Open source platform for continuous inspection of code quality

LicenseLGPL 3.0
Tagssonar
Organization SonarSource
HomePage https://www.sonarsource.com/products/sonarqube 🔍 Inspect URL
DateApr 12, 2024
Filespom (35 KB)  jar (319 KB)  View All
RepositoriesCentral
Ranking#34558 in MvnRepository (See Top Artifacts)
Used By14 artifacts
VulnerabilitiesVulnerabilities from dependencies:
CVE-2025-61795
CVE-2025-59250
CVE-2025-55754
View 42 more ...

Note: There is a new version for this artifact

New Version25.11.0.114957

Scope:
Scope:
Format:
Scope:
Scope:
Scope:
Scope:
Scope:
Scope:

Managed Dependencies (150)

Category/License Group / ArtifactVersionUpdates
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-core3 vulnerabilities 1.5.31.5.21
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-classic 1.5.31.5.21

EPL 1.0LGPL 2.1
ch.qos.logback » logback-access 1.3.142.0.7
JWT Lib
MIT
com.auth0 » java-jwt 4.4.04.5.0

Apache 2.0
com.datadoghq » dd-java-agent 1.30.11.55.0
JSON Lib
MIT
com.eclipsesource.minimal-json » minimal-json 0.9.5
XML Processing
BSD
com.fasterxml.staxmate » staxmate 2.4.1

MIT
com.github.erosb » json-sKema 0.13.00.28.0
OAuth Lib
MIT
com.github.scribejava » scribejava-apis 8.3.3

MIT
com.github.scribejava » scribejava-core 8.3.3
Defect Detection
LGPL 2.1
com.google.code.findbugs » jsr305 3.0.24.9.8
JSON Lib
Apache 2.0
com.google.code.gson » gson 2.10.12.13.2
Core Utils
Apache 2.0
com.google.guava » guava 33.0.0-jre33.5.0-jre
Serializer
BSD 3-clause
com.google.protobuf » protobuf-java1 vulnerability 3.24.24.33.1
Diff/Patch
Apache 2.0
com.googlecode.java-diff-utils » diffutils 1.3.04.16
JSON Lib
Apache 2.0
com.googlecode.json-simple » json-simple 1.1.1
Embedded SQL DB
EPL 1.0MPL 2.0
com.h2database » h2 2.2.2242.4.240

Apache 2.0
com.hazelcast » hazelcast 5.3.65.6.0
JDBC Driver
MIT
com.microsoft.sqlserver » mssql-jdbc1 vulnerability 12.6.0.jre1113.2.1.jre11

MIT
com.onelogin » java-saml 2.9.0
JDBC Driver
com.oracle.database.jdbc » ojdbc11 23.3.0.23.0923.26.0.0.0

com.sonarsource.abap » sonar-abap-plugin 3.14.0.5470

com.sonarsource.cobol » sonar-cobol-plugin 5.6.0.7604

com.sonarsource.cpp » sonar-cfamily-plugin 6.54.0.69031

com.sonarsource.dbd » sonar-dbd-java-frontend-plugin 1.25.0.8311

com.sonarsource.dbd » sonar-dbd-plugin 1.25.0.8311

com.sonarsource.dbd » sonar-dbd-python-frontend-plugin 1.25.0.8311

com.sonarsource.jcl » sonar-jcl-plugin 1.1.0.855

com.sonarsource.pli » sonar-pli-plugin 1.15.0.4810

com.sonarsource.plsql » sonar-plsql-plugin 3.12.0.6513

com.sonarsource.plugins.vb » sonar-vb-plugin 2.12.0.4860

com.sonarsource.rpg » sonar-rpg-plugin 3.8.0.4662

com.sonarsource.security » sonar-security-python-frontend-plugin 10.5.0.30668

com.sonarsource.security » sonar-security-js-frontend-plugin 10.5.0.30668

com.sonarsource.security » sonar-security-plugin 10.5.0.30668

com.sonarsource.security » sonar-security-csharp-frontend-plugin 10.5.0.30668

com.sonarsource.security » sonar-security-php-frontend-plugin 10.5.0.30668

com.sonarsource.security » sonar-security-java-frontend-plugin 10.5.0.30668

com.sonarsource.slang » sonar-apex-plugin 1.15.0.4655

com.sonarsource.swift » sonar-swift-plugin 4.12.0.7262

com.sonarsource.text » sonar-text-enterprise-plugin 2.10.0.2188

com.sonarsource.tsql » sonar-tsql-plugin 1.12.0.7020
HTTP Clients
Apache 2.0
com.squareup.okhttp3 » okhttp 4.12.05.3.1
Mocking
Apache 2.0
com.squareup.okhttp3 » mockwebserver 4.12.05.3.1

Apache 2.0
com.squareup.okhttp3 » okhttp-tls 4.12.05.3.1
I/O
Apache 2.0
com.squareup.okio » okio 3.7.03.16.3
Mail Client
EDL 1.0EPL 2.0GPL
com.sun.mail » javax.mail 1.6.22.0.2

Apache 2.0
com.tngtech.java » junit-dataprovider 1.13.12.10

Apache 2.0
com.tngtech.junit.dataprovider » junit-jupiter-params-dataprovider 2.10
JDBC Pool
Apache 2.0
com.zaxxer » HikariCP 5.1.07.0.2
Reflection
Apache 2.0
commons-beanutils » commons-beanutils1 vulnerability 1.9.41.11.0
Base64
Apache 2.0
commons-codec » commons-codec 1.16.01.20.0

Apache 2.0
commons-dbutils » commons-dbutils 1.8.1
I/O
Apache 2.0
commons-io » commons-io 2.15.12.21.0
JWT Lib
Apache 2.0
io.jsonwebtoken » jjwt-api 0.12.50.13.0
JWT Lib
Apache 2.0
io.jsonwebtoken » jjwt-impl 0.12.50.13.0

Apache 2.0
io.jsonwebtoken » jjwt-jackson 0.12.50.13.0
Network Framework
Apache 2.0
io.netty » netty-all 4.1.106.Final4.2.7.Final

Apache 2.0
io.prometheus » simpleclient_common 0.16.0

Apache 2.0
io.prometheus » simpleclient_servlet 0.16.0
Application Metrics
Apache 2.0
io.prometheus » simpleclient 0.16.0
Annotation Lib
EPL 2.0GPL
javax.annotation » javax.annotation-api 1.3.23.0.0
Expression Lang
javax.el » javax.el-api 3.0.06.0.1
Dep Injection
Apache 2.0
javax.inject » javax.inject 12.0.1
Java Spec
EPL 2.0GPL
javax.servlet » javax.servlet-api 4.0.16.1.0
XML Processing
EDL 1.0
javax.xml.bind » jaxb-api 2.3.14.0.4
Testing
EPL 2.0
junit » junit 4.13.26.0.1
HTTP Proxy
Apache 2.0
net.lightbody.bmp » littleproxy 1.1.0-beta-bmp-171.1.2
Collections
Apache 2.0
org.apache.commons » commons-collections4 4.44.5.0
Core Utils
Apache 2.0
org.apache.commons » commons-lang31 vulnerability 3.14.03.20.0
Mail Client
Apache 2.0
org.apache.commons » commons-email 1.6.0
CSV
Apache 2.0
org.apache.commons » commons-csv 1.10.01.14.1
String Utils
Apache 2.0
org.apache.commons » commons-text 1.11.01.14.0
HTTP Clients
Apache 2.0
org.apache.httpcomponents » httpclient 4.5.145.5.1
Logging
Apache 2.0
org.apache.logging.log4j » log4j-api 2.22.12.25.2
Logging
Apache 2.0
org.apache.logging.log4j » log4j-core 2.22.12.25.2
Logging Bridge
Apache 2.0
org.apache.logging.log4j » log4j-to-slf4j 2.22.12.25.2
SSH Lib
Apache 2.0
org.apache.sshd » sshd-core 2.12.02.16.0

Apache 2.0
org.apache.tomcat.embed » tomcat-embed-jasper 9.0.8711.0.14
Web Server
Apache 2.0
org.apache.tomcat.embed » tomcat-embed-core14 vulnerabilities 9.0.8711.0.14
AOP
EPL 2.0
org.aspectj » aspectjtools 1.9.211.9.25
Assertion
Apache 2.0
org.assertj » assertj-core 3.25.33.27.6
Assertion
Apache 2.0
org.assertj » assertj-guava 3.25.33.27.6
Concurrency
Apache 2.0
org.awaitility » awaitility 4.2.04.3.0

LGPL 3.0
org.codehaus.sonar » sonar-channel 4.2

Apache 2.0
org.codelibs.elasticsearch.module » reindex7.17.177.10.2

Apache 2.0
org.codelibs.elasticsearch.module » analysis-common7.17.177.10.2

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-proxy 9.4.6.v2017053112.1.4
Web Server
Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-server15 vulnerabilities 9.4.6.v2017053112.1.4

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-servlet 9.4.6.v2017053112.1.4
Git Tool
BSD 3-clauseEDL 1.0
org.eclipse.jgit » org.eclipse.jgit1 vulnerability 6.9.0.202403050737-r7.4.0.202509020913-r

Apache 2.0
org.elasticsearch » mocksocket 1.2
ElasticSearch Client
org.elasticsearch.client » elasticsearch-rest-high-level-client 7.17.177.17.29

SSPL 1
org.elasticsearch.plugin » transport-netty4-client 7.17.177.17.29
Expression Lang
org.glassfish » jakarta.el 3.0.46.0.1
Testing
BSD 3-clause
org.hamcrest » hamcrest-all 1.33.0
Validation
Apache 2.0
org.hibernate » hibernate-validator 6.2.5.Final9.1.0.Final
JSON Lib
Public
org.json » json 2023101320250517
HTML Parser
MIT
org.jsoup » jsoup 1.17.21.21.2
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-engine 5.10.26.0.1

org.junit.jupiter » junit-vintage-engine 5.10.2
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-params 5.10.26.0.1
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-api 5.10.26.0.1

EPL 2.0
org.junit.platform » junit-platform-suite-api 1.10.26.0.1

EPL 2.0
org.junit.platform » junit-platform-suite-engine 1.10.26.0.1
GitHub API
MIT
org.kohsuke » github-api 1.3181.330
Compression
Apache 2.0
org.lz4 » lz4-java 1.8.0
Hashing
ISC
org.mindrot » jbcrypt 0.4
Mocking
MIT
org.mockito » mockito-junit-jupiter 5.10.05.20.0
Mocking
MIT
org.mockito » mockito-core 5.10.05.20.0
O/R Mapping
Apache 2.0
org.mybatis » mybatis 3.5.153.5.19
JDBC Driver
BSD 2-clause
org.postgresql » postgresql1 vulnerability 42.7.142.7.8
Reflection
Apache 2.0
org.reflections » reflections 0.10.2

Apache 2.0
org.simpleframework » simple 5.1.6
Logging Bridge
MIT
org.slf4j » jul-to-slf4j 2.0.112.0.17
Logging Bridge
Apache 2.0
org.slf4j » log4j-over-slf4j 2.0.112.0.17
Logging
MIT
org.slf4j » slf4j-api 2.0.112.0.17
Logging Bridge
Apache 2.0
org.slf4j » jcl-over-slf4j 2.0.112.0.17

LGPL 3.0
org.sonarsource.api.plugin » sonar-plugin-api-test-fixtures 10.7.0.219113.4.0.3221

LGPL 3.0
org.sonarsource.api.plugin » sonar-plugin-api 10.7.0.219113.4.0.3221
Sonar Plugin
org.sonarsource.dotnet » sonar-csharp-plugin 9.23.2.8875510.15.0.120848
Sonar Plugin
org.sonarsource.dotnet » sonar-vbnet-plugin 9.23.2.8875510.15.0.120848
Sonar Plugin
org.sonarsource.flex » sonar-flex-plugin 2.12.0.45682.14.0.5032

LGPL 3.0
org.sonarsource.git.blame » git-files-blame 1.0.2.2752.0.0.2053
Sonar Plugin
org.sonarsource.html » sonar-html-plugin 3.15.0.51073.20.0.6289

org.sonarsource.iac » sonar-iac-plugin 1.27.0.95182.1.0.17131

LGPL 3.0
org.sonarsource.jacoco » sonar-jacoco-plugin 1.3.0.1538
Sonar Plugin
org.sonarsource.java » sonar-java-plugin 7.33.0.357758.20.0.40630
Sonar Plugin
org.sonarsource.javascript » sonar-javascript-plugin 10.13.2.2598111.6.0.36606

org.sonarsource.kotlin » sonar-kotlin-plugin 2.20.0.43823.3.0.7402

LGPL 3.0
org.sonarsource.orchestrator » sonar-orchestrator-junit5 4.8.0.18986.0.0.3852

LGPL 3.0
org.sonarsource.orchestrator » sonar-orchestrator-junit4 4.8.0.18986.0.0.3852

org.sonarsource.php » sonar-php-plugin 3.35.0.116593.51.0.15001
Sonar Plugin
LGPL 3.0
org.sonarsource.plugins.cayc » sonar-cayc-plugin 2.3.0.17822.5.0.2588
Sonar Plugin
org.sonarsource.python » sonar-python-plugin 4.17.0.148455.13.0.28429

org.sonarsource.slang » sonar-go-plugin 1.15.0.46551.18.1.827

org.sonarsource.slang » sonar-ruby-plugin 1.15.0.46551.19.0.471

org.sonarsource.slang » sonar-scala-plugin 1.15.0.46551.19.0.484

org.sonarsource.text » sonar-text-plugin 2.10.0.21882.32.0.9670

LGPL 3.0
org.sonarsource.update-center » sonar-update-center-common 1.32.0.24411.35.0.2835
Sonar Plugin
org.sonarsource.xml » sonar-xml-plugin 2.10.0.41082.13.0.5938

Apache 2.0
org.springdoc » springdoc-openapi-webmvc-core 1.7.01.8.0
Testing
Apache 2.0
org.springframework » spring-test 5.3.317.0.0
Web Framework
Apache 2.0
org.springframework » spring-webmvc4 vulnerabilities 5.3.317.0.0
Dep Injection
Apache 2.0
org.springframework » spring-context2 vulnerabilities 5.3.317.0.0
SMTP
Apache 2.0
org.subethamail » subethasmtp 3.1.7
Subversion Tool
org.tmatesoft.svnkit » svnkit 1.10.11
Testing
Apache 2.0
org.xmlunit » xmlunit-matchers 2.9.12.11.0
Testing
Apache 2.0
org.xmlunit » xmlunit-core1 vulnerability 2.9.12.11.0
YAML
Apache 2.0
org.yaml » snakeyaml 2.22.5

Licenses

LicenseURL
GNU LGPL 3 http://www.gnu.org/licenses/lgpl.txt

Developers

NameEmailDev IdRolesOrganization
SonarSource Teamsonarsource-team

Related Books

SonarQube in ActionSonarQube in Action (2013)
by Campbell, G. Ann
SonarQube in ActionSonarQube in Action (2013)
by Papapetrou, Patroklos
Sonar Code Quality Testing EssentialsSonar Code Quality Testing Essentials (2012)
by S. Arapidis, Charalampos