Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 1.4.4
Report Generated On: Dec 26, 2016 at 09:35:17 UTC
Dependencies Scanned: 10 (10 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 16/12/2016 08:30:11
NVD CVE 2003: 20/12/2016 08:20:36
NVD CVE 2004: 20/12/2016 08:20:02
NVD CVE 2005: 20/12/2016 08:18:56
NVD CVE 2006: 20/12/2016 08:17:07
NVD CVE 2007: 16/12/2016 08:23:42
NVD CVE 2008: 20/12/2016 08:14:05
NVD CVE 2009: 22/12/2016 08:19:30
NVD CVE 2010: 24/12/2016 08:17:06
NVD CVE 2011: 24/12/2016 08:14:31
NVD CVE 2012: 24/12/2016 08:11:27
NVD CVE 2013: 24/12/2016 08:09:13
NVD CVE 2014: 24/12/2016 08:06:49
NVD CVE 2015: 24/12/2016 08:04:15
NVD CVE 2016: 26/12/2016 08:02:23
NVD CVE Checked: 26/12/2016 09:35:08
NVD CVE Modified: 26/12/2016 06:02:40
VersionCheckOn: 1482744908850

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	GAV	Evidence Count
auto-value-1.4-rc2.jar		9
gson-2.8.0.jar	com.google.code.gson:gson:2.8.0	15
commons-lang3-3.5.jar	org.apache.commons:commons-lang3:3.5	29
annotations-java5-15.0.jar	org.jetbrains:annotations-java5:15.0	15
slf4j-api-1.7.22.jar	org.slf4j:slf4j-api:1.7.22	21
auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.value/auto-value/pom.xml	com.google.auto.value:auto-value:1.4-rc2	8
auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto/auto-common/pom.xml	com.google.auto:auto-common:0.8	8
auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.service/auto-service/pom.xml	com.google.auto.service:auto-service:1.0-rc2	8
auto-value-1.4-rc2.jar/META-INF/maven/com.google.guava/guava/pom.xml	com.google.guava:guava:19.0	7
auto-value-1.4-rc2.jar/META-INF/maven/com.squareup/javapoet/pom.xml	com.squareup:javapoet:1.7.0	7

Dependencies

auto-value-1.4-rc2.jar

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar
MD5: d1732518f05a366bcdd229e1b0c94a0f
SHA1: f7a9e93b5b5c15a7b9f3abc29c036be3cf836593
Referenced In Project/Scope: Geocaching API for Java:provided

Evidence

Source	Name	Value
file	name	auto-value
file	version	1.4.rc2
jar	package name	autovalue
jar	package name	com
jar	package name	google$
jar	package name	shaded
pom	artifactid	auto-value
pom	groupid	com.google.auto.value
pom	version	1.4-rc2

Identifiers

None

gson-2.8.0.jar

File Path: /home/travis/.m2/repository/com/google/code/gson/gson/2.8.0/gson-2.8.0.jar
MD5: a42f1f5bfa4e6f123ddcab3de7e0ff81
SHA1: c4ba5371a29ac9b2ad6129b1d39ea38750043eff
Referenced In Project/Scope: Geocaching API for Java:compile

Evidence

Source	Name	Value
central	artifactid	gson
central	groupid	com.google.code.gson
central	version	2.8.0
file	name	gson
file	version	2.8.0
jar	package name	google
jar	package name	gson
jar	package name	internal
pom	artifactid	gson
pom	groupid	com.google.code.gson
pom	groupid	google.code.gson
pom	name	Gson
pom	parent-artifactid	gson-parent
pom	parent-groupid	com.google.code.gson
pom	version	2.8.0

Identifiers

maven: com.google.code.gson:gson:2.8.0 Confidence:HIGHEST

commons-lang3-3.5.jar

Description: Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/travis/.m2/repository/org/apache/commons/commons-lang3/3.5/commons-lang3-3.5.jar
MD5: 780b5a8b72eebe6d0dbff1c11b5658fa
SHA1: 6c6c702c89bfff3cd9e80b04d668c5e190d588c6
Referenced In Project/Scope: Geocaching API for Java:compile

Evidence

Source	Name	Value
central	artifactid	commons-lang3
central	groupid	org.apache.commons
central	version	3.5
file	name	commons-lang3
file	version	3.5
manifest	Bundle-Description	Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
Manifest	bundle-docurl	http://commons.apache.org/proper/commons-lang/
Manifest	Bundle-Name	Apache Commons Lang
Manifest	bundle-symbolicname	org.apache.commons.lang3
Manifest	Bundle-Version	3.5.0
Manifest	implementation-build	release@r36f98d87b24c2f542b02abbf6ec1ee742f1b158b; 2016-10-13 19:52:17+0000
Manifest	Implementation-Title	Apache Commons Lang
Manifest	implementation-url	http://commons.apache.org/proper/commons-lang/
Manifest	Implementation-Vendor	The Apache Software Foundation
Manifest	Implementation-Vendor-Id	org.apache
Manifest	Implementation-Version	3.5
Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"
Manifest	specification-title	Apache Commons Lang
Manifest	specification-vendor	The Apache Software Foundation
pom	artifactid	commons-lang3
pom	description	Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
pom	groupid	apache.commons
pom	groupid	org.apache.commons
pom	name	Apache Commons Lang
pom	parent-artifactid	commons-parent
pom	parent-groupid	org.apache.commons
pom	parent-version	3.5
pom	url	http://commons.apache.org/proper/commons-lang/
pom	version	3.5

Identifiers

maven: org.apache.commons:commons-lang3:3.5 Confidence:HIGHEST

annotations-java5-15.0.jar

Description: A set of annotations used for code inspection support and code documentation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/travis/.m2/repository/org/jetbrains/annotations-java5/15.0/annotations-java5-15.0.jar
MD5: 88a0a5ed0afe149bd05bdcb98d8005ce
SHA1: 7011b4551a8451906759b05814c58b9eb829ea9b
Referenced In Project/Scope: Geocaching API for Java:compile

Evidence

Source	Name	Value
central	artifactid	annotations-java5
central	groupid	org.jetbrains
central	version	15.0
file	name	annotations-java5
file	version	15.0
jar	package name	annotations
jar	package name	intellij
jar	package name	lang
pom	artifactid	annotations-java5
pom	description	A set of annotations used for code inspection support and code documentation.
pom	groupid	jetbrains
pom	groupid	org.jetbrains
pom	name	IntelliJ IDEA Annotations
pom	url	http://www.jetbrains.org
pom	version	15.0

Identifiers

maven: org.jetbrains:annotations-java5:15.0 Confidence:HIGHEST

slf4j-api-1.7.22.jar

Description: The slf4j API

File Path: /home/travis/.m2/repository/org/slf4j/slf4j-api/1.7.22/slf4j-api-1.7.22.jar
MD5: 897d990eb5463fd5288092524c105769
SHA1: a1c83373863cec7ae8d89dc1c5722d8cb6ec0309
Referenced In Project/Scope: Geocaching API for Java:compile

Evidence

Source	Name	Value
central	artifactid	slf4j-api
central	groupid	org.slf4j
central	version	1.7.22
file	name	slf4j-api
file	version	1.7.22
manifest	Bundle-Description	The slf4j API
Manifest	Bundle-Name	slf4j-api
Manifest	bundle-requiredexecutionenvironment	J2SE-1.5
Manifest	bundle-symbolicname	slf4j.api
Manifest	Bundle-Version	1.7.22
Manifest	Implementation-Title	slf4j-api
Manifest	Implementation-Version	1.7.22
pom	artifactid	slf4j-api
pom	description	The slf4j API
pom	groupid	org.slf4j
pom	groupid	slf4j
pom	name	SLF4J API Module
pom	parent-artifactid	slf4j-parent
pom	parent-groupid	org.slf4j
pom	url	http://www.slf4j.org
pom	version	1.7.22

Identifiers

maven: org.slf4j:slf4j-api:1.7.22 Confidence:HIGHEST

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.value/auto-value/pom.xml

Description: Immutable value-type code generation for Java 1.6+.

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.value/auto-value/pom.xml
MD5: 9f9c4c024fbbfdaf4e06109293480609
SHA1: f29369c0bf3fb06a8c1307719e37e40917c218b7

Evidence

Source	Name	Value
pom	artifactid	auto-value
pom	description	Immutable value-type code generation for Java 1.6+.
pom	groupid	google.auto.value
pom	name	AutoValue
pom	parent-artifactid	auto-parent
pom	parent-groupid	com.google.auto
pom	parent-version	1.4-rc2
pom	version	1.4-rc2

Identifiers

maven: com.google.auto.value:auto-value:1.4-rc2 Confidence:HIGH

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto/auto-common/pom.xml

Description: Common utilities for creating annotation processors.

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto/auto-common/pom.xml
MD5: 307b464b186b33367225b6a0b447509b
SHA1: 11c7c2185f910f49b7e167a80be6d4ecb5e9b6e8

Evidence

Source	Name	Value
pom	artifactid	auto-common
pom	description	Common utilities for creating annotation processors.
pom	groupid	google.auto
pom	name	Auto Common Libraries
pom	parent-artifactid	auto-parent
pom	parent-groupid	com.google.auto
pom	parent-version	0.8
pom	version	0.8

Identifiers

maven: com.google.auto:auto-common:0.8 Confidence:HIGH

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.service/auto-service/pom.xml

Description: Provider-configuration files for ServiceLoader.

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.service/auto-service/pom.xml
MD5: 6d53a7ff022361e6afc1c7e66b8fa92e
SHA1: 601132d8274edf5903e57fb229dbd15bbe9e8656

Evidence

Source	Name	Value
pom	artifactid	auto-service
pom	description	Provider-configuration files for ServiceLoader.
pom	groupid	google.auto.service
pom	name	AutoService
pom	parent-artifactid	auto-parent
pom	parent-groupid	com.google.auto
pom	parent-version	1.0-rc2
pom	version	1.0-rc2

Identifiers

maven: com.google.auto.service:auto-service:1.0-rc2 Confidence:HIGH

auto-value-1.4-rc2.jar/META-INF/maven/com.google.guava/guava/pom.xml

Description: Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar/META-INF/maven/com.google.guava/guava/pom.xml
MD5: 04895ad6e0bbac1bafbf68be0cd1d4c1
SHA1: 65a43a21dbddcc19aa3ca50a63a4b33166bfbc77

Evidence

Source	Name	Value
pom	artifactid	guava
pom	description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.
pom	groupid	google.guava
pom	name	Guava: Google Core Libraries for Java
pom	parent-artifactid	guava-parent
pom	parent-groupid	com.google.guava
pom	version	19.0

Identifiers

maven: com.google.guava:guava:19.0 Confidence:HIGH

auto-value-1.4-rc2.jar/META-INF/maven/com.squareup/javapoet/pom.xml

Description: Use beautiful Java code to generate beautiful Java code.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/travis/.m2/repository/com/google/auto/value/auto-value/1.4-rc2/auto-value-1.4-rc2.jar/META-INF/maven/com.squareup/javapoet/pom.xml
MD5: b6a91a9fef1421a218f3fc970a63046e
SHA1: c40acc470df2a6ffb0803c3e3befcb63b50152c1

Evidence

Source	Name	Value
pom	artifactid	javapoet
pom	description	Use beautiful Java code to generate beautiful Java code.
pom	groupid	squareup
pom	name	JavaPoet
pom	organization name	http://squareup.com
pom	url	http://github.com/square/javapoet/
pom	version	1.7.0

Identifiers

maven: com.squareup:javapoet:1.7.0 Confidence:HIGH

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: Geocaching API for Java

Dependencies

auto-value-1.4-rc2.jar

Evidence

Identifiers

gson-2.8.0.jar

Evidence

Identifiers

commons-lang3-3.5.jar

Evidence

Identifiers

annotations-java5-15.0.jar

Evidence

Identifiers

slf4j-api-1.7.22.jar

Evidence

Identifiers

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.value/auto-value/pom.xml

Evidence

Identifiers

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto/auto-common/pom.xml

Evidence

Identifiers

auto-value-1.4-rc2.jar/META-INF/maven/com.google.auto.service/auto-service/pom.xml

Evidence

Identifiers

auto-value-1.4-rc2.jar/META-INF/maven/com.google.guava/guava/pom.xml

Evidence

Identifiers

auto-value-1.4-rc2.jar/META-INF/maven/com.squareup/javapoet/pom.xml

Evidence

Identifiers