Dependency-Check Core dependency-check-core

Parent	dependency-check-parent
Group	org.owasp
描述	dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report.
Packaging	jar
Size	587.80 KB
文件	pom jar
发布时间	2018-04-02 23:38

dependencies

Group	Artifact	Version
com.vdurmont	semver4j
joda-time	joda-time
com.google.code.findbugs	annotations
org.slf4j	slf4j-api
ch.qos.logback	logback-classic
org.owasp	dependency-check-utils	3.1.2
org.apache.lucene	lucene-test-framework
org.jmockit	jmockit
org.apache.commons	commons-compress
commons-io	commons-io
org.apache.commons	commons-lang3
org.apache.lucene	lucene-core
org.apache.lucene	lucene-analyzers-common
org.apache.lucene	lucene-queryparser
org.apache.velocity	velocity
com.h2database	h2
org.glassfish	javax.json
org.jsoup	jsoup
com.sun.mail	mailapi
com.google.code.gson	gson
org.apache.maven.scm	maven-scm-provider-cvsexe	1.8.1
org.springframework	spring-webmvc	2.5.5
org.springframework.security	spring-security-web	3.0.0.RELEASE
com.hazelcast	hazelcast	2.5
net.sf.ehcache	ehcache-core	2.2.0
org.apache.struts	struts2-core	2.1.2
org.mortbay.jetty	jetty	6.1.0
org.apache.axis2	axis2-spring	1.4.1
org.apache.axis2	axis2-adb	1.4.1
org.apache.geronimo.daytrader	daytrader-ear	2.1.7
org.glassfish.main.admingui	war	4.0
org.dojotoolkit	dojo-war	1.3.0
org.apache.openjpa	openjpa	2.0.1
com.google.inject	guice	3.0
org.springframework.retry	spring-retry	1.1.0.RELEASE
uk.ltd.getahead	dwr	1.1.1
xalan	xalan	2.7.0
com.thoughtworks.xstream	xstream	1.4.8

developers

licenses