CycloneDX Maven plugin

compile

The following is a list of compile dependencies for this project. These dependencies are required to compile and run the application:

test

The following is a list of test dependencies for this project. These dependencies are only required to compile and run unit tests for the application:

provided

The following is a list of provided dependencies for this project. These dependencies are required to compile the application, but should be provided by default when using the library:

compile

The following is a list of compile dependencies for this project. These dependencies are required to compile and run the application:

test

The following is a list of test dependencies for this project. These dependencies are only required to compile and run unit tests for the application:

provided

The following is a list of provided dependencies for this project. These dependencies are required to compile the application, but should be provided by default when using the library:

Dependency Tree

• org.cyclonedx:cyclonedx-maven-plugin:maven-plugin:2.9.1-SNAPSHOT

  CycloneDX Maven plugin
  Description: The CycloneDX Maven plugin generates CycloneDX Software Bill of Materials (SBOM) containing the aggregate of all direct and transitive dependencies of a project. URL: https://github.com/CycloneDX/cyclonedx-maven-plugin Project Licenses: Apache-2.0

  • org.cyclonedx:cyclonedx-core-java:jar:9.0.5 (compile)

    CycloneDX Core (Java)
    Description: The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs. URL: https://github.com/CycloneDX/cyclonedx-core-java Project Licenses: Apache-2.0

    • commons-io:commons-io:jar:2.16.1 (compile)

      Apache Commons IO
      Description: The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. URL: https://commons.apache.org/proper/commons-io/ Project Licenses: Apache-2.0

    • org.apache.commons:commons-collections4:jar:4.4 (compile)

      Apache Commons Collections
      Description: The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. URL: https://commons.apache.org/proper/commons-collections/ Project Licenses: Apache License, Version 2.0

    • com.github.package-url:packageurl-java:jar:1.5.0 (compile)

      Package URL
      Description: The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a "mostly universal" URL. URL: https://github.com/package-url/packageurl-java Project Licenses: MIT

    • com.fasterxml.jackson.dataformat:jackson-dataformat-xml:jar:2.17.2 (compile)

      Jackson-dataformat-XML
      Description: Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos. URL: https://github.com/FasterXML/jackson-dataformat-xml Project Licenses: The Apache Software License, Version 2.0

      • com.fasterxml.jackson.core:jackson-core:jar:2.17.2 (compile)

        Jackson-core
        Description: Core Jackson processing abstractions (aka Streaming API), implementation for JSON URL: https://github.com/FasterXML/jackson-core Project Licenses: The Apache Software License, Version 2.0

      • com.fasterxml.jackson.core:jackson-annotations:jar:2.17.2 (compile)

        Jackson-annotations
        Description: Core annotations used for value types, used by Jackson data binding package. URL: https://github.com/FasterXML/jackson Project Licenses: The Apache Software License, Version 2.0

      • com.fasterxml.jackson.core:jackson-databind:jar:2.17.2 (compile)

        jackson-databind
        Description: General data-binding functionality for Jackson: works on core streaming API URL: https://github.com/FasterXML/jackson Project Licenses: The Apache Software License, Version 2.0

      • org.codehaus.woodstox:stax2-api:jar:4.2.2 (compile)

        Stax2 API
        Description: Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. URL: http://github.com/FasterXML/stax2-api Project Licenses: The BSD 2-Clause License

      • com.fasterxml.woodstox:woodstox-core:jar:6.7.0 (compile)

        Woodstox
        Description: Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs URL: https://github.com/FasterXML/woodstox Project Licenses: The Apache License, Version 2.0

    • com.networknt:json-schema-validator:jar:1.5.1 (compile)

      JsonSchemaValidator
      Description: A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12 URL: https://github.com/networknt/json-schema-validator Project Licenses: Apache License Version 2.0

      • com.ethlo.time:itu:jar:1.10.2 (compile)

        Internet Time Utility
        Description: Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format URL: https://github.com/ethlo/itu Project Licenses: Apache License, Version 2.0

      • com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.17.1 (compile)

        Jackson-dataformat-YAML
        Description: Support for reading and writing YAML-encoded data via Jackson abstractions. URL: https://github.com/FasterXML/jackson-dataformats-text Project Licenses: The Apache Software License, Version 2.0

        • org.yaml:snakeyaml:jar:2.2 (compile)

          SnakeYAML
          Description: YAML 1.1 parser and emitter for Java URL: https://bitbucket.org/snakeyaml/snakeyaml Project Licenses: Apache License, Version 2.0

  • javax.inject:javax.inject:jar:1 (provided)

    javax.inject
    Description: The javax.inject API URL: http://code.google.com/p/atinject/ Project Licenses: The Apache Software License, Version 2.0

  • commons-codec:commons-codec:jar:1.17.1 (compile)

    Apache Commons Codec
    Description: The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. URL: https://commons.apache.org/proper/commons-codec/ Project Licenses: Apache-2.0

  • org.apache.commons:commons-lang3:jar:3.17.0 (compile)

    Apache Commons Lang

    Description: Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues. URL: https://commons.apache.org/proper/commons-lang/ Project Licenses: Apache-2.0

  • org.apache.maven:maven-core:jar:3.8.7 (provided)

    Maven Core
    Description: Maven Core classes. URL: https://maven.apache.org/ref/3.8.7/maven-core/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-model:jar:3.8.7 (provided)

      Maven Model
      Description: Model for Maven POM (Project Object Model) URL: https://maven.apache.org/ref/3.8.7/maven-model/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-settings:jar:3.8.7 (provided)

      Maven Settings
      Description: Maven Settings model. URL: https://maven.apache.org/ref/3.8.7/maven-settings/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-settings-builder:jar:3.8.7 (provided)

      Maven Settings Builder
      Description: The effective settings builder, with inheritance and password decryption. URL: https://maven.apache.org/ref/3.8.7/maven-settings-builder/ Project Licenses: Apache License, Version 2.0

      • org.codehaus.plexus:plexus-sec-dispatcher:jar:2.0 (provided)

        Plexus Security Dispatcher Component
        Description: The Plexus project provides a full software stack for creating and executing software projects. URL: https://codehaus-plexus.github.io/plexus-sec-dispatcher/ Project Licenses: Apache License, Version 2.0

        • org.codehaus.plexus:plexus-cipher:jar:2.0 (provided)

          Plexus Cipher: encryption/decryption Component
          Description: The Plexus project provides a full software stack for creating and executing software projects. URL: https://codehaus-plexus.github.io/plexus-cipher/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-builder-support:jar:3.8.7 (provided)

      Maven Builder Support
      Description: Support for descriptor builders (model, setting, toolchains) URL: https://maven.apache.org/ref/3.8.7/maven-builder-support/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-repository-metadata:jar:3.8.7 (provided)

      Maven Repository Metadata Model
      Description: Per-directory local and remote repository metadata. URL: https://maven.apache.org/ref/3.8.7/maven-repository-metadata/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-artifact:jar:3.8.7 (provided)

      Maven Artifact

      Description: Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process. URL: https://maven.apache.org/ref/3.8.7/maven-artifact/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-model-builder:jar:3.8.7 (provided)

      Maven Model Builder
      Description: The effective model builder, with inheritance, profile activation, interpolation, ... URL: https://maven.apache.org/ref/3.8.7/maven-model-builder/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven:maven-resolver-provider:jar:3.8.7 (provided)

      Maven Artifact Resolver Provider
      Description: Extensions to Maven Resolver for utilizing Maven POM and repository metadata. URL: https://maven.apache.org/ref/3.8.7/maven-resolver-provider/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven.resolver:maven-resolver-impl:jar:1.6.3 (provided)

      Maven Artifact Resolver Implementation
      Description: An implementation of the repository system. URL: https://maven.apache.org/resolver/maven-resolver-impl/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven.resolver:maven-resolver-api:jar:1.6.3 (compile)

      Maven Artifact Resolver API
      Description: The application programming interface for the repository system. URL: https://maven.apache.org/resolver/maven-resolver-api/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven.resolver:maven-resolver-spi:jar:1.6.3 (provided)

      Maven Artifact Resolver SPI
      Description: The service provider interface for repository system implementations and repository connectors. URL: https://maven.apache.org/resolver/maven-resolver-spi/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven.resolver:maven-resolver-util:jar:1.6.3 (compile)

      Maven Artifact Resolver Utilities
      Description: A collection of utility classes to ease usage of the repository system. URL: https://maven.apache.org/resolver/maven-resolver-util/ Project Licenses: Apache License, Version 2.0

    • org.apache.maven.shared:maven-shared-utils:jar:3.3.4 (provided)

      Apache Maven Shared Utils
      Description: Shared utilities for use by Maven core and plugins URL: https://maven.apache.org/shared/maven-shared-utils/ Project Licenses: Apache License, Version 2.0

    • org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.3.5 (provided)

      org.eclipse.sisu.plexus
      Description: Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container URL: http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/ Project Licenses: Eclipse Public License, Version 1.0

      • javax.annotation:javax.annotation-api:jar:1.2 (provided)

        javax.annotation API
        Description: Common Annotations for the JavaTM Platform API URL: http://jcp.org/en/jsr/detail?id=250 Project Licenses: CDDL + GPLv2 with classpath exception

    • org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.3.5 (provided)

      org.eclipse.sisu.inject
      Description: JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring URL: http://www.eclipse.org/sisu/org.eclipse.sisu.inject/ Project Licenses: Eclipse Public License, Version 1.0

    • com.google.inject:guice:jar:no_aop:4.2.2 (provided)

      Google Guice - Core Library
      Description: Guice is a lightweight dependency injection framework for Java 6 and above URL: https://github.com/google/guice/guice Project Licenses: The Apache Software License, Version 2.0

      • aopalliance:aopalliance:jar:1.0 (provided)

        AOP alliance
        Description: AOP Alliance URL: http://aopalliance.sourceforge.net Project Licenses: Public Domain

      • com.google.guava:guava:jar:25.1-android (provided)

        Guava: Google Core Libraries for Java
        Description: Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. URL: https://github.com/google/guava/guava Project Licenses: The Apache Software License, Version 2.0

        • com.google.code.findbugs:jsr305:jar:3.0.2 (provided)

          FindBugs-jsr305
          Description: JSR305 Annotations for Findbugs URL: http://findbugs.sourceforge.net/ Project Licenses: The Apache Software License, Version 2.0

        • org.checkerframework:checker-compat-qual:jar:2.0.0 (provided)

          Checker Qual
          Description: Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker URL: http://checkerframework.org Project Licenses: GNU General Public License, version 2 (GPL2), with the classpath exception, The MIT License

        • com.google.errorprone:error_prone_annotations:jar:2.1.3 (provided)

          error-prone annotations
          Description: Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/ URL: http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations Project Licenses: Apache 2.0

        • com.google.j2objc:j2objc-annotations:jar:1.1 (provided)

          J2ObjC Annotations
          Description: A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation. URL: https://github.com/google/j2objc/ Project Licenses: The Apache Software License, Version 2.0

        • org.codehaus.mojo:animal-sniffer-annotations:jar:1.14 (provided)

          Animal Sniffer Annotations
          Description: Animal Sniffer Parent project. URL: http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations Project Licenses: MIT license

    • org.codehaus.plexus:plexus-utils:jar:3.3.1 (provided)

      Plexus Common Utilities
      Description: A collection of various utility classes to ease working with strings, files, command lines, XML and more. URL: http://codehaus-plexus.github.io/plexus-utils/ Project Licenses: Apache License, Version 2.0

    • org.codehaus.plexus:plexus-classworlds:jar:2.6.0 (provided)

      Plexus Classworlds
      Description: A class loader framework URL: http://codehaus-plexus.github.io/plexus-classworlds/ Project Licenses: Apache License, Version 2.0

    • org.codehaus.plexus:plexus-interpolation:jar:1.26 (provided)

      Plexus Interpolation API
      Description: The Plexus project provides a full software stack for creating and executing software projects. URL: http://codehaus-plexus.github.io/plexus-interpolation/ Project Licenses: Apache License, Version 2.0

    • org.codehaus.plexus:plexus-component-annotations:jar:2.1.0 (provided)

      Plexus :: Component Annotations
      Description: Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations. URL: http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/ Project Licenses: Apache License, Version 2.0

    • org.slf4j:slf4j-api:jar:1.7.36 (compile)

      SLF4J API Module
      Description: The slf4j API URL: http://www.slf4j.org Project Licenses: MIT License

  • org.apache.maven:maven-plugin-api:jar:3.8.7 (provided)

    Maven Plugin API
    Description: The API for plugins - Mojos - development. URL: https://maven.apache.org/ref/3.8.7/maven-plugin-api/ Project Licenses: Apache License, Version 2.0

  • org.apache.maven.shared:maven-dependency-tree:jar:3.3.0 (compile)

    Apache Maven Dependency Tree
    Description: A tree-based API for resolution of Maven project dependencies URL: https://maven.apache.org/shared/maven-dependency-tree/ Project Licenses: Apache-2.0

  • org.apache.maven.shared:maven-dependency-analyzer:jar:1.14.1 (compile)

    Apache Maven Dependency Analyzer
    Description: Analyzes the dependencies of a project for undeclared or unused artifacts. URL: https://maven.apache.org/shared/maven-dependency-analyzer/ Project Licenses: Apache-2.0

    • org.ow2.asm:asm:jar:9.7 (compile)

      asm
      Description: ASM, a very small and fast Java bytecode manipulation framework URL: http://asm.ow2.io/ Project Licenses: BSD-3-Clause

  • org.apache.maven.plugin-tools:maven-plugin-annotations:jar:3.15.0 (provided)

    Maven Plugin Tools Java Annotations
    Description: Java annotations to use in Mojos URL: https://maven.apache.org/plugin-tools/maven-plugin-annotations Project Licenses: Apache-2.0

  • io.takari.maven.plugins:takari-plugin-integration-testing:pom:3.0.1 (test)

    takari-plugin-integration-testing
    Description: Takari: The future of software delivery. URL: http://takari.io/takari-plugin-testing-project/takari-plugin-integration-testing Project Licenses: The Eclipse Public License, Version 1.0

    • org.apache.commons:commons-exec:jar:1.3 (test)

      Apache Commons Exec
      Description: Apache Commons Exec is a library to reliably execute external processes from within the JVM. URL: http://commons.apache.org/proper/commons-exec/ Project Licenses: Apache License, Version 2.0

    • io.takari.m2e.workspace:org.eclipse.m2e.workspace.cli:jar:0.4.0 (test)

      m2e-workspace
      Description: Workspace dependency resolver implementation for Maven command line build. URL: https://www.eclipse.org/m2e Project Licenses: Eclipse Public License - v 1.0

    • org.apache.commons:commons-compress:jar:1.22 (test)

      Apache Commons Compress
      Description: Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. URL: https://commons.apache.org/proper/commons-compress/ Project Licenses: Apache License, Version 2.0

  • io.takari.maven.plugins:takari-plugin-testing:jar:3.0.0 (test)

    takari-plugin-testing
    Description: Takari: The future of software delivery. URL: http://takari.io/takari-plugin-testing-project/takari-plugin-testing Project Licenses: The Eclipse Public License, Version 1.0

  • org.junit.jupiter:junit-jupiter-api:jar:5.11.2 (test)

    JUnit Jupiter API
    Description: Module "junit-jupiter-api" of JUnit 5. URL: https://junit.org/junit5/ Project Licenses: Eclipse Public License v2.0

    • org.opentest4j:opentest4j:jar:1.3.0 (test)

      org.opentest4j:opentest4j
      Description: Open Test Alliance for the JVM URL: https://github.com/ota4j-team/opentest4j Project Licenses: The Apache License, Version 2.0

    • org.junit.platform:junit-platform-commons:jar:1.11.2 (test)

      JUnit Platform Commons
      Description: Module "junit-platform-commons" of JUnit 5. URL: https://junit.org/junit5/ Project Licenses: Eclipse Public License v2.0

    • org.apiguardian:apiguardian-api:jar:1.1.2 (test)

      org.apiguardian:apiguardian-api
      Description: @API Guardian URL: https://github.com/apiguardian-team/apiguardian Project Licenses: The Apache License, Version 2.0

  • junit:junit:jar:4.13.2 (test)

    JUnit
    Description: JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck. URL: http://junit.org Project Licenses: Eclipse Public License 1.0

    • org.hamcrest:hamcrest-core:jar:1.3 (test)

      Hamcrest Core
      Description: This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations. URL: https://github.com/hamcrest/JavaHamcrest/hamcrest-core Project Licenses: New BSD License

  • org.junit.jupiter:junit-jupiter-engine:jar:5.11.2 (test)

    JUnit Jupiter Engine
    Description: Module "junit-jupiter-engine" of JUnit 5. URL: https://junit.org/junit5/ Project Licenses: Eclipse Public License v2.0

    • org.junit.platform:junit-platform-engine:jar:1.11.2 (test)

      JUnit Platform Engine API
      Description: Module "junit-platform-engine" of JUnit 5. URL: https://junit.org/junit5/ Project Licenses: Eclipse Public License v2.0

  • org.junit.vintage:junit-vintage-engine:jar:5.11.2 (test)

    JUnit Vintage Engine
    Description: Module "junit-vintage-engine" of JUnit 5. URL: https://junit.org/junit5/ Project Licenses: Eclipse Public License v2.0

  • net.javacrumbs.json-unit:json-unit-assertj:jar:2.40.1 (test)

    json-unit-assertj
    Description: JSON Assertions based on AssertJ URL: https://github.com/lukas-krecan/JsonUnit/json-unit-assertj Project Licenses: The Apache Software License, Version 2.0

    • net.javacrumbs.json-unit:json-unit-core:jar:2.40.1 (test)

      json-unit-core
      Description: Core classes for JSON unit URL: https://github.com/lukas-krecan/JsonUnit/json-unit-core Project Licenses: The Apache Software License, Version 2.0

    • org.assertj:assertj-core:jar:3.24.2 (test)

      AssertJ Core
      Description: Rich and fluent assertions for testing in Java URL: https://assertj.github.io/doc/#assertj-core Project Licenses: Apache License, Version 2.0

      • net.bytebuddy:byte-buddy:jar:1.12.21 (test)

        Byte Buddy (without dependencies)
        Description: Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space. URL: https://bytebuddy.net/byte-buddy Project Licenses: Apache License, Version 2.0

    • net.javacrumbs.json-unit:json-unit-json-path:jar:2.40.1 (test)

      json-unit-json-path
      Description: json-path adapter URL: https://github.com/lukas-krecan/JsonUnit/json-unit-json-path Project Licenses: The Apache Software License, Version 2.0

      • com.jayway.jsonpath:json-path:jar:2.8.0 (test)

        json-path
        Description: A library to query and verify JSON URL: https://github.com/jayway/JsonPath Project Licenses: The Apache Software License, Version 2.0

        • net.minidev:json-smart:jar:2.4.10 (test)

          JSON Small and Fast Parser

          Description: JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language. URL: https://urielch.github.io/ Project Licenses: The Apache Software License, Version 2.0

          • net.minidev:accessors-smart:jar:2.4.9 (test)

            ASM based accessors helper used by json-smart
            Description: Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls. URL: https://urielch.github.io/ Project Licenses: The Apache Software License, Version 2.0