Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all):
- dependency-check version: 12.1.3
- Report Generated On: Mon, 27 Oct 2025 03:14:23 GMT
- Dependencies Scanned: 10 (10 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 0 
- ...
- NVD API Last Checked: 2025-10-27T03:14:10Z
- NVD API Last Modified: 2025-10-27T02:15:59Z
Summary
Summary of Vulnerable Dependencies (click to show all)
 bw-base-2.0.0.jar
Description:
This project provides base classes, types and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-base/2.0.0/bw-base-2.0.0.jar
MD5: 0480624145ad4fc5daeba898b7132099
SHA1: b24b7279e0475bb3c8c84e37af400ad87877c955
SHA256:10d27642e3bf1f2f4f85320293b5041b7e34cba02cc2656f29e79f75cee97cc5
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-base-2.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-config@6.0.0
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-base | High | 
| Vendor | jar | package name | base | Highest | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-base | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-base | Highest | 
| Vendor | pom | artifactid | bw-base | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: base classes | High | 
| Vendor | pom | url | Bedework/bw-base | Highest | 
| Product | file | name | bw-base | High | 
| Product | jar | package name | base | Highest | 
| Product | jar | package name | bedework | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: base classes | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-base | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: base classes | Medium | 
| Product | pom | artifactid | bw-base | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: base classes | High | 
| Product | pom | url | Bedework/bw-base | High | 
| Version | file | version | 2.0.0 | High | 
| Version | Manifest | Implementation-Version | 2.0.0 | High | 
| Version | pom | version | 2.0.0 | Highest | 
bw-util-config-6.0.0.jar
Description:
This project provides a number of utility configuration classes and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-config/6.0.0/bw-util-config-6.0.0.jar
MD5: 974d4ee4953df439fc3753869cc469da
SHA1: c1f787f23f0c5028280a457d0709418ea332fe09
SHA256:97ee0ce50094f85f881d63fb423dfb7ae1973843ac6028f0488860394553aa60
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-util-config-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-util-config | High | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | jar | package name | config | Highest | 
| Vendor | jar | package name | util | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-util-conf/bw-util-config | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-util-config | Highest | 
| Vendor | pom | artifactid | bw-util-config | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: base configuration classes | High | 
| Vendor | pom | url | Bedework/bw-util-conf/bw-util-config | Highest | 
| Product | file | name | bw-util-config | High | 
| Product | jar | package name | bedework | Highest | 
| Product | jar | package name | config | Highest | 
| Product | jar | package name | util | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: base configuration classes | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-util-conf/bw-util-config | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: base configuration classes | Medium | 
| Product | pom | artifactid | bw-util-config | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: base configuration classes | High | 
| Product | pom | url | Bedework/bw-util-conf/bw-util-config | High | 
| Version | file | version | 6.0.0 | High | 
| Version | Manifest | Implementation-Version | 6.0.0 | High | 
| Version | pom | version | 6.0.0 | Highest | 
bw-util-jmx-6.0.0.jar
Description:
This project provides a number of utility configuration classes and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-jmx/6.0.0/bw-util-jmx-6.0.0.jar
MD5: e7ffae94c51d5c62aa657c7f321607b5
SHA1: cbfbb6e89fa5adac492adcc48866cfec62cc932d
SHA256:60b3d4ce24901fc1ab0b741be3413efaffb263f99f368062618478c67e7fd3b9
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-util-jmx-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-util-jmx | High | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | jar | package name | jmx | Highest | 
| Vendor | jar | package name | util | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-util-conf/bw-util-jmx | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-util-jmx | Highest | 
| Vendor | pom | artifactid | bw-util-jmx | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: JMX config classes | High | 
| Vendor | pom | url | Bedework/bw-util-conf/bw-util-jmx | Highest | 
| Product | file | name | bw-util-jmx | High | 
| Product | jar | package name | bedework | Highest | 
| Product | jar | package name | jmx | Highest | 
| Product | jar | package name | util | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: JMX config classes | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-util-conf/bw-util-jmx | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: JMX config classes | Medium | 
| Product | pom | artifactid | bw-util-jmx | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: JMX config classes | High | 
| Product | pom | url | Bedework/bw-util-conf/bw-util-jmx | High | 
| Version | file | version | 6.0.0 | High | 
| Version | Manifest | Implementation-Version | 6.0.0 | High | 
| Version | pom | version | 6.0.0 | Highest | 
bw-util-logging-6.0.0.jar
Description:
This project provides logging utility classes and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-logging/6.0.0/bw-util-logging-6.0.0.jar
MD5: 2c63b9031e2d0852a00e57753320b409
SHA1: a12c15e6670f1298c8c4779d08b24595e921aceb
SHA256:e26bbaf5a5dcad998990fdc647f448b2e2dcac6eb628be6945fe24d53759b745
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-util-logging-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-util-logging | High | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | jar | package name | logging | Highest | 
| Vendor | jar | package name | util | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-util-logging | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-util-logging | Highest | 
| Vendor | pom | artifactid | bw-util-logging | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: logging classes | High | 
| Vendor | pom | url | Bedework/bw-util-logging | Highest | 
| Product | file | name | bw-util-logging | High | 
| Product | jar | package name | bedework | Highest | 
| Product | jar | package name | logging | Highest | 
| Product | jar | package name | util | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: logging classes | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-util-logging | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: logging classes | Medium | 
| Product | pom | artifactid | bw-util-logging | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: logging classes | High | 
| Product | pom | url | Bedework/bw-util-logging | High | 
| Version | file | version | 6.0.0 | High | 
| Version | Manifest | Implementation-Version | 6.0.0 | High | 
| Version | pom | version | 6.0.0 | Highest | 
bw-util-misc-6.0.1.jar
Description:
This project provides a number of utility classes and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-misc/6.0.1/bw-util-misc-6.0.1.jar
MD5: 9dc0272f11c9a1803a160354fe2e5872
SHA1: 905462b918aab23efb8940c4270f3c087870c784
SHA256:7662745dcbbeddcb3f15e2db9ffd5cfa9fe1c55a015b378f99cde1de5dcfe0e4
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-util-misc-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-util-misc | High | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | jar | package name | misc | Highest | 
| Vendor | jar | package name | util | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-util/bw-util-misc | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-util-misc | Highest | 
| Vendor | pom | artifactid | bw-util-misc | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: misc utils | High | 
| Vendor | pom | url | Bedework/bw-util/bw-util-misc | Highest | 
| Product | file | name | bw-util-misc | High | 
| Product | jar | package name | bedework | Highest | 
| Product | jar | package name | misc | Highest | 
| Product | jar | package name | util | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: misc utils | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-util/bw-util-misc | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: misc utils | Medium | 
| Product | pom | artifactid | bw-util-misc | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: misc utils | High | 
| Product | pom | url | Bedework/bw-util/bw-util-misc | High | 
| Version | file | version | 6.0.1 | High | 
| Version | Manifest | Implementation-Version | 6.0.1 | High | 
| Version | pom | version | 6.0.1 | Highest | 
bw-util-xml-6.0.1.jar
Description:
This project provides a number of utility classes and methods
License:
Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-xml/6.0.1/bw-util-xml-6.0.1.jar
MD5: f8c1e22fbcf5ed35bed2faaa7906d70e
SHA1: fef45c09a64cd5eec4530db96892192e14abb286
SHA256:9ca8659400a0840d0e889f604f1e0d7ea139ed7486116e54dfb8e94be39ffa32
Referenced In Project/Scope: Bedework: security utility classes:compile
bw-util-xml-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-config@6.0.0
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | bw-util-xml | High | 
| Vendor | jar | package name | bedework | Highest | 
| Vendor | jar | package name | util | Highest | 
| Vendor | jar | package name | xml | Highest | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | implementation-url | https://github.com/Bedework/bw-util/bw-util-xml | Low | 
| Vendor | Manifest | Implementation-Vendor | Bedework | High | 
| Vendor | Manifest | os-arch | x86_64 | Low | 
| Vendor | Manifest | os-name | Mac OS X | Medium | 
| Vendor | Manifest | specification-vendor | Bedework | Low | 
| Vendor | pom | artifactid | bw-util-xml | Highest | 
| Vendor | pom | artifactid | bw-util-xml | Low | 
| Vendor | pom | developer name | Arlen Johnson | Medium | 
| Vendor | pom | developer name | Mike Douglass | Medium | 
| Vendor | pom | developer org | Bedework Commercial Services | Medium | 
| Vendor | pom | developer org | Spherical Cow Group | Medium | 
| Vendor | pom | developer org URL | http://sphericalcowgroup.com/ | Medium | 
| Vendor | pom | developer org URL | https://bedework.com/ | Medium | 
| Vendor | pom | groupid | org.bedework | Highest | 
| Vendor | pom | name | Bedework: util to handle xml | High | 
| Vendor | pom | url | Bedework/bw-util/bw-util-xml | Highest | 
| Product | file | name | bw-util-xml | High | 
| Product | jar | package name | bedework | Highest | 
| Product | jar | package name | util | Highest | 
| Product | jar | package name | xml | Highest | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | Implementation-Title | Bedework: util to handle xml | High | 
| Product | Manifest | implementation-url | https://github.com/Bedework/bw-util/bw-util-xml | Low | 
| Product | Manifest | os-arch | x86_64 | Low | 
| Product | Manifest | os-name | Mac OS X | Medium | 
| Product | Manifest | specification-title | Bedework: util to handle xml | Medium | 
| Product | pom | artifactid | bw-util-xml | Highest | 
| Product | pom | developer name | Arlen Johnson | Low | 
| Product | pom | developer name | Mike Douglass | Low | 
| Product | pom | developer org | Bedework Commercial Services | Low | 
| Product | pom | developer org | Spherical Cow Group | Low | 
| Product | pom | developer org URL | http://sphericalcowgroup.com/ | Low | 
| Product | pom | developer org URL | https://bedework.com/ | Low | 
| Product | pom | groupid | org.bedework | Highest | 
| Product | pom | name | Bedework: util to handle xml | High | 
| Product | pom | url | Bedework/bw-util/bw-util-xml | High | 
| Version | file | version | 6.0.1 | High | 
| Version | Manifest | Implementation-Version | 6.0.1 | High | 
| Version | pom | version | 6.0.1 | Highest | 
commons-codec-1.17.1.jar
Description:
     The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.
  License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.17.1/commons-codec-1.17.1.jar
MD5: 7b3438ab4c6d91e0066d410947e43f3e
SHA1: 973638b7149d333563584137ebf13a691bb60579
SHA256:f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23
Referenced In Project/Scope: Bedework: security utility classes:compile
commons-codec-1.17.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | commons-codec | High | 
| Vendor | jar | package name | apache | Highest | 
| Vendor | jar | package name | codec | Highest | 
| Vendor | jar | package name | commons | Highest | 
| Vendor | jar | package name | digest | Highest | 
| Vendor | Manifest | automatic-module-name | org.apache.commons.codec | Medium | 
| Vendor | Manifest | build-jdk-spec | 17 | Low | 
| Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-codec/ | Low | 
| Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-codec | Medium | 
| Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High | 
| Vendor | Manifest | multi-release | true | Low | 
| Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low | 
| Vendor | pom | artifactid | commons-codec | Highest | 
| Vendor | pom | artifactid | commons-codec | Low | 
| Vendor | pom | developer email | bayard@apache.org | Low | 
| Vendor | pom | developer email | chtompki@apache.org | Low | 
| Vendor | pom | developer email | dgraham@apache.org | Low | 
| Vendor | pom | developer email | dlr@finemaltcoding.com | Low | 
| Vendor | pom | developer email | ggregory at apache.org | Low | 
| Vendor | pom | developer email | jon@collab.net | Low | 
| Vendor | pom | developer email | julius@apache.org | Low | 
| Vendor | pom | developer email | mattsicker@apache.org | Low | 
| Vendor | pom | developer email | rwaldhoff@apache.org | Low | 
| Vendor | pom | developer email | sanders@totalsync.com | Low | 
| Vendor | pom | developer email | tn@apache.org | Low | 
| Vendor | pom | developer email | tobrien@apache.org | Low | 
| Vendor | pom | developer id | bayard | Medium | 
| Vendor | pom | developer id | chtompki | Medium | 
| Vendor | pom | developer id | dgraham | Medium | 
| Vendor | pom | developer id | dlr | Medium | 
| Vendor | pom | developer id | ggregory | Medium | 
| Vendor | pom | developer id | jon | Medium | 
| Vendor | pom | developer id | julius | Medium | 
| Vendor | pom | developer id | mattsicker | Medium | 
| Vendor | pom | developer id | rwaldhoff | Medium | 
| Vendor | pom | developer id | sanders | Medium | 
| Vendor | pom | developer id | tn | Medium | 
| Vendor | pom | developer id | tobrien | Medium | 
| Vendor | pom | developer name | Daniel Rall | Medium | 
| Vendor | pom | developer name | David Graham | Medium | 
| Vendor | pom | developer name | Gary Gregory | Medium | 
| Vendor | pom | developer name | Henri Yandell | Medium | 
| Vendor | pom | developer name | Jon S. Stevens | Medium | 
| Vendor | pom | developer name | Julius Davies | Medium | 
| Vendor | pom | developer name | Matt Sicker | Medium | 
| Vendor | pom | developer name | Rob Tompkins | Medium | 
| Vendor | pom | developer name | Rodney Waldhoff | Medium | 
| Vendor | pom | developer name | Scott Sanders | Medium | 
| Vendor | pom | developer name | Thomas Neidhart | Medium | 
| Vendor | pom | developer name | Tim OBrien | Medium | 
| Vendor | pom | developer org | The Apache Software Foundation | Medium | 
| Vendor | pom | developer org URL | http://juliusdavies.ca/ | Medium | 
| Vendor | pom | developer org URL | https://www.apache.org/ | Medium | 
| Vendor | pom | groupid | commons-codec | Highest | 
| Vendor | pom | name | Apache Commons Codec | High | 
| Vendor | pom | parent-artifactid | commons-parent | Low | 
| Vendor | pom | parent-groupid | org.apache.commons | Medium | 
| Vendor | pom | url | https://commons.apache.org/proper/commons-codec/ | Highest | 
| Product | file | name | commons-codec | High | 
| Product | jar | package name | apache | Highest | 
| Product | jar | package name | codec | Highest | 
| Product | jar | package name | commons | Highest | 
| Product | jar | package name | digest | Highest | 
| Product | Manifest | automatic-module-name | org.apache.commons.codec | Medium | 
| Product | Manifest | build-jdk-spec | 17 | Low | 
| Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-codec/ | Low | 
| Product | Manifest | Bundle-Name | Apache Commons Codec | Medium | 
| Product | Manifest | bundle-symbolicname | org.apache.commons.commons-codec | Medium | 
| Product | Manifest | Implementation-Title | Apache Commons Codec | High | 
| Product | Manifest | multi-release | true | Low | 
| Product | Manifest | specification-title | Apache Commons Codec | Medium | 
| Product | pom | artifactid | commons-codec | Highest | 
| Product | pom | developer email | bayard@apache.org | Low | 
| Product | pom | developer email | chtompki@apache.org | Low | 
| Product | pom | developer email | dgraham@apache.org | Low | 
| Product | pom | developer email | dlr@finemaltcoding.com | Low | 
| Product | pom | developer email | ggregory at apache.org | Low | 
| Product | pom | developer email | jon@collab.net | Low | 
| Product | pom | developer email | julius@apache.org | Low | 
| Product | pom | developer email | mattsicker@apache.org | Low | 
| Product | pom | developer email | rwaldhoff@apache.org | Low | 
| Product | pom | developer email | sanders@totalsync.com | Low | 
| Product | pom | developer email | tn@apache.org | Low | 
| Product | pom | developer email | tobrien@apache.org | Low | 
| Product | pom | developer id | bayard | Low | 
| Product | pom | developer id | chtompki | Low | 
| Product | pom | developer id | dgraham | Low | 
| Product | pom | developer id | dlr | Low | 
| Product | pom | developer id | ggregory | Low | 
| Product | pom | developer id | jon | Low | 
| Product | pom | developer id | julius | Low | 
| Product | pom | developer id | mattsicker | Low | 
| Product | pom | developer id | rwaldhoff | Low | 
| Product | pom | developer id | sanders | Low | 
| Product | pom | developer id | tn | Low | 
| Product | pom | developer id | tobrien | Low | 
| Product | pom | developer name | Daniel Rall | Low | 
| Product | pom | developer name | David Graham | Low | 
| Product | pom | developer name | Gary Gregory | Low | 
| Product | pom | developer name | Henri Yandell | Low | 
| Product | pom | developer name | Jon S. Stevens | Low | 
| Product | pom | developer name | Julius Davies | Low | 
| Product | pom | developer name | Matt Sicker | Low | 
| Product | pom | developer name | Rob Tompkins | Low | 
| Product | pom | developer name | Rodney Waldhoff | Low | 
| Product | pom | developer name | Scott Sanders | Low | 
| Product | pom | developer name | Thomas Neidhart | Low | 
| Product | pom | developer name | Tim OBrien | Low | 
| Product | pom | developer org | The Apache Software Foundation | Low | 
| Product | pom | developer org URL | http://juliusdavies.ca/ | Low | 
| Product | pom | developer org URL | https://www.apache.org/ | Low | 
| Product | pom | groupid | commons-codec | Highest | 
| Product | pom | name | Apache Commons Codec | High | 
| Product | pom | parent-artifactid | commons-parent | Medium | 
| Product | pom | parent-groupid | org.apache.commons | Medium | 
| Product | pom | url | https://commons.apache.org/proper/commons-codec/ | Medium | 
| Version | file | version | 1.17.1 | High | 
| Version | Manifest | Bundle-Version | 1.17.1 | High | 
| Version | Manifest | Implementation-Version | 1.17.1 | High | 
| Version | pom | parent-version | 1.17.1 | Low | 
| Version | pom | version | 1.17.1 | Highest | 
commons-lang3-3.18.0.jar
Description:
  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.
  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.
  
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar
MD5: 48b9886957920a4cdb602780ca345087
SHA1: fb14946f0e39748a6571de0635acbe44e7885491
SHA256:4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720
Referenced In Project/Scope: Bedework: security utility classes:compile
commons-lang3-3.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-misc@6.0.1
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | commons-lang3 | High | 
| Vendor | jar | package name | apache | Highest | 
| Vendor | jar | package name | commons | Highest | 
| Vendor | jar | package name | lang3 | Highest | 
| Vendor | Manifest | automatic-module-name | org.apache.commons.lang3 | Medium | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-lang/ | Low | 
| Vendor | Manifest | bundle-symbolicname | org.apache.commons.lang3 | Medium | 
| Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High | 
| Vendor | Manifest | multi-release | true | Low | 
| Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low | 
| Vendor | pom | artifactid | commons-lang3 | Highest | 
| Vendor | pom | artifactid | commons-lang3 | Low | 
| Vendor | pom | developer email | bayard@apache.org | Low | 
| Vendor | pom | developer email | britter@apache.org | Low | 
| Vendor | pom | developer email | chtompki@apache.org | Low | 
| Vendor | pom | developer email | djones@apache.org | Low | 
| Vendor | pom | developer email | dlr@finemaltcoding.com | Low | 
| Vendor | pom | developer email | ggregory at apache.org | Low | 
| Vendor | pom | developer email | jcarman@apache.org | Low | 
| Vendor | pom | developer email | joerg.schaible@gmx.de | Low | 
| Vendor | pom | developer email | lguibert@apache.org | Low | 
| Vendor | pom | developer email | oheger@apache.org | Low | 
| Vendor | pom | developer email | pbenedict@apache.org | Low | 
| Vendor | pom | developer email | rdonkin@apache.org | Low | 
| Vendor | pom | developer email | scolebourne@joda.org | Low | 
| Vendor | pom | developer email | stevencaswell@apache.org | Low | 
| Vendor | pom | developer id | bayard | Medium | 
| Vendor | pom | developer id | britter | Medium | 
| Vendor | pom | developer id | chtompki | Medium | 
| Vendor | pom | developer id | djones | Medium | 
| Vendor | pom | developer id | dlr | Medium | 
| Vendor | pom | developer id | fredrik | Medium | 
| Vendor | pom | developer id | ggregory | Medium | 
| Vendor | pom | developer id | jcarman | Medium | 
| Vendor | pom | developer id | joehni | Medium | 
| Vendor | pom | developer id | lguibert | Medium | 
| Vendor | pom | developer id | mbenson | Medium | 
| Vendor | pom | developer id | niallp | Medium | 
| Vendor | pom | developer id | oheger | Medium | 
| Vendor | pom | developer id | pbenedict | Medium | 
| Vendor | pom | developer id | rdonkin | Medium | 
| Vendor | pom | developer id | scaswell | Medium | 
| Vendor | pom | developer id | scolebourne | Medium | 
| Vendor | pom | developer name | Benedikt Ritter | Medium | 
| Vendor | pom | developer name | Daniel Rall | Medium | 
| Vendor | pom | developer name | Duncan Jones | Medium | 
| Vendor | pom | developer name | Fredrik Westermarck | Medium | 
| Vendor | pom | developer name | Gary Gregory | Medium | 
| Vendor | pom | developer name | Henri Yandell | Medium | 
| Vendor | pom | developer name | James Carman | Medium | 
| Vendor | pom | developer name | Joerg Schaible | Medium | 
| Vendor | pom | developer name | Loic Guibert | Medium | 
| Vendor | pom | developer name | Matt Benson | Medium | 
| Vendor | pom | developer name | Niall Pemberton | Medium | 
| Vendor | pom | developer name | Oliver Heger | Medium | 
| Vendor | pom | developer name | Paul Benedict | Medium | 
| Vendor | pom | developer name | Rob Tompkins | Medium | 
| Vendor | pom | developer name | Robert Burrell Donkin | Medium | 
| Vendor | pom | developer name | Stephen Colebourne | Medium | 
| Vendor | pom | developer name | Steven Caswell | Medium | 
| Vendor | pom | developer org | Carman Consulting, Inc. | Medium | 
| Vendor | pom | developer org | CollabNet, Inc. | Medium | 
| Vendor | pom | developer org | SITA ATS Ltd | Medium | 
| Vendor | pom | developer org | The Apache Software Foundation | Medium | 
| Vendor | pom | developer org URL | https://www.apache.org/ | Medium | 
| Vendor | pom | groupid | org.apache.commons | Highest | 
| Vendor | pom | name | Apache Commons Lang | High | 
| Vendor | pom | parent-artifactid | commons-parent | Low | 
| Vendor | pom | url | https://commons.apache.org/proper/commons-lang/ | Highest | 
| Product | file | name | commons-lang3 | High | 
| Product | jar | package name | apache | Highest | 
| Product | jar | package name | commons | Highest | 
| Product | jar | package name | lang3 | Highest | 
| Product | Manifest | automatic-module-name | org.apache.commons.lang3 | Medium | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-lang/ | Low | 
| Product | Manifest | Bundle-Name | Apache Commons Lang | Medium | 
| Product | Manifest | bundle-symbolicname | org.apache.commons.lang3 | Medium | 
| Product | Manifest | Implementation-Title | Apache Commons Lang | High | 
| Product | Manifest | multi-release | true | Low | 
| Product | Manifest | specification-title | Apache Commons Lang | Medium | 
| Product | pom | artifactid | commons-lang3 | Highest | 
| Product | pom | developer email | bayard@apache.org | Low | 
| Product | pom | developer email | britter@apache.org | Low | 
| Product | pom | developer email | chtompki@apache.org | Low | 
| Product | pom | developer email | djones@apache.org | Low | 
| Product | pom | developer email | dlr@finemaltcoding.com | Low | 
| Product | pom | developer email | ggregory at apache.org | Low | 
| Product | pom | developer email | jcarman@apache.org | Low | 
| Product | pom | developer email | joerg.schaible@gmx.de | Low | 
| Product | pom | developer email | lguibert@apache.org | Low | 
| Product | pom | developer email | oheger@apache.org | Low | 
| Product | pom | developer email | pbenedict@apache.org | Low | 
| Product | pom | developer email | rdonkin@apache.org | Low | 
| Product | pom | developer email | scolebourne@joda.org | Low | 
| Product | pom | developer email | stevencaswell@apache.org | Low | 
| Product | pom | developer id | bayard | Low | 
| Product | pom | developer id | britter | Low | 
| Product | pom | developer id | chtompki | Low | 
| Product | pom | developer id | djones | Low | 
| Product | pom | developer id | dlr | Low | 
| Product | pom | developer id | fredrik | Low | 
| Product | pom | developer id | ggregory | Low | 
| Product | pom | developer id | jcarman | Low | 
| Product | pom | developer id | joehni | Low | 
| Product | pom | developer id | lguibert | Low | 
| Product | pom | developer id | mbenson | Low | 
| Product | pom | developer id | niallp | Low | 
| Product | pom | developer id | oheger | Low | 
| Product | pom | developer id | pbenedict | Low | 
| Product | pom | developer id | rdonkin | Low | 
| Product | pom | developer id | scaswell | Low | 
| Product | pom | developer id | scolebourne | Low | 
| Product | pom | developer name | Benedikt Ritter | Low | 
| Product | pom | developer name | Daniel Rall | Low | 
| Product | pom | developer name | Duncan Jones | Low | 
| Product | pom | developer name | Fredrik Westermarck | Low | 
| Product | pom | developer name | Gary Gregory | Low | 
| Product | pom | developer name | Henri Yandell | Low | 
| Product | pom | developer name | James Carman | Low | 
| Product | pom | developer name | Joerg Schaible | Low | 
| Product | pom | developer name | Loic Guibert | Low | 
| Product | pom | developer name | Matt Benson | Low | 
| Product | pom | developer name | Niall Pemberton | Low | 
| Product | pom | developer name | Oliver Heger | Low | 
| Product | pom | developer name | Paul Benedict | Low | 
| Product | pom | developer name | Rob Tompkins | Low | 
| Product | pom | developer name | Robert Burrell Donkin | Low | 
| Product | pom | developer name | Stephen Colebourne | Low | 
| Product | pom | developer name | Steven Caswell | Low | 
| Product | pom | developer org | Carman Consulting, Inc. | Low | 
| Product | pom | developer org | CollabNet, Inc. | Low | 
| Product | pom | developer org | SITA ATS Ltd | Low | 
| Product | pom | developer org | The Apache Software Foundation | Low | 
| Product | pom | developer org URL | https://www.apache.org/ | Low | 
| Product | pom | groupid | org.apache.commons | Highest | 
| Product | pom | name | Apache Commons Lang | High | 
| Product | pom | parent-artifactid | commons-parent | Medium | 
| Product | pom | url | https://commons.apache.org/proper/commons-lang/ | Medium | 
| Version | file | version | 3.18.0 | High | 
| Version | Manifest | Bundle-Version | 3.18.0 | High | 
| Version | Manifest | Implementation-Version | 3.18.0 | High | 
| Version | pom | parent-version | 3.18.0 | Low | 
| Version | pom | version | 3.18.0 | Highest | 
commons-text-1.14.0.jar
Description:
Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.
  License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.14.0/commons-text-1.14.0.jar
MD5: 54960a12a82d52df3d5548d6934d87b2
SHA1: adcb0d4c67eabc79682604b47eb852aaff21138a
SHA256:121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92
Referenced In Project/Scope: Bedework: security utility classes:compile
commons-text-1.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-misc@6.0.1
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | commons-text | High | 
| Vendor | jar | package name | apache | Highest | 
| Vendor | jar | package name | commons | Highest | 
| Vendor | jar | package name | text | Highest | 
| Vendor | Manifest | automatic-module-name | org.apache.commons.text | Medium | 
| Vendor | Manifest | build-jdk-spec | 21 | Low | 
| Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-text | Low | 
| Vendor | Manifest | bundle-symbolicname | org.apache.commons.text | Medium | 
| Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High | 
| Vendor | Manifest | multi-release | true | Low | 
| Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low | 
| Vendor | pom | artifactid | commons-text | Highest | 
| Vendor | pom | artifactid | commons-text | Low | 
| Vendor | pom | developer email | britter@apache.org | Low | 
| Vendor | pom | developer email | chtompki@apache.org | Low | 
| Vendor | pom | developer email | djones@apache.org | Low | 
| Vendor | pom | developer email | ggregory at apache.org | Low | 
| Vendor | pom | developer email | kinow@apache.org | Low | 
| Vendor | pom | developer id | britter | Medium | 
| Vendor | pom | developer id | chtompki | Medium | 
| Vendor | pom | developer id | djones | Medium | 
| Vendor | pom | developer id | ggregory | Medium | 
| Vendor | pom | developer id | kinow | Medium | 
| Vendor | pom | developer name | Benedikt Ritter | Medium | 
| Vendor | pom | developer name | Bruno P. Kinoshita | Medium | 
| Vendor | pom | developer name | Duncan Jones | Medium | 
| Vendor | pom | developer name | Gary Gregory | Medium | 
| Vendor | pom | developer name | Rob Tompkins | Medium | 
| Vendor | pom | developer org | The Apache Software Foundation | Medium | 
| Vendor | pom | developer org URL | https://www.apache.org/ | Medium | 
| Vendor | pom | groupid | org.apache.commons | Highest | 
| Vendor | pom | name | Apache Commons Text | High | 
| Vendor | pom | parent-artifactid | commons-parent | Low | 
| Vendor | pom | url | https://commons.apache.org/proper/commons-text | Highest | 
| Product | file | name | commons-text | High | 
| Product | jar | package name | apache | Highest | 
| Product | jar | package name | commons | Highest | 
| Product | jar | package name | text | Highest | 
| Product | Manifest | automatic-module-name | org.apache.commons.text | Medium | 
| Product | Manifest | build-jdk-spec | 21 | Low | 
| Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-text | Low | 
| Product | Manifest | Bundle-Name | Apache Commons Text | Medium | 
| Product | Manifest | bundle-symbolicname | org.apache.commons.text | Medium | 
| Product | Manifest | Implementation-Title | Apache Commons Text | High | 
| Product | Manifest | multi-release | true | Low | 
| Product | Manifest | specification-title | Apache Commons Text | Medium | 
| Product | pom | artifactid | commons-text | Highest | 
| Product | pom | developer email | britter@apache.org | Low | 
| Product | pom | developer email | chtompki@apache.org | Low | 
| Product | pom | developer email | djones@apache.org | Low | 
| Product | pom | developer email | ggregory at apache.org | Low | 
| Product | pom | developer email | kinow@apache.org | Low | 
| Product | pom | developer id | britter | Low | 
| Product | pom | developer id | chtompki | Low | 
| Product | pom | developer id | djones | Low | 
| Product | pom | developer id | ggregory | Low | 
| Product | pom | developer id | kinow | Low | 
| Product | pom | developer name | Benedikt Ritter | Low | 
| Product | pom | developer name | Bruno P. Kinoshita | Low | 
| Product | pom | developer name | Duncan Jones | Low | 
| Product | pom | developer name | Gary Gregory | Low | 
| Product | pom | developer name | Rob Tompkins | Low | 
| Product | pom | developer org | The Apache Software Foundation | Low | 
| Product | pom | developer org URL | https://www.apache.org/ | Low | 
| Product | pom | groupid | org.apache.commons | Highest | 
| Product | pom | name | Apache Commons Text | High | 
| Product | pom | parent-artifactid | commons-parent | Medium | 
| Product | pom | url | https://commons.apache.org/proper/commons-text | Medium | 
| Version | file | version | 1.14.0 | High | 
| Version | Manifest | Bundle-Version | 1.14.0 | High | 
| Version | Manifest | Implementation-Version | 1.14.0 | High | 
| Version | pom | parent-version | 1.14.0 | Low | 
| Version | pom | version | 1.14.0 | Highest | 
jackson-annotations-2.18.2.jar
Description:
Core annotations used for value types, used by Jackson data binding package.
  
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.18.2/jackson-annotations-2.18.2.jar
MD5: 79d38d3c51068a2bbc40268d02f80763
SHA1: 985d77751ebc7fce5db115a986bc9aa82f973f4a
SHA256:581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f
Referenced In Project/Scope: Bedework: security utility classes:compile
jackson-annotations-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-logging@6.0.0
Evidence
| Type | Source | Name | Value | Confidence | 
|---|
| Vendor | file | name | jackson-annotations | High | 
| Vendor | jar | package name | fasterxml | Highest | 
| Vendor | jar | package name | jackson | Highest | 
| Vendor | Manifest | build-jdk-spec | 1.8 | Low | 
| Vendor | Manifest | bundle-docurl | https://github.com/FasterXML/jackson | Low | 
| Vendor | Manifest | bundle-symbolicname | com.fasterxml.jackson.core.jackson-annotations | Medium | 
| Vendor | Manifest | Implementation-Vendor | FasterXML | High | 
| Vendor | Manifest | Implementation-Vendor-Id | com.fasterxml.jackson.core | Medium | 
| Vendor | Manifest | specification-vendor | FasterXML | Low | 
| Vendor | pom | artifactid | jackson-annotations | Highest | 
| Vendor | pom | artifactid | jackson-annotations | Low | 
| Vendor | pom | groupid | com.fasterxml.jackson.core | Highest | 
| Vendor | pom | name | Jackson-annotations | High | 
| Vendor | pom | parent-artifactid | jackson-parent | Low | 
| Vendor | pom | parent-groupid | com.fasterxml.jackson | Medium | 
| Vendor | pom | url | FasterXML/jackson | Highest | 
| Product | file | name | jackson-annotations | High | 
| Product | hint analyzer | product | java8 | Highest | 
| Product | hint analyzer | product | modules | Highest | 
| Product | jar | package name | fasterxml | Highest | 
| Product | jar | package name | jackson | Highest | 
| Product | Manifest | build-jdk-spec | 1.8 | Low | 
| Product | Manifest | bundle-docurl | https://github.com/FasterXML/jackson | Low | 
| Product | Manifest | Bundle-Name | Jackson-annotations | Medium | 
| Product | Manifest | bundle-symbolicname | com.fasterxml.jackson.core.jackson-annotations | Medium | 
| Product | Manifest | Implementation-Title | Jackson-annotations | High | 
| Product | Manifest | specification-title | Jackson-annotations | Medium | 
| Product | pom | artifactid | jackson-annotations | Highest | 
| Product | pom | groupid | com.fasterxml.jackson.core | Highest | 
| Product | pom | name | Jackson-annotations | High | 
| Product | pom | parent-artifactid | jackson-parent | Medium | 
| Product | pom | parent-groupid | com.fasterxml.jackson | Medium | 
| Product | pom | url | FasterXML/jackson | High | 
| Version | file | version | 2.18.2 | High | 
| Version | Manifest | Bundle-Version | 2.18.2 | High | 
| Version | Manifest | Implementation-Version | 2.18.2 | High | 
| Version | pom | parent-version | 2.18.2 | Low | 
| Version | pom | version | 2.18.2 | Highest |