Compile Dependencies (50)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Apache 2.0
| com.ethlo.time
»
itu Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format | 1.7.0 | 1.14.0 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-core Core Jackson processing abstractions (aka Streaming API), implementation for JSON | 2.16.0 | 3.2.1 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-databind4 vulnerabilities General data-binding functionality for Jackson: works on core streaming API | 2.16.0 | 3.2.1 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-annotations Core annotations used for value types, used by Jackson data binding package. | 2.16.0 | 2.22 | |
XML Processing
Apache 2.0
| com.fasterxml.jackson.dataformat
»
jackson-dataformat-xml Data format extension for Jackson to offer | 2.16.0 | 3.2.1 | |
YAML
Apache 2.0
| com.fasterxml.jackson.dataformat
»
jackson-dataformat-yaml Support for reading and writing YAML-encoded data via Jackson abstractions. | 2.16.0 | 3.2.1 | |
Date/Time
Apache 2.0
| com.fasterxml.jackson.datatype
»
jackson-datatype-jsr310 Add-on module to support JSR-310 (Java 8 Date & Time API) data types. | 2.16.0 | 3.0.0-rc2 | |
XML Processing
Apache 2.0
| com.fasterxml.woodstox
»
woodstox-core Woodstox is a high-performance XML processor that implements Stax (JSR-173), | 6.5.1 | 7.2.1 | |
MIT
| com.github.package-url
»
packageurl-java The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal | 1.4.1 | 1.5.0 | |
Code Analyzer
LGPL 2.1
| com.google.code.findbugs
»
jsr305 Annotations the SpotBugs tool supports | 3.0.2 | 4.10.3 | |
JSON Lib
Apache 2.0
| com.google.code.gson
»
gson Gson is a Java library that can be used to convert Java Objects into their JSON representation. It can also be used to ... | 2.8.9 | 2.14.0 | |
Collections
Apache 2.0
| com.googlecode.javaewah
»
JavaEWAH The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without ... | 1.2.3 | ✔ | |
JSON Lib
Apache 2.0
| com.networknt
»
json-schema-validator A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12 | 1.0.87 | 3.0.6 | |
Apache 2.0
| com.neuvector
»
scanner The NeuVector Scanner API is a Java toolkit for scanning docker repositories and docker images. | 1.11 | 1.13 | |
XML Processing
BSD 3-clause
| com.thoughtworks.xstream
»
xstream1 vulnerability XStream is a simple and fast library to serialize objects to XML and back again with a low memory footprint. | 1.4.20 | 1.4.21 | |
Base64
Apache 2.0
| commons-codec
»
commons-codec The Apache Commons Codec component contains encoders and decoders for | 1.11 | 1.22.0 | |
EPL 1.0
| de.schlichtherle.truezip
»
truezip-file This module provides the TFile* classes | 7.7.10 | ✔ | |
EPL 1.0
| de.schlichtherle.truezip
»
truezip-kernel This module implements virtual file systems from arbitrary resources, | 7.7.10 | ✔ | |
EPL 1.0
| de.schlichtherle.truezip
»
truezip-driver-zip The file system driver family for ZIP and related archive file types. | 7.7.10 | ✔ | |
EPL 1.0
| de.schlichtherle.truezip
»
truezip-driver-file The file system driver family for the FILE scheme. | 7.7.10 | ✔ | |
EPL 1.0
| de.schlichtherle.truezip
»
truezip-driver-tar The file system driver family for TAR and related archive file types. | 7.7.10 | ✔ | |
Parser Generator
BSD 3-clause
| org.antlr
»
antlr4-runtime The ANTLR 4 Runtime | 4.7.2 | 4.13.2 | |
Compression
Apache 2.0
| org.apache.commons
»
commons-compress2 vulnerabilities Apache Commons Compress defines an API for working with | 1.21 | 1.28.0 | |
Core Utils
Apache 2.0
| org.apache.commons
»
commons-lang31 vulnerability Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are ... | 3.14.0 | 3.20.0 | |
MIME Types Lib
Apache 2.0
| org.apache.httpcomponents
»
httpmime Apache HttpComponents Client | 4.5.14 | 5.6.2 | |
HTTP Clients
Apache 2.0
| org.apache.httpcomponents
»
httpclient Apache HttpComponents Client | 4.5.13 | 5.6.2 | |
HTTP Clients
Apache 2.0
| org.apache.httpcomponents
»
httpcore Apache HttpComponents HTTP/1.1 core components | 4.4.13 | 5.4.3 | |
Build Model
Apache 2.0
| org.apache.maven
»
maven-artifact Interface and implementation of Maven Artifact model | 3.9.2 | 3.9.16 | |
Build Model
Apache 2.0
| org.apache.maven
»
maven-model Model for Maven POM (Project Object Model) | 3.9.2 | 3.9.16 | |
Lang Runtime
Apache 2.0
| org.codehaus.groovy
»
groovy Groovy: A powerful multi-faceted language for the JVM | 2.4.21 | 5.0.7 | |
Core Utils
Apache 2.0
| org.codehaus.plexus
»
plexus-utils1 vulnerability A collection of various utility classes to ease working with strings, files, command lines and | 3.5.1 | 4.0.3 | |
BSD 2-clause
| org.codehaus.woodstox
»
stax2-api Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured ... | 4.2.1 | 4.3.0 | |
Apache 2.0
| org.cyclonedx
»
cyclonedx-core-java2 vulnerabilities The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, ... | 8.0.3 | 12.2.0 | |
Git Tool
BSD 3-clause +1
| org.eclipse.jgit
»
org.eclipse.jgit1 vulnerability Repository access and algorithms | 6.7.0.202309050840-r | 7.7.0.202606012155-r | |
JSON Lib
Public
| org.json
»
json JSON is a light-weight, language independent, data interchange format. | 20231013 | 20260522 | |
HTML Parser
MIT
| org.jsoup
»
jsoup jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL ... | 1.15.3 | 1.22.2 | |
Bytecode
BSD 3-clause
| org.ow2.asm
»
asm ASM, a very small and fast Java bytecode manipulation framework | 9.4 | 9.10.1 | |
Bytecode
BSD 3-clause
| org.ow2.asm
»
asm-tree Tree API of ASM, a very small and fast Java bytecode manipulation framework | 9.4 | 9.10.1 | |
| org.semver4j
»
semver4j Semantic versioning for Java apps. | 4.2.1 | 6.0.0 | ||
Logging
MIT
| org.slf4j
»
slf4j-api API for SLF4J (The Simple Logging Facade for Java) which serves as a simple facade or abstraction for various logging ... | 2.0.11 | 2.0.18 | |
Logging Bridge
Apache 2.0
| org.slf4j
»
jcl-over-slf4j Jakarta/Apache commons logging 1.2 implemented over SLF4J | 1.7.36 | 2.0.18 | |
EPL 1.0
| org.sonatype.aether
»
aether-util A collection of utility classes to ease usage of the repository system. | 1.13.1 | 1.1.0 | |
Maven Repo API
EPL 1.0
| org.sonatype.aether
»
aether-api The application programming interface for the repository system. | 1.13.1 | 1.1.0 | |
Apache 2.0
| org.spdx
»
java-spdx-library Java library which implements the Java object model for SPDX and provides useful helper functions. | 1.1.10 | 2.0.4 | |
Apache 2.0
| org.spdx
»
spdx-jackson-store Storage for SPDX documents utilizing Jackson Databind. | 1.1.9 | 2.0.6 | |
Apache 2.0
| org.tomlj
»
tomlj A parser for Tom's Obvious, Minimal Language (TOML). | 1.0.0 | 1.1.1 | |
| org.tukaani
»
xz XZ data compression | 1.5 | 1.12 | ||
YAML
Apache 2.0
| org.yaml
»
snakeyaml YAML 1.1 parser and emitter for Java | 2.2 | 2.6 | |
External Proc Exec
Apache 2.0
| org.zeroturnaround
»
zt-exec A lightweight library to execute external processes from Java. | 1.11 | 1.13.0 | |
XML Processing
CC0 1.0 +1
| xpp3
»
xpp3_min MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised ... | 1.1.4c | ✔ |