4.0.0 org.owasp dependency-check-parent 5.2.4 pom utils core cli ant maven archetype Dependency-Check https://github.com/jeremylong/DependencyCheck.git dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities. 2012 OWASP https://www.owasp.org Jeremy Long jeremy.long@owasp.org OWASP https://www.owasp.org/ architect developer Steve Springett Steve.Springett@owasp.org OWASP https://www.owasp.org/ developer Will Stranathan Will.Stranathan@owasp.org OWASP https://www.owasp.org/ developer Dale Visser dvisser@ida.org Institute for Defense Analyses https://www.ida.org/ developer Hugo Costa OWASP https://www.owasp.org/ logo design scm:git:https://github.com/jeremylong/DependencyCheck.git https://github.com/jeremylong/DependencyCheck scm:git:git@github.com:jeremylong/DependencyCheck.git HEAD github https://github.com/jeremylong/DependencyCheck/issues travis-ci https://travis-ci.org/jeremylong/DependencyCheck Dependency Check dependency-check+subscribe@googlegroups.com dependency-check+unsubscribe@googlegroups.com dependency-check@googlegroups.com https://groups.google.com/forum/?fromgroups#!forum/dependency-check The Apache Software License, Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt UTF-8 UTF-8 github 8.3.0 1.9.9 1.7.29 1.2.3 3.1.0 3.1.0 1.9 1.8 3.1.1 3.1.1 2.5 3.0.0 2.22.2 0.8.5 3.1.12 2.4 2.7 18.0.0 2.8.5 1.4.196 1.4 2.6 3.4 1.8 2.2.1 1.6.4 4.12 2.2 1.48 3.1.0 1.12.1 1.19 3.0.0 3.3.0 3.6.0 3.0 3.2.2 2.1 1.4 3.0.1 1.0.4 0.11.0 2.4.17 1.8.0 3.0.1 28.1-jre jacoco reuseReports ${project.basedir}/target/jacoco-results/jacoco.xml java snapshot snapshot https://dependencycheck.jfrog.io/dependencycheck/libs-snapshot-local release release https://dependencycheck.jfrog.io/dependencycheck/libs-release-local gh-pages gh-pages https://jeremylong.github.io/DependencyCheck/ clean install org.jsonschema2pojo jsonschema2pojo-maven-plugin 1.0.1 org.codehaus.mojo appassembler-maven-plugin 2.1.0 org.jacoco jacoco-maven-plugin ${jacoco-maven-plugin.version} org.apache.maven.plugins maven-assembly-plugin 3.2.0 org.apache.maven.plugins maven-clean-plugin 3.1.0 org.apache.maven.plugins maven-compiler-plugin 3.8.1 org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-enforcer-plugin 3.0.0-M2 org.codehaus.mojo animal-sniffer-maven-plugin 1.18 org.apache.maven.plugins maven-deploy-plugin 2.8.2 org.apache.maven.plugins maven-failsafe-plugin 2.22.2 org.apache.maven.plugins maven-gpg-plugin 1.6 org.apache.maven.plugins maven-install-plugin 2.5.2 org.apache.maven.plugins maven-jar-plugin 3.2.0 org.apache.maven.plugins maven-release-plugin 2.5.3 org.apache.maven.plugins maven-resources-plugin 3.1.0 org.owasp.maven-tools velocity-whitespace-resource-filter 1.0.0 org.apache.maven.plugins maven-site-plugin 3.8.2 org.apache.maven.plugins maven-surefire-plugin 2.22.2 org.apache.maven.plugins maven-antrun-plugin 1.8 org.apache.maven.plugins maven-source-plugin 3.2.0 org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} org.apache.maven.plugins maven-invoker-plugin 3.2.1 org.codehaus.groovy groovy-all ${groovy-all.version} org.codehaus.gmavenplus gmavenplus-plugin ${gmavenplus-plugin.version} org.codehaus.groovy groovy-all ${groovy-all.version} runtime org.codehaus.gmavenplus gmavenplus-plugin ${gmavenplus-plugin.version} org.codehaus.groovy groovy-all ${groovy-all.version} runtime add-dynamic-properties-clean pre-clean execute add-dynamic-properties-init initialize execute add-dynamic-properties-site pre-site execute org.apache.maven.plugins maven-compiler-plugin javac-with-errorprone true true 1.8 1.8 -Xlint -XepDisableWarningsInGeneratedCode -XepExcludedPaths:.*/generated-sources/.* org.codehaus.plexus plexus-compiler-javac-errorprone 2.8.5 com.google.errorprone error_prone_core 2.3.3 org.apache.maven.plugins maven-jar-plugin true **/checkstyle* org.apache.maven.plugins maven-enforcer-plugin org.owasp.maven.enforcer class-file-format-rule 1.0.0 true enforce-java enforce 1.8.0 enforce-classfileformat 52 enforce enforce-maven-3 enforce [3.1,] true org.codehaus.mojo animal-sniffer-maven-plugin signature-check package check org.codehaus.mojo.signature java18 1.0 org.jacoco jacoco-maven-plugin pre-unit-test prepare-agent ${project.basedir}/target/jacoco.exec surefireArgLine true pre-integration-test pre-integration-test prepare-agent ${project.basedir}/target/jacoco.exec failsafeArgLine true pre-invoker-test pre-integration-test prepare-agent ${project.basedir}/target/jacoco.exec invoker.mavenOpts true default-report report ${project.basedir}/target/jacoco.exec ${project.basedir}/target/jacoco-results/ org.apache.maven.plugins maven-surefire-plugin @{surefireArgLine} -Dfile.encoding=UTF-8 -javaagent:${settings.localRepository}/org/jmockit/jmockit/${jmockit.version}/jmockit-${jmockit.version}.jar data.directory ${project.build.directory}/data temp.directory ${project.build.directory}/temp analyzer.assembly.dotnet.path ${odc.dotnet.path} cve.url.base ${odc.cve.url.base} cve.url.modified ${odc.cve.url.modified} org.apache.maven.plugins maven-failsafe-plugin @{failsafeArgLine} data.directory ${project.build.directory}/data temp.directory ${project.build.directory}/temp analyzer.assembly.dotnet.path ${odc.dotnet.path} cve.url.base ${odc.cve.url.base} cve.url.modified ${odc.cve.url.modified} **/*MySqlIT.java integration-test verify org.codehaus.mojo sonar-maven-plugin 3.6.0.1398 org.apache.maven.plugins maven-resources-plugin site-filtering-hack pre-site copy-resources false ${project.build.directory}/site/ src/main/site-resources/ true UTF-8 org.apache.maven.plugins maven-site-plugin org.apache.maven.doxia doxia-module-markdown ${doxia-module-markdown.version} true false org.apache.maven.plugins maven-antrun-plugin ${maven-antrun-plugin.version} copy-xsd compile run org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.apache.maven.plugins maven-javadoc-plugin ${maven-javadoc-plugin.version} false Copyright© 2012-19 Jeremy Long. All Rights Reserved. **/generated-sources/java/**/*.java default javadoc org.apache.maven.plugins maven-jxr-plugin ${maven-jxr-plugin.version} org.apache.maven.plugins maven-checkstyle-plugin ${reporting.checkstyle-plugin.version} false false **/HelpMojo.java ${odc.config}/checkstyle-checks.xml ${odc.config}/checkstyle-header.txt ${odc.config}/checkstyle-suppressions.xml checkstyle.suppressions.file org.apache.maven.plugins maven-project-info-reports-plugin ${maven-project-info-reports-plugin.version} summary issue-management mailing-lists modules team scm ci-management licenses org.apache.maven.plugins maven-surefire-report-plugin ${maven-surefire-report-plugin.version} report-only failsafe-report-only org.jacoco jacoco-maven-plugin ${jacoco-maven-plugin.version} ${project.basedir}/target/jacoco.exec report com.github.spotbugs spotbugs-maven-plugin ${spotbugs.maven.plugin.version} ${odc.config}/spotbugs_excludes.xml org.codehaus.mojo taglist-maven-plugin ${taglist-maven-plugin.version} Todo Work todo ignoreCase FIXME exact org.codehaus.mojo versions-maven-plugin ${versions-maven-plugin.version} dependency-updates-report plugin-updates-report org.mock-server mockserver-netty 5.7.1 test org.jmockit jmockit ${jmockit.version} test org.mockito mockito-core ${mockito-core.version} test org.apache.commons commons-jcs-core ${commons-jcs-core.version} com.github.package-url packageurl-java 1.1.1 us.springett cpe-parser 2.0.1 com.github.spotbugs spotbugs-annotations ${spotbugs.maven.plugin.version} compile true com.vdurmont semver4j 3.1.0 org.jetbrains annotations ${jetbrains.annotations.version} com.google.code.gson gson ${com.google.code.gson.version} com.h2database h2 ${com.h2database.version} commons-cli commons-cli ${commons-cli.version} commons-io commons-io ${commons-io.version} org.apache.commons commons-lang3 ${commons-lang3.version} org.apache.commons commons-text ${commons-text.version} com.sun.mail mailapi ${com.sun.mail.mailapi.version} ch.qos.logback logback-core ${logback.version} ch.qos.logback logback-classic ${logback.version} junit junit ${junit.version} test org.apache.commons commons-compress ${commons-compress.version} org.apache.ant ant ${apache.ant.version} org.apache.ant ant-testutil ${apache.ant.version} org.apache.lucene lucene-analyzers-common ${apache.lucene.version} org.apache.lucene lucene-core ${apache.lucene.version} org.apache.lucene lucene-queryparser ${apache.lucene.version} org.apache.lucene lucene-test-framework ${apache.lucene.version} com.google.guava guava ${com.google.guava.version} com.h3xstream.retirejs retirejs-core ${com.h3xstream.retirejs.core.version} org.apache.maven maven-core ${maven.api.version} org.apache.maven maven-plugin-api ${maven.api.version} org.apache.maven.shared file-management ${org.apache.maven.shared.file-management.version} org.apache.maven maven-settings ${maven.api.version} org.apache.maven.plugin-testing maven-plugin-testing-harness ${maven-plugin-testing-harness.version} org.apache.maven.plugin-tools maven-plugin-annotations ${maven-plugin-annotations.version} org.apache.maven.reporting maven-reporting-api ${maven-reporting-api.version} commons-collections commons-collections ${commons-collections.version} org.apache.velocity velocity-engine-core ${org.apache.velocity.version} org.sonatype.plexus plexus-sec-dispatcher ${plexus-sec-dispatcher.version} org.apache.maven.shared maven-dependency-tree ${maven-dependency-tree.version} org.glassfish javax.json ${org.glassfish.javax.json.version} org.hamcrest hamcrest-core ${hamcrest-core.version} test org.jsoup jsoup ${jsoup.version} org.slf4j slf4j-api ${slf4j.version} org.slf4j slf4j-simple ${slf4j.version} org.apache.maven.shared maven-artifact-transfer ${maven-artifact-transfer.version} org.sonatype.ossindex ossindex-service-client 1.2.0 org.apache.httpcomponents httpclient org.apache.httpcomponents httpcore junit junit test org.hamcrest hamcrest-core test org.jmockit jmockit test org.jetbrains annotations compile true com.github.spotbugs spotbugs-annotations compile true