Open source platform for continuous inspection of code quality

LicenseLGPL 3.0
Tagssonar
Organization SonarSource
HomePage http://www.sonarqube.org/ 🔍 Inspect URL
DateJun 29, 2018
Filespom (19 KB)  jar (7.0 MB)  View All
RepositoriesCentralSonatype
Ranking#34558 in MvnRepository (See Top Artifacts)
Used By14 artifacts
VulnerabilitiesVulnerabilities from dependencies:
CVE-2025-59250
CVE-2025-52999
CVE-2025-49128
View 159 more ...

Note: There is a new version for this artifact

New Version25.11.0.114957

Scope:
Scope:
Format:
Scope:
Scope:
Scope:
Scope:
Scope:
Scope:

Managed Dependencies (75)

Category/License Group / ArtifactVersionUpdates

EPL 1.0LGPL 2.1
ch.qos.logback » logback-access 1.2.32.0.7
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-core5 vulnerabilities 1.2.31.5.21
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-classic1 vulnerability 1.2.31.5.21
Annotation Lib
Apache 2.0
com.fasterxml.jackson.core » jackson-annotations 2.9.52.20
JSON Lib
Apache 2.0
com.fasterxml.jackson.core » jackson-databind63 vulnerabilities 2.9.53.0.2
JSON Lib
Apache 2.0
com.fasterxml.jackson.core » jackson-core2 vulnerabilities 2.9.53.0.2
HTTP Clients
MIT
com.github.kevinsawicki » http-request1 vulnerability 5.4.16.0
Defect Detection
LGPL 2.1
com.google.code.findbugs » jsr305 3.0.24.9.8
JSON Lib
Apache 2.0
com.google.code.gson » gson1 vulnerability 2.8.42.13.2
Core Utils
Apache 2.0
com.google.guava » guava3 vulnerabilities 18.033.5.0-jre
Serializer
BSD 3-clause
com.google.protobuf » protobuf-java6 vulnerabilities 3.5.14.33.1
Diff/Patch
Apache 2.0
com.googlecode.java-diff-utils » diffutils 1.24.16
JSON Lib
Apache 2.0
com.googlecode.json-simple » json-simple 1.1.1
Embedded SQL DB
EPL 1.0MPL 2.0
com.h2database » h22 vulnerabilities 1.3.1762.4.240

Apache 2.0
com.hazelcast » hazelcast-client 3.8.63.12.13

Apache 2.0
com.hazelcast » hazelcast5 vulnerabilities 3.8.65.6.0
I18N Lib
com.ibm.icu » icu4j 3.4.478.1
JDBC Driver
MIT
com.microsoft.sqlserver » mssql-jdbc1 vulnerability 6.2.2.jre813.2.1.jre11
JDBC Driver
com.oracle.jdbc » ojdbc8 12.2.0.1.023.26.0.0.0
HTTP Clients
Apache 2.0
com.squareup.okhttp3 » okhttp 3.7.05.3.1
Mocking
Apache 2.0
com.squareup.okhttp3 » mockwebserver 3.7.05.3.1

Apache 2.0
com.tngtech.java » junit-dataprovider 1.9.22.10
Reflection
Apache 2.0
commons-beanutils » commons-beanutils3 vulnerabilities 1.8.31.11.0
Base64
Apache 2.0
commons-codec » commons-codec 1.81.20.0
JDBC Pool
Apache 2.0
commons-dbcp » commons-dbcp 1.42.13.0

Apache 2.0
commons-dbutils » commons-dbutils 1.51.8.1
I/O
Apache 2.0
commons-io » commons-io2 vulnerabilities 2.62.21.0
Core Utils
Apache 2.0
commons-lang » commons-lang1 vulnerability 2.63.20.0
JWT Lib
Apache 2.0
io.jsonwebtoken » jjwt 0.9.00.13.0
Java Spec
EPL 2.0GPL
javax.servlet » javax.servlet-api 3.0.16.1.0
XML Processing
EDL 1.0
javax.xml.bind » jaxb-api 2.3.04.0.4
Testing
EPL 2.0
junit » junit1 vulnerability 4.126.0.1
JDBC Driver
mysql » mysql-connector-java4 vulnerabilities 5.1.469.5.0
Hashing
Apache 2.0
net.jpountz.lz4 » lz4 1.3.01.8.0
Mail Client
Apache 2.0
org.apache.commons » commons-email 1.51.6.0
CSV
Apache 2.0
org.apache.commons » commons-csv 1.41.14.1
HTTP Clients
Apache 2.0
org.apache.httpcomponents » httpclient1 vulnerability 4.5.25.5.1
Logging
Apache 2.0
org.apache.logging.log4j » log4j-api 2.8.22.25.2
Logging
Apache 2.0
org.apache.logging.log4j » log4j-core5 vulnerabilities 2.8.22.25.2
Logging Bridge
Apache 2.0
org.apache.logging.log4j » log4j-to-slf4j 2.8.22.25.2

Apache 2.0
org.apache.tomcat.embed » tomcat-embed-jasper 8.5.2311.0.14
Web Server
Apache 2.0
org.apache.tomcat.embed » tomcat-embed-core34 vulnerabilities 8.5.2311.0.14
Assertion
Apache 2.0
org.assertj » assertj-core 3.9.13.27.6
Assertion
Apache 2.0
org.assertj » assertj-guava 3.2.03.27.6

LGPL 3.0
org.codehaus.sonar » sonar-classloader 1.0

LGPL 3.0
org.codehaus.sonar » sonar-channel 4.14.2

LGPL 3.0
org.codehaus.sonar » sonar-squid 4.14.2

LGPL 3.0
org.codehaus.sonar.runner » sonar-runner-api 2.4
XML Processing
BSD
org.codehaus.staxmate » staxmate 2.0.12.4.1

BSD 2-clause
org.codehaus.woodstox » stax2-api 3.1.44.2.2
XML Processing
Apache 2.0
org.codehaus.woodstox » woodstox-core-lgpl 4.4.07.1.1
Testing
LGPL 2.1
org.dbunit » dbunit 2.4.53.0.0

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-proxy 9.3.6.v2015110612.1.4
Web Server
Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-server14 vulnerabilities 9.3.6.v2015110612.1.4

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-servlet 9.3.6.v2015110612.1.4

SSPL 1
org.elasticsearch.client » transport 5.6.37.17.29
Template Engine
Apache 2.0
org.freemarker » freemarker 2.3.202.3.34
Testing
BSD 3-clause
org.hamcrest » hamcrest-all 1.33.0
Hashing
ISC
org.mindrot » jbcrypt 0.4
Mocking
MIT
org.mockito » mockito-core 2.15.05.20.0
O/R Mapping
Apache 2.0
org.mybatis » mybatis1 vulnerability 3.4.63.5.19
Web Server
BSD 3-clause
org.nanohttpd » nanohttpd 2.3.02.3.1
Dep Injection
BSD
org.picocontainer » picocontainer 2.152.15.2
JDBC Driver
BSD 2-clause
org.postgresql » postgresql6 vulnerabilities 42.2.242.7.8
Reflection
Apache 2.0
org.reflections » reflections 0.9.90.10.2

Apache 2.0
org.simpleframework » simple 4.1.215.1.6
Logging
MIT
org.slf4j » slf4j-api 1.7.252.0.17
Logging Bridge
MIT
org.slf4j » jul-to-slf4j 1.7.252.0.17
Logging Bridge
Apache 2.0
org.slf4j » jcl-over-slf4j 1.7.252.0.17
Logging Bridge
Apache 2.0
org.slf4j » log4j-over-slf4j 1.7.252.0.17

Apache 2.0
org.sonarsource » sonar-persistit 3.3.2

LGPL 3.0
org.sonarsource.orchestrator » sonar-orchestrator 3.19.0.16416.0.0.3852

LGPL 3.0
org.sonarsource.update-center » sonar-update-center-common 1.18.0.4871.35.0.2835
SMTP
Apache 2.0
org.subethamail » subethasmtp 3.1.7
XML Processing
ApacheW3C
xml-apis » xml-apis 1.4.012.0.2

Licenses

LicenseURL
GNU LGPL 3 http://www.gnu.org/licenses/lgpl.txt

Developers

NameEmailDev IdRolesOrganization
Fabrice Bellingardbellingard
Dinesh Bolkensteyndbolkensteyn
Eric Hartmannehartmann
Freddy Malletfmallet
Evgeny MandrikovGodin
Julien Henryhenryju
Jean-Baptiste Lievremontjblievremont
Julien Lancelotjulienlancelot
Olivier Gaudinolivier.gaudin
Simon Brandhofsimonbrandhof
Sebastien Lesaintsns-seb
Stas Vilchikstas-vilchik
Teryk Bellahseneteryk

Related Books

SonarQube in ActionSonarQube in Action (2013)
by Campbell, G. Ann
SonarQube in ActionSonarQube in Action (2013)
by Papapetrou, Patroklos
Sonar Code Quality Testing EssentialsSonar Code Quality Testing Essentials (2012)
by S. Arapidis, Charalampos