Compile Dependencies (9)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Code Analyzer
LGPL 2.1
|  | com.google.code.findbugs
»
jsr305 Annotations the SpotBugs tool supports | 3.0.2 | 4.10.3 |
Core Utils
Apache 2.0
|  | com.google.guava
»
guava Guava is a suite of core and expanded libraries that include | 33.5.0-jre | 33.6.0-jre |
BSD
|  | net.sourceforge.pmd » pmd-java | 7.17.0 | 7.26.0 |
BSD
| | net.sourceforge.pmd » pmd-kotlin | 7.17.0 | 7.26.0 |
 | org.jdom
»
jdom2 A complete, Java-based solution for accessing, manipulating, | 2.0.6.1 | ✔ | |
Logging
MIT
|  | org.slf4j
»
slf4j-api API for SLF4J (The Simple Logging Facade for Java) which serves as a simple facade or abstraction for various logging ... | 2.0.17 | 2.0.18 |
 | org.sonarsource.java
»
java-frontend Code Analyzer for Java :: Front-end (Java Parser) | 8.18.0.40025 | 8.35.0.45121 | |
LGPL 3.0
| | org.sonarsource.pmd
»
sonar-pmd-lib Sonar-PMD is a plugin that provides coding rules from PMD for use in SonarQube. | 4.2.0 | 4.2.1 |
LGPL 3.0
| | org.sonarsource.sslr-squid-bridge » sslr-squid-bridge | 2.7.1.392 | ✔ |
Provided Dependencies (2)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
XML Processing
BSD
|  | org.codehaus.staxmate
»
staxmate StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional ... | 2.0.1 | 2.4.2 |
LGPL 3.0
| | org.sonarsource.api.plugin
»
sonar-plugin-api Plugin API for SonarQube Server, SonarQube Cloud and SonarQube for IDE | 13.2.0.3137 | 13.8.0.4399 |
Test Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Assertion
Apache 2.0
|  | org.assertj
»
assertj-core1 vulnerability Rich and fluent assertions for testing in Java | 3.27.6 | 3.27.7 |
Testing
EPL 2.0
|  | org.junit.jupiter
»
junit-jupiter Module "junit-jupiter" of JUnit | 6.0.0 | 6.1.1 |
Mocking
MIT
|  | org.mockito
»
mockito-core Mockito mock objects library core API and implementation | 5.20.0 | 5.23.0 |
Logging
MIT
| | org.slf4j
»
slf4j-simple Binding/provider for SLF4J, which outputs all events to System.err. Only messages of level INFO and higher are printed. | 2.0.17 | 2.0.18 |
LGPL 3.0
| | org.sonarsource.sonarqube
»
sonar-plugin-api-impl Open source platform for continuous inspection of code quality | 25.9.0.112764 | 26.7.0.124771 |
Managed Dependencies (7)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
BSD
| | net.sourceforge.pmd » pmd-java | 7.17.0 | 7.26.0 |
Core Utils
Apache 2.0
|  | org.apache.commons
»
commons-lang3 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are ... | 3.19.0 | 3.20.0 |
LGPL 3.0
|  | org.codehaus.sonar
»
sonar-ws-client Open source platform for continuous inspection of code quality | 5.1 | 26.7.0.124771 |
LGPL 3.0
| | org.sonarsource.api.plugin
»
sonar-plugin-api Plugin API for SonarQube Server, SonarQube Cloud and SonarQube for IDE | 13.2.0.3137 | 13.8.0.4399 |
LGPL 3.0
| | org.sonarsource.orchestrator » sonar-orchestrator | 5.6.2.2625 | 6.3.0.4464 |
LGPL 3.0
| | org.sonarsource.orchestrator » sonar-orchestrator-junit4 | 5.6.2.2625 | 6.3.0.4464 |
LGPL 3.0
| | org.sonarsource.sonarqube
»
sonar-plugin-api-impl Open source platform for continuous inspection of code quality | 25.9.0.112764 | 26.7.0.124771 |