Compile Dependencies (50)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
GPL +1
| ca.uhn.hapi » hapi-base | 2.1 | 2.6.0 | |
GPL +1
| ca.uhn.hapi » hapi-structures-v23 | 2.1 | 2.6.0 | |
GPL +1
| ca.uhn.hapi » hapi-structures-v24 | 2.1 | 2.6.0 | |
GPL +1
| ca.uhn.hapi » hapi-structures-v25 | 2.1 | 2.6.0 | |
GPL +1
| ca.uhn.hapi » hapi-structures-v26 | 2.1 | 2.6.0 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-core2 vulnerabilities Core Jackson processing abstractions (aka Streaming API), implementation for JSON | 2.9.8 | 3.2.1 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-annotations Core annotations used for value types, used by Jackson data binding package. | 2.9.8 | 2.22 | |
JSON Lib
Apache 2.0
| com.fasterxml.jackson.core
»
jackson-databind55 vulnerabilities General data-binding functionality for Jackson: works on core streaming API | 2.9.8 | 3.2.1 | |
XML Processing
BSD 3-clause
| com.thoughtworks.xstream
»
xstream33 vulnerabilities XStream is a simple and fast library to serialize objects to XML and back again with a low memory footprint. | 1.4.11.1 | 1.4.21 | |
Reflection
Apache 2.0
| commons-beanutils
»
commons-beanutils3 vulnerabilities Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection. | 1.9.3 | 1.11.0 | |
Collections
Apache 2.0
| commons-collections
»
commons-collections The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. | 3.2.2 | 4.5.0 | |
I/O
Apache 2.0
| commons-io
»
commons-io2 vulnerabilities The Apache Commons IO library contains utility classes, stream implementations, file filters, | 2.5 | 2.22.0 | |
Validation
Apache 2.0
| commons-validator
»
commons-validator Apache Commons Validator provides the building blocks for both client-side and server-side data validation. | 1.4.0 | 1.10.1 | |
XML Processing
BSD 3-clause
| dom4j
»
dom4j2 vulnerabilities flexible XML framework for Java | 1.6.1 | 2.2.0 | |
Mail Client
CDDL +1
| javax.mail » mail | 1.4.1 | 1.6.2 | |
Validation
Apache 2.0
| javax.validation
»
validation-api JavaBeans Validation (Bean Validation) is a validation model that can add constraints to the beans with annotations ... | 1.0.0.GA | 3.1.1 | |
Logging
Apache 2.0
| log4j
»
log4j6 vulnerabilities Implementation for Apache Log4J, a highly configurable logging tool that focuses on performance and low garbage ... | 1.2.17 | 2.26.1 | |
Cache Impl
Apache 2.0
| net.sf.ehcache
»
ehcache End-user ehcache3 jar artifact | 2.10.6 | 3.12.0 | |
Core Utils
Apache 2.0
| org.apache.commons
»
commons-lang31 vulnerability Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are ... | 3.9 | 3.20.0 | |
Apache 2.0
| org.apache.lucene
»
lucene-queryparser Apache Lucene (module: queryparser) | 4.10.4 | 10.5.0 | |
Apache 2.0
| org.apache.lucene
»
lucene-queries Apache Lucene (module: queries) | 4.10.4 | 10.5.0 | |
Template Engine
Apache 2.0
| org.apache.velocity
»
velocity1 vulnerability Core module of Apache Velocity, a Java-based template engine for generating text output. | 1.6.2 | 2.4.1 | |
AOP
EPL 2.0
| org.aspectj
»
aspectjrt The AspectJ runtime is a small library necessary to run Java programs enhanced by AspectJ aspects during a previous | 1.9.4 | 1.9.25.1 | |
AOP
EPL 2.0
| org.aspectj
»
aspectjweaver The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time | 1.9.4 | 1.9.25.1 | |
Reflection
Apache 2.0 +1
| org.azeckoski
»
reflectutils A set of reflection utilities and miscellaneous utilities related to | 0.9.20 | ✔ | |
Lang Runtime
Apache 2.0
| org.codehaus.groovy
»
groovy-all2 vulnerabilities Groovy: A powerful multi-faceted language for the JVM | 2.4.6 | 5.0.7 | |
JSON Lib
Apache 2.0
| org.codehaus.jackson
»
jackson-core-asl Core Jackson processing abstractions (aka Streaming API), implementation for JSON | 1.9.13 | 2.22.1 | |
JSON Lib
Apache 2.0
| org.codehaus.jackson
»
jackson-mapper-asl2 vulnerabilities General data-binding functionality for Jackson: works on core streaming API | 1.9.13 | 2.22.1 | |
O/R Mapping
Apache 2.0
| org.hibernate
»
hibernate-core2 vulnerabilities Hibernate's core ORM functionality | 4.3.9.Final | 7.4.4.Final | |
Apache 2.0
| org.hibernate
»
hibernate-c3p0 Integration for c3p0 Connection pooling into Hibernate ORM | 4.3.9.Final | 7.4.4.Final | |
LGPL 2.1
| org.hibernate
»
hibernate-ehcache Hibernate ORM 6.0.0.Alpha7 release. See http://hibernate.org/orm/releases/6.0 | 4.3.9.Final | 6.0.0.Alpha7 | |
LGPL 2.1
| org.hibernate
»
hibernate-search-orm Hibernate Search integration with Hibernate Core | 5.1.2.Final | 5.11.12.Final | |
Validation
Apache 2.0
| org.hibernate
»
hibernate-validator4 vulnerabilities Hibernate's Jakarta Validation reference implementation. | 4.2.0.Final | 9.1.2.Final | |
Bytecode
Apache 2.0 +2
| org.javassist
»
javassist Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation | 3.25.0-GA | 3.32.0-GA | |
| org.liquibase
»
liquibase-core1 vulnerability Liquibase is a tool for managing and executing database changes. | 2.0.5 | 5.0.3 | ||
Apache 2.0
| org.openmrs.liquibase.ext
»
modify-column Prior to Liquibase 2.0, there was a modifyColumn tag. This needs to be supported for old changesets | 2.0.2 | ✔ | |
| org.openmrs.liquibase.ext
»
identity-insert Allows Inserting Data on IDENTITY COLUMNS | 1.2.1 | ✔ | ||
| org.openmrs.liquibase.ext
»
type-converter Prevents liquibase from converting TEXT to LONGTEXT, and CLOB to TEXT instead of LONGTEXT | 1.0.1 | ✔ | ||
Logging
MIT
| org.slf4j
»
slf4j-api API for SLF4J (The Simple Logging Facade for Java) which serves as a simple facade or abstraction for various logging ... | 1.7.26 | 2.0.18 | |
Logging Bridge
Apache 2.0
| org.slf4j
»
jcl-over-slf4j Jakarta/Apache commons logging 1.2 implemented over SLF4J | 1.7.26 | 2.0.18 | |
Logging Bridge
MIT
| org.slf4j
»
slf4j-log4j12 SLF4J Reload4j Provider | 1.7.26 | 2.0.18 | |
Core Utils
Apache 2.0
| org.springframework
»
spring-core6 vulnerabilities Basic building block for Spring that in conjunction with Spring Beans provides dependency injection and IoC features. | 4.1.4.RELEASE | 7.0.8 | |
Dep Injection
Apache 2.0
| org.springframework
»
spring-beans2 vulnerabilities Spring Beans provides the configuration framework and basic functionality to instantiate, configure, and assemble java ... | 4.1.4.RELEASE | 7.0.8 | |
Dep Injection
Apache 2.0
| org.springframework
»
spring-context3 vulnerabilities Spring Context provides access to configured objects like a registry (a context). It inherits its features from Spring ... | 4.1.4.RELEASE | 7.0.8 | |
AOP
Apache 2.0
| org.springframework
»
spring-aop Spring AOP provides an Alliance-compliant aspect-oriented programming implementation allowing you to define method ... | 4.1.4.RELEASE | 7.0.8 | |
O/R Mapping
Apache 2.0
| org.springframework
»
spring-orm Spring Object/Relational Mapping which provides integration layers for popular object-relational mapping APIs, including ... | 4.1.4.RELEASE | 7.0.8 | |
Transactions
Apache 2.0
| org.springframework
»
spring-tx Support for programmatic and declarative transaction management for classes that implement special interfaces or any ... | 4.1.4.RELEASE | 7.0.8 | |
JDBC Extension
Apache 2.0
| org.springframework
»
spring-jdbc Spring JDBC provides an abstraction layer that simplifies code to use JDBC and the parsing of database-vendor specific ... | 4.1.4.RELEASE | 7.0.8 | |
Config
Apache 2.0
| org.springframework
»
spring-context-support Support classes for integrating common third-party libraries into a Spring application context | 4.1.4.RELEASE | 7.0.8 | |
XML Processing
Apache 2.0
| xerces
»
xercesImpl5 vulnerabilities Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces ... | 2.8.0 | 2.12.2 |
Test Dependencies (2)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| mysql
»
mysql-connector-java4 vulnerabilities MySQL Connector/J is a JDBC Type 4 driver, which means that it is pure Java implementation of the MySQL protocol and ... | 5.1.45 | 9.7.0 | ||
| org.openmrs.test
»
openmrs-test The test dependencies for openmrs | 2.3.4 | 2.8.8 |