build OWASP Foundation org.cyclonedx cyclonedx-maven-plugin 2.8.1 CycloneDX Maven plugin 42c73e70d517b359d40b757c368d68fc c66892e13fb7ed7b8105cb5a280fa767d9e0bf12 566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5 93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb 04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665 eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73 2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e 636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882 hazendaz com.github.hazendaz scriptable-dataset 2.4.2 A scriptable dataset for DBUnit. Apache-2.0 pkg:maven/com.github.hazendaz/scriptable-dataset@2.4.2?type=jar http://github.com/hazendaz/scriptable-datasethttps://github.com/hazendaz/scriptable-dataset/actionshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/hazendaz/scriptable-dataset/issueshttps://github.com/hazendaz/scriptable-dataset makeAggregateBom compile,provided,runtime,system enabled QOS.ch org.slf4j slf4j-api 2.0.16 The slf4j API required c8de8f5d740584cb24b5652cfba8b3c4 0172931663a09a1fa515567af5fbef00897d3c04 a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a 91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d 331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb 3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api io.github.vasiliygagin dbunit-core 2.10.0 dbUnit is a JUnit extension (also usable from Ant and Maven) targeted for database-driven projects that, among other things, puts your database into a known state between test runs. This is an excellent way to avoid the myriad of problems that can occur when one test case corrupts the database and causes subsequent tests to fail or exacerbate the damage. required 70145c541f51b7013733251488ca822b f0aad174ce8f966074b7ee738c5f36a0910d2f6b 42915e43c6e4e6b3ad557a888250bcce32094bb004fe59aa2e62706ead4d9ec4 cd143be98f6d27b1ee98fc8b9031f54004f60c998ff6264d7ce86f173a2f809b000e3de4154ccc1390a29f7633f24062b2aa7985c9d36e2ef0d5d66c176323c7 6c7d42a04d060834eaed0f49a470d7de17ed6fa0e9f2c89ea30842fc06c8175793649bf5d063ecdbfa4d9ed9c877a7d4 3fefd20a773f756169a2feac26622adf1dba2b4d7af0783728daae7b2d5f6a5f62ac28bf0d8d1453a2ce2a569ff4403f 986b8720f6837e9f2be2293ebb2fdc65c2a91dba2d078475ca781a6627b09412 dac62bb82c1409e608c7571a74e1eadde50edd201bf54dc4eaa292555e966967183884aeaf94388e5b1f11e335ac0707ac5a6fca7a5d94cf4848a0221682b51a LGPL-2.1-only pkg:maven/io.github.vasiliygagin/dbunit-core@2.10.0?type=jar https://github.com/vasiliygagin/dbunit/dbunit-corehttps://s01.oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/vasiliygagin/dbunit/dbunit-core The Apache Software Foundation org.apache.commons commons-compress 1.27.1 Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. required 1db4bd87b0082044c6e7a6af0b977a3e a19151084758e2fbb6b41eddaa88e7b8ff4e6599 293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16 5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226 307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4 39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621 40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar https://commons.apache.org/proper/commons-compress/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation commons-codec commons-codec 1.17.1 The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. required 7b3438ab4c6d91e0066d410947e43f3e 973638b7149d333563584137ebf13a691bb60579 f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23 a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860 ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5 ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df 29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-codec/commons-codec@1.17.1?type=jar https://commons.apache.org/proper/commons-codec/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/CODEChttps://mail-archives.apache.org/mod_mbox/commons-user/https://github.com/apache/commons-codec The Apache Software Foundation commons-io commons-io 2.16.1 The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. required ed8191a5a217940140001b0acfed18d9 377d592e740dc77124e0901291dbfaa6810a200e f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f 97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008 bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199 f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e 5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161 29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-io/commons-io@2.16.1?type=jar https://commons.apache.org/proper/commons-io/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/IOhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-io.git The Apache Software Foundation org.apache.commons commons-lang3 3.16.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. required 67bc6dbd753fc276d69aeb4cfa205e15 3eb54effe40946dfb06dc5cd6c7ce4116cd51ea4 08709dd74d602b705ce4017d26544210056a4ba583d5b20c09373406fe7a00f8 2dcb5b9403ae6de1be75d06d10b3c0af34465199781878dd4161d00c30eb47a63e7c5cce0317fb301646aac7dc9cb0a6e197e66b45a1177f2c235342d9bb2732 a2bd4e9d396145632bca41fa383ebae67a7c76b44cb01b7f37394b73fa615634d270fa573ce3028d5b12fb20de431f74 309d7b001238ce78212740e55a228ba8d9ab19cfbb8162a9cafdc15e916f3cb8c913b1b6af48f34fce89774d005781e2 17dbe2a4e41bf23a861e5f91600cd7b57fa2714fad07faf78a39220fe62ed8dc 20b1addc31652cb5e7326e3c89fac75f587d3b4169c0784a6e638721530cfdb812e87632bf8f7030b34c5b9eed64ca8af602de218fdde307acd1df114a8ab44f Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.commons/commons-lang3@3.16.0?type=jar https://commons.apache.org/proper/commons-lang/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git com.oracle.database.jdbc ojdbc8 19.24.0.0 Oracle JDBC Driver compatible with JDK8, JDK11, , JDK17, and JDK19 required 59b3eafd3f89d6bbada2fd8e6aa7c8e2 f46bbf6c42210736236e81bb18a955e3e1aa9a88 301d4f5cca6ece205a528b64daa8dccf767fcd37305bb3269825fcfa0f86a175 d01fc9123a4d113590812bdd03ab93fcc1bd82082a8940d637d10473373a4b644ebbbc547f3080879e9b86fecaf6d1595b29dccee41a9e829a42191690bf83aa e2e4016383ed7b62c2efcc9563bb8b0f6d2c4424d8f1e068671e98a5808e8ab9b100c328e9b19b8bf9c8750a2acea4bb 2f5c7605aaa3f3d76bd1a9fcf68674fd37e9c58afd5fbc977f3a9f42738668b98d73d71aff23218777297d0a538d4afd 59727bcdeb965c92dcc42725de1cf56933b1884b9d64b985cef891ffd2118c6e f20b413d503d9388189c34b02318accb5aa0437ba69cb4e00979f61a83467e5436412776621e94b24d574de853e0addfebbce4ef379b0ebddc43a5bdd119e39c Oracle Free Use Terms and Conditions (FUTC) https://www.oracle.com/downloads/licenses/oracle-free-license.html pkg:maven/com.oracle.database.jdbc/ojdbc8@19.24.0.0?type=jar https://www.oracle.com/database/technologies/maven-central-guide.html PostgreSQL Global Development Group org.postgresql postgresql 42.7.3 PostgreSQL JDBC Driver Postgresql required f52f459fe317bf7e22327b72b381fc8a 24f3e9f7231428cd20eb4dde00dd3fce44e05464 a2644cbfba1baa145ff7e8c8ef582a6eed7a7ec4ca792f7f054122bdec756268 09683c804732c1b235af6598935956f86b207e5aa434962f0da628db6532a8a262b6e00654e01d4df4731fbe31d23743f09a7cf2ea7d15c7f24b80640f110198 8a3005e83d25be994202b4b4b6ac27fbb2aac76837ab0c6b4f088edc7617e146ad1be198c4ff533df1d4bd13c911ad66 37276f347250d44b622ac88bbc6c08fc60bda3fa2708ab955a6a1f273816ccb939937b951417dc504994916a79cc81dd 163e197835932b0710c85a408f3da7b245634fa3bd066420fe03127d19c9ce2c 9520d2822d2ad0e05f4a00f8215d58eebc0510d4ab5482998358a68442116ac0299e9038f80e38dd2b10fa8153c763f8f4ee3a40d15e30491d43c2016c9077d9 BSD-2-Clause https://opensource.org/licenses/BSD-2-Clause pkg:maven/org.postgresql/postgresql@42.7.3?type=jar https://jdbc.postgresql.orghttps://github.com/pgjdbc/pgjdbc/issueshttps://www.postgresql.org/list/pgsql-jdbc/https://github.com/pgjdbc/pgjdbc org.checkerframework checker-qual 3.46.0 checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework. required 5436ae3f8b4e1dfece73580a232ba98d 829954afc56f1737a1df3ab5aa889de574b97cc4 4bc77a172279304c3f35045d6b9c8492780f047e5ad9919d77431caf29e44401 fc932a2997a3b4392c001490014f7b0f6a2a9148f15b65d4b3de602b18173fd643211f28620e74246aea815ca6d242e9c5be405cac02699151c43e12d1d2f968 d01808ec3a52a3299d8029fff0b8b950ef5866b2a6304d5911549504841d6d4c79709db7322aa17df9f3f91c881b821b b222b5f40971dc288b0d2dfe3baa5cf0f4f0110bf1c17035329f6c706e61a299a232bf9585ad6558be28741b0cd1cf11 d5dd576e144210010adada84644a97f637a70b74452838bb60059e330e499569 21c99845a23f31fec5ba6a8f6ab98fafa68b25f8b2cd572ae1943d47de7dc1ef0176a17ebb772636eddec8f27ef34c47803e79219d5ed4a5a45da4ebf7564c7d MIT pkg:maven/org.checkerframework/checker-qual@3.46.0?type=jar https://checkerframework.org/https://github.com/typetools/checker-framework.git Google LLC com.google.errorprone error_prone_annotations 2.29.2 Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time. required 5f6247dcc6ee86c5ebbe960d4a212472 23bbed35f2d071c8507984834e3e6438c7fee7d2 e0a426b2449af2323cfb539b729e5be6f4d65c72075c9b7b18c8e87e63ac468c 30c2a1c24014df0969b87ac75574e14a95eb9f8f9b1531a17e6e8ced1a79c05081c468daab06ab41e6181e5d77cc65a7ef752d5e12ac371e16d3009099522a2d 01106269724d568a8f1a3aed1fcc759e1cf3eb9c91114ecb3021273ee6036dec58a2f27567d933ca1e9f36212636f7e4 c19354c2d1784b0dd7e031169961f7e05d7a8fb1da2e22e43d0af0125f1ae1adb4c4a62461ac49c57ff14c1ef2105e4d 0459a39bf955285c474f8aa5a24abeeafc093753213cd6f76c839587e36d43e5 d57491f3c0be15295a19f497c48493b79c32d053eefd38096f5eeb719d32a35734ba64b692a72c5718c0b1596183e64aab881d14636d64a5849374479077b538 Apache-2.0 pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar https://errorprone.info/error_prone_annotationshttps://github.com/google/error-prone/error_prone_annotations com.google.j2objc j2objc-annotations 3.0.0 A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation. required f59529b29202a5baf37f491ea5ec8627 7399e65dd7e9ff3404f4535b2f017093bdb134c7 88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64 1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f 24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8 4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152 b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181 Apache-2.0 pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar https://github.com/google/j2objc/https://oss.sonatype.org/service/local/staging/deploy/maven2/http://github.com/google/j2objc org.projectlombok lombok 1.18.34 Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more! required 91ce91dbfa7694bff4ddc1e51643f8b2 ec547ef414ab1d2c040118fb9c1c265ada63af14 c27d6b2aff56241d1b07fcbcc6b183709e6b432c80f7374eeb1d823e86d4b81a 2276a0750ce67ae797648cadcdb43a221405cbb07012a3097a03d0965f45e7865b3a247f089060f1e83dff080594fd79a4f31f2ec69841c99b07b2371a76f3f8 81fa058958eb965a2ac93914a77ebf0b8424cdc8c71d4f949e4ca8029041c3f30943bcf310660870e0cc9858982a63ce 7b13957cbef4197ce52d4a78439c615b5cee4081fb9a38591727146c0d7cfc905747a8e6505d7fc5acdad9cde08f1641 05aa1a70c86a1cf62ce5cecf594b4c7d46052c2e7205a71de2b4fc33ad8e038e a43c333cdab0581e2035d6031498743314dd8e6edf9be9fb3b843b99fc2ec40048f946da6a2c68f64b83b9e40cf64176706507eeb16b9b36782e45dccefe6efa MIT pkg:maven/org.projectlombok/lombok@1.18.34?type=jar https://projectlombok.orghttps://github.com/projectlombok/lombok/issueshttp://github.com/projectlombok/lombok Gaul org.gaul modernizer-maven-annotations 2.9.0 Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ required 638a555dc0ff4c996e8a920215fc8ea4 4de00c50ce237cf7a721ffe907e11f0688538b04 baeca9a46aae8dbe8075058726389112382bc60be811e70886fbaba57c68502f 8077ee42b5bc87710f970dd8c530194effeb9ffbb57a06040a20ac6e5dcb4d9537186c5c0d6c6fed33f7abd5f62c35bb6deb45f22a4f0df2325d3780ff7ed485 6cb32d23c0e0c831956d37f25a8b0db0d383956d821f7576d9d25f93c46b886d9bbc90ba0257e6252944fc58758507eb 22e1cf04abcb318e9637fc83c8b837c169e9b15ee3df614116fdfa92ee78942d0c55490f883492223b5c6bd6519848ea 47314fbc8fc947921438af574cfe5bc815f4cbe8c30eb8253ca4b3984e767c36 c4013e2f94688009aed46b0efe4bc91b23c8a621076371f2affc68cdb63110c25d126865ebbdc2af747cac103d5ae4954e412a3fca08581280de69c98c4c4a87 Apache-2.0 pkg:maven/org.gaul/modernizer-maven-annotations@2.9.0?type=jar http://nexus.sonatype.org/oss-repository-hosting.html/modernizer-maven-parent/modernizer-maven-annotationshttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/gaul/modernizer-maven-plugin/issues com.github.spotbugs spotbugs-annotations 4.8.6 Annotations the SpotBugs tool supports required 0806b237c67c69869506ce3ced9a722f 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8 4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65 ebe5bca26efc72b82c168b65f8f4b1b55768e0464edb9e732e48bcb05b3de7e761e50f0da46e96f02258b4bc4443f4e4a5e7d53956b17161674238b564f6018d ed8acfde5a975f6aa24930caf2889cddeee21226497ca7ca403a25afdc2a6a32d7a6d53cc117143401e3698c87b33159 eca5720d9a38a2dfe8667dd73003e4fd6d3a0503219d4aea539570374bdbe9157dfe945502de2d40b4f20a4caebd2100 59bcae1d85e982281500f515c27f49c292f5b0f57a69204859f9c5243a64917f 0b77811020ea0052e4b799add234754e2f3437b28f0f4f51f49df9de7bad5d97b4262aed175cc16f2d110a7c49adf88d99dc8f12bb2751ca6bff845ba09c473a LGPL-2.1-only pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar https://spotbugs.github.io/https://github.com/spotbugs/spotbugs/ com.google.code.findbugs jsr305 3.0.2 JSR305 Annotations for Findbugs required dd83accb899363c32b07d7a1b2e4ce40 25ea2e8b0c338a877313bd4672d3fe056ea78f0d 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804 ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4 9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1 223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff 3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/