4.0.0 org.owasp dependency-check-parent 12.2.0 dependency-check-core jar Dependency-Check Core dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report. scm:git:https://github.com/dependency-check/DependencyCheck.git https://github.com/dependency-check/DependencyCheck/tree/main/core scm:git:git@github.com/dependency-check/DependencyCheck.git v12.2.0 src/main/resources **/*.properties **/schema/*.xsd true ${basedir}/src/main/resources/templates templates csvReport.vsl true ${basedir}/src/main/resources/templates templates csvReport.vsl false ${basedir}/.. META-INF LICENSE.txt NOTICE.txt src/main/resources **/*.properties **/*.gif **/*.js **/schema/**/*.xsd **/schema/**/*.xml **/schema/**/*.bat **/schema/**/*.sh false src/test/resources **/*.properties true ${basedir}/../src/test/resources false ${basedir}/src/test/resources false io.github.download-maven-plugin download-maven-plugin download-published-suppressions generate-resources wget https://dependency-check.github.io/DependencyCheck/suppressions/publishedSuppressions.xml ${project.build.directory}/classes dependencycheck-hosted-suppression-snapshot.xml org.jsonschema2pojo jsonschema2pojo-maven-plugin generate-knownexploited generate-sources generate false ${basedir}/src/main/resources/schema/external/cisa ${project.build.directory}/generated-sources/java true jackson org.owasp.dependencycheck.data.knownexploited.json org.apache.maven.plugins maven-javadoc-plugin ${project.build.directory}/generated-sources/java/**/*.java org.apache.maven.plugins maven-dependency-plugin generate-resources copy-dependencies ${project.build.directory}/test-classes test dependency-check-utils org.apache.maven.plugins maven-resources-plugin org.apache.maven.plugins maven-jar-plugin test-jar package test-jar **/*.class io.github.jeremylong open-vulnerability-clients org.anarres.jdiagnostics jdiagnostics org.whitesource pecoff4j io.github.jeremylong jcs3-slf4j org.apache.commons commons-jcs3-core com.github.package-url packageurl-java us.springett cpe-parser org.semver4j semver4j org.slf4j slf4j-api ch.qos.logback logback-classic test ch.qos.logback logback-core test org.owasp dependency-check-utils ${project.parent.version} org.apache.lucene lucene-test-framework test org.apache.commons commons-collections4 org.apache.commons commons-compress commons-io commons-io org.apache.commons commons-lang3 org.apache.commons commons-text org.apache.commons commons-dbcp2 org.apache.lucene lucene-core org.apache.lucene lucene-analysis-common org.apache.lucene lucene-queryparser org.slf4j jul-to-slf4j org.apache.velocity velocity-engine-core com.h2database h2 compile org.eclipse.parsson jakarta.json org.jsoup jsoup com.fasterxml.jackson.core jackson-databind com.fasterxml.jackson.datatype jackson-datatype-jsr310 com.fasterxml.jackson.module jackson-module-blackbird com.fasterxml.jackson.dataformat jackson-dataformat-yaml com.h3xstream.retirejs retirejs-core org.sonatype.ossindex ossindex-service-client com.google.guava guava com.moandjiezana.toml toml4j 0.7.2 com.hankcs aho-corasick-double-array-trie org.mockito mockito-junit-jupiter test commons-validator commons-validator org.eclipse.packager packager-rpm org.apache.httpcomponents.core5 httpcore5 org.apache.httpcomponents.client5 httpclient5 com.fasterxml.jackson.core jackson-core com.fasterxml.jackson.core jackson-annotations org.sonatype.goodies package-url-java 1.2.0 joda-time joda-time 2.14.0 org.sonatype.ossindex ossindex-service-api 1.8.2 com.esotericsoftware minlog 1.3.1 com.vaadin.external.google android-json 0.0.20131108.vaadin1 xml-apis xml-apis 1.4.01 test TestMavenPlugin-core testMavenPlugin org.apache.maven.plugins maven-surefire-plugin true org.apache.maven.plugins maven-failsafe-plugin true MySQL-IntegrationTest mysql org.apache.maven.plugins maven-failsafe-plugin ${driver_path} ${driver_name} ${connection_string} **/*MySqlIT.java integration-test verify Postgresql-IntegrationTest postgresql org.postgresql postgresql 42.7.8 org.apache.maven.plugins maven-failsafe-plugin ${driver_path} ${driver_name} ${connection_string} **/*MySqlIT.java integration-test verify test-dependencies true org.apache.maven.plugins maven-dependency-plugin ${maven-dependency-plugin.version} org.springframework:spring-webmvc org.mortbay.jetty:jetty net.sf.ehcache:ehcache-core com.google.inject:guice org.apache.struts:struts2-core xalan:xalan com.hazelcast:hazelcast commons-fileupload:commons-fileupload org.jslipc:jslipc com.thoughtworks.xstream:xstream org.dojotoolkit:dojo-war org.apache.openjpa:openjpa uk.ltd.getahead:dwr org.glassfish.main.admingui:war org.springframework.retry:spring-retry io.github.faob-dev:aar org.apache.maven.scm:maven-scm-provider-cvsexe org.apache.axis2:axis2-spring org.apache.geronimo.daytrader:daytrader-ear org.springframework.security:spring-security-web org.apache.axis2:axis2-adb io.github.faob-dev aar 1.0.0 aar test true org.jslipc jslipc 0.2.0 test true org.apache.maven.scm maven-scm-provider-cvsexe 1.8.1 test true org.springframework spring-webmvc 2.5.5 test true org.springframework.security spring-security-web 3.0.0.RELEASE test true com.hazelcast hazelcast 2.5 test true net.sf.ehcache ehcache-core 2.2.0 test true org.apache.struts struts2-core 2.1.2 test true org.mortbay.jetty jetty 6.1.0 test true org.apache.axis2 axis2-spring 1.4.1 test true org.apache.axis2 axis2-adb 1.4.1 test true org.apache.geronimo.daytrader daytrader-ear 2.1.7 ear test true org.glassfish.main.admingui war 4.0 war test true org.dojotoolkit dojo-war 1.3.0 war test true org.apache.openjpa openjpa 2.0.1 test true com.google.inject guice 3.0 test true org.springframework.retry spring-retry 1.1.0.RELEASE test true uk.ltd.getahead dwr 1.1.1 test true xalan xalan 2.7.0 test true com.thoughtworks.xstream xstream 1.4.8 test true commons-fileupload commons-fileupload 1.2.1 test true