Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
File Path: /home/runner/.m2/repository/org/apache/ant/ant/1.10.8/ant-1.10.8.jar MD5: 4492182f592ad9779a5de60e3f0ea3c4 SHA1: ae148abb0532b685c5eeb22fdec9d124e89be5de SHA256:b96b46fd2b4b00e42684c3085b0d16dde975e7b8e64822b0bf52edf5fd387d8d Referenced In Project/Scope: waffle-jetty-jakarta:provided ant-1.10.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.9/asm-9.9.jar MD5: 6d1dd0482c03a6dc1807d9d004456021 SHA1: c29635c8a7afa03d74b33c1884df8abb2b3f3dcc SHA256:03d99a74ad1ee5c71334ef67437f4ef4fe3488caa7c96d8645abc73c8e2017d4 Referenced In Project/Scope: waffle-jetty-jakarta:provided asm-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.ow2.asm/asm-commons@9.9
Evidence
Type
Source
Name
Value
Confidence
Vendor
file
name
asm
High
Vendor
jar
package name
asm
Highest
Vendor
jar
package name
objectweb
Highest
Vendor
Manifest
bundle-docurl
http://asm.ow2.org
Low
Vendor
Manifest
bundle-requiredexecutionenvironment
J2SE-1.5
Low
Vendor
Manifest
bundle-symbolicname
org.objectweb.asm
Medium
Vendor
pom
artifactid
asm
Highest
Vendor
pom
artifactid
asm
Low
Vendor
pom
developer email
ebruneton@free.fr
Low
Vendor
pom
developer email
eu@javatx.org
Low
Vendor
pom
developer email
forax@univ-mlv.fr
Low
Vendor
pom
developer id
ebruneton
Medium
Vendor
pom
developer id
eu
Medium
Vendor
pom
developer id
forax
Medium
Vendor
pom
developer name
Eric Bruneton
Medium
Vendor
pom
developer name
Eugene Kuleshov
Medium
Vendor
pom
developer name
Remi Forax
Medium
Vendor
pom
groupid
org.ow2.asm
Highest
Vendor
pom
name
asm
High
Vendor
pom
organization name
OW2
High
Vendor
pom
organization url
http://www.ow2.org/
Medium
Vendor
pom
parent-artifactid
ow2
Low
Vendor
pom
parent-groupid
org.ow2
Medium
Vendor
pom
url
http://asm.ow2.io/
Highest
Product
file
name
asm
High
Product
jar
package name
asm
Highest
Product
jar
package name
objectweb
Highest
Product
Manifest
bundle-docurl
http://asm.ow2.org
Low
Product
Manifest
Bundle-Name
org.objectweb.asm
Medium
Product
Manifest
bundle-requiredexecutionenvironment
J2SE-1.5
Low
Product
Manifest
bundle-symbolicname
org.objectweb.asm
Medium
Product
Manifest
Implementation-Title
ASM, a very small and fast Java bytecode manipulation framework
High
Product
pom
artifactid
asm
Highest
Product
pom
developer email
ebruneton@free.fr
Low
Product
pom
developer email
eu@javatx.org
Low
Product
pom
developer email
forax@univ-mlv.fr
Low
Product
pom
developer id
ebruneton
Low
Product
pom
developer id
eu
Low
Product
pom
developer id
forax
Low
Product
pom
developer name
Eric Bruneton
Low
Product
pom
developer name
Eugene Kuleshov
Low
Product
pom
developer name
Remi Forax
Low
Product
pom
groupid
org.ow2.asm
Highest
Product
pom
name
asm
High
Product
pom
organization name
OW2
Low
Product
pom
organization url
http://www.ow2.org/
Low
Product
pom
parent-artifactid
ow2
Medium
Product
pom
parent-groupid
org.ow2
Medium
Product
pom
url
http://asm.ow2.io/
Medium
Version
file
version
9.9
High
Version
Manifest
Bundle-Version
9.9
High
Version
Manifest
Implementation-Version
9.9
High
Version
pom
parent-version
9.9
Low
Version
pom
version
9.9
Highest
Identifiers
pkg:maven/org.ow2.asm/asm@9.9 (Confidence:High)
asm-commons-9.9.jar
Description:
Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-commons/9.9/asm-commons-9.9.jar MD5: 8103b3de8f48fb4c7f97efdaa46ce809 SHA1: db9165a3bf908ded6b08612d583a15d1d0c7bda0 SHA256:db2f6f26150bbe7c126606b4a1151836bcc22a1e05a423b3585698bece995ff8 Referenced In Project/Scope: waffle-jetty-jakarta:provided asm-commons-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Tree API of ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-tree/9.9/asm-tree-9.9.jar MD5: 912eeaba1a63d574ffc66c651c7c6725 SHA1: f8de6eead6d24dd0f45bd065bbe112b2cda6ea21 SHA256:42178f3775c9c63f9e5e1446747d29b4eca4d91bd6e75e5c43cfa372a47d38c6 Referenced In Project/Scope: waffle-jetty-jakarta:provided asm-tree-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.ow2.asm/asm-commons@9.9
Evidence
Type
Source
Name
Value
Confidence
Vendor
file
name
asm-tree
High
Vendor
jar
package name
asm
Highest
Vendor
jar
package name
objectweb
Highest
Vendor
jar
package name
tree
Highest
Vendor
Manifest
bundle-docurl
http://asm.ow2.org
Low
Vendor
Manifest
bundle-requiredexecutionenvironment
J2SE-1.5
Low
Vendor
Manifest
bundle-symbolicname
org.objectweb.asm.tree
Medium
Vendor
Manifest
module-requires
org.objectweb.asm;transitive=true
Low
Vendor
pom
artifactid
asm-tree
Highest
Vendor
pom
artifactid
asm-tree
Low
Vendor
pom
developer email
ebruneton@free.fr
Low
Vendor
pom
developer email
eu@javatx.org
Low
Vendor
pom
developer email
forax@univ-mlv.fr
Low
Vendor
pom
developer id
ebruneton
Medium
Vendor
pom
developer id
eu
Medium
Vendor
pom
developer id
forax
Medium
Vendor
pom
developer name
Eric Bruneton
Medium
Vendor
pom
developer name
Eugene Kuleshov
Medium
Vendor
pom
developer name
Remi Forax
Medium
Vendor
pom
groupid
org.ow2.asm
Highest
Vendor
pom
name
asm-tree
High
Vendor
pom
organization name
OW2
High
Vendor
pom
organization url
http://www.ow2.org/
Medium
Vendor
pom
parent-artifactid
ow2
Low
Vendor
pom
parent-groupid
org.ow2
Medium
Vendor
pom
url
http://asm.ow2.io/
Highest
Product
file
name
asm-tree
High
Product
jar
package name
asm
Highest
Product
jar
package name
objectweb
Highest
Product
jar
package name
tree
Highest
Product
Manifest
bundle-docurl
http://asm.ow2.org
Low
Product
Manifest
Bundle-Name
org.objectweb.asm.tree
Medium
Product
Manifest
bundle-requiredexecutionenvironment
J2SE-1.5
Low
Product
Manifest
bundle-symbolicname
org.objectweb.asm.tree
Medium
Product
Manifest
Implementation-Title
Tree API of ASM, a very small and fast Java bytecode manipulation framework
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.2.3/caffeine-3.2.3.jar MD5: 0258f45d43968523cc11beeb01b240f2 SHA1: c097f0f6d21a0e6db88ea55836e26419b30dfe19 SHA256:ca70c90a5d1ce1511880ce9c93d4ad22108f61111d3daf91eb52762b571bd179 Referenced In Project/Scope: waffle-jetty-jakarta:compile caffeine-3.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.
License:
The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.52.0/checker-qual-3.52.0.jar MD5: d7eeaac6d7810375c2484fd4faeb2f69 SHA1: 9c17f496846ab1fca8975c6a50ceac0b3bbe63f0 SHA256:0b5bb1a4bdc4e4b1217482fe598efcaab4e1fba7b37f9412639178fc8116fc05 Referenced In Project/Scope: waffle-jetty-jakarta:compile checker-qual-3.52.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Referenced In Project/Scope: waffle-jetty-jakarta com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/org/eclipse/jdt/ecj/3.43.0/ecj-3.43.0.jar MD5: 571ac60d561935d9538ae77c99a7bdda SHA1: 3217710cfc3c6c20c2921623d1566e97ce5aeb6c SHA256:c786468c65e906498e7e36ece4e0d04c6d3dd34c9a61b34a3a5b512801911a82 Referenced In Project/Scope: waffle-jetty-jakarta:provided ecj-3.43.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.44.0/error_prone_annotations-2.44.0.jar MD5: 11d0ff18fb88d4e4c48a4347e9e4a1e0 SHA1: bbbf88e1d12da9c6f7f204ca78a55446654ce7e1 SHA256:bcf738a525e546c926a233d0a169cf7eafcf703fe81ac9d6994f7244eda29052 Referenced In Project/Scope: waffle-jetty-jakarta:provided error_prone_annotations-2.44.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/org/glassfish/expressly/expressly/6.0.0/expressly-6.0.0.jar MD5: e19bad48904a955072a576f0efea554b SHA1: 0524fa43fa48fc68fb62604cf14ce71b31caf7c0 SHA256:86ee67c7040278bac5204b571f738b8b859f014ceb5f896bd935bacbdaf33cb9 Referenced In Project/Scope: waffle-jetty-jakarta:provided expressly-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar MD5: abe8bd3abff622b9a8b15c3a737aa741 SHA1: a892ca9507839bbdb900d64310ac98256cab992f SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b Referenced In Project/Scope: waffle-jetty-jakarta:provided j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar MD5: 7faffaab962918da4cf5ddfd76609dd2 SHA1: 54f928fadec906a99d558536756d171917b9d936 SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2 Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/jakarta/el/jakarta.el-api/6.0.1/jakarta.el-api-6.0.1.jar MD5: a98f097e059552a75748fcdd067e5c16 SHA1: c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176 SHA256:7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605 Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.el-api-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.0.0/jakarta.servlet-api-6.0.0.jar MD5: 4bcb3175ed9b7aa3f038d082879ec2a8 SHA1: abecc699286e65035ebba9844c03931357a6a963 SHA256:c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.servlet-api-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.3
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp/3.0.0/jakarta.servlet.jsp-3.0.0.jar MD5: fca522b72282d53d0819af32a5a2ec9c SHA1: a1b306dd295439765d0fd2f9b00a48501c892b88 SHA256:7dde5d9789c030401c80bdfdbcc7a021665a451ba6f4ebdc033196cb7c8dee2a Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.servlet.jsp-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/jakarta/servlet/jsp/jakarta.servlet.jsp-api/4.0.0/jakarta.servlet.jsp-api-4.0.0.jar MD5: 6fddc938119e00e6f934c1b37120e338 SHA1: a8de3741b91ba7427306104979ab2f084e831438 SHA256:873b7d0c2b5734ef8847634299b67ce879080cdece8426147522c4db8e37c14e Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.servlet.jsp-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp.jstl/3.0.1/jakarta.servlet.jsp.jstl-3.0.1.jar MD5: 3f6511c0066616415b9ed23a018b1cde SHA1: 078909a1354585b2a7a2d3b4e348fceff8b6d180 SHA256:5cc6e60b9e74d38c25fe4f2d22dfd40577f5b8396bc885f7061cd2c525a43b86 Referenced In Project/Scope: waffle-jetty-jakarta:provided jakarta.servlet.jsp.jstl-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar MD5: d1651bf9048165f304e7877f1eaad6dc SHA1: c5e3e72ae7220118c3da808628ec7016d4d8aef2 SHA256:b163be93b2131f97dd23ee03c935b34f48c17e74d8f60b644747528ea024e88e Referenced In Project/Scope: waffle-jetty-jakarta:provided jdtcore-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0
EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/12.1.3/jetty-io-12.1.3.jar MD5: 32a95435dc101a448372f0b0a3b55974 SHA1: 2c46bf53f41e40df72ff457c40553da2ace7b956 SHA256:bb96db1fc7493403084d41b196b5a0cda94859d396d51511ac19dfb18048c3eb Referenced In Project/Scope: waffle-jetty-jakarta:provided jetty-io-12.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty/jetty-client@12.1.3
Evidence
Type
Source
Name
Value
Confidence
Vendor
file
name
jetty-io
High
Vendor
jar
package name
eclipse
Highest
Vendor
jar
package name
io
Highest
Vendor
jar
package name
jetty
Highest
Vendor
Manifest
build-jdk-spec
22
Low
Vendor
Manifest
bundle-copyright
Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.
Low
Vendor
Manifest
bundle-docurl
https://jetty.org/
Low
Vendor
Manifest
bundle-symbolicname
org.eclipse.jetty.io
Medium
Vendor
Manifest
Implementation-Vendor
Eclipse Jetty Project
High
Vendor
Manifest
url
https://jetty.org/
Low
Vendor
pom
artifactid
jetty-io
Highest
Vendor
pom
artifactid
jetty-io
Low
Vendor
pom
groupid
org.eclipse.jetty
Highest
Vendor
pom
name
Core :: IO
High
Vendor
pom
parent-artifactid
jetty-core
Low
Product
file
name
jetty-io
High
Product
jar
package name
eclipse
Highest
Product
jar
package name
io
Highest
Product
jar
package name
jetty
Highest
Product
Manifest
build-jdk-spec
22
Low
Product
Manifest
bundle-copyright
Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.
EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-server/12.1.3/jetty-server-12.1.3.jar MD5: 783233a7c09f86458a900b3178a969f9 SHA1: 7741aafcd7d6dc718d04d4cfb883982e361d6577 SHA256:8ecd7b83eaa17f2f86b36c2f88df1a510c428acad691778112f6f7f24015e367 Referenced In Project/Scope: waffle-jetty-jakarta:provided jetty-server-12.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.3
Evidence
Type
Source
Name
Value
Confidence
Vendor
file
name
jetty-server
High
Vendor
jar
package name
eclipse
Highest
Vendor
jar
package name
jetty
Highest
Vendor
jar
package name
server
Highest
Vendor
Manifest
build-jdk-spec
22
Low
Vendor
Manifest
bundle-copyright
Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.
Low
Vendor
Manifest
bundle-docurl
https://jetty.org/
Low
Vendor
Manifest
bundle-symbolicname
org.eclipse.jetty.server
Medium
Vendor
Manifest
Implementation-Vendor
Eclipse Jetty Project
High
Vendor
Manifest
url
https://jetty.org/
Low
Vendor
pom
artifactid
jetty-server
Highest
Vendor
pom
artifactid
jetty-server
Low
Vendor
pom
groupid
org.eclipse.jetty
Highest
Vendor
pom
name
Core :: Server
High
Vendor
pom
parent-artifactid
jetty-core
Low
Product
file
name
jetty-server
High
Product
jar
package name
eclipse
Highest
Product
jar
package name
jetty
Highest
Product
jar
package name
server
Highest
Product
Manifest
build-jdk-spec
22
Low
Product
Manifest
bundle-copyright
Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar MD5: cb531ec131e1c68c045b5d45fe5b9878 SHA1: b27ba04287cc4abe769642fe8318d39fc89bf937 SHA256:260c4b1e22b1db9e110ee441c4f13ce115f841fa48c41d78750986214b395557 Referenced In Project/Scope: waffle-jetty-jakarta:compile jna-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.18.1/jna-platform-5.18.1.jar MD5: a7af00779ec98bfe22dfb07b1532830d SHA1: dd817f391efc492041c9ae91127527c13750a789 SHA256:ad14c1b1ec4f43d396231219dfa635ebf828f738eac9f890ea1bc07795892d9a Referenced In Project/Scope: waffle-jetty-jakarta:compile jna-platform-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar MD5: 9133aba420d0ca3b001dbb6ae9992cf6 SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507 SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab Referenced In Project/Scope: waffle-jetty-jakarta:compile jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.1
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar MD5: dd83accb899363c32b07d7a1b2e4ce40 SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 Referenced In Project/Scope: waffle-jetty-jakarta:provided jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-el/10.1.44.1/mortbay-apache-el-10.1.44.1.jar MD5: b507d0f580ef493ac437768184385121 SHA1: eacb3f5c02ff139b7b8168ad2e1239fec9b91dfa SHA256:a2765dac7d41e7c167fafcaca524c6443058124d1daa0e8d59bf0ebb44a56f2b Referenced In Project/Scope: waffle-jetty-jakarta:provided mortbay-apache-el-10.1.44.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.3
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-jsp/10.1.44.1/mortbay-apache-jsp-10.1.44.1.jar MD5: 78d8a434a8a0d2d2af7a2101d416b90b SHA1: b57dd2dedcf0b228f3023722e8f3eda7aaec8d35 SHA256:8314ce1a57ea2d2319fcf0276ba9b1ada0354c5952b1bc7834b97634258ec99d Referenced In Project/Scope: waffle-jetty-jakarta:provided mortbay-apache-jsp-10.1.44.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.3
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar MD5: b6480d114a23683498ac3f746f959d2f SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832 Referenced In Project/Scope: waffle-jetty-jakarta:compile slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar MD5: d4c2e7bd090be697ad409a4e75684a94 SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73 SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c Referenced In Project/Scope: waffle-jetty-jakarta:provided spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT