Fork me on GitHub

Dependency Analysis

Used and Declared Dependencies

GroupId ArtifactId Version Scope Classifier Type Optional
io.github.jeremylong open-vulnerability-clients 9.0.5 compile - jar false
org.anarres.jdiagnostics jdiagnostics 1.0.7 compile - jar false
com.kichik.pecoff4j pecoff4j 0.4.1 compile - jar false
io.github.jeremylong jcs3-slf4j 1.0.5 compile - jar false
org.apache.commons commons-jcs3-core 3.2.1 compile - jar false
com.github.package-url packageurl-java 1.5.0 compile - jar false
us.springett cpe-parser 3.0.1 compile - jar false
org.semver4j semver4j 5.8.0 compile - jar false
org.slf4j slf4j-api 2.0.17 compile - jar false
ch.qos.logback logback-classic 1.5.32 test - jar false
ch.qos.logback logback-core 1.5.32 test - jar false
org.owasp dependency-check-utils 12.2.2 compile - jar false
org.apache.commons commons-collections4 4.5.0 compile - jar false
org.apache.commons commons-compress 1.27.1 compile - jar false
commons-io commons-io 2.22.0 compile - jar false
org.apache.commons commons-lang3 3.20.0 compile - jar false
org.apache.commons commons-text 1.15.0 compile - jar false
org.apache.commons commons-dbcp2 2.14.0 compile - jar false
org.apache.lucene lucene-core 9.12.3 compile - jar false
org.apache.lucene lucene-analysis-common 9.12.3 compile - jar false
org.apache.lucene lucene-queryparser 9.12.3 compile - jar false
org.slf4j jul-to-slf4j 2.0.17 compile - jar false
org.apache.velocity velocity-engine-core 2.4.1 compile - jar false
com.h2database h2 2.4.240 compile - jar false
org.eclipse.parsson jakarta.json 1.1.7 compile - jar false
org.jsoup jsoup 1.22.2 compile - jar false
com.fasterxml.jackson.core jackson-databind 2.21.3 compile - jar false
com.fasterxml.jackson.datatype jackson-datatype-jsr310 2.21.3 compile - jar false
com.fasterxml.jackson.module jackson-module-blackbird 2.21.3 compile - jar false
com.fasterxml.jackson.dataformat jackson-dataformat-yaml 2.21.3 compile - jar false
com.h3xstream.retirejs retirejs-core 3.0.4 compile - jar false
org.sonatype.ossindex ossindex-service-client 1.8.2 compile - jar false
com.google.guava guava 33.6.0-jre compile - jar false
com.moandjiezana.toml toml4j 0.7.2 compile - jar false
com.hankcs aho-corasick-double-array-trie 1.2.3 compile - jar false
commons-validator commons-validator 1.10.1 compile - jar false
org.eclipse.packager packager-rpm 0.21.0 compile - jar false
org.apache.httpcomponents.core5 httpcore5 5.4.2 compile - jar false
org.apache.httpcomponents.client5 httpclient5 5.6.1 compile - jar false
com.fasterxml.jackson.core jackson-core 2.21.3 compile - jar false
com.fasterxml.jackson.core jackson-annotations 2.21 compile - jar false
org.sonatype.goodies package-url-java 1.2.0 compile - jar false
joda-time joda-time 2.14.2 compile - jar false
org.sonatype.ossindex ossindex-service-api 1.8.2 compile - jar false
com.esotericsoftware minlog 1.3.1 compile - jar false
org.json json 20251224 compile - jar false
org.junit.jupiter junit-jupiter-api 5.14.3 test - jar false
org.junit.jupiter junit-jupiter-params 5.14.3 test - jar false
org.mockito mockito-core 5.23.0 test - jar false
org.mockito mockito-junit-jupiter 5.23.0 test - jar false
org.hamcrest hamcrest 3.0 test - jar false
org.jspecify jspecify 1.0.0 compile - jar -
com.github.spotbugs spotbugs-annotations 4.9.8 compile - jar -

Used but Undeclared Dependencies

GroupId ArtifactId Version Scope Classifier Type Optional
com.google.code.findbugs jsr305 3.0.2 compile - jar -

Unused but Declared Dependencies

GroupId ArtifactId Version Scope Classifier Type Optional
org.slf4j jcl-over-slf4j 2.0.17 compile - jar false
org.junit.jupiter junit-jupiter-engine 5.14.3 test - jar false