Open source platform for continuous inspection of code quality

LicenseLGPL 3.0
Tagspluginimplementationsonarapi
Organization SonarSource
HomePage https://www.sonarsource.com/products/sonarqube 🔍 Inspect URL
DateFeb 03, 2025
Filespom (36 KB)  jar (178 KB)  View All
RepositoriesCentral
Ranking#8091 in MvnRepository (See Top Artifacts)
Used By64 artifacts
VulnerabilitiesVulnerabilities from dependencies:
CVE-2025-61795
CVE-2025-59250
CVE-2025-55754
View 17 more ...

Note: There is a new version for this artifact

New Version25.11.0.114957

Scope:
Scope:
Format:
Scope:
Scope:
Scope:
Scope:
Scope:
Scope:

Managed Dependencies (177)

Category/License Group / ArtifactVersionUpdates
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-core1 vulnerability 1.5.161.5.21
Logging
EPL 1.0LGPL 2.1
ch.qos.logback » logback-classic 1.5.161.5.21

EPL 1.0LGPL 2.1
ch.qos.logback.access » common 2.0.3

EPL 1.0LGPL 2.1
ch.qos.logback.access » logback-access-tomcat 2.0.62.0.7
JWT Lib
MIT
com.auth0 » java-jwt 4.4.04.5.0

Apache 2.0
com.datadoghq » dd-java-agent 1.30.11.55.0
JSON Lib
MIT
com.eclipsesource.minimal-json » minimal-json 0.9.5
XML Processing
BSD
com.fasterxml.staxmate » staxmate 2.4.1

MIT
com.github.erosb » json-sKema 0.20.00.28.0
OAuth Lib
MIT
com.github.scribejava » scribejava-apis 8.3.3

MIT
com.github.scribejava » scribejava-core 8.3.3
Defect Detection
LGPL 2.1
com.github.spotbugs » spotbugs-annotations 4.9.04.9.8
Defect Detection
LGPL 2.1
com.google.code.findbugs » jsr305 3.0.24.9.8
JSON Lib
Apache 2.0
com.google.code.gson » gson 2.11.02.13.2
Core Utils
Apache 2.0
com.google.guava » guava 33.4.0-jre33.5.0-jre
Serializer
BSD 3-clause
com.google.protobuf » protobuf-java 4.29.34.33.1
Diff/Patch
Apache 2.0
com.googlecode.java-diff-utils » diffutils 1.3.04.16
JSON Lib
Apache 2.0
com.googlecode.json-simple » json-simple 1.1.1
Embedded SQL DB
EPL 1.0MPL 2.0
com.h2database » h2 2.3.2322.4.240

Apache 2.0
com.hazelcast » hazelcast 5.4.05.6.0

Apache 2.0
com.icegreen » greenmail 2.1.22.1.7

Apache 2.0
com.icegreen » greenmail-junit4 2.1.22.1.7

Apache 2.0
com.icegreen » greenmail-junit5 2.1.22.1.7

MIT
com.microsoft.azure » msal4j 1.18.01.23.1
JDBC Driver
MIT
com.microsoft.sqlserver » mssql-jdbc1 vulnerability 12.8.1.jre1113.2.1.jre11
JDBC Driver
com.oracle.database.jdbc » ojdbc11 23.6.0.24.1023.26.0.0.0

com.sonarsource.abap » sonar-abap-plugin 3.15.1.6010

com.sonarsource.architecture » sonar-architecture-plugin 1.6.0.2596

com.sonarsource.architecture » sonar-architecture-java-frontend-plugin 1.6.0.2596

com.sonarsource.cobol » sonar-cobol-plugin 5.8.0.8309

com.sonarsource.cpp » sonar-cfamily-dependencies-plugin 6.62.0.78645

com.sonarsource.cpp » sonar-cfamily-plugin 6.62.0.78645

com.sonarsource.dart » sonar-dart-plugin 1.0.0.1952

com.sonarsource.dbd » sonar-dbd-java-frontend-plugin 1.36.1.13250

com.sonarsource.dbd » sonar-dbd-plugin 1.36.1.13250

com.sonarsource.dbd » sonar-dbd-python-frontend-plugin 1.36.1.13250

com.sonarsource.dotnet » sonar-csharp-enterprise-plugin 10.6.0.109712

com.sonarsource.dotnet » sonar-vbnet-enterprise-plugin 10.6.0.109712

com.sonarsource.iac » sonar-iac-enterprise-plugin 1.41.0.14206

com.sonarsource.jcl » sonar-jcl-plugin 1.4.0.1375

com.sonarsource.pdfreport » security-report-pdf-generation 2.0.0.184

com.sonarsource.pli » sonar-pli-plugin 1.16.0.5325

com.sonarsource.plsql » sonar-plsql-plugin 3.15.0.7123

com.sonarsource.plugins.vb » sonar-vb-plugin 2.14.0.5475

com.sonarsource.rpg » sonar-rpg-plugin 3.10.0.5337

com.sonarsource.security » sonar-security-python-frontend-plugin 10.11.0.34915

com.sonarsource.security » sonar-security-js-frontend-plugin 10.11.0.34915

com.sonarsource.security » sonar-security-plugin 10.11.0.34915

com.sonarsource.security » sonar-security-csharp-frontend-plugin 10.11.0.34915

com.sonarsource.security » sonar-security-php-frontend-plugin 10.11.0.34915

com.sonarsource.security » sonar-security-java-frontend-plugin 10.11.0.34915

com.sonarsource.slang » sonar-apex-plugin 1.18.0.198

com.sonarsource.swift » sonar-swift-plugin 4.13.0.7903

com.sonarsource.text » sonar-text-developer-plugin 2.20.0.5038

com.sonarsource.text » sonar-text-enterprise-plugin 2.20.0.5038

com.sonarsource.tsql » sonar-tsql-plugin 1.14.0.7614
HTTP Clients
Apache 2.0
com.squareup.okhttp3 » okhttp 4.12.05.3.1
Mocking
Apache 2.0
com.squareup.okhttp3 » mockwebserver 4.12.05.3.1

Apache 2.0
com.squareup.okhttp3 » logging-interceptor 4.12.05.3.1

Apache 2.0
com.squareup.okhttp3 » okhttp-tls 4.12.05.3.1

Apache 2.0
com.tngtech.java » junit-dataprovider 1.13.12.10

Apache 2.0
com.tngtech.junit.dataprovider » junit-jupiter-params-dataprovider 2.10
JDBC Pool
Apache 2.0
com.zaxxer » HikariCP 6.2.17.0.2
Reflection
Apache 2.0
commons-beanutils » commons-beanutils1 vulnerability 1.10.01.11.0
Base64
Apache 2.0
commons-codec » commons-codec 1.17.21.20.0
Collections
Apache 2.0
commons-collections » commons-collections 3.2.24.5.0

Apache 2.0
commons-dbutils » commons-dbutils 1.8.1
I/O
Apache 2.0
commons-io » commons-io 2.18.02.21.0
Logging
Apache 2.0
commons-logging » commons-logging 1.3.41.3.5

Apache 2.0
io.github.hakky54 » sslcontext-kickstart 9.0.010.0.1
JWT Lib
Apache 2.0
io.jsonwebtoken » jjwt-api 0.12.60.13.0
JWT Lib
Apache 2.0
io.jsonwebtoken » jjwt-impl 0.12.60.13.0

Apache 2.0
io.jsonwebtoken » jjwt-jackson 0.12.60.13.0
Network Framework
Apache 2.0
io.netty » netty-all 4.1.117.Final4.2.7.Final

Apache 2.0
io.prometheus » simpleclient_common 0.16.0

Apache 2.0
io.prometheus » simpleclient_servlet 0.16.0
Application Metrics
Apache 2.0
io.prometheus » simpleclient 0.16.0
Annotation Lib
EPL 2.0GPL
jakarta.annotation » jakarta.annotation-api 3.0.0
Dep Injection
Apache 2.0
jakarta.inject » jakarta.inject-api 2.0.1
Mail Client
EDL 1.0EPL 2.0GPL
jakarta.mail » jakarta.mail-api 2.1.32.1.5
Java Spec
EPL 2.0GPL
jakarta.servlet » jakarta.servlet-api 6.1.0
Testing
EPL 2.0
junit » junit 4.13.26.0.1
Collections
LGPL 2.1
net.sf.trove4j » core 3.1.0
Collections
Apache 2.0
org.apache.commons » commons-collections4 4.44.5.0

Apache 2.0
org.apache.commons » commons-email2-jakarta 2.0.0-M1
Core Utils
Apache 2.0
org.apache.commons » commons-lang31 vulnerability 3.17.03.20.0
CSV
Apache 2.0
org.apache.commons » commons-csv 1.13.01.14.1
String Utils
Apache 2.0
org.apache.commons » commons-text 1.13.01.14.0

Apache 2.0
org.apache.directory.server » apacheds-server-integ 2.0.0.AM27

Apache 2.0
org.apache.kerby » kerb-simplekdc 2.1.0

Apache 2.0
org.apache.kerby » ldap-backend 2.1.0
Logging
Apache 2.0
org.apache.logging.log4j » log4j-api 2.24.32.25.2
Logging
Apache 2.0
org.apache.logging.log4j » log4j-core 2.24.32.25.2
Logging Bridge
Apache 2.0
org.apache.logging.log4j » log4j-to-slf4j 2.24.32.25.2
Network Framework
Apache 2.0
org.apache.mina » mina-core 2.2.4
SSH Lib
Apache 2.0
org.apache.sshd » sshd-core 2.14.02.16.0

Apache 2.0
org.apache.tomcat.embed » tomcat-embed-jasper 10.1.3411.0.14
Web Server
Apache 2.0
org.apache.tomcat.embed » tomcat-embed-core11 vulnerabilities 10.1.3411.0.14
Template Engine
Apache 2.0
org.apache.velocity » velocity1 vulnerability 1.72.4.1
AOP
EPL 2.0
org.aspectj » aspectjtools 1.9.22.11.9.25
Assertion
Apache 2.0
org.assertj » assertj-core 3.27.33.27.6
Assertion
Apache 2.0
org.assertj » assertj-guava 3.27.33.27.6
Concurrency
Apache 2.0
org.awaitility » awaitility 4.2.24.3.0
Encryption Lib
BouncyCastle
org.bouncycastle » bcprov-jdk18on 1.801.82
Encryption Lib
BouncyCastle
org.bouncycastle » bcpkix-jdk18on 1.801.82

LGPL 3.0
org.codehaus.sonar » sonar-channel 4.2

Apache 2.0
org.codelibs.elasticsearch.module » reindex7.17.227.10.2

Apache 2.0
org.codelibs.elasticsearch.module » analysis-common7.17.227.10.2

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-proxy 11.0.2412.1.4
Web Server
Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-server 11.0.2412.1.4

Apache 2.0EPL 2.0
org.eclipse.jetty » jetty-servlet 11.0.2412.1.4
Git Tool
BSD 3-clauseEDL 1.0
org.eclipse.jgit » org.eclipse.jgit1 vulnerability 7.1.0.202411261347-r7.4.0.202509020913-r

Apache 2.0
org.elasticsearch » mocksocket 1.2
ElasticSearch Client
org.elasticsearch.client » elasticsearch-rest-high-level-client 7.17.277.17.29

SSPL 1
org.elasticsearch.plugin » transport-netty4-client 7.17.277.17.29
Testing
BSD 3-clause
org.hamcrest » hamcrest 3.0
Validation
Apache 2.0
org.hibernate.validator » hibernate-validator 8.0.2.Final9.1.0.Final
JSON Lib
Public
org.json » json 2025010720250517
HTML Parser
MIT
org.jsoup » jsoup 1.18.31.21.2
Bill of materials
EPL 2.0
org.junit » junit-bom 5.11.36.0.1
Testing
EPL 2.0
org.junit-pioneer » junit-pioneer 2.3.0
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-engine 5.11.46.0.1

org.junit.jupiter » junit-vintage-engine 5.11.4
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-params 5.11.46.0.1
Testing
EPL 2.0
org.junit.jupiter » junit-jupiter-api 5.11.46.0.1

EPL 2.0
org.junit.platform » junit-platform-suite-api 1.11.46.0.1

EPL 2.0
org.junit.platform » junit-platform-suite-engine 1.11.46.0.1
GitHub API
MIT
org.kohsuke » github-api 1.3261.330
HTTP Proxy
Apache 2.0
org.littleshoot » littleproxy 1.1.2
Compression
Apache 2.0
org.lz4 » lz4-java 1.8.0
Mocking
MIT
org.mockito » mockito-junit-jupiter 5.15.25.20.0
Mocking
MIT
org.mockito » mockito-core 5.15.25.20.0
O/R Mapping
Apache 2.0
org.mybatis » mybatis 3.5.19
JDBC Driver
BSD 2-clause
org.postgresql » postgresql1 vulnerability 42.7.542.7.8
Reflection
Apache 2.0
org.reflections » reflections 0.10.2

Apache 2.0
org.simpleframework » simple 5.1.6
Testing
Apache 2.0
org.skyscreamer » jsonassert 1.5.3
Logging Bridge
MIT
org.slf4j » jul-to-slf4j 2.0.162.0.17
Logging Bridge
Apache 2.0
org.slf4j » log4j-over-slf4j 2.0.162.0.17
Logging
MIT
org.slf4j » slf4j-api 2.0.162.0.17
Logging Bridge
Apache 2.0
org.slf4j » jcl-over-slf4j 2.0.162.0.17

LGPL 3.0
org.sonarsource.api.plugin » sonar-plugin-api-test-fixtures 11.1.0.269313.4.0.3221

LGPL 3.0
org.sonarsource.api.plugin » sonar-plugin-api 11.1.0.269313.4.0.3221

LGPL 3.0
org.sonarsource.classloader » sonar-classloader 1.1.0.1059
Sonar Plugin
org.sonarsource.dotnet » sonar-csharp-plugin 10.6.0.10971210.15.0.120848
Sonar Plugin
org.sonarsource.dotnet » sonar-vbnet-plugin 10.6.0.10971210.15.0.120848
Sonar Plugin
org.sonarsource.flex » sonar-flex-plugin 2.14.0.5032

LGPL 3.0
org.sonarsource.git.blame » git-files-blame 1.1.0.18352.0.0.2053
Sonar Plugin
org.sonarsource.html » sonar-html-plugin 3.18.0.56053.20.0.6289

org.sonarsource.iac » sonar-iac-plugin 1.41.0.142062.1.0.17131

LGPL 3.0
org.sonarsource.jacoco » sonar-jacoco-plugin 1.3.0.1538
Sonar Plugin
org.sonarsource.java » sonar-java-plugin 8.9.0.377688.20.0.40630
Sonar Plugin
org.sonarsource.java » sonar-java-symbolic-execution-plugin 8.9.0.377688.18.1.347
Sonar Plugin
org.sonarsource.javascript » sonar-javascript-plugin 10.20.0.2935611.6.0.36606

org.sonarsource.kotlin » sonar-kotlin-plugin 2.22.0.59723.3.0.7402

LGPL 3.0
org.sonarsource.orchestrator » sonar-orchestrator-junit5 5.1.0.22546.0.0.3852

LGPL 3.0
org.sonarsource.orchestrator » sonar-orchestrator-junit4 5.1.0.22546.0.0.3852

org.sonarsource.php » sonar-php-plugin 3.42.0.127953.51.0.15001
Sonar Plugin
LGPL 3.0
org.sonarsource.plugins.cayc » sonar-cayc-plugin 2.4.0.20182.5.0.2588
Sonar Plugin
org.sonarsource.python » sonar-python-plugin 4.26.0.194565.13.0.28429

org.sonarsource.slang » sonar-go-plugin 1.18.0.2401.18.1.827

org.sonarsource.slang » sonar-ruby-plugin 1.18.0.2341.19.0.471

org.sonarsource.slang » sonar-scala-plugin 1.18.0.2661.19.0.484

LGPL 3.0
org.sonarsource.sonarqube » webapp-assets 2025.1.0.113682025.6.0.32720

org.sonarsource.text » sonar-text-plugin 2.20.0.50382.32.0.9670

LGPL 3.0
org.sonarsource.update-center » sonar-update-center-common 1.35.0.2835
Sonar Plugin
org.sonarsource.xml » sonar-xml-plugin 2.12.0.57492.13.0.5938

Apache 2.0
org.springdoc » springdoc-openapi-starter-webmvc-api 2.8.32.8.14
Testing
Apache 2.0
org.springframework » spring-test 6.2.27.0.0
Web Framework
Apache 2.0
org.springframework » spring-webmvc1 vulnerability 6.2.27.0.0
Dep Injection
Apache 2.0
org.springframework » spring-context1 vulnerability 6.2.27.0.0

Apache 2.0
org.springframework.security » spring-security-saml2-service-provider 6.4.26.5.6
Subversion Tool
org.tmatesoft.svnkit » svnkit 1.10.11

Apache 2.0
org.wiremock » wiremock-standalone 3.10.03.13.2
Testing
Apache 2.0
org.xmlunit » xmlunit-matchers 2.10.02.11.0
Testing
Apache 2.0
org.xmlunit » xmlunit-core 2.10.02.11.0
YAML
Apache 2.0
org.yaml » snakeyaml 2.32.5

Licenses

LicenseURL
GNU LGPL 3 http://www.gnu.org/licenses/lgpl.txt

Developers

NameEmailDev IdRolesOrganization
SonarSource Teamsonarsource-team