.maven.plugins maven-javadoc-plugin 3.0.1 org.apache.maven.plugins maven-invoker-plugin 3.1.0 org.codehaus.groovy groovy-all ${groovy-all.version} org.codehaus.gmavenplus gmavenplus-plugin ${gmavenplus-plugin.version} org.codehaus.groovy groovy-all ${groovy-all.version} runtime com.spotify dockerfile-maven-plugin 1.4.9 org.codehaus.gmavenplus gmavenplus-plugin ${gmavenplus-plugin.version} org.codehaus.groovy groovy-all ${groovy-all.version} runtime add-dynamic-properties-clean pre-clean execute add-dynamic-properties-init initialize execute add-dynamic-properties-site pre-site execute org.apache.maven.plugins maven-compiler-plugin -Xlint true 1.8 1.8 org.apache.maven.plugins maven-jar-plugin true **/checkstyle* org.apache.maven.plugins maven-enforcer-plugin org.owasp.maven.enforcer class-file-format-rule 1.0.0 true enforce-java enforce 1.8.0 enforce-classfileformat 52 enforce enforce-maven-3 enforce [3.1,] true org.codehaus.mojo animal-sniffer-maven-plugin signature-check verify check org.codehaus.mojo.signature java18 1.0 org.jacoco jacoco-maven-plugin pre-unit-test prepare-agent ${project.build.directory}/coverage-reports/jacoco-ut.exec surefireArgLine pre-integration-test pre-integration-test prepare-agent ${project.build.directory}/coverage-reports/jacoco-it.exec failsafeArgLine org.apache.maven.plugins maven-surefire-plugin ${surefireArgLine} -Dfile.encoding=UTF-8 data.directory ${project.build.directory}/data temp.directory ${project.build.directory}/temp org.apache.maven.plugins maven-failsafe-plugin ${failsafeArgLine} data.directory ${project.build.directory}/data temp.directory ${project.build.directory}/temp **/*MySqlIT.java integration-test verify org.apache.maven.plugins maven-resources-plugin site-filtering-hack pre-site copy-resources false ${project.build.directory}/site/ src/main/site-resources/ true UTF-8 org.apache.maven.plugins maven-site-plugin org.apache.maven.doxia doxia-module-markdown ${doxia-module-markdown.version} true false org.apache.maven.plugins maven-antrun-plugin ${maven-antrun-plugin.version} copy-xsd compile run org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} false Copyright© 2012-18 Jeremy Long. All Rights Reserved. default javadoc org.apache.maven.plugins maven-jxr-plugin ${maven-jxr-plugin.version} org.apache.maven.plugins maven-checkstyle-plugin ${reporting.checkstyle-plugin.version} false false **/HelpMojo.java ${odc.config}/checkstyle-checks.xml ${odc.config}/checkstyle-header.txt ${odc.config}/checkstyle-suppressions.xml checkstyle.suppressions.file org.apache.maven.plugins maven-pmd-plugin ${reporting.pmd-plugin.version} 1.6 true utf-8 **/generated/*.java **/HelpMojo.java ${odc.config}/dcrules.xml /rulesets/java/basic.xml /rulesets/java/imports.xml /rulesets/java/unusedcode.xml org.apache.maven.plugins maven-project-info-reports-plugin ${maven-project-info-reports-plugin.version} summary issue-management mailing-lists modules team scm ci-management licenses org.apache.maven.plugins maven-surefire-report-plugin ${maven-surefire-report-plugin.version} report-only failsafe-report-only org.jacoco jacoco-maven-plugin ${jacoco-maven-plugin.version} target/coverage-reports/jacoco-ut.exec target/coverage-reports/jacoco-it.exec report-aggregate org.codehaus.mojo findbugs-maven-plugin ${findbugs-maven-plugin.version} org.codehaus.mojo taglist-maven-plugin ${taglist-maven-plugin.version} Todo Work todo ignoreCase FIXME exact org.codehaus.mojo versions-maven-plugin ${versions-maven-plugin.version} dependency-updates-report plugin-updates-report com.vdurmont semver4j 2.2.0 joda-time joda-time ${joda-time.version} com.google.code.findbugs annotations ${com.google.code.findbugs.annotations.version} com.google.code.gson gson ${com.google.code.gson.version} com.h2database h2 ${com.h2database.version} commons-cli commons-cli ${commons-cli.version} commons-io commons-io ${commons-io.version} org.apache.commons commons-lang3 ${commons-lang3.version} org.apache.commons commons-text ${commons-text.version} com.sun.mail mailapi ${com.sun.mail.mailapi.version} ch.qos.logback logback-core ${logback.version} ch.qos.logback logback-classic ${logback.version} junit junit ${junit.version} test org.apache.commons commons-compress ${commons-compress.version} org.apache.ant ant ${apache.ant.version} org.apache.ant ant-testutil ${apache.ant.version} org.apache.lucene lucene-analyzers-common ${apache.lucene.version} org.apache.lucene lucene-core ${apache.lucene.version} org.apache.lucene lucene-queryparser ${apache.lucene.version} org.apache.lucene lucene-test-framework ${apache.lucene.version} com.google.guava guava ${com.google.guava.version} com.h3xstream.retirejs retirejs-core ${com.h3xstream.retirejs.core.version} org.apache.maven maven-core ${maven.api.version} org.apache.maven maven-plugin-api ${maven.api.version} org.apache.maven.shared file-management ${org.apache.maven.shared.file-management.version} org.apache.maven maven-settings ${maven.api.version} org.apache.maven.plugin-testing maven-plugin-testing-harness ${maven-plugin-testing-harness.version} org.apache.maven.plugin-tools maven-plugin-annotations ${maven-plugin-annotations.version} org.apache.maven.reporting maven-reporting-api ${maven-reporting-api.version} commons-collections commons-collections ${commons-collections.version} org.apache.velocity velocity ${org.apache.velocity.version} org.sonatype.plexus plexus-sec-dispatcher ${plexus-sec-dispatcher.version} org.apache.maven.shared maven-dependency-tree ${maven-dependency-tree.version} org.glassfish javax.json ${org.glassfish.javax.json.version} org.hamcrest hamcrest-core ${hamcrest-core.version} test org.jmockit jmockit ${org.jmockit.version} test org.mockito mockito-core ${mockito-core.version} test org.jsoup jsoup ${jsoup.version} org.slf4j slf4j-api ${slf4j.version} org.slf4j slf4j-simple ${slf4j.version} org.apache.maven.shared maven-artifact-transfer ${maven-artifact-transfer.version} junit junit test org.hamcrest hamcrest-core test com.google.code.findbugs annotations provided upgrade-dependencies odc.upgrade true org.codehaus.mojo versions-maven-plugin 2.7 pre-clean update-properties false ${odc.config}/version-rules.xml org.apache.maven:*:* org.apache.maven.shared:maven-dependency-tree:*Ï org.apache.commons:commons-lang3:* org.apache.lucene:*:* commons-collections:commons-collections:* joda-time:joda-time:* org.slf4j:*:* org.apache.ant:*:* com.h2database:h2:* org.glassfish:javax.json:* org.codehaus.gmavenplus:gmavenplus-plugin:*