Dependency-Check Core dependency-check-core

Parent	dependency-check-parent
Group	org.owasp
描述	dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report.
Packaging	jar
Size	128.0 bytes
文件	pom jar
发布时间	2020-09-07 22:26

dependencies

Group	Artifact	Version
org.anarres.jdiagnostics	jdiagnostics
org.whitesource	pecoff4j
org.apache.commons	commons-jcs-core
com.github.package-url	packageurl-java
us.springett	cpe-parser
com.vdurmont	semver4j
org.slf4j	slf4j-api
ch.qos.logback	logback-classic
org.owasp	dependency-check-utils	6.0.0
org.apache.lucene	lucene-test-framework
commons-collections	commons-collections
org.apache.commons	commons-compress
commons-io	commons-io
org.apache.commons	commons-lang3
org.apache.commons	commons-text
org.apache.lucene	lucene-core
org.apache.lucene	lucene-analyzers-common
org.apache.lucene	lucene-queryparser
org.apache.velocity	velocity-engine-core
com.h2database	h2
org.glassfish	javax.json
org.jsoup	jsoup
com.sun.mail	mailapi
com.fasterxml.jackson.core	jackson-databind
com.fasterxml.jackson.module	jackson-module-afterburner
com.google.guava	guava
com.h3xstream.retirejs	retirejs-core
org.sonatype.ossindex	ossindex-service-client
com.moandjiezana.toml	toml4j	0.7.2
com.hankcs	aho-corasick-double-array-trie
org.mockito	mockito-core
io.github.faob-dev	aar	1.0.0
org.jslipc	jslipc	0.2.0
org.apache.maven.scm	maven-scm-provider-cvsexe	1.8.1
org.springframework	spring-webmvc	2.5.5
org.springframework.security	spring-security-web	3.0.0.RELEASE
com.hazelcast	hazelcast	2.5
net.sf.ehcache	ehcache-core	2.2.0
org.apache.struts	struts2-core	2.1.2
org.mortbay.jetty	jetty	6.1.0
org.apache.axis2	axis2-spring	1.4.1
org.apache.axis2	axis2-adb	1.4.1
org.apache.geronimo.daytrader	daytrader-ear	2.1.7
org.glassfish.main.admingui	war	4.0
org.dojotoolkit	dojo-war	1.3.0
org.apache.openjpa	openjpa	2.0.1
com.google.inject	guice	3.0
org.springframework.retry	spring-retry	1.1.0.RELEASE
uk.ltd.getahead	dwr	1.1.1
xalan	xalan	2.7.0
com.thoughtworks.xstream	xstream	1.4.8
commons-fileupload	commons-fileupload	1.2.1
commons-validator	commons-validator
commons-beanutils	commons-beanutils

developers

licenses