A maven plugin that allows for maven and gradle project (Java based) to be scanned for security vulnerabilities. The generated report is published to
to a central private server @ reshift.softwaresecured.com in which users that have access to the projects can view security reports and perform other developer actions
| Categories | Maven Plugins |
|---|---|
| Tags | pluginreporterbuildbuild-systemmavenreport |
| Organization | Software Secured |
| HomePage | https://reshift.softwaresecured.com |
| Date | Nov 13, 2018 |
| Files | pom (12 KB) maven-plugin (26.4 MB) View All |
| Repositories | Central |
| Ranking | #481859 in MvnRepository (See Top Artifacts) #2670 in Maven Plugins |
| Vulnerabilities | Vulnerabilities from dependencies: CVE-2024-47554 CVE-2023-4759 CVE-2023-2976 View 5 more ... |
Compile Dependencies (10)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Maven Plugins Apache 2.0 |  | com.github.spotbugs » spotbugs-maven-plugin | 3.1.6 | 4.9.3.0 |
| Core Utils Apache 2.0 |  | com.google.guava » guava2 vulnerabilities | 27.0-jre | 33.4.8-jre |
| JSON Lib Apache 2.0 | | com.googlecode.json-simple » json-simple | 1.1.1 | ✔ |
LGPL |  | com.h3xstream.findsecbugs » findsecbugs-plugin | 1.8.0 | 1.14.0 |
MIT |  | com.kstruct » gethostname4j | 0.0.2 | 1.0.0 |
| I/O Apache 2.0 |  | commons-io » commons-io2 vulnerabilities | 2.6 | 2.19.0 |
| Build Model Apache 2.0 |  | org.apache.maven » maven-plugin-api | 3.5.4 | 3.9.9 |
MIT |  | org.capnproto » runtime | 0.1.3 | 0.1.16 |
| Git Tool BSD 3-clauseEDL 1.0 |  | org.eclipse.jgit » org.eclipse.jgit1 vulnerability | 5.1.3.201810200350-r | 7.2.1.202505142326-r |
 | org.gradle » gradle-language-java | 3.4 | 6.1.1 |
Provided Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Build Tool Apache 2.0 | | org.apache.maven » maven-core1 vulnerability | 3.5.0 | 3.9.9 |
| Annotation Lib Apache 2.0 | | org.apache.maven.plugin-tools » maven-plugin-annotations | 3.4 | 3.15.1 |
| Build Tool | | org.gradle » gradle-core2 vulnerabilities | 3.4.1 | 6.1.1 |
| org.gradle » gradle-plugins | 3.4 | 6.1.1 |
Licenses
| License | URL |
|---|---|
| Commercial Proprietary License | https://reshift.softwaresecured.com/tou-plugin |
Developers
| Name | Dev Id | Roles | Organization | |
|---|---|---|---|---|
| Quan Nguyen | qnguyen<at>softwaresecured.com | Software Secured Cautus |