From c873460aca0d0120e215eff7754de2b3e4e1229b Mon Sep 17 00:00:00 2001 From: pmonks Date: Tue, 23 Jul 2024 02:38:29 +0000 Subject: [PATCH] deploy: 1d564926300dda19d13ee429a2ace5bdf44e888f --- nvd/dependency-check-gitlab.json | 2 +- nvd/dependency-check-jenkins.html | 2 +- nvd/dependency-check-junit.xml | 2 +- nvd/dependency-check-report.html | 2 +- nvd/dependency-check-report.json | 2 +- nvd/dependency-check-report.sarif | 2 +- nvd/dependency-check-report.xml | 2 +- nvd/nvd.log | 630 +++++++++++++++--------------- 8 files changed, 329 insertions(+), 315 deletions(-) diff --git a/nvd/dependency-check-gitlab.json b/nvd/dependency-check-gitlab.json index 70d7811..e7be73d 100644 --- a/nvd/dependency-check-gitlab.json +++ b/nvd/dependency-check-gitlab.json @@ -1 +1 @@ -{"version": "15.0.6","schema": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/v15.0.6/dist/dependency-scanning-report-format.json?ref_type=tags", "scan": {"scanner": {"id": "org.owasp.dependency-check","name": "Dependency-Check Core","version": "10.0.2","vendor": {"name": "OWASP"},"url": "https://github.com/jeremylong/DependencyCheck/"},"analyzer": {"id": "org.owasp.dependency-check","name": "Dependency-Check Core","version": "10.0.2","vendor": {"name": "OWASP"},"url": "https://github.com/jeremylong/DependencyCheck/"},"end_time": "2024-07-16T02:39:19","start_time": "2024-07-16T02:39:19","status": "success" ,"type": "dependency_scanning"},"vulnerabilities": [],"dependency_files": [{"path": "pom.xml","package_manager": "maven","dependencies": [{"package": {"name": "miikka:clj-base62"},"version": "0.1.1"},{"package": {"name": "com.github.pmonks:clj-spdx"},"version": "1.0.176"},{"package": {"name": "clj-xml-validation:clj-xml-validation"},"version": "1.0.2"},{"package": {"name": "org.clojure:clojure"},"version": "1.11.3"},{"package": {"name": "commons-beanutils:commons-beanutils"},"version": "1.9.4"},{"package": {"name": "commons-collections:commons-collections"},"version": "3.2.2"},{"package": {"name": "commons-digester:commons-digester"},"version": "2.1"},{"package": {"name": "org.apache.commons:commons-lang3"},"version": "3.5"},{"package": {"name": "commons-logging:commons-logging"},"version": "1.3.2"},{"package": {"name": "commons-validator:commons-validator"},"version": "1.9.0"},{"package": {"name": "org.clojure:core.specs.alpha"},"version": "0.2.62"},{"package": {"name": "org.clojure:data.xml"},"version": "0.2.0-alpha9"},{"package": {"name": "com.github.pmonks:embroidery"},"version": "1.0.44"},{"package": {"name": "com.google.code.gson:gson"},"version": "2.8.9"},{"package": {"name": "hato:hato"},"version": "1.0.0"},{"package": {"name": "instaparse:instaparse"},"version": "1.5.0"},{"package": {"name": "org.spdx:java-spdx-library"},"version": "1.1.11"},{"package": {"name": "org.jsoup:jsoup"},"version": "1.15.3"},{"package": {"name": "com.google.code.findbugs:jsr305"},"version": "3.0.2"},{"package": {"name": "dev.weavejester:medley"},"version": "1.8.0"},{"package": {"name": "com.github.pmonks:rencg"},"version": "1.0.51"},{"package": {"name": "org.slf4j:slf4j-api"},"version": "2.0.13"},{"package": {"name": "org.clojure:spec.alpha"},"version": "0.3.218"},{"package": {"name": "org.clojure:tools.logging"},"version": "1.3.0"},{"package": {"name": "tolitius:xml-in"},"version": "0.1.1"}]}],"remediations": [] } \ No newline at end of file +{"version": "15.0.6","schema": "https://gitlab.com/gitlab-org/security-products/security-report-schemas/-/raw/v15.0.6/dist/dependency-scanning-report-format.json?ref_type=tags", "scan": {"scanner": {"id": "org.owasp.dependency-check","name": "Dependency-Check Core","version": "10.0.2","vendor": {"name": "OWASP"},"url": "https://github.com/jeremylong/DependencyCheck/"},"analyzer": {"id": "org.owasp.dependency-check","name": "Dependency-Check Core","version": "10.0.2","vendor": {"name": "OWASP"},"url": "https://github.com/jeremylong/DependencyCheck/"},"end_time": "2024-07-23T02:38:28","start_time": "2024-07-23T02:38:28","status": "success" ,"type": "dependency_scanning"},"vulnerabilities": [],"dependency_files": [{"path": "pom.xml","package_manager": "maven","dependencies": [{"package": {"name": "miikka:clj-base62"},"version": "0.1.1"},{"package": {"name": "com.github.pmonks:clj-spdx"},"version": "1.0.176"},{"package": {"name": "clj-xml-validation:clj-xml-validation"},"version": "1.0.2"},{"package": {"name": "org.clojure:clojure"},"version": "1.11.3"},{"package": {"name": "commons-beanutils:commons-beanutils"},"version": "1.9.4"},{"package": {"name": "commons-collections:commons-collections"},"version": "3.2.2"},{"package": {"name": "commons-digester:commons-digester"},"version": "2.1"},{"package": {"name": "org.apache.commons:commons-lang3"},"version": "3.5"},{"package": {"name": "commons-logging:commons-logging"},"version": "1.3.2"},{"package": {"name": "commons-validator:commons-validator"},"version": "1.9.0"},{"package": {"name": "org.clojure:core.specs.alpha"},"version": "0.2.62"},{"package": {"name": "org.clojure:data.xml"},"version": "0.2.0-alpha9"},{"package": {"name": "com.github.pmonks:embroidery"},"version": "1.0.44"},{"package": {"name": "com.google.code.gson:gson"},"version": "2.8.9"},{"package": {"name": "hato:hato"},"version": "1.0.0"},{"package": {"name": "instaparse:instaparse"},"version": "1.5.0"},{"package": {"name": "org.spdx:java-spdx-library"},"version": "1.1.11"},{"package": {"name": "org.jsoup:jsoup"},"version": "1.15.3"},{"package": {"name": "com.google.code.findbugs:jsr305"},"version": "3.0.2"},{"package": {"name": "dev.weavejester:medley"},"version": "1.8.0"},{"package": {"name": "com.github.pmonks:rencg"},"version": "1.0.51"},{"package": {"name": "org.slf4j:slf4j-api"},"version": "2.0.13"},{"package": {"name": "org.clojure:spec.alpha"},"version": "0.3.218"},{"package": {"name": "org.clojure:tools.logging"},"version": "1.3.0"},{"package": {"name": "tolitius:xml-in"},"version": "0.1.1"}]}],"remediations": [] } \ No newline at end of file diff --git a/nvd/dependency-check-jenkins.html b/nvd/dependency-check-jenkins.html index 89a3c5a..d7e57bd 100644 --- a/nvd/dependency-check-jenkins.html +++ b/nvd/dependency-check-jenkins.html @@ -421,4 +421,4 @@

Suppressing false positives | Getting Help: github issues

 Sponsor

-

Project: com.github.pmonks/lice-comb 2.0.335-SNAPSHOT

Scan Information:

Summary

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count

Dependencies



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.
\ No newline at end of file +

Project: com.github.pmonks/lice-comb 2.0.335-SNAPSHOT

Scan Information:

Summary

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count

Dependencies



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.
\ No newline at end of file diff --git a/nvd/dependency-check-junit.xml b/nvd/dependency-check-junit.xml index 946fcae..befbe70 100644 --- a/nvd/dependency-check-junit.xml +++ b/nvd/dependency-check-junit.xml @@ -1 +1 @@ - \ No newline at end of file + \ No newline at end of file diff --git a/nvd/dependency-check-report.html b/nvd/dependency-check-report.html index af8e687..7b5adef 100644 --- a/nvd/dependency-check-report.html +++ b/nvd/dependency-check-report.html @@ -662,7 +662,7 @@

Suppressing false positives | Getting Help: github issues

 Sponsor

-

Project: com.github.pmonks/lice-comb 2.0.335-SNAPSHOT

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
clj-base62-0.1.1.jarpkg:maven/miikka/clj-base62@0.1.1 012
clj-spdx-1.0.176.jarpkg:maven/com.github.pmonks/clj-spdx@1.0.176 020
clj-xml-validation-1.0.2.jarpkg:maven/clj-xml-validation/clj-xml-validation@1.0.2 012
clojure-1.11.3.jarcpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*pkg:maven/org.clojure/clojure@1.11.3 0Highest21
commons-beanutils-1.9.4.jarcpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*pkg:maven/commons-beanutils/commons-beanutils@1.9.4 0Highest167
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest83
commons-digester-2.1.jarpkg:maven/commons-digester/commons-digester@2.1 097
commons-lang3-3.5.jarpkg:maven/org.apache.commons/commons-lang3@3.5 0138
commons-logging-1.3.2.jarpkg:maven/commons-logging/commons-logging@1.3.2 0128
commons-validator-1.9.0.jarpkg:maven/commons-validator/commons-validator@1.9.0 0129
core.specs.alpha-0.2.62.jarcpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*pkg:maven/org.clojure/core.specs.alpha@0.2.62 0Low17
data.xml-0.2.0-alpha9.jarpkg:maven/org.clojure/data.xml@0.2.0-alpha9 028
embroidery-1.0.44.jarpkg:maven/com.github.pmonks/embroidery@1.0.44 020
gson-2.8.9.jarcpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.8.9 0Highest28
hato-1.0.0.jarpkg:maven/hato/hato@1.0.0 017
instaparse-1.5.0.jarpkg:maven/instaparse/instaparse@1.5.0 017
java-spdx-library-1.1.11.jarpkg:maven/org.spdx/java-spdx-library@1.1.11 036
jsoup-1.15.3.jarcpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*pkg:maven/org.jsoup/jsoup@1.15.3 0Highest39
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 016
medley-1.8.0.jarpkg:maven/dev.weavejester/medley@1.8.0 015
rencg-1.0.51.jarpkg:maven/com.github.pmonks/rencg@1.0.51 020
slf4j-api-2.0.13.jarpkg:maven/org.slf4j/slf4j-api@2.0.13 028
spec.alpha-0.3.218.jarpkg:maven/org.clojure/spec.alpha@0.3.218 026
tools.logging-1.3.0.jarcpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*pkg:maven/org.clojure/tools.logging@1.3.0 0Low15
xml-in-0.1.1.jarpkg:maven/tolitius/xml-in@0.1.1 012

Dependencies (vulnerable)

clj-base62-0.1.1.jar

Description:

Base62 encoding and decoding for Clojure

File Path: /home/runner/.m2/repository/miikka/clj-base62/0.1.1/clj-base62-0.1.1.jar
MD5: 4d1ff2cba176169428c21fb9ddab0528
SHA1: e983866be496ce97fc442c07561be31cf1d95ecd
SHA256:b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862

Identifiers

clj-spdx-1.0.176.jar

Description:

Clojure wrapper around spdx/Spdx-Java-Library.

License:

Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/github/pmonks/clj-spdx/1.0.176/clj-spdx-1.0.176.jar
MD5: 46ed7ecc296a2521a84cd6de9c8859c1
SHA1: 790f0ed1581fb8c3daffd5de947174efd440bc6c
SHA256:f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98

Identifiers

clj-xml-validation-1.0.2.jar

Description:

Simple XML Schema validation library for Clojure

License:

Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/clj-xml-validation/clj-xml-validation/1.0.2/clj-xml-validation-1.0.2.jar
MD5: ab69483eecdcab00c0eaa011b056c351
SHA1: be28bbe42941f00acfa073e986fa7b386a7c4f2d
SHA256:e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43

Identifiers

clojure-1.11.3.jar

Description:

Clojure core environment and runtime library.

License:

Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.php
File Path: /home/runner/.m2/repository/org/clojure/clojure/1.11.3/clojure-1.11.3.jar
MD5: ab6a89d86e637060fc37b68f5c45d2c7
SHA1: baa884f9686cd231e91965e30c7e581e30109fd9
SHA256:9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7

Identifiers

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8

Identifiers

commons-digester-2.1.jar

Description:

+
Project: com.github.pmonks/lice-comb 2.0.335-SNAPSHOT
Scan Information (show all):
  • dependency-check version: 10.0.2
  • Report Generated On: Tue, 23 Jul 2024 02:38:28 GMT
  • Dependencies Scanned: 25 (25 unique)
  • Vulnerable Dependencies: 0
  • Vulnerabilities Found: 0
  • Vulnerabilities Suppressed: 0 
  • ...

Summary
Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
clj-base62-0.1.1.jarpkg:maven/miikka/clj-base62@0.1.1 012
clj-spdx-1.0.176.jarpkg:maven/com.github.pmonks/clj-spdx@1.0.176 020
clj-xml-validation-1.0.2.jarpkg:maven/clj-xml-validation/clj-xml-validation@1.0.2 012
clojure-1.11.3.jarcpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*pkg:maven/org.clojure/clojure@1.11.3 0Highest21
commons-beanutils-1.9.4.jarcpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*pkg:maven/commons-beanutils/commons-beanutils@1.9.4 0Highest167
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest83
commons-digester-2.1.jarpkg:maven/commons-digester/commons-digester@2.1 097
commons-lang3-3.5.jarpkg:maven/org.apache.commons/commons-lang3@3.5 0138
commons-logging-1.3.2.jarpkg:maven/commons-logging/commons-logging@1.3.2 0128
commons-validator-1.9.0.jarpkg:maven/commons-validator/commons-validator@1.9.0 0129
core.specs.alpha-0.2.62.jarcpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*pkg:maven/org.clojure/core.specs.alpha@0.2.62 0Low17
data.xml-0.2.0-alpha9.jarpkg:maven/org.clojure/data.xml@0.2.0-alpha9 028
embroidery-1.0.44.jarpkg:maven/com.github.pmonks/embroidery@1.0.44 020
gson-2.8.9.jarcpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.8.9 0Highest28
hato-1.0.0.jarpkg:maven/hato/hato@1.0.0 017
instaparse-1.5.0.jarpkg:maven/instaparse/instaparse@1.5.0 017
java-spdx-library-1.1.11.jarpkg:maven/org.spdx/java-spdx-library@1.1.11 036
jsoup-1.15.3.jarcpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*pkg:maven/org.jsoup/jsoup@1.15.3 0Highest39
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 016
medley-1.8.0.jarpkg:maven/dev.weavejester/medley@1.8.0 015
rencg-1.0.51.jarpkg:maven/com.github.pmonks/rencg@1.0.51 020
slf4j-api-2.0.13.jarpkg:maven/org.slf4j/slf4j-api@2.0.13 028
spec.alpha-0.3.218.jarpkg:maven/org.clojure/spec.alpha@0.3.218 026
tools.logging-1.3.0.jarcpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*pkg:maven/org.clojure/tools.logging@1.3.0 0Low15
xml-in-0.1.1.jarpkg:maven/tolitius/xml-in@0.1.1 012
Dependencies (vulnerable)
 
clj-base62-0.1.1.jar
Description:
Base62 encoding and decoding for Clojure
File Path: /home/runner/.m2/repository/miikka/clj-base62/0.1.1/clj-base62-0.1.1.jar
MD5: 4d1ff2cba176169428c21fb9ddab0528
SHA1: e983866be496ce97fc442c07561be31cf1d95ecd
SHA256:b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862
Identifiers
clj-spdx-1.0.176.jar
Description:
Clojure wrapper around spdx/Spdx-Java-Library.
License:
Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/github/pmonks/clj-spdx/1.0.176/clj-spdx-1.0.176.jar
MD5: 46ed7ecc296a2521a84cd6de9c8859c1
SHA1: 790f0ed1581fb8c3daffd5de947174efd440bc6c
SHA256:f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98
Identifiers
clj-xml-validation-1.0.2.jar
Description:
Simple XML Schema validation library for Clojure
License:
Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/clj-xml-validation/clj-xml-validation/1.0.2/clj-xml-validation-1.0.2.jar
MD5: ab69483eecdcab00c0eaa011b056c351
SHA1: be28bbe42941f00acfa073e986fa7b386a7c4f2d
SHA256:e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43
Identifiers
clojure-1.11.3.jar
Description:
Clojure core environment and runtime library.
License:
Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.php
File Path: /home/runner/.m2/repository/org/clojure/clojure/1.11.3/clojure-1.11.3.jar
MD5: ab6a89d86e637060fc37b68f5c45d2c7
SHA1: baa884f9686cd231e91965e30c7e581e30109fd9
SHA256:9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7
Identifiers
commons-beanutils-1.9.4.jar
Description:
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Identifiers
commons-collections-3.2.2.jar
Description:
Types that extend and augment the Java Collections Framework.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Identifiers
commons-digester-2.1.jar
Description:
     The Digester package lets you configure an XML to Java object mapping module
     which triggers certain actions called rules whenever a particular 
     pattern of nested XML elements is recognized.
diff --git a/nvd/dependency-check-report.json b/nvd/dependency-check-report.json
index 23e2b36..e2010fe 100644
--- a/nvd/dependency-check-report.json
+++ b/nvd/dependency-check-report.json
@@ -1 +1 @@
-{"reportSchema": "1.1","scanInfo": {"engineVersion": "10.0.2","dataSource": [{"name": "NVD API Last Checked","timestamp": "2024-07-16T02:39:11Z"},{"name": "NVD API Last Modified","timestamp": "2024-07-16T02:15:12Z"}]},"projectInfo": {"name": "com.github.pmonks\/lice-comb 2.0.335-SNAPSHOT","reportDate": "2024-07-16T02:39:19.142380862Z","credits": {"NVD": "This product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov","CISA": "This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog","NPM": "This report may contain data retrieved from the Github Advisory Database (via NPM Audit API): https://github.com/advisories/","RETIREJS": "This report may contain data retrieved from the RetireJS community: https://retirejs.github.io/retire.js/","OSSINDEX": "This report may contain data retrieved from the Sonatype OSS Index: https://ossindex.sonatype.org"}},"dependencies": [{"isVirtual": false,"fileName": "clj-base62-0.1.1.jar","filePath": "\/home\/runner\/.m2\/repository\/miikka\/clj-base62\/0.1.1\/clj-base62-0.1.1.jar","md5": "4d1ff2cba176169428c21fb9ddab0528","sha1": "e983866be496ce97fc442c07561be31cf1d95ecd","sha256": "b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862","description": "Base62 encoding and decoding for Clojure","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-base62"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-base62"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "miikka"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-base62"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/sr.ht\/~miikka\/clj-base62"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-base62"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-base62"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "miikka"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-base62"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/sr.ht\/~miikka\/clj-base62"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.1.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.1.1"}]},"packages": [{"id": "pkg:maven\/miikka\/clj-base62@0.1.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/miikka\/clj-base62@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clj-spdx-1.0.176.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/clj-spdx\/1.0.176\/clj-spdx-1.0.176.jar","md5": "46ed7ecc296a2521a84cd6de9c8859c1","sha1": "790f0ed1581fb8c3daffd5de947174efd440bc6c","sha256": "f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98","description": "Clojure wrapper around spdx\/Spdx-Java-Library.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-spdx"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-spdx"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+clj-spdx@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-spdx"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/clj-spdx"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-spdx"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-spdx"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+clj-spdx@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-spdx"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/clj-spdx"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.176"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.176"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clj-xml-validation-1.0.2.jar","filePath": "\/home\/runner\/.m2\/repository\/clj-xml-validation\/clj-xml-validation\/1.0.2\/clj-xml-validation-1.0.2.jar","md5": "ab69483eecdcab00c0eaa011b056c351","sha1": "be28bbe42941f00acfa073e986fa7b386a7c4f2d","sha256": "e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43","description": "Simple XML Schema validation library for Clojure","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-xml-validation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "bbbates\/clj-xml-validation"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-xml-validation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-xml-validation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "clj-xml-validation"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-xml-validation"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "bbbates\/clj-xml-validation"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.2"}]},"packages": [{"id": "pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clojure-1.11.3.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/clojure\/1.11.3\/clojure-1.11.3.jar","md5": "ab6a89d86e637060fc37b68f5c45d2c7","sha1": "baa884f9686cd231e91965e30c7e581e30109fd9","sha256": "9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7","description": "Clojure core environment and runtime library.","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "core"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "richhickey@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/clojure.org\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "core"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clojure"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "richhickey@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clojure"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/clojure.org\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.11.3"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.11.3"}]},"packages": [{"id": "pkg:maven\/org.clojure\/clojure@1.11.3","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/clojure@1.11.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aclojure&cpe_product=cpe%3A%2F%3Aclojure%3Aclojure&cpe_version=cpe%3A%2F%3Aclojure%3Aclojure%3A1.11.3"}]},{"isVirtual": false,"fileName": "commons-beanutils-1.9.4.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-beanutils\/commons-beanutils\/1.9.4\/commons-beanutils-1.9.4.jar","md5": "07dc532ee316fe1f2f0323e9bd2f8df4","sha1": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51","sha256": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a","description": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-beanutils"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "beanutils"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-beanutils"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-beanutils"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dion@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "epugh@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "geirm@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jconlon@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "mvdb@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "niallp@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "stain@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "yoavs@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "chtompki"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dion"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "epugh"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "geirm"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jconlon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jstrachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mvdb"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "stain"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tobrien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "yoavs"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Eric Pugh"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Dion Gillard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Geir Magnusson Jr."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Strachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "John E. Conlon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Martin van den Bemt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan James Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stian Soiland-Reyes"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Tim O'Brien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Yoav Shapira"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-beanutils"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons BeanUtils"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-beanutils"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "beanutils"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-beanutils"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-beanutils"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dion@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "epugh@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "geirm@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jconlon@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "mvdb@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "niallp@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "stain@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "yoavs@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "chtompki"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dion"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "epugh"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "geirm"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jconlon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jstrachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mvdb"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "stain"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tobrien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "yoavs"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Eric Pugh"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Dion Gillard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Geir Magnusson Jr."},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Strachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "John E. Conlon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Martin van den Bemt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan James Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stian Soiland-Reyes"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Tim O'Brien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Yoav Shapira"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-beanutils"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.9.4"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.9.4"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.9.4"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.9.4"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.9.4"}]},"packages": [{"id": "pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_beanutils&cpe_version=cpe%3A%2F%3Aapache%3Acommons_beanutils%3A1.9.4"}]},{"isVirtual": false,"fileName": "commons-collections-3.2.2.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-collections\/commons-collections\/3.2.2\/commons-collections-3.2.2.jar","md5": "f54a8510f834a1a57166970bfc982e94","sha1": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5","sha256": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8","description": "Types that extend and augment the Java Collections Framework.","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-collections"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "collections"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.collections"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "tags\/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-collections"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "amamment"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "geirm"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "matth"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "psteitz"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Arun M. Thomas"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Geir Magnusson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Matthew Hawthorne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Phil Steitz"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-collections"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Collections"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/collections\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-collections"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "collections"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Collections"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.collections"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "tags\/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Collections"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Collections"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-collections"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "amamment"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "geirm"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "matth"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "psteitz"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Arun M. Thomas"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Geir Magnusson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Matthew Hawthorne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Phil Steitz"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-collections"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Collections"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/collections\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.2.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "3.2.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "3.2.2"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "3.2.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.2.2"}]},"packages": [{"id": "pkg:maven\/commons-collections\/commons-collections@3.2.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-collections\/commons-collections@3.2.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_collections&cpe_version=cpe%3A%2F%3Aapache%3Acommons_collections%3A3.2.2"}]},{"isVirtual": false,"fileName": "commons-digester-2.1.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-digester\/commons-digester\/2.1\/commons-digester-2.1.jar","md5": "528445033f22da28f5047b6abcd1c7c9","sha1": "73a8001e7a54a255eef0f03521ec1805dc738ca0","sha256": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d","description": "\n    The Digester package lets you configure an XML to Java object mapping module\n    which triggers certain actions called rules whenever a particular \n    pattern of nested XML elements is recognized.\n  ","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-digester"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "digester"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "rules"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/digester\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.digester"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-digester"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jfarcand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jvanzyl@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rahul AT apache DOT org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@totalsync.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "simonetripodi AT apache DOT org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jfarcand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jstrachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jvanzyl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rahul"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tobrien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Strachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jason van Zyl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jean-Francois Arcand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rahul Akolkar"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simone Tripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Tim OBrien"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-digester"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Commons Digester"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/digester\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-digester"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "digester"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "rules"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/digester\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.digester"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Commons Digester"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-digester"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jfarcand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jvanzyl@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rahul AT apache DOT org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@totalsync.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "simonetripodi AT apache DOT org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jfarcand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jstrachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jvanzyl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rahul"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tobrien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Strachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jason van Zyl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jean-Francois Arcand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rahul Akolkar"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simone Tripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Tim OBrien"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-digester"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/digester\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.1"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.1"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "2.1"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "2.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.1"}]},"packages": [{"id": "pkg:maven\/commons-digester\/commons-digester@2.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-digester\/commons-digester@2.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-lang3-3.5.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/apache\/commons\/commons-lang3\/3.5\/commons-lang3-3.5.jar","md5": "780b5a8b72eebe6d0dbff1c11b5658fa","sha1": "6c6c702c89bfff3cd9e80b04d668c5e190d588c6","sha256": "8ac96fc686512d777fca85e144f196cd7cfe0c0aec23127229497d1a38ff651c","description": "\n  Apache Commons Lang, a package of Java utility classes for the\n  classes that are in java.lang's hierarchy, or are considered to be so\n  standard as to justify existence in java.lang.\n  ","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-lang3"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "lang3"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.lang3"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "release@r36f98d87b24c2f542b02abbf6ec1ee742f1b158b; 2016-10-13 19:52:17+0000"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-lang3"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "bayard@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "djones@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dlr@finemaltcoding.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "joerg.schaible@gmx.de"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "lguibert@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "oheger@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pbenedict@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@joda.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "stevencaswell@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "chtompki"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "djones"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dlr"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "fredrik"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "joehni"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "lguibert"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mbenson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "oheger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pbenedict"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scaswell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Daniel Rall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Duncan Jones"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Fredrik Westermarck"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary D. Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Joerg Schaible"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Loic Guibert"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Matt Benson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Oliver Heger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Paul Benedict"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Steven Caswell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "Carman Consulting, Inc."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "CollabNet, Inc."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "SITA ATS Ltd"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Lang"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-lang3"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "lang3"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Lang"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.lang3"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "release@r36f98d87b24c2f542b02abbf6ec1ee742f1b158b; 2016-10-13 19:52:17+0000"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Lang"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Lang"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-lang3"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "bayard@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "djones@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dlr@finemaltcoding.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "joerg.schaible@gmx.de"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "lguibert@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "oheger@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pbenedict@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@joda.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "stevencaswell@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "chtompki"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "djones"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dlr"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "fredrik"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "joehni"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "lguibert"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mbenson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "oheger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pbenedict"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scaswell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Daniel Rall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Duncan Jones"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Fredrik Westermarck"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary D. Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Joerg Schaible"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Loic Guibert"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Matt Benson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Oliver Heger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Paul Benedict"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Steven Caswell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "Carman Consulting, Inc."},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "CollabNet, Inc."},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "SITA ATS Ltd"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.apache.commons"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Lang"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.5"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "3.5"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "3.5"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.5"}]},"packages": [{"id": "pkg:maven\/org.apache.commons\/commons-lang3@3.5","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.apache.commons\/commons-lang3@3.5?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-logging-1.3.2.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-logging\/commons-logging\/1.3.2\/commons-logging-1.3.2.jar","md5": "4b970f3b14a5e53d8e8edff1cf2ecd91","sha1": "3dc966156ef19d23c839715165435e582fafa753","sha256": "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489","description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other,\n    well-known logging systems.","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-logging"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "logging"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.apache.commons.logging"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-logging"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "baliuka@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "costin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dennisl@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "donaldp@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rsitze@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tn@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "baliuka"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bstansberry"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "costin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dennisl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "donaldp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rsitze"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tn"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Brian Stansberry"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Costin Manolache"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Dennis Lundberg"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Juozas Baliuka"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Donald"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Richard Sitze"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Thomas Neidhart"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "Apache"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-logging"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-logging"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "logging"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.apache.commons.logging"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Logging"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-logging"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Logging"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Logging"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-logging"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "baliuka@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "costin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dennisl@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "donaldp@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rsitze@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tn@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "baliuka"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bstansberry"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "costin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dennisl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "donaldp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rsitze"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tn"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Brian Stansberry"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Costin Manolache"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Dennis Lundberg"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Juozas Baliuka"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Donald"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Richard Sitze"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Thomas Neidhart"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "Apache"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-logging"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Logging"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.3.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.3.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.3.2"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.3.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.3.2"}]},"packages": [{"id": "pkg:maven\/commons-logging\/commons-logging@1.3.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-logging\/commons-logging@1.3.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-validator-1.9.0.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-validator\/commons-validator\/1.9.0\/commons-validator-1.9.0.jar","md5": "0adeb5a4d23a33b9c80f5fcb2fa2ab3f","sha1": "26e49d333890ccad072eb530a85fceb9c07818df","sha256": "c3c14748e2d78db58df88808740711bd643b32c45ffa7b8a739f00fb467cd7d7","description": "\n    Apache Commons Validator provides the building blocks for both client side validation and server side data validation.\n    It may be used standalone or with a framework like Struts.\n  ","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-validator"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "validator"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-validator"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-validator"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dgraham@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dwinterfeldt@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "husted@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jmitchell NOSPAM apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "martinc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "mrdon@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rleland at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "turner@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bspeakmon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dgraham"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dwinterfeldt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "husted"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jmitchell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "martinc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mrdon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "nick"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rleland"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "turner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ben Speakmon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Graham"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Winterfeldt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Don Brown"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Mitchell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Turner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Martin Cooper"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Nick Burch"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Leland"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "SimoneTripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ted Husted"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "EdgeTech, Inc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-validator"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Validator"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-validator"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "validator"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Validator"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-validator"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Validator"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Validator"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-validator"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dgraham@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dwinterfeldt@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "husted@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jmitchell NOSPAM apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "martinc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "mrdon@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rleland at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "turner@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bspeakmon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dgraham"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dwinterfeldt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "husted"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jmitchell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "martinc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mrdon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "nick"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rleland"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "turner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ben Speakmon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Graham"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Winterfeldt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Don Brown"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Mitchell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Turner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Martin Cooper"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Nick Burch"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Leland"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "SimoneTripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ted Husted"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "EdgeTech, Inc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-validator"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Validator"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.9.0"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.9.0"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.9.0"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.9.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.9.0"}]},"packages": [{"id": "pkg:maven\/commons-validator\/commons-validator@1.9.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-validator\/commons-validator@1.9.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "core.specs.alpha-0.2.62.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/core.specs.alpha\/0.2.62\/core.specs.alpha-0.2.62.jar","md5": "b1e37e6e8efdade6b7c2a4dd17c0d437","sha1": "a2a7ea21a695561924bc8506f3feb5d8c8f894d5","sha256": "06eea8c070bbe45c158567e443439681bc8c46e9123414f81bfa32ba42d6cbc8","description": "Specs for clojure.core","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "core.specs.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "core.specs.alpha"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "puredanger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alex Miller"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "core.specs.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "core.specs.alpha"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "core.specs.alpha"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "puredanger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alex Miller"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "core.specs.alpha"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.2.62"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.2.62"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.2.62"}]},"packages": [{"id": "pkg:maven\/org.clojure\/core.specs.alpha@0.2.62","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/core.specs.alpha@0.2.62?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*","confidence": "LOW"}]},{"isVirtual": false,"fileName": "data.xml-0.2.0-alpha9.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/data.xml\/0.2.0-alpha9\/data.xml-0.2.0-alpha9.jar","md5": "ef1cfdccb910d381ad0b1ae75853dc32","sha1": "424e7fd03bc5fd2df9db477fc892d1db955879cd","sha256": "1fe706c3830860dbc4f8d8b737f6b1236ef08fcbad85e5db40b8aa93da98004b","description": "Functions to parse XML into lazy sequences and lazy trees and emit these as text","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "amalloy@4clojure.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chouser@n01se.net"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "herwig@bendlas.net"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "senior.ryan@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alan Malloy"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Chouser"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Herwig Hochleitner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ryan Senior"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "data.xml"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "data.xml"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "amalloy@4clojure.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chouser@n01se.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "herwig@bendlas.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "senior.ryan@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alan Malloy"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Chouser"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Herwig Hochleitner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ryan Senior"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "data.xml"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.2.0-alpha9"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.2.0-alpha9"}]},"packages": [{"id": "pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "embroidery-1.0.44.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/embroidery\/1.0.44\/embroidery-1.0.44.jar","md5": "0141ce9e67e5c76af519e98fc5a8bf5d","sha1": "0ce7accc8b0fe2fcb13b0e509c322de914390ad2","sha256": "f978771dcca1ef87a0668cee9911882fea462791f20a6166b93edc356d35f152","description": "A Clojure micro-library for leveraging virtual threads on JVMs that support them.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "embroidery"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "embroidery"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+embroidery@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "embroidery"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/embroidery"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "embroidery"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "embroidery"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+embroidery@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "embroidery"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/embroidery"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.44"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.44"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/embroidery@1.0.44","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/embroidery@1.0.44?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "gson-2.8.9.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/google\/code\/gson\/gson\/2.8.9\/gson-2.8.9.jar","md5": "e67627f67e03301092dc7de0a2d7cef8","sha1": "8a432c1d6825781e21a02db2e2c33c5fde2833b9","sha256": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e","description": "Gson JSON library","license": "Apache-2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "gson"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "google"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "11"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-contactaddress","value": "https:\/\/github.com\/google\/gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/github.com\/google\/gson\/gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-requiredexecutionenvironment","value": "JavaSE-1.6, JavaSE-1.7, JavaSE-1.8"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "com.google.gson"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "gson"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.gson"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Gson"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "gson-parent"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "gson"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "google"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "11"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-contactaddress","value": "https:\/\/github.com\/google\/gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/github.com\/google\/gson\/gson"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-requiredexecutionenvironment","value": "JavaSE-1.6, JavaSE-1.7, JavaSE-1.8"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "com.google.gson"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "gson"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.gson"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Gson"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "gson-parent"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.8.9"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.8.9"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.8.9"}]},"packages": [{"id": "pkg:maven\/com.google.code.gson\/gson@2.8.9","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.google.code.gson\/gson@2.8.9?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Agoogle&cpe_product=cpe%3A%2F%3Agoogle%3Agson&cpe_version=cpe%3A%2F%3Agoogle%3Agson%3A2.8.9"}]},{"isVirtual": false,"fileName": "hato-1.0.0.jar","filePath": "\/home\/runner\/.m2\/repository\/hato\/hato\/1.0.0\/hato-1.0.0.jar","md5": "169f69866f7e0eaf8f5a38ad049bcecf","sha1": "6a1bea52787ef5419f9d4475bce4997581ee6276","sha256": "6b65a8f6145ec577b015cbfa3703c2d00f5e9f964bc6fca7b71dfc56a4ffe029","description": "An HTTP client for Clojure, wrapping JDK 11's HttpClient.","license": "The MIT License: http:\/\/opensource.org\/licenses\/mit-license.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "hato"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "hato"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "hato"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "hato"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "hato"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "hato"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "gnarroway\/hato"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "hato"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "hato"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "hato"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "hato"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "hato"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "hato"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "gnarroway\/hato"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.0.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.0"}]},"packages": [{"id": "pkg:maven\/hato\/hato@1.0.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/hato\/hato@1.0.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "instaparse-1.5.0.jar","filePath": "\/home\/runner\/.m2\/repository\/instaparse\/instaparse\/1.5.0\/instaparse-1.5.0.jar","md5": "b858977bcb62c8913768cfb0fb01a4c9","sha1": "edc617bd20362b2fc870df88f1687426a69fe007","sha256": "c2bcd6f3a74d1a114973e6ac71e3536f6b035f29f769e9d1ec528ffe5e56cc27","description": "Instaparse: No grammar left behind","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "instaparse"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "instaparse"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "instaparse"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "Engelberg\/instaparse"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "instaparse"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "instaparse"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "instaparse"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "instaparse"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "instaparse"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "instaparse"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "Engelberg\/instaparse"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.5.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.5.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.5.0"}]},"packages": [{"id": "pkg:maven\/instaparse\/instaparse@1.5.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/instaparse\/instaparse@1.5.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "java-spdx-library-1.1.11.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/spdx\/java-spdx-library\/1.1.11\/java-spdx-library-1.1.11.jar","md5": "bbee14269e94c903bcb75c1d7fc250d5","sha1": "f438688f8eb61f975c4c6f79c7c8b7d6fcc2c814","sha256": "5ca113ac2a885b264e0d1bdf684f4948b375adf3ffde84981944baf8f8fcc55a","description": "Java library which implements the Java object model for SPDX and provides useful helper functions.","license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "java-spdx-library"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "library"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "model"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "spdx"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.spdx.library"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "java-spdx-library"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "gary@sourceauditor.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "goneall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary O'Neall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "SPDX"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "http:\/\/spdx.org"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.spdx"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "java-spdx-library"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "organization name","value": "SPDX"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "organization url","value": "http:\/\/spdx.org"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "spdx\/Spdx-Java-Library"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "java-spdx-library"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "library"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "model"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "spdx"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.spdx.library"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "java-spdx-library"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "gary@sourceauditor.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "goneall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary O'Neall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "SPDX"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "http:\/\/spdx.org"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.spdx"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "java-spdx-library"},{"type": "product","confidence": "LOW","source": "pom","name": "organization name","value": "SPDX"},{"type": "product","confidence": "LOW","source": "pom","name": "organization url","value": "http:\/\/spdx.org"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "spdx\/Spdx-Java-Library"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.1.11"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.1.11"}]},"packages": [{"id": "pkg:maven\/org.spdx\/java-spdx-library@1.1.11","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.spdx\/java-spdx-library@1.1.11?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "jsoup-1.15.3.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/jsoup\/jsoup\/1.15.3\/jsoup-1.15.3.jar","md5": "4f16c3b17b8c1b0173b1ed9f99f2c27c","sha1": "f6e1d8a8819f854b681c8eaa57fd59a42329e10c","sha256": "e20a5e78b1372f2a4e620832db4442d5077e5cbde280b24c666a3770844999bc","description": "jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do.","license": "The MIT License: https:\/\/jsoup.org\/license","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "jsoup"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "jsoup"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "parser"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.jsoup"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "18"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/jsoup.org\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsoup"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "Jonathan Hedley"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "jsoup"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jonathan@hedley.net"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jhy"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jonathan Hedley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.jsoup"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "jsoup Java HTML Parser"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "organization name","value": "Jonathan Hedley"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "organization url","value": "https:\/\/jhy.io\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/jsoup.org\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "jsoup"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "jsoup"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "parser"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.jsoup"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "18"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/jsoup.org\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsoup"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "jsoup"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jonathan@hedley.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jhy"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jonathan Hedley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.jsoup"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "LOW","source": "pom","name": "organization name","value": "Jonathan Hedley"},{"type": "product","confidence": "LOW","source": "pom","name": "organization url","value": "https:\/\/jhy.io\/"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/jsoup.org\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.15.3"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.15.3"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.15.3"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.15.3"}]},"packages": [{"id": "pkg:maven\/org.jsoup\/jsoup@1.15.3","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.jsoup\/jsoup@1.15.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Ajsoup&cpe_product=cpe%3A%2F%3Ajsoup%3Ajsoup&cpe_version=cpe%3A%2F%3Ajsoup%3Ajsoup%3A1.15.3"}]},{"isVirtual": false,"fileName": "jsr305-3.0.2.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/google\/code\/findbugs\/jsr305\/3.0.2\/jsr305-3.0.2.jar","md5": "dd83accb899363c32b07d7a1b2e4ce40","sha1": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d","sha256": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7","description": "JSR305 Annotations for Findbugs","license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "jsr305"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsr-305"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "jsr305"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.findbugs"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "FindBugs-jsr305"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/findbugs.sourceforge.net\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "jsr305"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "FindBugs-jsr305"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsr-305"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "jsr305"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.findbugs"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "FindBugs-jsr305"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/findbugs.sourceforge.net\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.0.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "3.0.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.0.2"}]},"packages": [{"id": "pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "medley-1.8.0.jar","filePath": "\/home\/runner\/.m2\/repository\/dev\/weavejester\/medley\/1.8.0\/medley-1.8.0.jar","md5": "5a524507a356b733c950a71064c4c76f","sha1": "1c79f052c68b2af923e3b5b5ba6df4756b72e8f5","sha256": "958a233d918714304497f371d654fab3ac2751018cc32989c92f5100ad7e548f","description": "A lightweight library of useful, mostly pure functions","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "medley"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "medley"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "medley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "dev.weavejester"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "medley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "weavejester\/medley"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "medley"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "medley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "medley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "dev.weavejester"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "medley"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "weavejester\/medley"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.8.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.8.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.8.0"}]},"packages": [{"id": "pkg:maven\/dev.weavejester\/medley@1.8.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/dev.weavejester\/medley@1.8.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "rencg-1.0.51.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/rencg\/1.0.51\/rencg-1.0.51.jar","md5": "57d5cb137b1955a15fadc6074da8550d","sha1": "bdd0836b60caf5ee0bdadeb4de20dd87c1398ab3","sha256": "82f0ff7e7e1aa63d27b593faaa6f0a9d15af32623bbcea1d825368315110d70d","description": "A micro-library for Clojure that provides first class support for named-capturing groups in regular expressions.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "rencg"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "rencg"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+rencg@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "rencg"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/rencg"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "rencg"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "rencg"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+rencg@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "rencg"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/rencg"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.51"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.51"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/rencg@1.0.51","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/rencg@1.0.51?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "slf4j-api-2.0.13.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/slf4j\/slf4j-api\/2.0.13\/slf4j-api-2.0.13.jar","md5": "7f4028aa04f75427327f3f30cd62ba4e","sha1": "80229737f704b121a318bba5d5deacbcf395bc77","sha256": "e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9","description": "The slf4j API","license": "http:\/\/www.opensource.org\/licenses\/mit-license.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "slf4j-api"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "slf4j"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/www.slf4j.org"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "slf4j.api"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "slf4j-api"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.slf4j"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "SLF4J API Module"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "slf4j-parent"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/www.slf4j.org"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "slf4j-api"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "slf4j"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/www.slf4j.org"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "SLF4J API Module"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "slf4j.api"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "slf4j-api"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "slf4j-api"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.slf4j"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "SLF4J API Module"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "slf4j-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/www.slf4j.org"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.0.13"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.0.13"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "2.0.13"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.0.13"}]},"packages": [{"id": "pkg:maven\/org.slf4j\/slf4j-api@2.0.13","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.slf4j\/slf4j-api@2.0.13?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "spec.alpha-0.3.218.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/spec.alpha\/0.3.218\/spec.alpha-0.3.218.jar","md5": "ecdbb58e7a95163c1369ef9fa054013d","sha1": "a7dad492f8d6cf657d82dcd6b31bda0899f1ac0e","sha256": "67ec898eb55c66a957a55279dd85d1376bb994bd87668b2b0de1eb3b97e8aae0","description": "Specification of data and functions","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "spec.alpha"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "alpha"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "spec"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "spec"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "spec.alpha"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "richhickey"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "spec.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "spec.alpha"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "alpha"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "spec"},{"type": "product","confidence": "LOW","source": "jar","name": "package name","value": "spec"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "spec.alpha"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "richhickey"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "spec.alpha"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.3.218"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.3.218"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.3.218"}]},"packages": [{"id": "pkg:maven\/org.clojure\/spec.alpha@0.3.218","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/spec.alpha@0.3.218?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "tools.logging-1.3.0.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/tools.logging\/1.3.0\/tools.logging-1.3.0.jar","md5": "b6b3c2ffeb27a25eab2d6e0e3a6e6b57","sha1": "07d45477c1b61230b0d1fcf36afccc02155a4b32","sha256": "826969b78d9ada327de6b7da0f176457d95614fa38c280326610f31a6b515c91","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "tools.logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "tools.logging"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alex Taggart"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "tools.logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "tools.logging"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "tools.logging"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alex Taggart"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "tools.logging"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.3.0"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.3.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.3.0"}]},"packages": [{"id": "pkg:maven\/org.clojure\/tools.logging@1.3.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/tools.logging@1.3.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*","confidence": "LOW"}]},{"isVirtual": false,"fileName": "xml-in-0.1.1.jar","filePath": "\/home\/runner\/.m2\/repository\/tolitius\/xml-in\/0.1.1\/xml-in-0.1.1.jar","md5": "754502ef9d8c1574d6d893b22f6101dc","sha1": "0a68865842a0fa7484bca3a7be33f182d8213a97","sha256": "43ab632812fe03b86b1a154723d809bb393e11a0ff0e6677167f14ece40f5543","description": "your friendly XML navigator","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "xml-in"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "xml-in"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "tolitius"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "xml-in"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "tolitius\/xml-in"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "xml-in"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "xml-in"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "tolitius"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "xml-in"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "tolitius\/xml-in"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.1.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.1.1"}]},"packages": [{"id": "pkg:maven\/tolitius\/xml-in@0.1.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/tolitius\/xml-in@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]}]}
\ No newline at end of file
+{"reportSchema": "1.1","scanInfo": {"engineVersion": "10.0.2","dataSource": [{"name": "NVD API Last Checked","timestamp": "2024-07-23T02:38:20Z"},{"name": "NVD API Last Modified","timestamp": "2024-07-23T02:15:02Z"}]},"projectInfo": {"name": "com.github.pmonks\/lice-comb 2.0.335-SNAPSHOT","reportDate": "2024-07-23T02:38:28.209926455Z","credits": {"NVD": "This product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov","CISA": "This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog","NPM": "This report may contain data retrieved from the Github Advisory Database (via NPM Audit API): https://github.com/advisories/","RETIREJS": "This report may contain data retrieved from the RetireJS community: https://retirejs.github.io/retire.js/","OSSINDEX": "This report may contain data retrieved from the Sonatype OSS Index: https://ossindex.sonatype.org"}},"dependencies": [{"isVirtual": false,"fileName": "clj-base62-0.1.1.jar","filePath": "\/home\/runner\/.m2\/repository\/miikka\/clj-base62\/0.1.1\/clj-base62-0.1.1.jar","md5": "4d1ff2cba176169428c21fb9ddab0528","sha1": "e983866be496ce97fc442c07561be31cf1d95ecd","sha256": "b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862","description": "Base62 encoding and decoding for Clojure","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-base62"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-base62"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "miikka"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-base62"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/sr.ht\/~miikka\/clj-base62"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-base62"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-base62"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "miikka"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-base62"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/sr.ht\/~miikka\/clj-base62"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.1.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.1.1"}]},"packages": [{"id": "pkg:maven\/miikka\/clj-base62@0.1.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/miikka\/clj-base62@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clj-spdx-1.0.176.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/clj-spdx\/1.0.176\/clj-spdx-1.0.176.jar","md5": "46ed7ecc296a2521a84cd6de9c8859c1","sha1": "790f0ed1581fb8c3daffd5de947174efd440bc6c","sha256": "f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98","description": "Clojure wrapper around spdx\/Spdx-Java-Library.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-spdx"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-spdx"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+clj-spdx@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-spdx"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/clj-spdx"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-spdx"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-spdx"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+clj-spdx@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-spdx"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/clj-spdx"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.176"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.176"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clj-xml-validation-1.0.2.jar","filePath": "\/home\/runner\/.m2\/repository\/clj-xml-validation\/clj-xml-validation\/1.0.2\/clj-xml-validation-1.0.2.jar","md5": "ab69483eecdcab00c0eaa011b056c351","sha1": "be28bbe42941f00acfa073e986fa7b386a7c4f2d","sha256": "e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43","description": "Simple XML Schema validation library for Clojure","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clj-xml-validation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clj-xml-validation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "bbbates\/clj-xml-validation"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clj-xml-validation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clj-xml-validation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "clj-xml-validation"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clj-xml-validation"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "bbbates\/clj-xml-validation"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.2"}]},"packages": [{"id": "pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "clojure-1.11.3.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/clojure\/1.11.3\/clojure-1.11.3.jar","md5": "ab6a89d86e637060fc37b68f5c45d2c7","sha1": "baa884f9686cd231e91965e30c7e581e30109fd9","sha256": "9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7","description": "Clojure core environment and runtime library.","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "core"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "richhickey@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/clojure.org\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "core"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "clojure"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "richhickey@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "clojure"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/clojure.org\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.11.3"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.11.3"}]},"packages": [{"id": "pkg:maven\/org.clojure\/clojure@1.11.3","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/clojure@1.11.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aclojure&cpe_product=cpe%3A%2F%3Aclojure%3Aclojure&cpe_version=cpe%3A%2F%3Aclojure%3Aclojure%3A1.11.3"}]},{"isVirtual": false,"fileName": "commons-beanutils-1.9.4.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-beanutils\/commons-beanutils\/1.9.4\/commons-beanutils-1.9.4.jar","md5": "07dc532ee316fe1f2f0323e9bd2f8df4","sha1": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51","sha256": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a","description": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-beanutils"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "beanutils"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-beanutils"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-beanutils"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dion@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "epugh@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "geirm@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jconlon@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "mvdb@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "niallp@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "stain@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "yoavs@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "chtompki"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dion"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "epugh"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "geirm"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jconlon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jstrachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mvdb"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "stain"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tobrien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "yoavs"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Eric Pugh"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Dion Gillard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Geir Magnusson Jr."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Strachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "John E. Conlon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Martin van den Bemt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan James Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stian Soiland-Reyes"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Tim O'Brien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Yoav Shapira"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-beanutils"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons BeanUtils"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-beanutils"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "beanutils"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-beanutils"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-beanutils"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dion@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "epugh@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "geirm@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jconlon@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "mvdb@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "niallp@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "stain@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "yoavs@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "chtompki"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dion"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "epugh"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "geirm"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jconlon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jstrachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mvdb"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "stain"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tobrien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "yoavs"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Eric Pugh"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Dion Gillard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Geir Magnusson Jr."},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Strachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "John E. Conlon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Martin van den Bemt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan James Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stian Soiland-Reyes"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Tim O'Brien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Yoav Shapira"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-beanutils"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons BeanUtils"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-beanutils\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.9.4"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.9.4"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.9.4"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.9.4"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.9.4"}]},"packages": [{"id": "pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_beanutils&cpe_version=cpe%3A%2F%3Aapache%3Acommons_beanutils%3A1.9.4"}]},{"isVirtual": false,"fileName": "commons-collections-3.2.2.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-collections\/commons-collections\/3.2.2\/commons-collections-3.2.2.jar","md5": "f54a8510f834a1a57166970bfc982e94","sha1": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5","sha256": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8","description": "Types that extend and augment the Java Collections Framework.","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-collections"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "collections"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.collections"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "tags\/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-collections"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "amamment"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "geirm"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "matth"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "psteitz"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Arun M. Thomas"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Geir Magnusson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Matthew Hawthorne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Phil Steitz"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-collections"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Collections"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/collections\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-collections"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "collections"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Collections"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.collections"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "tags\/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Collections"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/collections\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Collections"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-collections"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "amamment"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "geirm"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "matth"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "psteitz"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Arun M. Thomas"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Geir Magnusson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Matthew Hawthorne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Phil Steitz"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-collections"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Collections"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/collections\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.2.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "3.2.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "3.2.2"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "3.2.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.2.2"}]},"packages": [{"id": "pkg:maven\/commons-collections\/commons-collections@3.2.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-collections\/commons-collections@3.2.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_collections&cpe_version=cpe%3A%2F%3Aapache%3Acommons_collections%3A3.2.2"}]},{"isVirtual": false,"fileName": "commons-digester-2.1.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-digester\/commons-digester\/2.1\/commons-digester-2.1.jar","md5": "528445033f22da28f5047b6abcd1c7c9","sha1": "73a8001e7a54a255eef0f03521ec1805dc738ca0","sha256": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d","description": "\n    The Digester package lets you configure an XML to Java object mapping module\n    which triggers certain actions called rules whenever a particular \n    pattern of nested XML elements is recognized.\n  ","license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-digester"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "digester"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "rules"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/digester\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.digester"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-digester"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jfarcand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jvanzyl@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rahul AT apache DOT org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@totalsync.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "simonetripodi AT apache DOT org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jfarcand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jstrachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jvanzyl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rahul"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tobrien"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Strachan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jason van Zyl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jean-Francois Arcand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rahul Akolkar"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simone Tripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Tim OBrien"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-digester"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Commons Digester"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/digester\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-digester"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "digester"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "rules"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/digester\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.digester"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Commons Digester"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-digester"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jfarcand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jstrachan@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jvanzyl@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rahul AT apache DOT org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@totalsync.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "simonetripodi AT apache DOT org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tobrien@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jfarcand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jstrachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jvanzyl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rahul"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tobrien"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Strachan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jason van Zyl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jean-Francois Arcand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rahul Akolkar"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simone Tripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Tim OBrien"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-digester"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Commons Digester"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/digester\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.1"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.1"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "2.1"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "2.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.1"}]},"packages": [{"id": "pkg:maven\/commons-digester\/commons-digester@2.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-digester\/commons-digester@2.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-lang3-3.5.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/apache\/commons\/commons-lang3\/3.5\/commons-lang3-3.5.jar","md5": "780b5a8b72eebe6d0dbff1c11b5658fa","sha1": "6c6c702c89bfff3cd9e80b04d668c5e190d588c6","sha256": "8ac96fc686512d777fca85e144f196cd7cfe0c0aec23127229497d1a38ff651c","description": "\n  Apache Commons Lang, a package of Java utility classes for the\n  classes that are in java.lang's hierarchy, or are considered to be so\n  standard as to justify existence in java.lang.\n  ","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-lang3"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "lang3"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.lang3"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "release@r36f98d87b24c2f542b02abbf6ec1ee742f1b158b; 2016-10-13 19:52:17+0000"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-lang3"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "bayard@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "djones@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dlr@finemaltcoding.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "joerg.schaible@gmx.de"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "lguibert@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "oheger@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pbenedict@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@joda.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "stevencaswell@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "chtompki"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "djones"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dlr"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "fredrik"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jcarman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "joehni"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "lguibert"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mbenson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "oheger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pbenedict"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scaswell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "scolebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Daniel Rall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Duncan Jones"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Fredrik Westermarck"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary D. Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Carman"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Joerg Schaible"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Loic Guibert"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Matt Benson"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Oliver Heger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Paul Benedict"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Steven Caswell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "Carman Consulting, Inc."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "CollabNet, Inc."},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "SITA ATS Ltd"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Lang"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-lang3"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "lang3"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Lang"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.lang3"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-build","value": "release@r36f98d87b24c2f542b02abbf6ec1ee742f1b158b; 2016-10-13 19:52:17+0000"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Lang"},{"type": "product","confidence": "LOW","source": "Manifest","name": "implementation-url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Lang"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-lang3"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "bayard@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "britter@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chtompki@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "djones@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dlr@finemaltcoding.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jcarman@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "joerg.schaible@gmx.de"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "lguibert@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "oheger@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pbenedict@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "scolebourne@joda.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "stevencaswell@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "chtompki"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "djones"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dlr"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "fredrik"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jcarman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "joehni"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "lguibert"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mbenson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "oheger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pbenedict"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scaswell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "scolebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Daniel Rall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Duncan Jones"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Fredrik Westermarck"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary D. Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Carman"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Joerg Schaible"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Loic Guibert"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Matt Benson"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Oliver Heger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Paul Benedict"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Tompkins"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Stephen Colebourne"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Steven Caswell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "Carman Consulting, Inc."},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "CollabNet, Inc."},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "SITA ATS Ltd"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.apache.commons"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Lang"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-lang\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.5"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "3.5"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "3.5"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.5"}]},"packages": [{"id": "pkg:maven\/org.apache.commons\/commons-lang3@3.5","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.apache.commons\/commons-lang3@3.5?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-logging-1.3.2.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-logging\/commons-logging\/1.3.2\/commons-logging-1.3.2.jar","md5": "4b970f3b14a5e53d8e8edff1cf2ecd91","sha1": "3dc966156ef19d23c839715165435e582fafa753","sha256": "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489","description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other,\n    well-known logging systems.","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-logging"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "logging"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.apache.commons.logging"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-logging"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "baliuka@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "costin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dennisl@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "donaldp@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rsitze@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "tn@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "baliuka"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bstansberry"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "costin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dennisl"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "donaldp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "morgand"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rdonkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rsitze"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "skitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "tn"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Brian Stansberry"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Costin Manolache"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Dennis Lundberg"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Juozas Baliuka"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Donald"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Richard Sitze"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Thomas Neidhart"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "Apache"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-logging"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-logging"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "logging"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.apache.commons.logging"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Logging"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-logging"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Logging"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Logging"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-logging"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "baliuka@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "costin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dennisl@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "donaldp@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "morgand@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rdonkin@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rsitze@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rwaldhoff@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "sanders@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "skitching@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "tn@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "baliuka"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bstansberry"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "costin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dennisl"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "donaldp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "morgand"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rdonkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rsitze"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rwaldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "skitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "tn"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Brian Stansberry"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Costin Manolache"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Dennis Lundberg"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Juozas Baliuka"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Morgan Delagrange"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Donald"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Richard Sitze"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Robert Burrell Donkin"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rodney Waldhoff"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Scott Sanders"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Simon Kitching"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Thomas Neidhart"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "Apache"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-logging"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Logging"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/commons.apache.org\/proper\/commons-logging\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.3.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.3.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.3.2"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.3.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.3.2"}]},"packages": [{"id": "pkg:maven\/commons-logging\/commons-logging@1.3.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-logging\/commons-logging@1.3.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "commons-validator-1.9.0.jar","filePath": "\/home\/runner\/.m2\/repository\/commons-validator\/commons-validator\/1.9.0\/commons-validator-1.9.0.jar","md5": "0adeb5a4d23a33b9c80f5fcb2fa2ab3f","sha1": "26e49d333890ccad072eb530a85fceb9c07818df","sha256": "c3c14748e2d78db58df88808740711bd643b32c45ffa7b8a739f00fb467cd7d7","description": "\n    Apache Commons Validator provides the building blocks for both client side validation and server side data validation.\n    It may be used standalone or with a framework like Struts.\n  ","license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "commons-validator"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "validator"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-validator"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "Implementation-Vendor-Id","value": "org.apache"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "specification-vendor","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "commons-validator"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dgraham@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "dwinterfeldt@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "husted@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jmitchell NOSPAM apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "martinc@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "mrdon@apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "rleland at apache.org"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "turner@apache.org"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bayard"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "britter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "bspeakmon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "craigmcc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dgraham"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "dwinterfeldt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "ggregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "husted"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jmitchell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "martinc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "mrdon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "niallp"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "nick"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "rleland"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "turner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ben Speakmon"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Graham"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "David Winterfeldt"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Don Brown"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Mitchell"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "James Turner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Martin Cooper"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Nick Burch"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rob Leland"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "SimoneTripodi"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ted Husted"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "EdgeTech, Inc"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-validator"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Validator"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "commons-validator"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "apache"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "commons"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "validator"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Apache Commons Validator"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.apache.commons.commons-validator"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "Apache Commons Validator"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "specification-title","value": "Apache Commons Validator"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "commons-validator"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "craigmcc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dgraham@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "dwinterfeldt@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "ggregory at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "husted@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jmitchell NOSPAM apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "martinc@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "mrdon@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "rleland at apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "turner@apache.org"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bayard"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "britter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "bspeakmon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "craigmcc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dgraham"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "dwinterfeldt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "ggregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "husted"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jmitchell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "martinc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "mrdon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "niallp"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "nick"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "rleland"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "simonetripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "turner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ben Speakmon"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Benedikt Ritter"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Craig McClanahan"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Graham"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "David Winterfeldt"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Don Brown"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary Gregory"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Henri Yandell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Mitchell"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "James Turner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Martin Cooper"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Niall Pemberton"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Nick Burch"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rob Leland"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "SimoneTripodi"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ted Husted"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "EdgeTech, Inc"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "The Apache Software Foundation"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "https:\/\/www.apache.org\/"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "commons-validator"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Apache Commons Validator"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "commons-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-groupid","value": "org.apache.commons"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/commons.apache.org\/proper\/commons-validator\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.9.0"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.9.0"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.9.0"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.9.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.9.0"}]},"packages": [{"id": "pkg:maven\/commons-validator\/commons-validator@1.9.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/commons-validator\/commons-validator@1.9.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "core.specs.alpha-0.2.62.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/core.specs.alpha\/0.2.62\/core.specs.alpha-0.2.62.jar","md5": "b1e37e6e8efdade6b7c2a4dd17c0d437","sha1": "a2a7ea21a695561924bc8506f3feb5d8c8f894d5","sha256": "06eea8c070bbe45c158567e443439681bc8c46e9123414f81bfa32ba42d6cbc8","description": "Specs for clojure.core","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "core.specs.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "core.specs.alpha"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "puredanger"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alex Miller"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "core.specs.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "core.specs.alpha"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "core.specs.alpha"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "puredanger"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alex Miller"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "core.specs.alpha"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.2.62"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.2.62"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.2.62"}]},"packages": [{"id": "pkg:maven\/org.clojure\/core.specs.alpha@0.2.62","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/core.specs.alpha@0.2.62?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*","confidence": "LOW"}]},{"isVirtual": false,"fileName": "data.xml-0.2.0-alpha9.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/data.xml\/0.2.0-alpha9\/data.xml-0.2.0-alpha9.jar","md5": "ef1cfdccb910d381ad0b1ae75853dc32","sha1": "424e7fd03bc5fd2df9db477fc892d1db955879cd","sha256": "1fe706c3830860dbc4f8d8b737f6b1236ef08fcbad85e5db40b8aa93da98004b","description": "Functions to parse XML into lazy sequences and lazy trees and emit these as text","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "amalloy@4clojure.com"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "chouser@n01se.net"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "herwig@bendlas.net"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "senior.ryan@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alan Malloy"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Chouser"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Herwig Hochleitner"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Ryan Senior"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "data.xml"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "data.xml"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "data.xml"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "amalloy@4clojure.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "chouser@n01se.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "herwig@bendlas.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "senior.ryan@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alan Malloy"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Chouser"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Herwig Hochleitner"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Ryan Senior"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "data.xml"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.2.0-alpha9"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.2.0-alpha9"}]},"packages": [{"id": "pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "embroidery-1.0.44.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/embroidery\/1.0.44\/embroidery-1.0.44.jar","md5": "0141ce9e67e5c76af519e98fc5a8bf5d","sha1": "0ce7accc8b0fe2fcb13b0e509c322de914390ad2","sha256": "f978771dcca1ef87a0668cee9911882fea462791f20a6166b93edc356d35f152","description": "A Clojure micro-library for leveraging virtual threads on JVMs that support them.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "embroidery"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "embroidery"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+embroidery@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "embroidery"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/embroidery"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "embroidery"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "embroidery"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+embroidery@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "embroidery"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/embroidery"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.44"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.44"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/embroidery@1.0.44","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/embroidery@1.0.44?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "gson-2.8.9.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/google\/code\/gson\/gson\/2.8.9\/gson-2.8.9.jar","md5": "e67627f67e03301092dc7de0a2d7cef8","sha1": "8a432c1d6825781e21a02db2e2c33c5fde2833b9","sha256": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e","description": "Gson JSON library","license": "Apache-2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "gson"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "google"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "11"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-contactaddress","value": "https:\/\/github.com\/google\/gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/github.com\/google\/gson\/gson"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-requiredexecutionenvironment","value": "JavaSE-1.6, JavaSE-1.7, JavaSE-1.8"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "com.google.gson"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "gson"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.gson"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "Gson"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "gson-parent"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "gson"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "google"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "11"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-contactaddress","value": "https:\/\/github.com\/google\/gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/github.com\/google\/gson\/gson"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "Gson"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-requiredexecutionenvironment","value": "JavaSE-1.6, JavaSE-1.7, JavaSE-1.8"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "com.google.gson"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "gson"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.gson"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "Gson"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "gson-parent"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.8.9"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.8.9"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.8.9"}]},"packages": [{"id": "pkg:maven\/com.google.code.gson\/gson@2.8.9","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.google.code.gson\/gson@2.8.9?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Agoogle&cpe_product=cpe%3A%2F%3Agoogle%3Agson&cpe_version=cpe%3A%2F%3Agoogle%3Agson%3A2.8.9"}]},{"isVirtual": false,"fileName": "hato-1.0.0.jar","filePath": "\/home\/runner\/.m2\/repository\/hato\/hato\/1.0.0\/hato-1.0.0.jar","md5": "169f69866f7e0eaf8f5a38ad049bcecf","sha1": "6a1bea52787ef5419f9d4475bce4997581ee6276","sha256": "6b65a8f6145ec577b015cbfa3703c2d00f5e9f964bc6fca7b71dfc56a4ffe029","description": "An HTTP client for Clojure, wrapping JDK 11's HttpClient.","license": "The MIT License: http:\/\/opensource.org\/licenses\/mit-license.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "hato"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "hato"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "hato"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "hato"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "hato"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "hato"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "gnarroway\/hato"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "hato"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "hato"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "hato"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "hato"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "hato"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "hato"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "gnarroway\/hato"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.0.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.0"}]},"packages": [{"id": "pkg:maven\/hato\/hato@1.0.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/hato\/hato@1.0.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "instaparse-1.5.0.jar","filePath": "\/home\/runner\/.m2\/repository\/instaparse\/instaparse\/1.5.0\/instaparse-1.5.0.jar","md5": "b858977bcb62c8913768cfb0fb01a4c9","sha1": "edc617bd20362b2fc870df88f1687426a69fe007","sha256": "c2bcd6f3a74d1a114973e6ac71e3536f6b035f29f769e9d1ec528ffe5e56cc27","description": "Instaparse: No grammar left behind","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "instaparse"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "instaparse"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "instaparse"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "instaparse"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "Engelberg\/instaparse"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "instaparse"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "instaparse"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-groupid","value": "instaparse"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "instaparse"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "instaparse"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "instaparse"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "Engelberg\/instaparse"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.5.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.5.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.5.0"}]},"packages": [{"id": "pkg:maven\/instaparse\/instaparse@1.5.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/instaparse\/instaparse@1.5.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "java-spdx-library-1.1.11.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/spdx\/java-spdx-library\/1.1.11\/java-spdx-library-1.1.11.jar","md5": "bbee14269e94c903bcb75c1d7fc250d5","sha1": "f438688f8eb61f975c4c6f79c7c8b7d6fcc2c814","sha256": "5ca113ac2a885b264e0d1bdf684f4948b375adf3ffde84981944baf8f8fcc55a","description": "Java library which implements the Java object model for SPDX and provides useful helper functions.","license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "java-spdx-library"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "library"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "model"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "spdx"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.spdx.library"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "java-spdx-library"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "gary@sourceauditor.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "goneall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Gary O'Neall"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org","value": "SPDX"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer org URL","value": "http:\/\/spdx.org"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.spdx"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "java-spdx-library"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "organization name","value": "SPDX"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "organization url","value": "http:\/\/spdx.org"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "spdx\/Spdx-Java-Library"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "java-spdx-library"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "library"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "model"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "spdx"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.spdx.library"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "17"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "java-spdx-library"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "gary@sourceauditor.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "goneall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Gary O'Neall"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org","value": "SPDX"},{"type": "product","confidence": "LOW","source": "pom","name": "developer org URL","value": "http:\/\/spdx.org"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.spdx"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "java-spdx-library"},{"type": "product","confidence": "LOW","source": "pom","name": "organization name","value": "SPDX"},{"type": "product","confidence": "LOW","source": "pom","name": "organization url","value": "http:\/\/spdx.org"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "spdx\/Spdx-Java-Library"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.1.11"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.1.11"}]},"packages": [{"id": "pkg:maven\/org.spdx\/java-spdx-library@1.1.11","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.spdx\/java-spdx-library@1.1.11?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "jsoup-1.15.3.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/jsoup\/jsoup\/1.15.3\/jsoup-1.15.3.jar","md5": "4f16c3b17b8c1b0173b1ed9f99f2c27c","sha1": "f6e1d8a8819f854b681c8eaa57fd59a42329e10c","sha256": "e20a5e78b1372f2a4e620832db4442d5077e5cbde280b24c666a3770844999bc","description": "jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do.","license": "The MIT License: https:\/\/jsoup.org\/license","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "jsoup"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "jsoup"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "parser"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.jsoup"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "18"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/jsoup.org\/"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsoup"},{"type": "vendor","confidence": "HIGH","source": "Manifest","name": "Implementation-Vendor","value": "Jonathan Hedley"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "jsoup"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "jonathan@hedley.net"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "jhy"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Jonathan Hedley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.jsoup"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "jsoup Java HTML Parser"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "organization name","value": "Jonathan Hedley"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "organization url","value": "https:\/\/jhy.io\/"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "https:\/\/jsoup.org\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "jsoup"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "jsoup"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "parser"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "automatic-module-name","value": "org.jsoup"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "18"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "https:\/\/jsoup.org\/"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsoup"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "jsoup"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "jonathan@hedley.net"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "jhy"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Jonathan Hedley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.jsoup"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "jsoup Java HTML Parser"},{"type": "product","confidence": "LOW","source": "pom","name": "organization name","value": "Jonathan Hedley"},{"type": "product","confidence": "LOW","source": "pom","name": "organization url","value": "https:\/\/jhy.io\/"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "https:\/\/jsoup.org\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.15.3"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "1.15.3"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "1.15.3"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.15.3"}]},"packages": [{"id": "pkg:maven\/org.jsoup\/jsoup@1.15.3","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.jsoup\/jsoup@1.15.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*","confidence": "HIGHEST","url": "https:\/\/nvd.nist.gov\/vuln\/search\/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Ajsoup&cpe_product=cpe%3A%2F%3Ajsoup%3Ajsoup&cpe_version=cpe%3A%2F%3Ajsoup%3Ajsoup%3A1.15.3"}]},{"isVirtual": false,"fileName": "jsr305-3.0.2.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/google\/code\/findbugs\/jsr305\/3.0.2\/jsr305-3.0.2.jar","md5": "dd83accb899363c32b07d7a1b2e4ce40","sha1": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d","sha256": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7","description": "JSR305 Annotations for Findbugs","license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "jsr305"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsr-305"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "jsr305"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.findbugs"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "FindBugs-jsr305"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/findbugs.sourceforge.net\/"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "jsr305"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "FindBugs-jsr305"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "org.jsr-305"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "jsr305"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.google.code.findbugs"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "FindBugs-jsr305"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/findbugs.sourceforge.net\/"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "3.0.2"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "3.0.2"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "3.0.2"}]},"packages": [{"id": "pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "medley-1.8.0.jar","filePath": "\/home\/runner\/.m2\/repository\/dev\/weavejester\/medley\/1.8.0\/medley-1.8.0.jar","md5": "5a524507a356b733c950a71064c4c76f","sha1": "1c79f052c68b2af923e3b5b5ba6df4756b72e8f5","sha256": "958a233d918714304497f371d654fab3ac2751018cc32989c92f5100ad7e548f","description": "A lightweight library of useful, mostly pure functions","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "medley"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "medley"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "medley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "dev.weavejester"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "medley"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "weavejester\/medley"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "medley"},{"type": "product","confidence": "LOW","source": "Manifest","name": "leiningen-project-artifactid","value": "medley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "medley"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "dev.weavejester"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "medley"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "weavejester\/medley"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.8.0"},{"type": "version","confidence": "MEDIUM","source": "Manifest","name": "leiningen-project-version","value": "1.8.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.8.0"}]},"packages": [{"id": "pkg:maven\/dev.weavejester\/medley@1.8.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/dev.weavejester\/medley@1.8.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "rencg-1.0.51.jar","filePath": "\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/rencg\/1.0.51\/rencg-1.0.51.jar","md5": "57d5cb137b1955a15fadc6074da8550d","sha1": "bdd0836b60caf5ee0bdadeb4de20dd87c1398ab3","sha256": "82f0ff7e7e1aa63d27b593faaa6f0a9d15af32623bbcea1d825368315110d70d","description": "A micro-library for Clojure that provides first class support for named-capturing groups in regular expressions.","license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "rencg"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "rencg"},{"type": "vendor","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+rencg@gmail.com"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "pmonks"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "rencg"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "pmonks\/rencg"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "rencg"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "rencg"},{"type": "product","confidence": "LOW","source": "pom","name": "developer email","value": "pmonks+rencg@gmail.com"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "pmonks"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Peter Monks"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "com.github.pmonks"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "rencg"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "pmonks\/rencg"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.0.51"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.0.51"}]},"packages": [{"id": "pkg:maven\/com.github.pmonks\/rencg@1.0.51","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/com.github.pmonks\/rencg@1.0.51?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "slf4j-api-2.0.13.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/slf4j\/slf4j-api\/2.0.13\/slf4j-api-2.0.13.jar","md5": "7f4028aa04f75427327f3f30cd62ba4e","sha1": "80229737f704b121a318bba5d5deacbcf395bc77","sha256": "e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9","description": "The slf4j API","license": "http:\/\/www.opensource.org\/licenses\/mit-license.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "slf4j-api"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "slf4j"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/www.slf4j.org"},{"type": "vendor","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "slf4j.api"},{"type": "vendor","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "slf4j-api"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.slf4j"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "SLF4J API Module"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "slf4j-parent"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "http:\/\/www.slf4j.org"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "slf4j-api"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "slf4j"},{"type": "product","confidence": "LOW","source": "Manifest","name": "build-jdk-spec","value": "21"},{"type": "product","confidence": "LOW","source": "Manifest","name": "bundle-docurl","value": "http:\/\/www.slf4j.org"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "Bundle-Name","value": "SLF4J API Module"},{"type": "product","confidence": "MEDIUM","source": "Manifest","name": "bundle-symbolicname","value": "slf4j.api"},{"type": "product","confidence": "HIGH","source": "Manifest","name": "Implementation-Title","value": "slf4j-api"},{"type": "product","confidence": "LOW","source": "Manifest","name": "multi-release","value": "true"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "slf4j-api"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.slf4j"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "SLF4J API Module"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "slf4j-parent"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "url","value": "http:\/\/www.slf4j.org"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "2.0.13"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Bundle-Version","value": "2.0.13"},{"type": "version","confidence": "HIGH","source": "Manifest","name": "Implementation-Version","value": "2.0.13"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "2.0.13"}]},"packages": [{"id": "pkg:maven\/org.slf4j\/slf4j-api@2.0.13","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.slf4j\/slf4j-api@2.0.13?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "spec.alpha-0.3.218.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/spec.alpha\/0.3.218\/spec.alpha-0.3.218.jar","md5": "ecdbb58e7a95163c1369ef9fa054013d","sha1": "a7dad492f8d6cf657d82dcd6b31bda0899f1ac0e","sha256": "67ec898eb55c66a957a55279dd85d1376bb994bd87668b2b0de1eb3b97e8aae0","description": "Specification of data and functions","license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "spec.alpha"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "alpha"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "clojure"},{"type": "vendor","confidence": "HIGHEST","source": "jar","name": "package name","value": "spec"},{"type": "vendor","confidence": "LOW","source": "jar","name": "package name","value": "spec"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "spec.alpha"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer id","value": "richhickey"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "spec.alpha"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "spec.alpha"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "alpha"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "clojure"},{"type": "product","confidence": "HIGHEST","source": "jar","name": "package name","value": "spec"},{"type": "product","confidence": "LOW","source": "jar","name": "package name","value": "spec"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "spec.alpha"},{"type": "product","confidence": "LOW","source": "pom","name": "developer id","value": "richhickey"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Rich Hickey"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "spec.alpha"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.3.218"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "0.3.218"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.3.218"}]},"packages": [{"id": "pkg:maven\/org.clojure\/spec.alpha@0.3.218","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/spec.alpha@0.3.218?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]},{"isVirtual": false,"fileName": "tools.logging-1.3.0.jar","filePath": "\/home\/runner\/.m2\/repository\/org\/clojure\/tools.logging\/1.3.0\/tools.logging-1.3.0.jar","md5": "b6b3c2ffeb27a25eab2d6e0e3a6e6b57","sha1": "07d45477c1b61230b0d1fcf36afccc02155a4b32","sha256": "826969b78d9ada327de6b7da0f176457d95614fa38c280326610f31a6b515c91","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "tools.logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "tools.logging"},{"type": "vendor","confidence": "MEDIUM","source": "pom","name": "developer name","value": "Alex Taggart"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "tools.logging"},{"type": "vendor","confidence": "LOW","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "tools.logging"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "tools.logging"},{"type": "product","confidence": "LOW","source": "pom","name": "developer name","value": "Alex Taggart"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "org.clojure"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "tools.logging"},{"type": "product","confidence": "MEDIUM","source": "pom","name": "parent-artifactid","value": "pom.contrib"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "1.3.0"},{"type": "version","confidence": "LOW","source": "pom","name": "parent-version","value": "1.3.0"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "1.3.0"}]},"packages": [{"id": "pkg:maven\/org.clojure\/tools.logging@1.3.0","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/org.clojure\/tools.logging@1.3.0?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}],"vulnerabilityIds": [{"id": "cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*","confidence": "LOW"}]},{"isVirtual": false,"fileName": "xml-in-0.1.1.jar","filePath": "\/home\/runner\/.m2\/repository\/tolitius\/xml-in\/0.1.1\/xml-in-0.1.1.jar","md5": "754502ef9d8c1574d6d893b22f6101dc","sha1": "0a68865842a0fa7484bca3a7be33f182d8213a97","sha256": "43ab632812fe03b86b1a154723d809bb393e11a0ff0e6677167f14ece40f5543","description": "your friendly XML navigator","license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","evidenceCollected": {"vendorEvidence": [{"type": "vendor","confidence": "HIGH","source": "file","name": "name","value": "xml-in"},{"type": "vendor","confidence": "LOW","source": "pom","name": "artifactid","value": "xml-in"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "groupid","value": "tolitius"},{"type": "vendor","confidence": "HIGH","source": "pom","name": "name","value": "xml-in"},{"type": "vendor","confidence": "HIGHEST","source": "pom","name": "url","value": "tolitius\/xml-in"}],"productEvidence": [{"type": "product","confidence": "HIGH","source": "file","name": "name","value": "xml-in"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "artifactid","value": "xml-in"},{"type": "product","confidence": "HIGHEST","source": "pom","name": "groupid","value": "tolitius"},{"type": "product","confidence": "HIGH","source": "pom","name": "name","value": "xml-in"},{"type": "product","confidence": "HIGH","source": "pom","name": "url","value": "tolitius\/xml-in"}],"versionEvidence": [{"type": "version","confidence": "HIGH","source": "file","name": "version","value": "0.1.1"},{"type": "version","confidence": "HIGHEST","source": "pom","name": "version","value": "0.1.1"}]},"packages": [{"id": "pkg:maven\/tolitius\/xml-in@0.1.1","confidence": "HIGH","url": "https:\/\/ossindex.sonatype.org\/component\/pkg:maven\/tolitius\/xml-in@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2"}]}]}
\ No newline at end of file
diff --git a/nvd/dependency-check-report.sarif b/nvd/dependency-check-report.sarif
index b2e9aad..7f40d47 100644
--- a/nvd/dependency-check-report.sarif
+++ b/nvd/dependency-check-report.sarif
@@ -1 +1 @@
-{"$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","version": "2.1.0","runs": [{"tool": {"driver": {"name": "dependency-check","version": "10.0.2","informationUri": "https://jeremylong.github.io/DependencyCheck/","rules": [],"properties": {"disclaimer": "Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.","nvd": "This product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov","cisa": "This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog","npm": "This report may contain data retrieved from the the Github Advisory Database (via NPM Audit API): https://github.com/advisories/","retirejs": "This report may contain data retrieved from the RetireJS community: https://retirejs.github.io/retire.js/","ossindex": "This report may contain data retrieved from the Sonatype OSS Index: https://ossindex.sonatype.org","NVD API Last Checked": "2024-07-16T02:39:11Z","NVD API Last Modified": "2024-07-16T02:15:12Z"}}},"artifacts": [{"description": {"text": "Base62 encoding and decoding for Clojure"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/miikka\/clj-base62\/0.1.1\/clj-base62-0.1.1.jar"},"hashes": {"md5": "4d1ff2cba176169428c21fb9ddab0528","sha1": "e983866be496ce97fc442c07561be31cf1d95ecd","sha256": "b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862"},"properties": {"id1": "pkg:maven\/miikka\/clj-base62@0.1.1"}},{"description": {"text": "Clojure wrapper around spdx\/Spdx-Java-Library."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/clj-spdx\/1.0.176\/clj-spdx-1.0.176.jar"},"hashes": {"md5": "46ed7ecc296a2521a84cd6de9c8859c1","sha1": "790f0ed1581fb8c3daffd5de947174efd440bc6c","sha256": "f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id2": "pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176"}},{"description": {"text": "Simple XML Schema validation library for Clojure"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/clj-xml-validation\/clj-xml-validation\/1.0.2\/clj-xml-validation-1.0.2.jar"},"hashes": {"md5": "ab69483eecdcab00c0eaa011b056c351","sha1": "be28bbe42941f00acfa073e986fa7b386a7c4f2d","sha256": "e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id3": "pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2"}},{"description": {"text": "Clojure core environment and runtime library."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/clojure\/1.11.3\/clojure-1.11.3.jar"},"hashes": {"md5": "ab6a89d86e637060fc37b68f5c45d2c7","sha1": "baa884f9686cd231e91965e30c7e581e30109fd9","sha256": "9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id4": "pkg:maven\/org.clojure\/clojure@1.11.3","vid1": "cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*"}},{"description": {"text": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-beanutils\/commons-beanutils\/1.9.4\/commons-beanutils-1.9.4.jar"},"hashes": {"md5": "07dc532ee316fe1f2f0323e9bd2f8df4","sha1": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51","sha256": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id5": "pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4","vid2": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*"}},{"description": {"text": "Types that extend and augment the Java Collections Framework."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-collections\/commons-collections\/3.2.2\/commons-collections-3.2.2.jar"},"hashes": {"md5": "f54a8510f834a1a57166970bfc982e94","sha1": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5","sha256": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"},"properties": {"license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id6": "pkg:maven\/commons-collections\/commons-collections@3.2.2","vid3": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"}},{"description": {"text": "\n    The Digester package lets you configure an XML to Java object mapping module\n    which triggers certain actions called rules whenever a particular \n    pattern of nested XML elements is recognized.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-digester\/commons-digester\/2.1\/commons-digester-2.1.jar"},"hashes": {"md5": "528445033f22da28f5047b6abcd1c7c9","sha1": "73a8001e7a54a255eef0f03521ec1805dc738ca0","sha256": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"},"properties": {"license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id7": "pkg:maven\/commons-digester\/commons-digester@2.1"}},{"description": {"text": "\n  Apache Commons Lang, a package of Java utility classes for the\n  classes that are in java.lang's hierarchy, or are considered to be so\n  standard as to justify existence in java.lang.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/apache\/commons\/commons-lang3\/3.5\/commons-lang3-3.5.jar"},"hashes": {"md5": "780b5a8b72eebe6d0dbff1c11b5658fa","sha1": "6c6c702c89bfff3cd9e80b04d668c5e190d588c6","sha256": "8ac96fc686512d777fca85e144f196cd7cfe0c0aec23127229497d1a38ff651c"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id8": "pkg:maven\/org.apache.commons\/commons-lang3@3.5"}},{"description": {"text": "Apache Commons Logging is a thin adapter allowing configurable bridging to other,\n    well-known logging systems."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-logging\/commons-logging\/1.3.2\/commons-logging-1.3.2.jar"},"hashes": {"md5": "4b970f3b14a5e53d8e8edff1cf2ecd91","sha1": "3dc966156ef19d23c839715165435e582fafa753","sha256": "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id9": "pkg:maven\/commons-logging\/commons-logging@1.3.2"}},{"description": {"text": "\n    Apache Commons Validator provides the building blocks for both client side validation and server side data validation.\n    It may be used standalone or with a framework like Struts.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-validator\/commons-validator\/1.9.0\/commons-validator-1.9.0.jar"},"hashes": {"md5": "0adeb5a4d23a33b9c80f5fcb2fa2ab3f","sha1": "26e49d333890ccad072eb530a85fceb9c07818df","sha256": "c3c14748e2d78db58df88808740711bd643b32c45ffa7b8a739f00fb467cd7d7"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id10": "pkg:maven\/commons-validator\/commons-validator@1.9.0"}},{"description": {"text": "Specs for clojure.core"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/core.specs.alpha\/0.2.62\/core.specs.alpha-0.2.62.jar"},"hashes": {"md5": "b1e37e6e8efdade6b7c2a4dd17c0d437","sha1": "a2a7ea21a695561924bc8506f3feb5d8c8f894d5","sha256": "06eea8c070bbe45c158567e443439681bc8c46e9123414f81bfa32ba42d6cbc8"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id11": "pkg:maven\/org.clojure\/core.specs.alpha@0.2.62","vid4": "cpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*"}},{"description": {"text": "Functions to parse XML into lazy sequences and lazy trees and emit these as text"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/data.xml\/0.2.0-alpha9\/data.xml-0.2.0-alpha9.jar"},"hashes": {"md5": "ef1cfdccb910d381ad0b1ae75853dc32","sha1": "424e7fd03bc5fd2df9db477fc892d1db955879cd","sha256": "1fe706c3830860dbc4f8d8b737f6b1236ef08fcbad85e5db40b8aa93da98004b"},"properties": {"id12": "pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9"}},{"description": {"text": "A Clojure micro-library for leveraging virtual threads on JVMs that support them."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/embroidery\/1.0.44\/embroidery-1.0.44.jar"},"hashes": {"md5": "0141ce9e67e5c76af519e98fc5a8bf5d","sha1": "0ce7accc8b0fe2fcb13b0e509c322de914390ad2","sha256": "f978771dcca1ef87a0668cee9911882fea462791f20a6166b93edc356d35f152"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id13": "pkg:maven\/com.github.pmonks\/embroidery@1.0.44"}},{"description": {"text": "Gson JSON library"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/google\/code\/gson\/gson\/2.8.9\/gson-2.8.9.jar"},"hashes": {"md5": "e67627f67e03301092dc7de0a2d7cef8","sha1": "8a432c1d6825781e21a02db2e2c33c5fde2833b9","sha256": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"},"properties": {"license": "Apache-2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id14": "pkg:maven\/com.google.code.gson\/gson@2.8.9","vid5": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*"}},{"description": {"text": "An HTTP client for Clojure, wrapping JDK 11's HttpClient."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/hato\/hato\/1.0.0\/hato-1.0.0.jar"},"hashes": {"md5": "169f69866f7e0eaf8f5a38ad049bcecf","sha1": "6a1bea52787ef5419f9d4475bce4997581ee6276","sha256": "6b65a8f6145ec577b015cbfa3703c2d00f5e9f964bc6fca7b71dfc56a4ffe029"},"properties": {"license": "The MIT License: http:\/\/opensource.org\/licenses\/mit-license.php","id15": "pkg:maven\/hato\/hato@1.0.0"}},{"description": {"text": "Instaparse: No grammar left behind"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/instaparse\/instaparse\/1.5.0\/instaparse-1.5.0.jar"},"hashes": {"md5": "b858977bcb62c8913768cfb0fb01a4c9","sha1": "edc617bd20362b2fc870df88f1687426a69fe007","sha256": "c2bcd6f3a74d1a114973e6ac71e3536f6b035f29f769e9d1ec528ffe5e56cc27"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id16": "pkg:maven\/instaparse\/instaparse@1.5.0"}},{"description": {"text": "Java library which implements the Java object model for SPDX and provides useful helper functions."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/spdx\/java-spdx-library\/1.1.11\/java-spdx-library-1.1.11.jar"},"hashes": {"md5": "bbee14269e94c903bcb75c1d7fc250d5","sha1": "f438688f8eb61f975c4c6f79c7c8b7d6fcc2c814","sha256": "5ca113ac2a885b264e0d1bdf684f4948b375adf3ffde84981944baf8f8fcc55a"},"properties": {"license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id17": "pkg:maven\/org.spdx\/java-spdx-library@1.1.11"}},{"description": {"text": "jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/jsoup\/jsoup\/1.15.3\/jsoup-1.15.3.jar"},"hashes": {"md5": "4f16c3b17b8c1b0173b1ed9f99f2c27c","sha1": "f6e1d8a8819f854b681c8eaa57fd59a42329e10c","sha256": "e20a5e78b1372f2a4e620832db4442d5077e5cbde280b24c666a3770844999bc"},"properties": {"license": "The MIT License: https:\/\/jsoup.org\/license","id18": "pkg:maven\/org.jsoup\/jsoup@1.15.3","vid6": "cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*"}},{"description": {"text": "JSR305 Annotations for Findbugs"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/google\/code\/findbugs\/jsr305\/3.0.2\/jsr305-3.0.2.jar"},"hashes": {"md5": "dd83accb899363c32b07d7a1b2e4ce40","sha1": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d","sha256": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"},"properties": {"license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id19": "pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2"}},{"description": {"text": "A lightweight library of useful, mostly pure functions"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/dev\/weavejester\/medley\/1.8.0\/medley-1.8.0.jar"},"hashes": {"md5": "5a524507a356b733c950a71064c4c76f","sha1": "1c79f052c68b2af923e3b5b5ba6df4756b72e8f5","sha256": "958a233d918714304497f371d654fab3ac2751018cc32989c92f5100ad7e548f"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id20": "pkg:maven\/dev.weavejester\/medley@1.8.0"}},{"description": {"text": "A micro-library for Clojure that provides first class support for named-capturing groups in regular expressions."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/rencg\/1.0.51\/rencg-1.0.51.jar"},"hashes": {"md5": "57d5cb137b1955a15fadc6074da8550d","sha1": "bdd0836b60caf5ee0bdadeb4de20dd87c1398ab3","sha256": "82f0ff7e7e1aa63d27b593faaa6f0a9d15af32623bbcea1d825368315110d70d"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id21": "pkg:maven\/com.github.pmonks\/rencg@1.0.51"}},{"description": {"text": "The slf4j API"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/slf4j\/slf4j-api\/2.0.13\/slf4j-api-2.0.13.jar"},"hashes": {"md5": "7f4028aa04f75427327f3f30cd62ba4e","sha1": "80229737f704b121a318bba5d5deacbcf395bc77","sha256": "e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9"},"properties": {"license": "http:\/\/www.opensource.org\/licenses\/mit-license.php","id22": "pkg:maven\/org.slf4j\/slf4j-api@2.0.13"}},{"description": {"text": "Specification of data and functions"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/spec.alpha\/0.3.218\/spec.alpha-0.3.218.jar"},"hashes": {"md5": "ecdbb58e7a95163c1369ef9fa054013d","sha1": "a7dad492f8d6cf657d82dcd6b31bda0899f1ac0e","sha256": "67ec898eb55c66a957a55279dd85d1376bb994bd87668b2b0de1eb3b97e8aae0"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id23": "pkg:maven\/org.clojure\/spec.alpha@0.3.218"}},{"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/tools.logging\/1.3.0\/tools.logging-1.3.0.jar"},"hashes": {"md5": "b6b3c2ffeb27a25eab2d6e0e3a6e6b57","sha1": "07d45477c1b61230b0d1fcf36afccc02155a4b32","sha256": "826969b78d9ada327de6b7da0f176457d95614fa38c280326610f31a6b515c91"},"properties": {"id24": "pkg:maven\/org.clojure\/tools.logging@1.3.0","vid7": "cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*"}},{"description": {"text": "your friendly XML navigator"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/tolitius\/xml-in\/0.1.1\/xml-in-0.1.1.jar"},"hashes": {"md5": "754502ef9d8c1574d6d893b22f6101dc","sha1": "0a68865842a0fa7484bca3a7be33f182d8213a97","sha256": "43ab632812fe03b86b1a154723d809bb393e11a0ff0e6677167f14ece40f5543"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id25": "pkg:maven\/tolitius\/xml-in@0.1.1"}}],"results": []}]}
\ No newline at end of file
+{"$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","version": "2.1.0","runs": [{"tool": {"driver": {"name": "dependency-check","version": "10.0.2","informationUri": "https://jeremylong.github.io/DependencyCheck/","rules": [],"properties": {"disclaimer": "Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.","nvd": "This product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov","cisa": "This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog","npm": "This report may contain data retrieved from the the Github Advisory Database (via NPM Audit API): https://github.com/advisories/","retirejs": "This report may contain data retrieved from the RetireJS community: https://retirejs.github.io/retire.js/","ossindex": "This report may contain data retrieved from the Sonatype OSS Index: https://ossindex.sonatype.org","NVD API Last Checked": "2024-07-23T02:38:20Z","NVD API Last Modified": "2024-07-23T02:15:02Z"}}},"artifacts": [{"description": {"text": "Base62 encoding and decoding for Clojure"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/miikka\/clj-base62\/0.1.1\/clj-base62-0.1.1.jar"},"hashes": {"md5": "4d1ff2cba176169428c21fb9ddab0528","sha1": "e983866be496ce97fc442c07561be31cf1d95ecd","sha256": "b835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862"},"properties": {"id1": "pkg:maven\/miikka\/clj-base62@0.1.1"}},{"description": {"text": "Clojure wrapper around spdx\/Spdx-Java-Library."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/clj-spdx\/1.0.176\/clj-spdx-1.0.176.jar"},"hashes": {"md5": "46ed7ecc296a2521a84cd6de9c8859c1","sha1": "790f0ed1581fb8c3daffd5de947174efd440bc6c","sha256": "f36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id2": "pkg:maven\/com.github.pmonks\/clj-spdx@1.0.176"}},{"description": {"text": "Simple XML Schema validation library for Clojure"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/clj-xml-validation\/clj-xml-validation\/1.0.2\/clj-xml-validation-1.0.2.jar"},"hashes": {"md5": "ab69483eecdcab00c0eaa011b056c351","sha1": "be28bbe42941f00acfa073e986fa7b386a7c4f2d","sha256": "e4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id3": "pkg:maven\/clj-xml-validation\/clj-xml-validation@1.0.2"}},{"description": {"text": "Clojure core environment and runtime library."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/clojure\/1.11.3\/clojure-1.11.3.jar"},"hashes": {"md5": "ab6a89d86e637060fc37b68f5c45d2c7","sha1": "baa884f9686cd231e91965e30c7e581e30109fd9","sha256": "9c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id4": "pkg:maven\/org.clojure\/clojure@1.11.3","vid1": "cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*"}},{"description": {"text": "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-beanutils\/commons-beanutils\/1.9.4\/commons-beanutils-1.9.4.jar"},"hashes": {"md5": "07dc532ee316fe1f2f0323e9bd2f8df4","sha1": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51","sha256": "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id5": "pkg:maven\/commons-beanutils\/commons-beanutils@1.9.4","vid2": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*"}},{"description": {"text": "Types that extend and augment the Java Collections Framework."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-collections\/commons-collections\/3.2.2\/commons-collections-3.2.2.jar"},"hashes": {"md5": "f54a8510f834a1a57166970bfc982e94","sha1": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5","sha256": "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"},"properties": {"license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id6": "pkg:maven\/commons-collections\/commons-collections@3.2.2","vid3": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"}},{"description": {"text": "\n    The Digester package lets you configure an XML to Java object mapping module\n    which triggers certain actions called rules whenever a particular \n    pattern of nested XML elements is recognized.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-digester\/commons-digester\/2.1\/commons-digester-2.1.jar"},"hashes": {"md5": "528445033f22da28f5047b6abcd1c7c9","sha1": "73a8001e7a54a255eef0f03521ec1805dc738ca0","sha256": "e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d"},"properties": {"license": "http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id7": "pkg:maven\/commons-digester\/commons-digester@2.1"}},{"description": {"text": "\n  Apache Commons Lang, a package of Java utility classes for the\n  classes that are in java.lang's hierarchy, or are considered to be so\n  standard as to justify existence in java.lang.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/apache\/commons\/commons-lang3\/3.5\/commons-lang3-3.5.jar"},"hashes": {"md5": "780b5a8b72eebe6d0dbff1c11b5658fa","sha1": "6c6c702c89bfff3cd9e80b04d668c5e190d588c6","sha256": "8ac96fc686512d777fca85e144f196cd7cfe0c0aec23127229497d1a38ff651c"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id8": "pkg:maven\/org.apache.commons\/commons-lang3@3.5"}},{"description": {"text": "Apache Commons Logging is a thin adapter allowing configurable bridging to other,\n    well-known logging systems."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-logging\/commons-logging\/1.3.2\/commons-logging-1.3.2.jar"},"hashes": {"md5": "4b970f3b14a5e53d8e8edff1cf2ecd91","sha1": "3dc966156ef19d23c839715165435e582fafa753","sha256": "6b858424f518015f32bfcd1183a373f4a827d72d026b6031da0c91cf0e8f3489"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id9": "pkg:maven\/commons-logging\/commons-logging@1.3.2"}},{"description": {"text": "\n    Apache Commons Validator provides the building blocks for both client side validation and server side data validation.\n    It may be used standalone or with a framework like Struts.\n  "},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/commons-validator\/commons-validator\/1.9.0\/commons-validator-1.9.0.jar"},"hashes": {"md5": "0adeb5a4d23a33b9c80f5fcb2fa2ab3f","sha1": "26e49d333890ccad072eb530a85fceb9c07818df","sha256": "c3c14748e2d78db58df88808740711bd643b32c45ffa7b8a739f00fb467cd7d7"},"properties": {"license": "https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id10": "pkg:maven\/commons-validator\/commons-validator@1.9.0"}},{"description": {"text": "Specs for clojure.core"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/core.specs.alpha\/0.2.62\/core.specs.alpha-0.2.62.jar"},"hashes": {"md5": "b1e37e6e8efdade6b7c2a4dd17c0d437","sha1": "a2a7ea21a695561924bc8506f3feb5d8c8f894d5","sha256": "06eea8c070bbe45c158567e443439681bc8c46e9123414f81bfa32ba42d6cbc8"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id11": "pkg:maven\/org.clojure\/core.specs.alpha@0.2.62","vid4": "cpe:2.3:a:alex_project:alex:0.2.62:*:*:*:*:*:*:*"}},{"description": {"text": "Functions to parse XML into lazy sequences and lazy trees and emit these as text"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/data.xml\/0.2.0-alpha9\/data.xml-0.2.0-alpha9.jar"},"hashes": {"md5": "ef1cfdccb910d381ad0b1ae75853dc32","sha1": "424e7fd03bc5fd2df9db477fc892d1db955879cd","sha256": "1fe706c3830860dbc4f8d8b737f6b1236ef08fcbad85e5db40b8aa93da98004b"},"properties": {"id12": "pkg:maven\/org.clojure\/data.xml@0.2.0-alpha9"}},{"description": {"text": "A Clojure micro-library for leveraging virtual threads on JVMs that support them."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/embroidery\/1.0.44\/embroidery-1.0.44.jar"},"hashes": {"md5": "0141ce9e67e5c76af519e98fc5a8bf5d","sha1": "0ce7accc8b0fe2fcb13b0e509c322de914390ad2","sha256": "f978771dcca1ef87a0668cee9911882fea462791f20a6166b93edc356d35f152"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id13": "pkg:maven\/com.github.pmonks\/embroidery@1.0.44"}},{"description": {"text": "Gson JSON library"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/google\/code\/gson\/gson\/2.8.9\/gson-2.8.9.jar"},"hashes": {"md5": "e67627f67e03301092dc7de0a2d7cef8","sha1": "8a432c1d6825781e21a02db2e2c33c5fde2833b9","sha256": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"},"properties": {"license": "Apache-2.0: https:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id14": "pkg:maven\/com.google.code.gson\/gson@2.8.9","vid5": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*"}},{"description": {"text": "An HTTP client for Clojure, wrapping JDK 11's HttpClient."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/hato\/hato\/1.0.0\/hato-1.0.0.jar"},"hashes": {"md5": "169f69866f7e0eaf8f5a38ad049bcecf","sha1": "6a1bea52787ef5419f9d4475bce4997581ee6276","sha256": "6b65a8f6145ec577b015cbfa3703c2d00f5e9f964bc6fca7b71dfc56a4ffe029"},"properties": {"license": "The MIT License: http:\/\/opensource.org\/licenses\/mit-license.php","id15": "pkg:maven\/hato\/hato@1.0.0"}},{"description": {"text": "Instaparse: No grammar left behind"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/instaparse\/instaparse\/1.5.0\/instaparse-1.5.0.jar"},"hashes": {"md5": "b858977bcb62c8913768cfb0fb01a4c9","sha1": "edc617bd20362b2fc870df88f1687426a69fe007","sha256": "c2bcd6f3a74d1a114973e6ac71e3536f6b035f29f769e9d1ec528ffe5e56cc27"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id16": "pkg:maven\/instaparse\/instaparse@1.5.0"}},{"description": {"text": "Java library which implements the Java object model for SPDX and provides useful helper functions."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/spdx\/java-spdx-library\/1.1.11\/java-spdx-library-1.1.11.jar"},"hashes": {"md5": "bbee14269e94c903bcb75c1d7fc250d5","sha1": "f438688f8eb61f975c4c6f79c7c8b7d6fcc2c814","sha256": "5ca113ac2a885b264e0d1bdf684f4948b375adf3ffde84981944baf8f8fcc55a"},"properties": {"license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id17": "pkg:maven\/org.spdx\/java-spdx-library@1.1.11"}},{"description": {"text": "jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/jsoup\/jsoup\/1.15.3\/jsoup-1.15.3.jar"},"hashes": {"md5": "4f16c3b17b8c1b0173b1ed9f99f2c27c","sha1": "f6e1d8a8819f854b681c8eaa57fd59a42329e10c","sha256": "e20a5e78b1372f2a4e620832db4442d5077e5cbde280b24c666a3770844999bc"},"properties": {"license": "The MIT License: https:\/\/jsoup.org\/license","id18": "pkg:maven\/org.jsoup\/jsoup@1.15.3","vid6": "cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*"}},{"description": {"text": "JSR305 Annotations for Findbugs"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/google\/code\/findbugs\/jsr305\/3.0.2\/jsr305-3.0.2.jar"},"hashes": {"md5": "dd83accb899363c32b07d7a1b2e4ce40","sha1": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d","sha256": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"},"properties": {"license": "The Apache Software License, Version 2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.txt","id19": "pkg:maven\/com.google.code.findbugs\/jsr305@3.0.2"}},{"description": {"text": "A lightweight library of useful, mostly pure functions"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/dev\/weavejester\/medley\/1.8.0\/medley-1.8.0.jar"},"hashes": {"md5": "5a524507a356b733c950a71064c4c76f","sha1": "1c79f052c68b2af923e3b5b5ba6df4756b72e8f5","sha256": "958a233d918714304497f371d654fab3ac2751018cc32989c92f5100ad7e548f"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id20": "pkg:maven\/dev.weavejester\/medley@1.8.0"}},{"description": {"text": "A micro-library for Clojure that provides first class support for named-capturing groups in regular expressions."},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/com\/github\/pmonks\/rencg\/1.0.51\/rencg-1.0.51.jar"},"hashes": {"md5": "57d5cb137b1955a15fadc6074da8550d","sha1": "bdd0836b60caf5ee0bdadeb4de20dd87c1398ab3","sha256": "82f0ff7e7e1aa63d27b593faaa6f0a9d15af32623bbcea1d825368315110d70d"},"properties": {"license": "Apache-2.0: http:\/\/www.apache.org\/licenses\/LICENSE-2.0.html","id21": "pkg:maven\/com.github.pmonks\/rencg@1.0.51"}},{"description": {"text": "The slf4j API"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/slf4j\/slf4j-api\/2.0.13\/slf4j-api-2.0.13.jar"},"hashes": {"md5": "7f4028aa04f75427327f3f30cd62ba4e","sha1": "80229737f704b121a318bba5d5deacbcf395bc77","sha256": "e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9"},"properties": {"license": "http:\/\/www.opensource.org\/licenses\/mit-license.php","id22": "pkg:maven\/org.slf4j\/slf4j-api@2.0.13"}},{"description": {"text": "Specification of data and functions"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/spec.alpha\/0.3.218\/spec.alpha-0.3.218.jar"},"hashes": {"md5": "ecdbb58e7a95163c1369ef9fa054013d","sha1": "a7dad492f8d6cf657d82dcd6b31bda0899f1ac0e","sha256": "67ec898eb55c66a957a55279dd85d1376bb994bd87668b2b0de1eb3b97e8aae0"},"properties": {"license": "Eclipse Public License 1.0: http:\/\/opensource.org\/licenses\/eclipse-1.0.php","id23": "pkg:maven\/org.clojure\/spec.alpha@0.3.218"}},{"location": {"uri": "file://\/home\/runner\/.m2\/repository\/org\/clojure\/tools.logging\/1.3.0\/tools.logging-1.3.0.jar"},"hashes": {"md5": "b6b3c2ffeb27a25eab2d6e0e3a6e6b57","sha1": "07d45477c1b61230b0d1fcf36afccc02155a4b32","sha256": "826969b78d9ada327de6b7da0f176457d95614fa38c280326610f31a6b515c91"},"properties": {"id24": "pkg:maven\/org.clojure\/tools.logging@1.3.0","vid7": "cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*"}},{"description": {"text": "your friendly XML navigator"},"location": {"uri": "file://\/home\/runner\/.m2\/repository\/tolitius\/xml-in\/0.1.1\/xml-in-0.1.1.jar"},"hashes": {"md5": "754502ef9d8c1574d6d893b22f6101dc","sha1": "0a68865842a0fa7484bca3a7be33f182d8213a97","sha256": "43ab632812fe03b86b1a154723d809bb393e11a0ff0e6677167f14ece40f5543"},"properties": {"license": "Eclipse Public License: http:\/\/www.eclipse.org\/legal\/epl-v10.html","id25": "pkg:maven\/tolitius\/xml-in@0.1.1"}}],"results": []}]}
\ No newline at end of file
diff --git a/nvd/dependency-check-report.xml b/nvd/dependency-check-report.xml
index a5d7f7e..94eb91a 100644
--- a/nvd/dependency-check-report.xml
+++ b/nvd/dependency-check-report.xml
@@ -1,4 +1,4 @@
-10.0.2NVD API Last Checked2024-07-16T02:39:11ZNVD API Last Modified2024-07-16T02:15:12Zcom.github.pmonks/lice-comb 2.0.335-SNAPSHOT2024-07-16T02:39:19.142380862ZThis product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov, Github Advisory Database (via NPM Audit API): https://github.com/advisories/, and the RetireJS community.clj-base62-0.1.1.jar/home/runner/.m2/repository/miikka/clj-base62/0.1.1/clj-base62-0.1.1.jar4d1ff2cba176169428c21fb9ddab0528e983866be496ce97fc442c07561be31cf1d95ecdb835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862Base62 encoding and decoding for Clojurefilenameclj-base62pomartifactidclj-base62pomgroupidmiikkapomnameclj-base62pomurlhttps://sr.ht/~miikka/clj-base62filenameclj-base62pomartifactidclj-base62pomgroupidmiikkapomnameclj-base62pomurlhttps://sr.ht/~miikka/clj-base62fileversion0.1.1pomversion0.1.1pkg:maven/miikka/clj-base62@0.1.1https://ossindex.sonatype.org/component/pkg:maven/miikka/clj-base62@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clj-spdx-1.0.176.jar/home/runner/.m2/repository/com/github/pmonks/clj-spdx/1.0.176/clj-spdx-1.0.176.jar46ed7ecc296a2521a84cd6de9c8859c1790f0ed1581fb8c3daffd5de947174efd440bc6cf36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98Clojure wrapper around spdx/Spdx-Java-Library.Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.htmlfilenameclj-spdxManifestbuild-jdk-spec21pomartifactidclj-spdxpomdeveloper emailpmonks+clj-spdx@gmail.compomdeveloper idpmonkspomdeveloper namePeter Monkspomgroupidcom.github.pmonkspomnameclj-spdxpomurlpmonks/clj-spdxfilenameclj-spdxManifestbuild-jdk-spec21pomartifactidclj-spdxpomdeveloper emailpmonks+clj-spdx@gmail.compomdeveloper idpmonkspomdeveloper namePeter Monkspomgroupidcom.github.pmonkspomnameclj-spdxpomurlpmonks/clj-spdxfileversion1.0.176pomversion1.0.176pkg:maven/com.github.pmonks/clj-spdx@1.0.176https://ossindex.sonatype.org/component/pkg:maven/com.github.pmonks/clj-spdx@1.0.176?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clj-xml-validation-1.0.2.jar/home/runner/.m2/repository/clj-xml-validation/clj-xml-validation/1.0.2/clj-xml-validation-1.0.2.jarab69483eecdcab00c0eaa011b056c351be28bbe42941f00acfa073e986fa7b386a7c4f2de4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43Simple XML Schema validation library for ClojureEclipse Public License: http://www.eclipse.org/legal/epl-v10.htmlfilenameclj-xml-validationpomartifactidclj-xml-validationpomgroupidclj-xml-validationpomnameclj-xml-validationpomurlbbbates/clj-xml-validationfilenameclj-xml-validationpomartifactidclj-xml-validationpomgroupidclj-xml-validationpomnameclj-xml-validationpomurlbbbates/clj-xml-validationfileversion1.0.2pomversion1.0.2pkg:maven/clj-xml-validation/clj-xml-validation@1.0.2https://ossindex.sonatype.org/component/pkg:maven/clj-xml-validation/clj-xml-validation@1.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clojure-1.11.3.jar/home/runner/.m2/repository/org/clojure/clojure/1.11.3/clojure-1.11.3.jarab6a89d86e637060fc37b68f5c45d2c7baa884f9686cd231e91965e30c7e581e30109fd99c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7Clojure core environment and runtime library.Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.phpfilenameclojurejarpackage nameclojurejarpackage nameclojurejarpackage namecorepomartifactidclojurepomdeveloper emailrichhickey@gmail.compomdeveloper nameRich Hickeypomgroupidorg.clojurepomnameclojurepomurlhttp://clojure.org/filenameclojurejarpackage nameclojurejarpackage namecorepomartifactidclojurepomdeveloper emailrichhickey@gmail.compomdeveloper nameRich Hickeypomgroupidorg.clojurepomnameclojurepomurlhttp://clojure.org/fileversion1.11.3pomversion1.11.3pkg:maven/org.clojure/clojure@1.11.3https://ossindex.sonatype.org/component/pkg:maven/org.clojure/clojure@1.11.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aclojure&cpe_product=cpe%3A%2F%3Aclojure%3Aclojure&cpe_version=cpe%3A%2F%3Aclojure%3Aclojure%3A1.11.3commons-beanutils-1.9.4.jar/home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar07dc532ee316fe1f2f0323e9bd2f8df4d52b9abcd97f38c81342bb7e7ae1eee9b73cba517d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368aApache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.https://www.apache.org/licenses/LICENSE-2.0.txtfilenamecommons-beanutilsjarpackage nameapachejarpackage namebeanutilsjarpackage namecommonsManifestbundle-docurlhttps://commons.apache.org/proper/commons-beanutils/Manifestbundle-symbolicnameorg.apache.commons.commons-beanutilsManifestimplementation-buildUNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000Manifestimplementation-urlhttps://commons.apache.org/proper/commons-beanutils/ManifestImplementation-VendorThe Apache Software FoundationManifestImplementation-Vendor-Idorg.apacheManifestspecification-vendorThe Apache Software Foundationpomartifactidcommons-beanutilspomdeveloper emailbritter@apache.orgpomdeveloper emailchtompki@apache.orgpomdeveloper emailcraigmcc@apache.orgpomdeveloper emaildion@apache.orgpomdeveloper emailepugh@apache.orgpomdeveloper emailgeirm@apache.orgpomdeveloper emailggregory@apache.orgpomdeveloper emailjcarman@apache.orgpomdeveloper emailjconlon@apache.orgpomdeveloper emailjstrachan@apache.orgpomdeveloper emailmorgand@apache.orgpomdeveloper emailmvdb@apache.orgpomdeveloper emailniallp@apache.orgpomdeveloper emailrdonkin@apache.orgpomdeveloper emailrwaldhoff@apache.orgpomdeveloper emailsanders@apache.orgpomdeveloper emailscolebourne@apache.orgpomdeveloper emailskitching@apache.orgpomdeveloper emailstain@apache.orgpomdeveloper emailtobrien@apache.orgpomdeveloper emailyoavs@apache.orgpomdeveloper idbritterpomdeveloper idchtompkipomdeveloper idcraigmccpomdeveloper iddionpomdeveloper idepughpomdeveloper idgeirmpomdeveloper idggregorypomdeveloper idjcarmanpomdeveloper idjconlonpomdeveloper idjstrachanpomdeveloper idmorgandpomdeveloper idmvdbpomdeveloper idniallppomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idsanderspomdeveloper idscolebournepomdeveloper idskitchingpomdeveloper idstainpomdeveloper idtobrienpomdeveloper idyoavspomdeveloper nameBenedikt Ritterpomdeveloper nameCraig McClanahanpomdeveloper nameDavid Eric Pughpomdeveloper nameDion Gillardpomdeveloper nameGary Gregorypomdeveloper nameGeir Magnusson Jr.pomdeveloper nameJames Carmanpomdeveloper nameJames Strachanpomdeveloper nameJohn E. Conlonpomdeveloper nameMartin van den Bemtpomdeveloper nameMorgan James Delagrangepomdeveloper nameNiall Pembertonpomdeveloper nameRob Tompkinspomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameScott Sanderspomdeveloper nameSimon Kitchingpomdeveloper nameStephen Colebournepomdeveloper nameStian Soiland-Reyespomdeveloper nameTim O'Brienpomdeveloper nameYoav Shapirapomdeveloper orgThe Apache Software Foundationpomgroupidcommons-beanutilspomnameApache Commons BeanUtilspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttps://commons.apache.org/proper/commons-beanutils/filenamecommons-beanutilsjarpackage nameapachejarpackage namebeanutilsjarpackage namecommonsManifestbundle-docurlhttps://commons.apache.org/proper/commons-beanutils/ManifestBundle-NameApache Commons BeanUtilsManifestbundle-symbolicnameorg.apache.commons.commons-beanutilsManifestimplementation-buildUNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000ManifestImplementation-TitleApache Commons BeanUtilsManifestimplementation-urlhttps://commons.apache.org/proper/commons-beanutils/Manifestspecification-titleApache Commons BeanUtilspomartifactidcommons-beanutilspomdeveloper emailbritter@apache.orgpomdeveloper emailchtompki@apache.orgpomdeveloper emailcraigmcc@apache.orgpomdeveloper emaildion@apache.orgpomdeveloper emailepugh@apache.orgpomdeveloper emailgeirm@apache.orgpomdeveloper emailggregory@apache.orgpomdeveloper emailjcarman@apache.orgpomdeveloper emailjconlon@apache.orgpomdeveloper emailjstrachan@apache.orgpomdeveloper emailmorgand@apache.orgpomdeveloper emailmvdb@apache.orgpomdeveloper emailniallp@apache.orgpomdeveloper emailrdonkin@apache.orgpomdeveloper emailrwaldhoff@apache.orgpomdeveloper emailsanders@apache.orgpomdeveloper emailscolebourne@apache.orgpomdeveloper emailskitching@apache.orgpomdeveloper emailstain@apache.orgpomdeveloper emailtobrien@apache.orgpomdeveloper emailyoavs@apache.orgpomdeveloper idbritterpomdeveloper idchtompkipomdeveloper idcraigmccpomdeveloper iddionpomdeveloper idepughpomdeveloper idgeirmpomdeveloper idggregorypomdeveloper idjcarmanpomdeveloper idjconlonpomdeveloper idjstrachanpomdeveloper idmorgandpomdeveloper idmvdbpomdeveloper idniallppomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idsanderspomdeveloper idscolebournepomdeveloper idskitchingpomdeveloper idstainpomdeveloper idtobrienpomdeveloper idyoavspomdeveloper nameBenedikt Ritterpomdeveloper nameCraig McClanahanpomdeveloper nameDavid Eric Pughpomdeveloper nameDion Gillardpomdeveloper nameGary Gregorypomdeveloper nameGeir Magnusson Jr.pomdeveloper nameJames Carmanpomdeveloper nameJames Strachanpomdeveloper nameJohn E. Conlonpomdeveloper nameMartin van den Bemtpomdeveloper nameMorgan James Delagrangepomdeveloper nameNiall Pembertonpomdeveloper nameRob Tompkinspomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameScott Sanderspomdeveloper nameSimon Kitchingpomdeveloper nameStephen Colebournepomdeveloper nameStian Soiland-Reyespomdeveloper nameTim O'Brienpomdeveloper nameYoav Shapirapomdeveloper orgThe Apache Software Foundationpomgroupidcommons-beanutilspomnameApache Commons BeanUtilspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttps://commons.apache.org/proper/commons-beanutils/fileversion1.9.4ManifestBundle-Version1.9.4ManifestImplementation-Version1.9.4pomparent-version1.9.4pomversion1.9.4pkg:maven/commons-beanutils/commons-beanutils@1.9.4https://ossindex.sonatype.org/component/pkg:maven/commons-beanutils/commons-beanutils@1.9.4?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_beanutils&cpe_version=cpe%3A%2F%3Aapache%3Acommons_beanutils%3A1.9.4commons-collections-3.2.2.jar/home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jarf54a8510f834a1a57166970bfc982e948ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8Types that extend and augment the Java Collections Framework.http://www.apache.org/licenses/LICENSE-2.0.txtfilenamecommons-collectionsjarpackage nameapachejarpackage namecollectionsjarpackage namecommonsManifestbundle-docurlhttp://commons.apache.org/collections/Manifestbundle-symbolicnameorg.apache.commons.collectionsManifestimplementation-buildtags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100Manifestimplementation-urlhttp://commons.apache.org/collections/ManifestImplementation-VendorThe Apache Software FoundationManifestImplementation-Vendor-Idorg.apacheManifestspecification-vendorThe Apache Software Foundationpomartifactidcommons-collectionspomdeveloper idamammentpomdeveloper idbayardpomdeveloper idcraigmccpomdeveloper idgeirmpomdeveloper idjcarmanpomdeveloper idmatthpomdeveloper idmorgandpomdeveloper idpsteitzpomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idscolebournepomdeveloper nameArun M. Thomaspomdeveloper nameCraig McClanahanpomdeveloper nameGeir Magnussonpomdeveloper nameHenri Yandellpomdeveloper nameJames Carmanpomdeveloper nameMatthew Hawthornepomdeveloper nameMorgan Delagrangepomdeveloper namePhil Steitzpomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameStephen Colebournepomgroupidcommons-collectionspomnameApache Commons Collectionspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttp://commons.apache.org/collections/filenamecommons-collectionsjarpackage nameapachejarpackage namecollectionsjarpackage namecommonsManifestbundle-docurlhttp://commons.apache.org/collections/ManifestBundle-NameApache Commons CollectionsManifestbundle-symbolicnameorg.apache.commons.collectionsManifestimplementation-buildtags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100ManifestImplementation-TitleApache Commons CollectionsManifestimplementation-urlhttp://commons.apache.org/collections/Manifestspecification-titleApache Commons Collectionspomartifactidcommons-collectionspomdeveloper idamammentpomdeveloper idbayardpomdeveloper idcraigmccpomdeveloper idgeirmpomdeveloper idjcarmanpomdeveloper idmatthpomdeveloper idmorgandpomdeveloper idpsteitzpomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idscolebournepomdeveloper nameArun M. Thomaspomdeveloper nameCraig McClanahanpomdeveloper nameGeir Magnussonpomdeveloper nameHenri Yandellpomdeveloper nameJames Carmanpomdeveloper nameMatthew Hawthornepomdeveloper nameMorgan Delagrangepomdeveloper namePhil Steitzpomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameStephen Colebournepomgroupidcommons-collectionspomnameApache Commons Collectionspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttp://commons.apache.org/collections/fileversion3.2.2ManifestBundle-Version3.2.2ManifestImplementation-Version3.2.2pomparent-version3.2.2pomversion3.2.2pkg:maven/commons-collections/commons-collections@3.2.2https://ossindex.sonatype.org/component/pkg:maven/commons-collections/commons-collections@3.2.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_collections&cpe_version=cpe%3A%2F%3Aapache%3Acommons_collections%3A3.2.2commons-digester-2.1.jar/home/runner/.m2/repository/commons-digester/commons-digester/2.1/commons-digester-2.1.jar528445033f22da28f5047b6abcd1c7c973a8001e7a54a255eef0f03521ec1805dc738ca0e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d
+10.0.2NVD API Last Checked2024-07-23T02:38:20ZNVD API Last Modified2024-07-23T02:15:02Zcom.github.pmonks/lice-comb 2.0.335-SNAPSHOT2024-07-23T02:38:28.209926455ZThis product uses the NVD API but is not endorsed or certified by the NVD. This report contains data retrieved from the National Vulnerability Database: https://nvd.nist.gov, Github Advisory Database (via NPM Audit API): https://github.com/advisories/, and the RetireJS community.clj-base62-0.1.1.jar/home/runner/.m2/repository/miikka/clj-base62/0.1.1/clj-base62-0.1.1.jar4d1ff2cba176169428c21fb9ddab0528e983866be496ce97fc442c07561be31cf1d95ecdb835393a3ef4d3f45574824f42d1fcc7980378971b484cd1994d70cbb0d54862Base62 encoding and decoding for Clojurefilenameclj-base62pomartifactidclj-base62pomgroupidmiikkapomnameclj-base62pomurlhttps://sr.ht/~miikka/clj-base62filenameclj-base62pomartifactidclj-base62pomgroupidmiikkapomnameclj-base62pomurlhttps://sr.ht/~miikka/clj-base62fileversion0.1.1pomversion0.1.1pkg:maven/miikka/clj-base62@0.1.1https://ossindex.sonatype.org/component/pkg:maven/miikka/clj-base62@0.1.1?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clj-spdx-1.0.176.jar/home/runner/.m2/repository/com/github/pmonks/clj-spdx/1.0.176/clj-spdx-1.0.176.jar46ed7ecc296a2521a84cd6de9c8859c1790f0ed1581fb8c3daffd5de947174efd440bc6cf36deae199ea7282f2de5e860c94ed591f4d8dfac824e046ac9e860fcd91ac98Clojure wrapper around spdx/Spdx-Java-Library.Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.htmlfilenameclj-spdxManifestbuild-jdk-spec21pomartifactidclj-spdxpomdeveloper emailpmonks+clj-spdx@gmail.compomdeveloper idpmonkspomdeveloper namePeter Monkspomgroupidcom.github.pmonkspomnameclj-spdxpomurlpmonks/clj-spdxfilenameclj-spdxManifestbuild-jdk-spec21pomartifactidclj-spdxpomdeveloper emailpmonks+clj-spdx@gmail.compomdeveloper idpmonkspomdeveloper namePeter Monkspomgroupidcom.github.pmonkspomnameclj-spdxpomurlpmonks/clj-spdxfileversion1.0.176pomversion1.0.176pkg:maven/com.github.pmonks/clj-spdx@1.0.176https://ossindex.sonatype.org/component/pkg:maven/com.github.pmonks/clj-spdx@1.0.176?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clj-xml-validation-1.0.2.jar/home/runner/.m2/repository/clj-xml-validation/clj-xml-validation/1.0.2/clj-xml-validation-1.0.2.jarab69483eecdcab00c0eaa011b056c351be28bbe42941f00acfa073e986fa7b386a7c4f2de4210b7290f38bf90ce0dfb6c4398b74f54c7636baef37598c05e2852b59bf43Simple XML Schema validation library for ClojureEclipse Public License: http://www.eclipse.org/legal/epl-v10.htmlfilenameclj-xml-validationpomartifactidclj-xml-validationpomgroupidclj-xml-validationpomnameclj-xml-validationpomurlbbbates/clj-xml-validationfilenameclj-xml-validationpomartifactidclj-xml-validationpomgroupidclj-xml-validationpomnameclj-xml-validationpomurlbbbates/clj-xml-validationfileversion1.0.2pomversion1.0.2pkg:maven/clj-xml-validation/clj-xml-validation@1.0.2https://ossindex.sonatype.org/component/pkg:maven/clj-xml-validation/clj-xml-validation@1.0.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2clojure-1.11.3.jar/home/runner/.m2/repository/org/clojure/clojure/1.11.3/clojure-1.11.3.jarab6a89d86e637060fc37b68f5c45d2c7baa884f9686cd231e91965e30c7e581e30109fd99c305409328e2b96e85dd2b5eb4b75810c67b76ba70ae4d0f6dde9bcfb55b1b7Clojure core environment and runtime library.Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.phpfilenameclojurejarpackage nameclojurejarpackage nameclojurejarpackage namecorepomartifactidclojurepomdeveloper emailrichhickey@gmail.compomdeveloper nameRich Hickeypomgroupidorg.clojurepomnameclojurepomurlhttp://clojure.org/filenameclojurejarpackage nameclojurejarpackage namecorepomartifactidclojurepomdeveloper emailrichhickey@gmail.compomdeveloper nameRich Hickeypomgroupidorg.clojurepomnameclojurepomurlhttp://clojure.org/fileversion1.11.3pomversion1.11.3pkg:maven/org.clojure/clojure@1.11.3https://ossindex.sonatype.org/component/pkg:maven/org.clojure/clojure@1.11.3?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:clojure:clojure:1.11.3:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aclojure&cpe_product=cpe%3A%2F%3Aclojure%3Aclojure&cpe_version=cpe%3A%2F%3Aclojure%3Aclojure%3A1.11.3commons-beanutils-1.9.4.jar/home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar07dc532ee316fe1f2f0323e9bd2f8df4d52b9abcd97f38c81342bb7e7ae1eee9b73cba517d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368aApache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.https://www.apache.org/licenses/LICENSE-2.0.txtfilenamecommons-beanutilsjarpackage nameapachejarpackage namebeanutilsjarpackage namecommonsManifestbundle-docurlhttps://commons.apache.org/proper/commons-beanutils/Manifestbundle-symbolicnameorg.apache.commons.commons-beanutilsManifestimplementation-buildUNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000Manifestimplementation-urlhttps://commons.apache.org/proper/commons-beanutils/ManifestImplementation-VendorThe Apache Software FoundationManifestImplementation-Vendor-Idorg.apacheManifestspecification-vendorThe Apache Software Foundationpomartifactidcommons-beanutilspomdeveloper emailbritter@apache.orgpomdeveloper emailchtompki@apache.orgpomdeveloper emailcraigmcc@apache.orgpomdeveloper emaildion@apache.orgpomdeveloper emailepugh@apache.orgpomdeveloper emailgeirm@apache.orgpomdeveloper emailggregory@apache.orgpomdeveloper emailjcarman@apache.orgpomdeveloper emailjconlon@apache.orgpomdeveloper emailjstrachan@apache.orgpomdeveloper emailmorgand@apache.orgpomdeveloper emailmvdb@apache.orgpomdeveloper emailniallp@apache.orgpomdeveloper emailrdonkin@apache.orgpomdeveloper emailrwaldhoff@apache.orgpomdeveloper emailsanders@apache.orgpomdeveloper emailscolebourne@apache.orgpomdeveloper emailskitching@apache.orgpomdeveloper emailstain@apache.orgpomdeveloper emailtobrien@apache.orgpomdeveloper emailyoavs@apache.orgpomdeveloper idbritterpomdeveloper idchtompkipomdeveloper idcraigmccpomdeveloper iddionpomdeveloper idepughpomdeveloper idgeirmpomdeveloper idggregorypomdeveloper idjcarmanpomdeveloper idjconlonpomdeveloper idjstrachanpomdeveloper idmorgandpomdeveloper idmvdbpomdeveloper idniallppomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idsanderspomdeveloper idscolebournepomdeveloper idskitchingpomdeveloper idstainpomdeveloper idtobrienpomdeveloper idyoavspomdeveloper nameBenedikt Ritterpomdeveloper nameCraig McClanahanpomdeveloper nameDavid Eric Pughpomdeveloper nameDion Gillardpomdeveloper nameGary Gregorypomdeveloper nameGeir Magnusson Jr.pomdeveloper nameJames Carmanpomdeveloper nameJames Strachanpomdeveloper nameJohn E. Conlonpomdeveloper nameMartin van den Bemtpomdeveloper nameMorgan James Delagrangepomdeveloper nameNiall Pembertonpomdeveloper nameRob Tompkinspomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameScott Sanderspomdeveloper nameSimon Kitchingpomdeveloper nameStephen Colebournepomdeveloper nameStian Soiland-Reyespomdeveloper nameTim O'Brienpomdeveloper nameYoav Shapirapomdeveloper orgThe Apache Software Foundationpomgroupidcommons-beanutilspomnameApache Commons BeanUtilspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttps://commons.apache.org/proper/commons-beanutils/filenamecommons-beanutilsjarpackage nameapachejarpackage namebeanutilsjarpackage namecommonsManifestbundle-docurlhttps://commons.apache.org/proper/commons-beanutils/ManifestBundle-NameApache Commons BeanUtilsManifestbundle-symbolicnameorg.apache.commons.commons-beanutilsManifestimplementation-buildUNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000ManifestImplementation-TitleApache Commons BeanUtilsManifestimplementation-urlhttps://commons.apache.org/proper/commons-beanutils/Manifestspecification-titleApache Commons BeanUtilspomartifactidcommons-beanutilspomdeveloper emailbritter@apache.orgpomdeveloper emailchtompki@apache.orgpomdeveloper emailcraigmcc@apache.orgpomdeveloper emaildion@apache.orgpomdeveloper emailepugh@apache.orgpomdeveloper emailgeirm@apache.orgpomdeveloper emailggregory@apache.orgpomdeveloper emailjcarman@apache.orgpomdeveloper emailjconlon@apache.orgpomdeveloper emailjstrachan@apache.orgpomdeveloper emailmorgand@apache.orgpomdeveloper emailmvdb@apache.orgpomdeveloper emailniallp@apache.orgpomdeveloper emailrdonkin@apache.orgpomdeveloper emailrwaldhoff@apache.orgpomdeveloper emailsanders@apache.orgpomdeveloper emailscolebourne@apache.orgpomdeveloper emailskitching@apache.orgpomdeveloper emailstain@apache.orgpomdeveloper emailtobrien@apache.orgpomdeveloper emailyoavs@apache.orgpomdeveloper idbritterpomdeveloper idchtompkipomdeveloper idcraigmccpomdeveloper iddionpomdeveloper idepughpomdeveloper idgeirmpomdeveloper idggregorypomdeveloper idjcarmanpomdeveloper idjconlonpomdeveloper idjstrachanpomdeveloper idmorgandpomdeveloper idmvdbpomdeveloper idniallppomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idsanderspomdeveloper idscolebournepomdeveloper idskitchingpomdeveloper idstainpomdeveloper idtobrienpomdeveloper idyoavspomdeveloper nameBenedikt Ritterpomdeveloper nameCraig McClanahanpomdeveloper nameDavid Eric Pughpomdeveloper nameDion Gillardpomdeveloper nameGary Gregorypomdeveloper nameGeir Magnusson Jr.pomdeveloper nameJames Carmanpomdeveloper nameJames Strachanpomdeveloper nameJohn E. Conlonpomdeveloper nameMartin van den Bemtpomdeveloper nameMorgan James Delagrangepomdeveloper nameNiall Pembertonpomdeveloper nameRob Tompkinspomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameScott Sanderspomdeveloper nameSimon Kitchingpomdeveloper nameStephen Colebournepomdeveloper nameStian Soiland-Reyespomdeveloper nameTim O'Brienpomdeveloper nameYoav Shapirapomdeveloper orgThe Apache Software Foundationpomgroupidcommons-beanutilspomnameApache Commons BeanUtilspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttps://commons.apache.org/proper/commons-beanutils/fileversion1.9.4ManifestBundle-Version1.9.4ManifestImplementation-Version1.9.4pomparent-version1.9.4pomversion1.9.4pkg:maven/commons-beanutils/commons-beanutils@1.9.4https://ossindex.sonatype.org/component/pkg:maven/commons-beanutils/commons-beanutils@1.9.4?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_beanutils&cpe_version=cpe%3A%2F%3Aapache%3Acommons_beanutils%3A1.9.4commons-collections-3.2.2.jar/home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jarf54a8510f834a1a57166970bfc982e948ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8Types that extend and augment the Java Collections Framework.http://www.apache.org/licenses/LICENSE-2.0.txtfilenamecommons-collectionsjarpackage nameapachejarpackage namecollectionsjarpackage namecommonsManifestbundle-docurlhttp://commons.apache.org/collections/Manifestbundle-symbolicnameorg.apache.commons.collectionsManifestimplementation-buildtags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100Manifestimplementation-urlhttp://commons.apache.org/collections/ManifestImplementation-VendorThe Apache Software FoundationManifestImplementation-Vendor-Idorg.apacheManifestspecification-vendorThe Apache Software Foundationpomartifactidcommons-collectionspomdeveloper idamammentpomdeveloper idbayardpomdeveloper idcraigmccpomdeveloper idgeirmpomdeveloper idjcarmanpomdeveloper idmatthpomdeveloper idmorgandpomdeveloper idpsteitzpomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idscolebournepomdeveloper nameArun M. Thomaspomdeveloper nameCraig McClanahanpomdeveloper nameGeir Magnussonpomdeveloper nameHenri Yandellpomdeveloper nameJames Carmanpomdeveloper nameMatthew Hawthornepomdeveloper nameMorgan Delagrangepomdeveloper namePhil Steitzpomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameStephen Colebournepomgroupidcommons-collectionspomnameApache Commons Collectionspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttp://commons.apache.org/collections/filenamecommons-collectionsjarpackage nameapachejarpackage namecollectionsjarpackage namecommonsManifestbundle-docurlhttp://commons.apache.org/collections/ManifestBundle-NameApache Commons CollectionsManifestbundle-symbolicnameorg.apache.commons.collectionsManifestimplementation-buildtags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100ManifestImplementation-TitleApache Commons CollectionsManifestimplementation-urlhttp://commons.apache.org/collections/Manifestspecification-titleApache Commons Collectionspomartifactidcommons-collectionspomdeveloper idamammentpomdeveloper idbayardpomdeveloper idcraigmccpomdeveloper idgeirmpomdeveloper idjcarmanpomdeveloper idmatthpomdeveloper idmorgandpomdeveloper idpsteitzpomdeveloper idrdonkinpomdeveloper idrwaldhoffpomdeveloper idscolebournepomdeveloper nameArun M. Thomaspomdeveloper nameCraig McClanahanpomdeveloper nameGeir Magnussonpomdeveloper nameHenri Yandellpomdeveloper nameJames Carmanpomdeveloper nameMatthew Hawthornepomdeveloper nameMorgan Delagrangepomdeveloper namePhil Steitzpomdeveloper nameRobert Burrell Donkinpomdeveloper nameRodney Waldhoffpomdeveloper nameStephen Colebournepomgroupidcommons-collectionspomnameApache Commons Collectionspomparent-artifactidcommons-parentpomparent-groupidorg.apache.commonspomurlhttp://commons.apache.org/collections/fileversion3.2.2ManifestBundle-Version3.2.2ManifestImplementation-Version3.2.2pomparent-version3.2.2pomversion3.2.2pkg:maven/commons-collections/commons-collections@3.2.2https://ossindex.sonatype.org/component/pkg:maven/commons-collections/commons-collections@3.2.2?utm_source=dependency-check&utm_medium=integration&utm_content=10.0.2cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Aapache&cpe_product=cpe%3A%2F%3Aapache%3Acommons_collections&cpe_version=cpe%3A%2F%3Aapache%3Acommons_collections%3A3.2.2commons-digester-2.1.jar/home/runner/.m2/repository/commons-digester/commons-digester/2.1/commons-digester-2.1.jar528445033f22da28f5047b6abcd1c7c973a8001e7a54a255eef0f03521ec1805dc738ca0e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d
     The Digester package lets you configure an XML to Java object mapping module
     which triggers certain actions called rules whenever a particular 
     pattern of nested XML elements is recognized.
diff --git a/nvd/nvd.log b/nvd/nvd.log
index 19eb4ec..0828b1d 100644
--- a/nvd/nvd.log
+++ b/nvd/nvd.log
@@ -2,472 +2,472 @@ Downloading: nvd-clojure/nvd-clojure/maven-metadata.xml from clojars
 Downloading: org/owasp/dependency-check-core/10.0.2/dependency-check-core-10.0.2.pom from central
 Downloading: nvd-clojure/nvd-clojure/4.0.0/nvd-clojure-4.0.0.pom from clojars
 Downloading: org/owasp/dependency-check-parent/10.0.2/dependency-check-parent-10.0.2.pom from central
-Downloading: clansi/clansi/1.0.0/clansi-1.0.0.pom from clojars
+Downloading: rm-hull/table/0.7.1/table-0.7.1.pom from clojars
 Downloading: org/slf4j/slf4j-simple/2.0.10/slf4j-simple-2.0.10.pom from central
-Downloading: org/slf4j/slf4j-parent/2.0.10/slf4j-parent-2.0.10.pom from central
 Downloading: com/fasterxml/jackson/jackson-bom/2.17.1/jackson-bom-2.17.1.pom from central
-Downloading: trptcolin/versioneer/0.2.0/versioneer-0.2.0.pom from clojars
+Downloading: org/slf4j/slf4j-parent/2.0.10/slf4j-parent-2.0.10.pom from central
+Downloading: clansi/clansi/1.0.0/clansi-1.0.0.pom from clojars
 Downloading: com/fasterxml/jackson/jackson-parent/2.17/jackson-parent-2.17.pom from central
-Downloading: org/slf4j/slf4j-bom/2.0.10/slf4j-bom-2.0.10.pom from central
+Downloading: trptcolin/versioneer/0.2.0/versioneer-0.2.0.pom from clojars
 Downloading: com/fasterxml/oss-parent/58/oss-parent-58.pom from central
-Downloading: rm-hull/table/0.7.1/table-0.7.1.pom from clojars
-Downloading: com/fasterxml/jackson/core/jackson-annotations/2.16.1/jackson-annotations-2.16.1.pom from central
+Downloading: org/slf4j/slf4j-bom/2.0.10/slf4j-bom-2.0.10.pom from central
 Downloading: com/fasterxml/jackson/core/jackson-databind/2.16.1/jackson-databind-2.16.1.pom from central
+Downloading: com/fasterxml/jackson/core/jackson-annotations/2.16.1/jackson-annotations-2.16.1.pom from central
 Downloading: com/fasterxml/jackson/core/jackson-core/2.16.1/jackson-core-2.16.1.pom from central
 Downloading: com/fasterxml/jackson/jackson-base/2.16.1/jackson-base-2.16.1.pom from central
 Downloading: com/fasterxml/jackson/module/jackson-module-afterburner/2.16.1/jackson-module-afterburner-2.16.1.pom from central
-Downloading: org/yaml/snakeyaml/2.2/snakeyaml-2.2.pom from central
-Downloading: com/fasterxml/jackson/module/jackson-modules-base/2.16.1/jackson-modules-base-2.16.1.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver-transport-http/1.9.18/maven-resolver-transport-http-1.9.18.pom from central
 Downloading: org/junit/junit-bom/5.9.2/junit-bom-5.9.2.pom from central
-Downloading: org/apache/maven/maven-core/3.9.6/maven-core-3.9.6.pom from central
+Downloading: com/fasterxml/jackson/module/jackson-modules-base/2.16.1/jackson-modules-base-2.16.1.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver/1.9.18/maven-resolver-1.9.18.pom from central
+Downloading: org/apache/maven/maven-core/3.9.6/maven-core-3.9.6.pom from central
+Downloading: org/yaml/snakeyaml/2.2/snakeyaml-2.2.pom from central
 Downloading: org/eclipse/jetty/jetty-client/12.0.5/jetty-client-12.0.5.pom from central
 Downloading: org/apache/maven/maven/3.9.6/maven-3.9.6.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver-spi/1.9.18/maven-resolver-spi-1.9.18.pom from central
 Downloading: org/eclipse/jetty/jetty-core/12.0.5/jetty-core-12.0.5.pom from central
-Downloading: org/eclipse/jetty/jetty-project/12.0.5/jetty-project-12.0.5.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver-api/1.9.18/maven-resolver-api-1.9.18.pom from central
+Downloading: org/eclipse/jetty/jetty-project/12.0.5/jetty-project-12.0.5.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver-impl/1.9.18/maven-resolver-impl-1.9.18.pom from central
-Downloading: org/apache/maven/resolver/maven-resolver-util/1.9.18/maven-resolver-util-1.9.18.pom from central
 Downloading: org/apache/maven/maven-resolver-provider/3.9.6/maven-resolver-provider-3.9.6.pom from central
+Downloading: org/apache/maven/resolver/maven-resolver-util/1.9.18/maven-resolver-util-1.9.18.pom from central
 Downloading: com/fasterxml/jackson/jackson-bom/2.15.3/jackson-bom-2.15.3.pom from central
 Downloading: org/codehaus/plexus/plexus-utils/4.0.0/plexus-utils-4.0.0.pom from central
 Downloading: io/github/jeremylong/open-vulnerability-clients/6.1.2/open-vulnerability-clients-6.1.2.pom from central
-Downloading: com/fasterxml/jackson/jackson-parent/2.15/jackson-parent-2.15.pom from central
 Downloading: org/anarres/jdiagnostics/jdiagnostics/1.0.7/jdiagnostics-1.0.7.pom from central
+Downloading: com/fasterxml/jackson/jackson-parent/2.15/jackson-parent-2.15.pom from central
 Downloading: org/whitesource/pecoff4j/0.0.2.1/pecoff4j-0.0.2.1.pom from central
 Downloading: com/fasterxml/oss-parent/50/oss-parent-50.pom from central
-Downloading: org/apache/commons/commons-jcs3-core/3.2.1/commons-jcs3-core-3.2.1.pom from central
 Downloading: io/github/jeremylong/jcs3-slf4j/1.0.5/jcs3-slf4j-1.0.5.pom from central
-Downloading: org/apache/commons/commons-jcs3/3.2.1/commons-jcs3-3.2.1.pom from central
-Downloading: us/springett/cpe-parser/2.1.0/cpe-parser-2.1.0.pom from central
+Downloading: org/apache/commons/commons-jcs3-core/3.2.1/commons-jcs3-core-3.2.1.pom from central
 Downloading: com/github/package-url/packageurl-java/1.5.0/packageurl-java-1.5.0.pom from central
-Downloading: org/apache/commons/commons-parent/58/commons-parent-58.pom from central
-Downloading: org/owasp/dependency-check-utils/10.0.2/dependency-check-utils-10.0.2.pom from central
+Downloading: us/springett/cpe-parser/2.1.0/cpe-parser-2.1.0.pom from central
+Downloading: org/apache/commons/commons-jcs3/3.2.1/commons-jcs3-3.2.1.pom from central
 Downloading: org/infinispan/infinispan-bom/11.0.18.Final/infinispan-bom-11.0.18.Final.pom from central
 Downloading: org/semver4j/semver4j/5.3.0/semver4j-5.3.0.pom from central
 Downloading: org/infinispan/infinispan-build-configuration-parent/11.0.18.Final/infinispan-build-configuration-parent-11.0.18.Final.pom from central
+Downloading: org/owasp/dependency-check-utils/10.0.2/dependency-check-utils-10.0.2.pom from central
+Downloading: org/apache/commons/commons-parent/58/commons-parent-58.pom from central
 Downloading: org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.pom from central
-Downloading: org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.pom from central
-Downloading: org/ow2/asm/asm-bom/9.6/asm-bom-9.6.pom from central
 Downloading: org/apache/commons/commons-parent/48/commons-parent-48.pom from central
+Downloading: org/ow2/asm/asm-bom/9.6/asm-bom-9.6.pom from central
+Downloading: org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.pom from central
 Downloading: org/testcontainers/testcontainers-bom/1.19.3/testcontainers-bom-1.19.3.pom from central
 Downloading: commons-io/commons-io/2.16.1/commons-io-2.16.1.pom from central
-Downloading: org/apache/commons/commons-dbcp2/2.12.0/commons-dbcp2-2.12.0.pom from central
 Downloading: org/apache/commons/commons-text/1.12.0/commons-text-1.12.0.pom from central
-Downloading: org/apache/commons/commons-parent/66/commons-parent-66.pom from central
+Downloading: org/apache/commons/commons-dbcp2/2.12.0/commons-dbcp2-2.12.0.pom from central
 Downloading: org/apache/lucene/lucene-analyzers-common/8.11.3/lucene-analyzers-common-8.11.3.pom from central
 Downloading: org/apache/lucene/lucene-core/8.11.3/lucene-core-8.11.3.pom from central
+Downloading: org/apache/commons/commons-parent/66/commons-parent-66.pom from central
 Downloading: org/apache/lucene/lucene-parent/8.11.3/lucene-parent-8.11.3.pom from central
-Downloading: org/apache/lucene/lucene-solr-grandparent/8.11.3/lucene-solr-grandparent-8.11.3.pom from central
 Downloading: org/apache/lucene/lucene-queryparser/8.11.3/lucene-queryparser-8.11.3.pom from central
+Downloading: org/apache/lucene/lucene-solr-grandparent/8.11.3/lucene-solr-grandparent-8.11.3.pom from central
 Downloading: org/apache/velocity/velocity-engine-core/2.3/velocity-engine-core-2.3.pom from central
 Downloading: org/apache/velocity/velocity-engine-parent/2.3/velocity-engine-parent-2.3.pom from central
 Downloading: org/apache/velocity/velocity-master/4/velocity-master-4.pom from central
 Downloading: org/glassfish/javax.json/1.1.4/javax.json-1.1.4.pom from central
 Downloading: com/h2database/h2/2.1.214/h2-2.1.214.pom from central
+Downloading: org/glassfish/json/1.1.4/json-1.1.4.pom from central
 Downloading: com/fasterxml/jackson/core/jackson-databind/2.17.1/jackson-databind-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.17.1/jackson-datatype-jsr310-2.17.1.pom from central
-Downloading: org/glassfish/json/1.1.4/json-1.1.4.pom from central
 Downloading: com/fasterxml/jackson/module/jackson-module-afterburner/2.17.1/jackson-module-afterburner-2.17.1.pom from central
-Downloading: com/fasterxml/jackson/module/jackson-modules-java8/2.17.1/jackson-modules-java8-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/jackson-base/2.17.1/jackson-base-2.17.1.pom from central
+Downloading: com/fasterxml/jackson/module/jackson-modules-java8/2.17.1/jackson-modules-java8-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/module/jackson-module-blackbird/2.17.1/jackson-module-blackbird-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/module/jackson-modules-base/2.17.1/jackson-modules-base-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.17.1/jackson-dataformat-yaml-2.17.1.pom from central
 Downloading: com/h3xstream/retirejs/retirejs-core/3.0.4/retirejs-core-3.0.4.pom from central
 Downloading: com/fasterxml/jackson/dataformat/jackson-dataformats-text/2.17.1/jackson-dataformats-text-2.17.1.pom from central
 Downloading: org/sonatype/ossindex/ossindex-service-client/1.8.2/ossindex-service-client-1.8.2.pom from central
-Downloading: com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.pom from central
 Downloading: com/h3xstream/retirejs/retirejs-root-pom/3.0.4/retirejs-root-pom-3.0.4.pom from central
-Downloading: org/sonatype/ossindex/ossindex-service/1.8.2/ossindex-service-1.8.2.pom from central
-Downloading: com/google/guava/guava-parent/33.2.1-jre/guava-parent-33.2.1-jre.pom from central
+Downloading: com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.pom from central
 Downloading: com/moandjiezana/toml/toml4j/0.7.2/toml4j-0.7.2.pom from central
+Downloading: org/sonatype/ossindex/ossindex-service/1.8.2/ossindex-service-1.8.2.pom from central
 Downloading: com/hankcs/aho-corasick-double-array-trie/1.2.3/aho-corasick-double-array-trie-1.2.3.pom from central
+Downloading: com/google/guava/guava-parent/33.2.1-jre/guava-parent-33.2.1-jre.pom from central
 Downloading: org/sonatype/buildsupport/public-parent/28/public-parent-28.pom from central
 Downloading: org/sonatype/buildsupport/buildsupport/28/buildsupport-28.pom from central
 Downloading: org/eclipse/packager/packager-rpm/0.19.0/packager-rpm-0.19.0.pom from central
-Downloading: org/sonatype/ossindex/ossindex-service-bom/1.8.2/ossindex-service-bom-1.8.2.pom from central
 Downloading: org/eclipse/packager/packager/0.19.0/packager-0.19.0.pom from central
+Downloading: org/sonatype/ossindex/ossindex-service-bom/1.8.2/ossindex-service-bom-1.8.2.pom from central
 Downloading: org/slf4j/slf4j-api/2.0.10/slf4j-api-2.0.10.pom from central
 Downloading: org/junit/junit-bom/5.8.2/junit-bom-5.8.2.pom from central
 Downloading: commons-codec/commons-codec/1.16.0/commons-codec-1.16.0.pom from central
 Downloading: org/apache/maven/maven-model/3.9.6/maven-model-3.9.6.pom from central
-Downloading: org/apache/maven/maven-settings/3.9.6/maven-settings-3.9.6.pom from central
 Downloading: org/apache/maven/maven-settings-builder/3.9.6/maven-settings-builder-3.9.6.pom from central
-Downloading: org/apache/maven/maven-builder-support/3.9.6/maven-builder-support-3.9.6.pom from central
+Downloading: org/apache/maven/maven-settings/3.9.6/maven-settings-3.9.6.pom from central
 Downloading: org/apache/maven/maven-repository-metadata/3.9.6/maven-repository-metadata-3.9.6.pom from central
 Downloading: org/apache/maven/maven-artifact/3.9.6/maven-artifact-3.9.6.pom from central
+Downloading: org/apache/maven/maven-builder-support/3.9.6/maven-builder-support-3.9.6.pom from central
 Downloading: org/apache/maven/maven-plugin-api/3.9.6/maven-plugin-api-3.9.6.pom from central
 Downloading: org/apache/maven/maven-model-builder/3.9.6/maven-model-builder-3.9.6.pom from central
-Downloading: org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M2/org.eclipse.sisu.plexus-0.9.0.M2.pom from central
-Downloading: org/eclipse/sisu/sisu-plexus/0.9.0.M2/sisu-plexus-0.9.0.M2.pom from central
 Downloading: org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M2/org.eclipse.sisu.inject-0.9.0.M2.pom from central
+Downloading: org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M2/org.eclipse.sisu.plexus-0.9.0.M2.pom from central
 Downloading: com/google/inject/guice/5.1.0/guice-5.1.0.pom from central
 Downloading: com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.pom from central
-Downloading: org/codehaus/plexus/plexus-classworlds/2.7.0/plexus-classworlds-2.7.0.pom from central
-Downloading: org/eclipse/sisu/sisu-inject/0.9.0.M2/sisu-inject-0.9.0.M2.pom from central
-Downloading: com/google/guava/guava-parent/26.0-android/guava-parent-26.0-android.pom from central
+Downloading: org/eclipse/sisu/sisu-plexus/0.9.0.M2/sisu-plexus-0.9.0.M2.pom from central
 Downloading: com/google/inject/guice-parent/5.1.0/guice-parent-5.1.0.pom from central
+Downloading: com/google/guava/guava-parent/26.0-android/guava-parent-26.0-android.pom from central
+Downloading: org/eclipse/sisu/sisu-inject/0.9.0.M2/sisu-inject-0.9.0.M2.pom from central
+Downloading: org/codehaus/plexus/plexus-classworlds/2.7.0/plexus-classworlds-2.7.0.pom from central
 Downloading: org/eclipse/jetty/jetty-http/12.0.5/jetty-http-12.0.5.pom from central
-Downloading: org/eclipse/jetty/jetty-alpn-client/12.0.5/jetty-alpn-client-12.0.5.pom from central
 Downloading: org/eclipse/jetty/jetty-io/12.0.5/jetty-io-12.0.5.pom from central
-Downloading: org/eclipse/jetty/jetty-alpn/12.0.5/jetty-alpn-12.0.5.pom from central
+Downloading: org/eclipse/jetty/jetty-alpn-client/12.0.5/jetty-alpn-client-12.0.5.pom from central
 Downloading: org/apache/maven/resolver/maven-resolver-named-locks/1.9.18/maven-resolver-named-locks-1.9.18.pom from central
-Downloading: org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.pom from central
+Downloading: org/eclipse/jetty/jetty-alpn/12.0.5/jetty-alpn-12.0.5.pom from central
 Downloading: com/samskivert/jmustache/1.15/jmustache-1.15.pom from central
-Downloading: commons-codec/commons-codec/1.17.0/commons-codec-1.17.0.pom from central
+Downloading: org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.pom from central
 Downloading: org/apache/httpcomponents/client5/httpclient5-parent/5.3.1/httpclient5-parent-5.3.1.pom from central
-Downloading: org/apache/commons/commons-pool2/2.12.0/commons-pool2-2.12.0.pom from central
-Downloading: org/apache/commons/commons-parent/62/commons-parent-62.pom from central
+Downloading: commons-codec/commons-codec/1.17.0/commons-codec-1.17.0.pom from central
 Downloading: org/apache/httpcomponents/httpcomponents-parent/13/httpcomponents-parent-13.pom from central
+Downloading: org/apache/commons/commons-pool2/2.12.0/commons-pool2-2.12.0.pom from central
 Downloading: jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.pom from central
-Downloading: org/apache/lucene/lucene-queries/8.11.3/lucene-queries-8.11.3.pom from central
+Downloading: org/apache/commons/commons-parent/62/commons-parent-62.pom from central
 Downloading: org/apache/lucene/lucene-sandbox/8.11.3/lucene-sandbox-8.11.3.pom from central
-Downloading: com/fasterxml/jackson/core/jackson-annotations/2.17.1/jackson-annotations-2.17.1.pom from central
 Downloading: org/eclipse/ee4j/project/1.0.5/project-1.0.5.pom from central
+Downloading: org/apache/lucene/lucene-queries/8.11.3/lucene-queries-8.11.3.pom from central
+Downloading: com/fasterxml/jackson/core/jackson-annotations/2.17.1/jackson-annotations-2.17.1.pom from central
 Downloading: com/fasterxml/jackson/core/jackson-core/2.17.1/jackson-core-2.17.1.pom from central
 Downloading: com/esotericsoftware/minlog/1.3.1/minlog-1.3.1.pom from central
-Downloading: com/github/spullara/mustache/java/compiler/0.9.6/compiler-0.9.6.pom from central
-Downloading: org/sonatype/ossindex/ossindex-service-api/1.8.2/ossindex-service-api-1.8.2.pom from central
 Downloading: com/vaadin/external/google/android-json/0.0.20131108.vaadin1/android-json-0.0.20131108.vaadin1.pom from central
+Downloading: org/sonatype/ossindex/ossindex-service-api/1.8.2/ossindex-service-api-1.8.2.pom from central
 Downloading: com/google/code/gson/gson/2.9.0/gson-2.9.0.pom from central
-Downloading: com/github/spullara/mustache/java/mustache.java/0.9.6/mustache.java-0.9.6.pom from central
+Downloading: com/github/spullara/mustache/java/compiler/0.9.6/compiler-0.9.6.pom from central
 Downloading: joda-time/joda-time/2.10.4/joda-time-2.10.4.pom from central
+Downloading: com/google/code/gson/gson-parent/2.9.0/gson-parent-2.9.0.pom from central
+Downloading: com/github/spullara/mustache/java/mustache.java/0.9.6/mustache.java-0.9.6.pom from central
 Downloading: javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.pom from central
 Downloading: com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.pom from central
-Downloading: com/google/code/gson/gson-parent/2.9.0/gson-parent-2.9.0.pom from central
-Downloading: javax/xml/bind/jaxb-api-parent/2.3.1/jaxb-api-parent-2.3.1.pom from central
 Downloading: com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.pom from central
-Downloading: com/google/errorprone/error_prone_annotations/2.26.1/error_prone_annotations-2.26.1.pom from central
-Downloading: com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.pom from central
+Downloading: javax/xml/bind/jaxb-api-parent/2.3.1/jaxb-api-parent-2.3.1.pom from central
 Downloading: org/checkerframework/checker-qual/3.42.0/checker-qual-3.42.0.pom from central
-Downloading: com/google/errorprone/error_prone_parent/2.26.1/error_prone_parent-2.26.1.pom from central
-Downloading: org/tukaani/xz/1.9/xz-1.9.pom from central
+Downloading: com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.pom from central
+Downloading: com/google/errorprone/error_prone_annotations/2.26.1/error_prone_annotations-2.26.1.pom from central
 Downloading: org/eclipse/packager/packager-core/0.19.0/packager-core-0.19.0.pom from central
-Downloading: org/eclipse/jetty/jetty-util/12.0.5/jetty-util-12.0.5.pom from central
+Downloading: org/tukaani/xz/1.9/xz-1.9.pom from central
+Downloading: com/google/errorprone/error_prone_parent/2.26.1/error_prone_parent-2.26.1.pom from central
+Downloading: org/apache/httpcomponents/core5/httpcore5-h2/5.2.4/httpcore5-h2-5.2.4.pom from central
 Downloading: org/apache/httpcomponents/core5/httpcore5/5.2.4/httpcore5-5.2.4.pom from central
+Downloading: org/eclipse/jetty/jetty-util/12.0.5/jetty-util-12.0.5.pom from central
 Downloading: org/apache/httpcomponents/core5/httpcore5-parent/5.2.4/httpcore5-parent-5.2.4.pom from central
-Downloading: org/apache/httpcomponents/core5/httpcore5-h2/5.2.4/httpcore5-h2-5.2.4.pom from central
 Downloading: javax/ws/rs/javax.ws.rs-api/2.0.1/javax.ws.rs-api-2.0.1.pom from central
 Downloading: org/sonatype/goodies/package-url-java/1.1.1/package-url-java-1.1.1.pom from central
+Downloading: org/sonatype/buildsupport/public-parent/13/public-parent-13.pom from central
 Downloading: org/bouncycastle/bcprov-jdk18on/1.71/bcprov-jdk18on-1.71.pom from central
 Downloading: org/bouncycastle/bcpg-jdk18on/1.71/bcpg-jdk18on-1.71.pom from central
-Downloading: org/sonatype/buildsupport/public-parent/13/public-parent-13.pom from central
 Downloading: org/sonatype/buildsupport/buildsupport/13/buildsupport-13.pom from central
-Downloading: joda-time/joda-time/2.10.4/joda-time-2.10.4.jar from central
-Downloading: commons-codec/commons-codec/1.17.0/commons-codec-1.17.0.jar from central
 Downloading: com/fasterxml/jackson/module/jackson-module-blackbird/2.17.1/jackson-module-blackbird-2.17.1.jar from central
+Downloading: joda-time/joda-time/2.10.4/joda-time-2.10.4.jar from central
 Downloading: org/apache/httpcomponents/core5/httpcore5-h2/5.2.4/httpcore5-h2-5.2.4.jar from central
+Downloading: commons-codec/commons-codec/1.17.0/commons-codec-1.17.0.jar from central
 Downloading: org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.jar from central
-Downloading: com/esotericsoftware/minlog/1.3.1/minlog-1.3.1.jar from central
 Downloading: com/google/errorprone/error_prone_annotations/2.26.1/error_prone_annotations-2.26.1.jar from central
-Downloading: org/tukaani/xz/1.9/xz-1.9.jar from central
+Downloading: com/esotericsoftware/minlog/1.3.1/minlog-1.3.1.jar from central
 Downloading: org/bouncycastle/bcpg-jdk18on/1.71/bcpg-jdk18on-1.71.jar from central
+Downloading: org/tukaani/xz/1.9/xz-1.9.jar from central
 Downloading: com/h3xstream/retirejs/retirejs-core/3.0.4/retirejs-core-3.0.4.jar from central
-Downloading: com/fasterxml/jackson/core/jackson-databind/2.17.1/jackson-databind-2.17.1.jar from central
 Downloading: com/google/inject/guice/5.1.0/guice-5.1.0.jar from central
-Downloading: org/eclipse/jetty/jetty-alpn-client/12.0.5/jetty-alpn-client-12.0.5.jar from central
+Downloading: com/fasterxml/jackson/core/jackson-databind/2.17.1/jackson-databind-2.17.1.jar from central
 Downloading: org/eclipse/packager/packager-rpm/0.19.0/packager-rpm-0.19.0.jar from central
-Downloading: org/eclipse/jetty/jetty-http/12.0.5/jetty-http-12.0.5.jar from central
+Downloading: org/eclipse/jetty/jetty-alpn-client/12.0.5/jetty-alpn-client-12.0.5.jar from central
 Downloading: jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.jar from central
-Downloading: org/apache/commons/commons-pool2/2.12.0/commons-pool2-2.12.0.jar from central
 Downloading: org/eclipse/jetty/jetty-util/12.0.5/jetty-util-12.0.5.jar from central
+Downloading: org/eclipse/jetty/jetty-http/12.0.5/jetty-http-12.0.5.jar from central
 Downloading: org/apache/commons/commons-dbcp2/2.12.0/commons-dbcp2-2.12.0.jar from central
-Downloading: com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.17.1/jackson-dataformat-yaml-2.17.1.jar from central
-Downloading: org/anarres/jdiagnostics/jdiagnostics/1.0.7/jdiagnostics-1.0.7.jar from central
+Downloading: org/apache/commons/commons-pool2/2.12.0/commons-pool2-2.12.0.jar from central
 Downloading: com/fasterxml/jackson/module/jackson-module-afterburner/2.17.1/jackson-module-afterburner-2.17.1.jar from central
+Downloading: com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.17.1/jackson-dataformat-yaml-2.17.1.jar from central
 Downloading: clansi/clansi/1.0.0/clansi-1.0.0.jar from clojars
-Downloading: org/apache/lucene/lucene-analyzers-common/8.11.3/lucene-analyzers-common-8.11.3.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-transport-http/1.9.18/maven-resolver-transport-http-1.9.18.jar from central
-Downloading: org/apache/maven/maven-model-builder/3.9.6/maven-model-builder-3.9.6.jar from central
+Downloading: org/anarres/jdiagnostics/jdiagnostics/1.0.7/jdiagnostics-1.0.7.jar from central
+Downloading: org/apache/lucene/lucene-analyzers-common/8.11.3/lucene-analyzers-common-8.11.3.jar from central
 Downloading: com/hankcs/aho-corasick-double-array-trie/1.2.3/aho-corasick-double-array-trie-1.2.3.jar from central
-Downloading: org/codehaus/plexus/plexus-utils/4.0.0/plexus-utils-4.0.0.jar from central
+Downloading: org/apache/maven/maven-model-builder/3.9.6/maven-model-builder-3.9.6.jar from central
 Downloading: com/h2database/h2/2.1.214/h2-2.1.214.jar from central
-Downloading: rm-hull/table/0.7.1/table-0.7.1.jar from clojars
-Downloading: com/samskivert/jmustache/1.15/jmustache-1.15.jar from central
+Downloading: org/codehaus/plexus/plexus-utils/4.0.0/plexus-utils-4.0.0.jar from central
 Downloading: org/eclipse/sisu/org.eclipse.sisu.plexus/0.9.0.M2/org.eclipse.sisu.plexus-0.9.0.M2.jar from central
+Downloading: com/samskivert/jmustache/1.15/jmustache-1.15.jar from central
 Downloading: commons-io/commons-io/2.16.1/commons-io-2.16.1.jar from central
-Downloading: org/apache/maven/maven-settings-builder/3.9.6/maven-settings-builder-3.9.6.jar from central
+Downloading: rm-hull/table/0.7.1/table-0.7.1.jar from clojars
 Downloading: com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar from central
-Downloading: com/vaadin/external/google/android-json/0.0.20131108.vaadin1/android-json-0.0.20131108.vaadin1.jar from central
+Downloading: org/apache/maven/maven-settings-builder/3.9.6/maven-settings-builder-3.9.6.jar from central
 Downloading: org/owasp/dependency-check-core/10.0.2/dependency-check-core-10.0.2.jar from central
 Downloading: com/github/spullara/mustache/java/compiler/0.9.6/compiler-0.9.6.jar from central
+Downloading: com/vaadin/external/google/android-json/0.0.20131108.vaadin1/android-json-0.0.20131108.vaadin1.jar from central
+Downloading: org/apache/velocity/velocity-engine-core/2.3/velocity-engine-core-2.3.jar from central
 Downloading: com/fasterxml/jackson/core/jackson-core/2.17.1/jackson-core-2.17.1.jar from central
 Downloading: org/yaml/snakeyaml/2.2/snakeyaml-2.2.jar from central
-Downloading: org/apache/velocity/velocity-engine-core/2.3/velocity-engine-core-2.3.jar from central
 Downloading: org/apache/maven/maven-settings/3.9.6/maven-settings-3.9.6.jar from central
+Downloading: org/apache/commons/commons-jcs3-core/3.2.1/commons-jcs3-core-3.2.1.jar from central
 Downloading: org/owasp/dependency-check-utils/10.0.2/dependency-check-utils-10.0.2.jar from central
+Downloading: org/apache/lucene/lucene-core/8.11.3/lucene-core-8.11.3.jar from central
 Downloading: trptcolin/versioneer/0.2.0/versioneer-0.2.0.jar from clojars
-Downloading: org/apache/commons/commons-jcs3-core/3.2.1/commons-jcs3-core-3.2.1.jar from central
 Downloading: org/semver4j/semver4j/5.3.0/semver4j-5.3.0.jar from central
 Downloading: org/slf4j/slf4j-simple/2.0.10/slf4j-simple-2.0.10.jar from central
 Downloading: org/apache/maven/maven-core/3.9.6/maven-core-3.9.6.jar from central
-Downloading: org/bouncycastle/bcprov-jdk18on/1.71/bcprov-jdk18on-1.71.jar from central
 Downloading: org/apache/lucene/lucene-queryparser/8.11.3/lucene-queryparser-8.11.3.jar from central
+Downloading: org/bouncycastle/bcprov-jdk18on/1.71/bcprov-jdk18on-1.71.jar from central
 Downloading: org/eclipse/packager/packager-core/0.19.0/packager-core-0.19.0.jar from central
-Downloading: org/apache/lucene/lucene-core/8.11.3/lucene-core-8.11.3.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-api/1.9.18/maven-resolver-api-1.9.18.jar from central
 Downloading: com/fasterxml/jackson/core/jackson-annotations/2.17.1/jackson-annotations-2.17.1.jar from central
 Downloading: org/apache/maven/maven-resolver-provider/3.9.6/maven-resolver-provider-3.9.6.jar from central
 Downloading: org/apache/commons/commons-text/1.12.0/commons-text-1.12.0.jar from central
-Downloading: nvd-clojure/nvd-clojure/4.0.0/nvd-clojure-4.0.0.jar from clojars
 Downloading: us/springett/cpe-parser/2.1.0/cpe-parser-2.1.0.jar from central
+Downloading: nvd-clojure/nvd-clojure/4.0.0/nvd-clojure-4.0.0.jar from clojars
 Downloading: com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar from central
 Downloading: org/apache/lucene/lucene-queries/8.11.3/lucene-queries-8.11.3.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-spi/1.9.18/maven-resolver-spi-1.9.18.jar from central
-Downloading: com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.jar from central
 Downloading: org/sonatype/ossindex/ossindex-service-api/1.8.2/ossindex-service-api-1.8.2.jar from central
+Downloading: com/google/guava/guava/33.2.1-jre/guava-33.2.1-jre.jar from central
 Downloading: com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar from central
 Downloading: org/codehaus/plexus/plexus-classworlds/2.7.0/plexus-classworlds-2.7.0.jar from central
 Downloading: io/github/jeremylong/open-vulnerability-clients/6.1.2/open-vulnerability-clients-6.1.2.jar from central
 Downloading: org/apache/lucene/lucene-sandbox/8.11.3/lucene-sandbox-8.11.3.jar from central
-Downloading: org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.jar from central
 Downloading: org/checkerframework/checker-qual/3.42.0/checker-qual-3.42.0.jar from central
 Downloading: org/eclipse/jetty/jetty-client/12.0.5/jetty-client-12.0.5.jar from central
+Downloading: org/eclipse/jetty/jetty-io/12.0.5/jetty-io-12.0.5.jar from central
+Downloading: org/apache/httpcomponents/client5/httpclient5/5.3.1/httpclient5-5.3.1.jar from central
 Downloading: org/sonatype/ossindex/ossindex-service-client/1.8.2/ossindex-service-client-1.8.2.jar from central
 Downloading: io/github/jeremylong/jcs3-slf4j/1.0.5/jcs3-slf4j-1.0.5.jar from central
-Downloading: org/eclipse/jetty/jetty-io/12.0.5/jetty-io-12.0.5.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-impl/1.9.18/maven-resolver-impl-1.9.18.jar from central
-Downloading: org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar from central
 Downloading: org/slf4j/slf4j-api/2.0.10/slf4j-api-2.0.10.jar from central
-Downloading: org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M2/org.eclipse.sisu.inject-0.9.0.M2.jar from central
-Downloading: org/apache/httpcomponents/core5/httpcore5/5.2.4/httpcore5-5.2.4.jar from central
 Downloading: org/apache/maven/maven-model/3.9.6/maven-model-3.9.6.jar from central
+Downloading: org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar from central
+Downloading: org/apache/httpcomponents/core5/httpcore5/5.2.4/httpcore5-5.2.4.jar from central
+Downloading: org/eclipse/sisu/org.eclipse.sisu.inject/0.9.0.M2/org.eclipse.sisu.inject-0.9.0.M2.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-util/1.9.18/maven-resolver-util-1.9.18.jar from central
-Downloading: com/moandjiezana/toml/toml4j/0.7.2/toml4j-0.7.2.jar from central
 Downloading: org/apache/maven/resolver/maven-resolver-named-locks/1.9.18/maven-resolver-named-locks-1.9.18.jar from central
+Downloading: com/moandjiezana/toml/toml4j/0.7.2/toml4j-0.7.2.jar from central
 Downloading: org/apache/maven/maven-repository-metadata/3.9.6/maven-repository-metadata-3.9.6.jar from central
+Downloading: com/github/package-url/packageurl-java/1.5.0/packageurl-java-1.5.0.jar from central
 Downloading: org/apache/maven/maven-builder-support/3.9.6/maven-builder-support-3.9.6.jar from central
 Downloading: javax/ws/rs/javax.ws.rs-api/2.0.1/javax.ws.rs-api-2.0.1.jar from central
-Downloading: com/github/package-url/packageurl-java/1.5.0/packageurl-java-1.5.0.jar from central
-Downloading: org/apache/maven/maven-plugin-api/3.9.6/maven-plugin-api-3.9.6.jar from central
 Downloading: org/sonatype/goodies/package-url-java/1.1.1/package-url-java-1.1.1.jar from central
+Downloading: org/apache/maven/maven-plugin-api/3.9.6/maven-plugin-api-3.9.6.jar from central
 Downloading: com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.17.1/jackson-datatype-jsr310-2.17.1.jar from central
 Downloading: org/whitesource/pecoff4j/0.0.2.1/pecoff4j-0.0.2.1.jar from central
 Downloading: org/apache/maven/maven-artifact/3.9.6/maven-artifact-3.9.6.jar from central
 Downloading: org/glassfish/javax.json/1.1.4/javax.json-1.1.4.jar from central
 Downloading: javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar from central
 Downloading: com/google/code/gson/gson/2.9.0/gson-2.9.0.jar from central
-[2024-07-16 02:36:29.219] INFO nvd-clojure - User-provided config: {:delete-config? false, :group "com.github.pmonks", :name "lice-comb", :version "2.0.335-SNAPSHOT", :nvd {:output-dir "../target/nvd"}}
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+[2024-07-23 02:35:36.926] INFO nvd-clojure - User-provided config: {:delete-config? false, :group "com.github.pmonks", :name "lice-comb", :version "2.0.335-SNAPSHOT", :nvd {:output-dir "../target/nvd"}}
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
 INFO: Instance is null, returning unconfigured instance
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
 INFO: Setting default auxiliaries to "ODC"
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
 INFO: setting defaultCompositeCacheAttributes to [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
-INFO: setting defaultElementAttributes to [ IS_LATERAL = false, IS_SPOOL = true, IS_REMOTE = false, IS_ETERNAL = false, MaxLifeSeconds = 86400, IdleTime = 1800, CreateTime = 1721097389990, LastAccessTime = 1721097389990, getTimeToLiveSeconds() = 86399, createTime = 1721097389990 ]
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+INFO: setting defaultElementAttributes to [ IS_LATERAL = false, IS_SPOOL = true, IS_REMOTE = false, IS_ETERNAL = false, MaxLifeSeconds = 86400, IdleTime = 1800, CreateTime = 1721702137742, LastAccessTime = 1721702137742, getTimeToLiveSeconds() = 86399, createTime = 1721702137742 ]
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
 INFO: initialized MemoryCache for CENTRAL
-Jul 16, 2024 2:36:29 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCache 
 INFO: Constructed cache with name [CENTRAL] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
 INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
-INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@3a8cea24] for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@5d318e91] for auxiliary [jcs.auxiliary.ODC]
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [CENTRAL] : Set maxKeySize to: "1,000,000"
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [CENTRAL] : Cache file root directory: /home/runner/.m2/repository/org/owasp/dependency-check-utils/10.0.2/data/9.0/cache
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [CENTRAL] : Indexed Disk Cache is alive.
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
 INFO: initialized MemoryCache for POM
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCache 
 INFO: Constructed cache with name [POM] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
 INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
-INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@d13960e] for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@5e593b08] for auxiliary [jcs.auxiliary.ODC]
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [POM] : Set maxKeySize to: "1,000,000"
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [POM] : Cache file root directory: /home/runner/.m2/repository/org/owasp/dependency-check-utils/10.0.2/data/9.0/cache
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [POM] : Indexed Disk Cache is alive.
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.memory.AbstractDoubleLinkedListMemoryCache 
 INFO: initialized MemoryCache for NODEAUDIT
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCache 
 INFO: Constructed cache with name [NODEAUDIT] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
 INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
-INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@27f3f512] for auxiliary [jcs.auxiliary.ODC]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.AuxiliaryCacheConfigurator 
+INFO: Using standard serializer [org.apache.commons.jcs3.utils.serialization.StandardSerializer@3946075] for auxiliary [jcs.auxiliary.ODC]
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [NODEAUDIT] : Set maxKeySize to: "1,000,000"
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [NODEAUDIT] : Cache file root directory: /home/runner/.m2/repository/org/owasp/dependency-check-utils/10.0.2/data/9.0/cache
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.auxiliary.disk.indexed.IndexedDiskCache 
 INFO: Region [NODEAUDIT] : Indexed Disk Cache is alive.
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.control.CompositeCacheConfigurator 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheConfigurator 
 INFO: Parsed regions [CENTRAL, POM, NODEAUDIT]
-Jul 16, 2024 2:36:30 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
-INFO: Finished configuration in 83 ms.
-[2024-07-16 02:36:30.028] WARN NexusAnalyzer - Disabling Nexus analyzer - please specify the URL to a Nexus Server
-[2024-07-16 02:36:30.439] INFO Engine - Checking for updates
-[2024-07-16 02:36:32.091] INFO NvdApiDataSource - NVD API has 257,076 records in this update
-[2024-07-16 02:36:37.303] INFO NvdApiDataSource - Downloaded 10,000/257,076 (4%)
-[2024-07-16 02:36:43.511] INFO NvdApiDataSource - Downloaded 20,000/257,076 (8%)
-[2024-07-16 02:36:48.764] INFO NvdApiDataSource - Downloaded 30,000/257,076 (12%)
-[2024-07-16 02:36:54.200] INFO NvdApiDataSource - Downloaded 40,000/257,076 (16%)
-[2024-07-16 02:37:02.632] INFO NvdApiDataSource - Downloaded 50,000/257,076 (19%)
-[2024-07-16 02:37:08.206] INFO NvdApiDataSource - Downloaded 60,000/257,076 (23%)
-[2024-07-16 02:37:13.626] INFO NvdApiDataSource - Downloaded 70,000/257,076 (27%)
-[2024-07-16 02:37:19.332] INFO NvdApiDataSource - Downloaded 80,000/257,076 (31%)
-[2024-07-16 02:37:27.093] INFO NvdApiDataSource - Downloaded 90,000/257,076 (35%)
-[2024-07-16 02:37:33.044] INFO NvdApiDataSource - Downloaded 100,000/257,076 (39%)
-[2024-07-16 02:37:38.619] INFO NvdApiDataSource - Downloaded 110,000/257,076 (43%)
-[2024-07-16 02:37:43.690] INFO NvdApiDataSource - Downloaded 120,000/257,076 (47%)
-[2024-07-16 02:37:52.405] INFO NvdApiDataSource - Downloaded 130,000/257,076 (51%)
-[2024-07-16 02:37:58.520] INFO NvdApiDataSource - Downloaded 140,000/257,076 (54%)
-[2024-07-16 02:38:03.539] INFO NvdApiDataSource - Downloaded 150,000/257,076 (58%)
-[2024-07-16 02:38:09.427] INFO NvdApiDataSource - Downloaded 160,000/257,076 (62%)
-[2024-07-16 02:38:17.192] INFO NvdApiDataSource - Downloaded 170,000/257,076 (66%)
-[2024-07-16 02:38:23.390] INFO NvdApiDataSource - Downloaded 180,000/257,076 (70%)
-[2024-07-16 02:38:28.535] INFO NvdApiDataSource - Downloaded 190,000/257,076 (74%)
-[2024-07-16 02:38:33.599] INFO NvdApiDataSource - Downloaded 200,000/257,076 (78%)
-[2024-07-16 02:38:41.615] INFO NvdApiDataSource - Downloaded 210,000/257,076 (82%)
-[2024-07-16 02:38:48.129] INFO NvdApiDataSource - Downloaded 220,000/257,076 (86%)
-[2024-07-16 02:38:53.492] INFO NvdApiDataSource - Downloaded 230,000/257,076 (89%)
-[2024-07-16 02:38:58.476] INFO NvdApiDataSource - Downloaded 240,000/257,076 (93%)
-[2024-07-16 02:39:07.190] INFO NvdApiDataSource - Downloaded 250,000/257,076 (97%)
-[2024-07-16 02:39:11.927] INFO NvdApiDataSource - Downloaded 257,076/257,076 (100%)
-[2024-07-16 02:39:11.927] INFO NvdApiDataSource - Completed processing batch 1/129 (1%) in 2,465ms
-[2024-07-16 02:39:11.928] INFO NvdApiDataSource - Completed processing batch 2/129 (2%) in 2,851ms
-[2024-07-16 02:39:11.928] INFO NvdApiDataSource - Completed processing batch 3/129 (2%) in 2,797ms
-[2024-07-16 02:39:11.928] INFO NvdApiDataSource - Completed processing batch 4/129 (3%) in 2,794ms
-[2024-07-16 02:39:11.928] INFO NvdApiDataSource - Completed processing batch 5/129 (4%) in 1,484ms
-[2024-07-16 02:39:11.928] INFO NvdApiDataSource - Completed processing batch 6/129 (5%) in 2,263ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 7/129 (5%) in 2,130ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 8/129 (6%) in 2,033ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 9/129 (7%) in 1,136ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 10/129 (8%) in 1,584ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 11/129 (9%) in 1,488ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 12/129 (9%) in 1,183ms
-[2024-07-16 02:39:11.929] INFO NvdApiDataSource - Completed processing batch 13/129 (10%) in 726ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 14/129 (11%) in 1,112ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 15/129 (12%) in 1,195ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 16/129 (12%) in 1,192ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 17/129 (13%) in 607ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 18/129 (14%) in 1,609ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 19/129 (15%) in 1,659ms
-[2024-07-16 02:39:11.930] INFO NvdApiDataSource - Completed processing batch 20/129 (16%) in 1,355ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 21/129 (16%) in 764ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 22/129 (17%) in 1,784ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 23/129 (18%) in 2,063ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 24/129 (19%) in 1,866ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 25/129 (19%) in 979ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 26/129 (20%) in 1,902ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 27/129 (21%) in 1,745ms
-[2024-07-16 02:39:11.931] INFO NvdApiDataSource - Completed processing batch 28/129 (22%) in 1,306ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 29/129 (22%) in 2,707ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 30/129 (23%) in 1,595ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 31/129 (24%) in 1,990ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 32/129 (25%) in 1,784ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 33/129 (26%) in 1,464ms
-[2024-07-16 02:39:11.932] INFO NvdApiDataSource - Completed processing batch 34/129 (26%) in 1,265ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 35/129 (27%) in 1,038ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 36/129 (28%) in 894ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 37/129 (29%) in 726ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 38/129 (29%) in 684ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 39/129 (30%) in 747ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 40/129 (31%) in 522ms
-[2024-07-16 02:39:11.933] INFO NvdApiDataSource - Completed processing batch 41/129 (32%) in 783ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 42/129 (33%) in 180ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 43/129 (33%) in 203ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 44/129 (34%) in 509ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 45/129 (35%) in 430ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 46/129 (36%) in 822ms
-[2024-07-16 02:39:11.934] INFO NvdApiDataSource - Completed processing batch 47/129 (36%) in 792ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 48/129 (37%) in 563ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 49/129 (38%) in 509ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 50/129 (39%) in 275ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 51/129 (40%) in 434ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 52/129 (40%) in 450ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 53/129 (41%) in 399ms
-[2024-07-16 02:39:11.935] INFO NvdApiDataSource - Completed processing batch 54/129 (42%) in 668ms
-[2024-07-16 02:39:11.936] INFO NvdApiDataSource - Completed processing batch 55/129 (43%) in 584ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 56/129 (43%) in 479ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 57/129 (44%) in 468ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 58/129 (45%) in 636ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 59/129 (46%) in 501ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 60/129 (47%) in 453ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 61/129 (47%) in 447ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 62/129 (48%) in 601ms
-[2024-07-16 02:39:11.937] INFO NvdApiDataSource - Completed processing batch 63/129 (49%) in 594ms
-[2024-07-16 02:39:11.938] INFO NvdApiDataSource - Completed processing batch 64/129 (50%) in 510ms
-[2024-07-16 02:39:11.938] INFO NvdApiDataSource - Completed processing batch 65/129 (50%) in 526ms
-[2024-07-16 02:39:11.938] INFO NvdApiDataSource - Completed processing batch 66/129 (51%) in 504ms
-[2024-07-16 02:39:11.938] INFO NvdApiDataSource - Completed processing batch 67/129 (52%) in 436ms
-[2024-07-16 02:39:11.938] INFO NvdApiDataSource - Completed processing batch 68/129 (53%) in 462ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 69/129 (53%) in 407ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 70/129 (54%) in 692ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 71/129 (55%) in 595ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 72/129 (56%) in 453ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 73/129 (57%) in 454ms
-[2024-07-16 02:39:11.939] INFO NvdApiDataSource - Completed processing batch 74/129 (57%) in 525ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 75/129 (58%) in 489ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 76/129 (59%) in 435ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 77/129 (60%) in 448ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 78/129 (60%) in 405ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 79/129 (61%) in 525ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 80/129 (62%) in 450ms
-[2024-07-16 02:39:11.940] INFO NvdApiDataSource - Completed processing batch 81/129 (63%) in 363ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 82/129 (64%) in 536ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 83/129 (64%) in 576ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 84/129 (65%) in 422ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 85/129 (66%) in 485ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 86/129 (67%) in 503ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 87/129 (67%) in 512ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 88/129 (68%) in 334ms
-[2024-07-16 02:39:11.941] INFO NvdApiDataSource - Completed processing batch 89/129 (69%) in 420ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 90/129 (70%) in 519ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 91/129 (71%) in 637ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 92/129 (71%) in 470ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 93/129 (72%) in 421ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 94/129 (73%) in 569ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 95/129 (74%) in 544ms
-[2024-07-16 02:39:11.942] INFO NvdApiDataSource - Completed processing batch 96/129 (74%) in 450ms
-[2024-07-16 02:39:11.943] INFO NvdApiDataSource - Completed processing batch 97/129 (75%) in 450ms
-[2024-07-16 02:39:11.943] INFO NvdApiDataSource - Completed processing batch 98/129 (76%) in 479ms
-[2024-07-16 02:39:11.943] INFO NvdApiDataSource - Completed processing batch 99/129 (77%) in 480ms
-[2024-07-16 02:39:11.943] INFO NvdApiDataSource - Completed processing batch 100/129 (78%) in 492ms
-[2024-07-16 02:39:11.943] INFO NvdApiDataSource - Completed processing batch 101/129 (78%) in 356ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 102/129 (79%) in 470ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 103/129 (80%) in 411ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 104/129 (81%) in 426ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 105/129 (81%) in 316ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 106/129 (82%) in 378ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 107/129 (83%) in 501ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 108/129 (84%) in 412ms
-[2024-07-16 02:39:11.944] INFO NvdApiDataSource - Completed processing batch 109/129 (84%) in 352ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 110/129 (85%) in 516ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 111/129 (86%) in 460ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 112/129 (87%) in 424ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 113/129 (88%) in 568ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 114/129 (88%) in 476ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 115/129 (89%) in 529ms
-[2024-07-16 02:39:11.945] INFO NvdApiDataSource - Completed processing batch 116/129 (90%) in 429ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 117/129 (91%) in 393ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 118/129 (91%) in 131ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 119/129 (92%) in 436ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 120/129 (93%) in 74ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 121/129 (94%) in 410ms
-[2024-07-16 02:39:11.946] INFO NvdApiDataSource - Completed processing batch 122/129 (95%) in 51ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 123/129 (95%) in 91ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 124/129 (96%) in 55ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 125/129 (97%) in 50ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 126/129 (98%) in 193ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 127/129 (98%) in 150ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 128/129 (99%) in 66ms
-[2024-07-16 02:39:11.947] INFO NvdApiDataSource - Completed processing batch 129/129 (100%) in 69ms
-[2024-07-16 02:39:12.084] INFO KnownExploitedDataSource - Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
-[2024-07-16 02:39:12.379] INFO CveDB - Begin database defrag
-[2024-07-16 02:39:15.365] INFO CveDB - End database defrag (2991 ms)
-[2024-07-16 02:39:15.367] INFO Engine - Check for updates complete (164928 ms)
-[2024-07-16 02:39:15.541] INFO Engine - 
+Jul 23, 2024 2:35:37 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+INFO: Finished configuration in 132 ms.
+[2024-07-23 02:35:37.797] WARN NexusAnalyzer - Disabling Nexus analyzer - please specify the URL to a Nexus Server
+[2024-07-23 02:35:38.243] INFO Engine - Checking for updates
+[2024-07-23 02:35:39.904] INFO NvdApiDataSource - NVD API has 257,820 records in this update
+[2024-07-23 02:35:44.951] INFO NvdApiDataSource - Downloaded 10,000/257,820 (4%)
+[2024-07-23 02:35:51.119] INFO NvdApiDataSource - Downloaded 20,000/257,820 (8%)
+[2024-07-23 02:35:56.331] INFO NvdApiDataSource - Downloaded 30,000/257,820 (12%)
+[2024-07-23 02:36:01.775] INFO NvdApiDataSource - Downloaded 40,000/257,820 (16%)
+[2024-07-23 02:36:09.831] INFO NvdApiDataSource - Downloaded 50,000/257,820 (19%)
+[2024-07-23 02:36:15.951] INFO NvdApiDataSource - Downloaded 60,000/257,820 (23%)
+[2024-07-23 02:36:21.531] INFO NvdApiDataSource - Downloaded 70,000/257,820 (27%)
+[2024-07-23 02:36:26.848] INFO NvdApiDataSource - Downloaded 80,000/257,820 (31%)
+[2024-07-23 02:36:34.837] INFO NvdApiDataSource - Downloaded 90,000/257,820 (35%)
+[2024-07-23 02:36:40.970] INFO NvdApiDataSource - Downloaded 100,000/257,820 (39%)
+[2024-07-23 02:36:46.696] INFO NvdApiDataSource - Downloaded 110,000/257,820 (43%)
+[2024-07-23 02:36:51.698] INFO NvdApiDataSource - Downloaded 120,000/257,820 (47%)
+[2024-07-23 02:36:59.789] INFO NvdApiDataSource - Downloaded 130,000/257,820 (50%)
+[2024-07-23 02:37:06.362] INFO NvdApiDataSource - Downloaded 140,000/257,820 (54%)
+[2024-07-23 02:37:11.631] INFO NvdApiDataSource - Downloaded 150,000/257,820 (58%)
+[2024-07-23 02:37:17.053] INFO NvdApiDataSource - Downloaded 160,000/257,820 (62%)
+[2024-07-23 02:37:25.223] INFO NvdApiDataSource - Downloaded 170,000/257,820 (66%)
+[2024-07-23 02:37:31.021] INFO NvdApiDataSource - Downloaded 180,000/257,820 (70%)
+[2024-07-23 02:37:36.281] INFO NvdApiDataSource - Downloaded 190,000/257,820 (74%)
+[2024-07-23 02:37:41.678] INFO NvdApiDataSource - Downloaded 200,000/257,820 (78%)
+[2024-07-23 02:37:49.702] INFO NvdApiDataSource - Downloaded 210,000/257,820 (81%)
+[2024-07-23 02:37:55.727] INFO NvdApiDataSource - Downloaded 220,000/257,820 (85%)
+[2024-07-23 02:38:01.372] INFO NvdApiDataSource - Downloaded 230,000/257,820 (89%)
+[2024-07-23 02:38:05.996] INFO NvdApiDataSource - Downloaded 240,000/257,820 (93%)
+[2024-07-23 02:38:14.205] INFO NvdApiDataSource - Downloaded 250,000/257,820 (97%)
+[2024-07-23 02:38:19.962] INFO NvdApiDataSource - Downloaded 257,820/257,820 (100%)
+[2024-07-23 02:38:19.962] INFO NvdApiDataSource - Completed processing batch 1/129 (1%) in 3,179ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 2/129 (2%) in 3,832ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 3/129 (2%) in 3,474ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 4/129 (3%) in 3,696ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 5/129 (4%) in 1,705ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 6/129 (5%) in 2,087ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 7/129 (5%) in 2,314ms
+[2024-07-23 02:38:19.963] INFO NvdApiDataSource - Completed processing batch 8/129 (6%) in 2,018ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 9/129 (7%) in 913ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 10/129 (8%) in 1,368ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 11/129 (9%) in 1,320ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 12/129 (9%) in 1,191ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 13/129 (10%) in 793ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 14/129 (11%) in 1,004ms
+[2024-07-23 02:38:19.964] INFO NvdApiDataSource - Completed processing batch 15/129 (12%) in 1,138ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 16/129 (12%) in 1,104ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 17/129 (13%) in 627ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 18/129 (14%) in 1,569ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 19/129 (15%) in 1,523ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 20/129 (16%) in 1,409ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 21/129 (16%) in 873ms
+[2024-07-23 02:38:19.965] INFO NvdApiDataSource - Completed processing batch 22/129 (17%) in 1,495ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 23/129 (18%) in 2,066ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 24/129 (19%) in 1,738ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 25/129 (19%) in 1,053ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 26/129 (20%) in 2,388ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 27/129 (21%) in 2,266ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 28/129 (22%) in 1,654ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 29/129 (22%) in 2,770ms
+[2024-07-23 02:38:19.966] INFO NvdApiDataSource - Completed processing batch 30/129 (23%) in 1,586ms
+[2024-07-23 02:38:19.967] INFO NvdApiDataSource - Completed processing batch 31/129 (24%) in 2,087ms
+[2024-07-23 02:38:19.967] INFO NvdApiDataSource - Completed processing batch 32/129 (25%) in 1,679ms
+[2024-07-23 02:38:19.967] INFO NvdApiDataSource - Completed processing batch 33/129 (26%) in 1,186ms
+[2024-07-23 02:38:19.967] INFO NvdApiDataSource - Completed processing batch 34/129 (26%) in 1,137ms
+[2024-07-23 02:38:19.967] INFO NvdApiDataSource - Completed processing batch 35/129 (27%) in 1,079ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 36/129 (28%) in 738ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 37/129 (29%) in 832ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 38/129 (29%) in 886ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 39/129 (30%) in 945ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 40/129 (31%) in 772ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 41/129 (32%) in 1,075ms
+[2024-07-23 02:38:19.968] INFO NvdApiDataSource - Completed processing batch 42/129 (33%) in 267ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 43/129 (33%) in 254ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 44/129 (34%) in 574ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 45/129 (35%) in 442ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 46/129 (36%) in 880ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 47/129 (36%) in 904ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 48/129 (37%) in 604ms
+[2024-07-23 02:38:19.969] INFO NvdApiDataSource - Completed processing batch 49/129 (38%) in 584ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 50/129 (39%) in 734ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 51/129 (40%) in 408ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 52/129 (40%) in 460ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 53/129 (41%) in 412ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 54/129 (42%) in 726ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 55/129 (43%) in 752ms
+[2024-07-23 02:38:19.970] INFO NvdApiDataSource - Completed processing batch 56/129 (43%) in 619ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 57/129 (44%) in 509ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 58/129 (45%) in 538ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 59/129 (46%) in 426ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 60/129 (47%) in 439ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 61/129 (47%) in 454ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 62/129 (48%) in 657ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 63/129 (49%) in 671ms
+[2024-07-23 02:38:19.971] INFO NvdApiDataSource - Completed processing batch 64/129 (50%) in 540ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 65/129 (50%) in 525ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 66/129 (51%) in 457ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 67/129 (52%) in 491ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 68/129 (53%) in 448ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 69/129 (53%) in 493ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 70/129 (54%) in 437ms
+[2024-07-23 02:38:19.972] INFO NvdApiDataSource - Completed processing batch 71/129 (55%) in 652ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 72/129 (56%) in 495ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 73/129 (57%) in 526ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 74/129 (57%) in 556ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 75/129 (58%) in 607ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 76/129 (59%) in 465ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 77/129 (60%) in 492ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 78/129 (60%) in 556ms
+[2024-07-23 02:38:19.973] INFO NvdApiDataSource - Completed processing batch 79/129 (61%) in 624ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 80/129 (62%) in 488ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 81/129 (63%) in 417ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 82/129 (64%) in 392ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 83/129 (64%) in 493ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 84/129 (65%) in 402ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 85/129 (66%) in 501ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 86/129 (67%) in 427ms
+[2024-07-23 02:38:19.974] INFO NvdApiDataSource - Completed processing batch 87/129 (67%) in 569ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 88/129 (68%) in 480ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 89/129 (69%) in 483ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 90/129 (70%) in 431ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 91/129 (71%) in 460ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 92/129 (71%) in 593ms
+[2024-07-23 02:38:19.975] INFO NvdApiDataSource - Completed processing batch 93/129 (72%) in 538ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 94/129 (73%) in 751ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 95/129 (74%) in 540ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 96/129 (74%) in 470ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 97/129 (75%) in 657ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 98/129 (76%) in 573ms
+[2024-07-23 02:38:19.976] INFO NvdApiDataSource - Completed processing batch 99/129 (77%) in 675ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 100/129 (78%) in 561ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 101/129 (78%) in 400ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 102/129 (79%) in 488ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 103/129 (80%) in 636ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 104/129 (81%) in 388ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 105/129 (81%) in 335ms
+[2024-07-23 02:38:19.977] INFO NvdApiDataSource - Completed processing batch 106/129 (82%) in 476ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 107/129 (83%) in 503ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 108/129 (84%) in 501ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 109/129 (84%) in 387ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 110/129 (85%) in 584ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 111/129 (86%) in 611ms
+[2024-07-23 02:38:19.978] INFO NvdApiDataSource - Completed processing batch 112/129 (87%) in 387ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 113/129 (88%) in 440ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 114/129 (88%) in 635ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 115/129 (89%) in 661ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 116/129 (90%) in 495ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 117/129 (91%) in 500ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 118/129 (91%) in 128ms
+[2024-07-23 02:38:19.979] INFO NvdApiDataSource - Completed processing batch 119/129 (92%) in 495ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 120/129 (93%) in 59ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 121/129 (94%) in 412ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 122/129 (95%) in 66ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 123/129 (95%) in 64ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 124/129 (96%) in 63ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 125/129 (97%) in 58ms
+[2024-07-23 02:38:19.980] INFO NvdApiDataSource - Completed processing batch 126/129 (98%) in 194ms
+[2024-07-23 02:38:19.981] INFO NvdApiDataSource - Completed processing batch 127/129 (98%) in 200ms
+[2024-07-23 02:38:19.981] INFO NvdApiDataSource - Completed processing batch 128/129 (99%) in 107ms
+[2024-07-23 02:38:20.001] INFO NvdApiDataSource - Completed processing batch 129/129 (100%) in 75ms
+[2024-07-23 02:38:20.117] INFO KnownExploitedDataSource - Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
+[2024-07-23 02:38:20.607] INFO CveDB - Begin database defrag
+[2024-07-23 02:38:23.700] INFO CveDB - End database defrag (3098 ms)
+[2024-07-23 02:38:23.702] INFO Engine - Check for updates complete (165459 ms)
+[2024-07-23 02:38:23.882] INFO Engine - 
 
 Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
 
@@ -478,29 +478,43 @@ Dependency-Check is an open source tool performing a best effort analysis of 3rd
 💖 Sponsor: https://github.com/sponsors/jeremylong
 
 
-[2024-07-16 02:39:15.541] INFO Engine - Analysis Started
-[2024-07-16 02:39:15.726] INFO Engine - Finished Archive Analyzer (0 seconds)
-[2024-07-16 02:39:15.734] INFO Engine - Finished File Name Analyzer (0 seconds)
-[2024-07-16 02:39:15.978] INFO Engine - Finished Jar Analyzer (0 seconds)
-[2024-07-16 02:39:15.981] INFO Engine - Finished Central Analyzer (0 seconds)
-[2024-07-16 02:39:15.983] INFO Engine - Finished Dependency Merging Analyzer (0 seconds)
-[2024-07-16 02:39:16.267] INFO Engine - Finished Hint Analyzer (0 seconds)
-[2024-07-16 02:39:16.270] INFO Engine - Finished Version Filter Analyzer (0 seconds)
-[2024-07-16 02:39:17.878] INFO CPEAnalyzer - Created CPE Index (1 seconds)
-[2024-07-16 02:39:18.669] INFO Engine - Finished CPE Analyzer (2 seconds)
-[2024-07-16 02:39:18.672] INFO Engine - Finished False Positive Analyzer (0 seconds)
-[2024-07-16 02:39:18.684] INFO Engine - Finished NVD CVE Analyzer (0 seconds)
-[2024-07-16 02:39:19.071] INFO Engine - Finished Sonatype OSS Index Analyzer (0 seconds)
-[2024-07-16 02:39:19.072] INFO Engine - Finished Vulnerability Suppression Analyzer (0 seconds)
-[2024-07-16 02:39:19.078] INFO Engine - Finished Known Exploited Vulnerability Analyzer (0 seconds)
-[2024-07-16 02:39:19.079] INFO Engine - Finished Dependency Bundling Analyzer (0 seconds)
-[2024-07-16 02:39:19.080] INFO Engine - Finished Unused Suppression Rule Analyzer (0 seconds)
-[2024-07-16 02:39:19.109] INFO Engine - Analysis Complete (3 seconds)
-[2024-07-16 02:39:19.144] INFO ReportGenerator - Writing XML report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.xml
-[2024-07-16 02:39:19.276] INFO ReportGenerator - Writing HTML report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.html
-[2024-07-16 02:39:19.374] INFO ReportGenerator - Writing JSON report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.json
-[2024-07-16 02:39:19.416] INFO ReportGenerator - Writing CSV report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.csv
-[2024-07-16 02:39:19.419] INFO ReportGenerator - Writing SARIF report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.sarif
-[2024-07-16 02:39:19.430] INFO ReportGenerator - Writing JENKINS report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-jenkins.html
-[2024-07-16 02:39:19.444] INFO ReportGenerator - Writing JUNIT report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-junit.xml
-[2024-07-16 02:39:19.456] INFO ReportGenerator - Writing GITLAB report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-gitlab.json
+[2024-07-23 02:38:23.885] INFO Engine - Analysis Started
+[2024-07-23 02:38:24.089] INFO Engine - Finished Archive Analyzer (0 seconds)
+[2024-07-23 02:38:24.097] INFO Engine - Finished File Name Analyzer (0 seconds)
+[2024-07-23 02:38:24.524] INFO Engine - Finished Jar Analyzer (0 seconds)
+[2024-07-23 02:38:24.535] INFO Engine - Finished Central Analyzer (0 seconds)
+[2024-07-23 02:38:24.537] INFO Engine - Finished Dependency Merging Analyzer (0 seconds)
+[2024-07-23 02:38:24.838] INFO Engine - Finished Hint Analyzer (0 seconds)
+[2024-07-23 02:38:24.841] INFO Engine - Finished Version Filter Analyzer (0 seconds)
+[2024-07-23 02:38:26.692] INFO CPEAnalyzer - Created CPE Index (1 seconds)
+[2024-07-23 02:38:27.490] INFO Engine - Finished CPE Analyzer (2 seconds)
+[2024-07-23 02:38:27.493] INFO Engine - Finished False Positive Analyzer (0 seconds)
+[2024-07-23 02:38:27.507] INFO Engine - Finished NVD CVE Analyzer (0 seconds)
+[2024-07-23 02:38:28.125] INFO Engine - Finished Sonatype OSS Index Analyzer (0 seconds)
+[2024-07-23 02:38:28.126] INFO Engine - Finished Vulnerability Suppression Analyzer (0 seconds)
+[2024-07-23 02:38:28.132] INFO Engine - Finished Known Exploited Vulnerability Analyzer (0 seconds)
+[2024-07-23 02:38:28.133] INFO Engine - Finished Dependency Bundling Analyzer (0 seconds)
+[2024-07-23 02:38:28.134] INFO Engine - Finished Unused Suppression Rule Analyzer (0 seconds)
+[2024-07-23 02:38:28.165] INFO Engine - Analysis Complete (4 seconds)
+[2024-07-23 02:38:28.212] INFO ReportGenerator - Writing XML report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.xml
+[2024-07-23 02:38:28.369] INFO ReportGenerator - Writing HTML report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.html
+[2024-07-23 02:38:28.484] INFO ReportGenerator - Writing JSON report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.json
+[2024-07-23 02:38:28.537] INFO ReportGenerator - Writing CSV report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.csv
+[2024-07-23 02:38:28.540] INFO ReportGenerator - Writing SARIF report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-report.sarif
+[2024-07-23 02:38:28.554] INFO ReportGenerator - Writing JENKINS report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-jenkins.html
+[2024-07-23 02:38:28.571] INFO ReportGenerator - Writing JUNIT report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-junit.xml
+[2024-07-23 02:38:28.584] INFO ReportGenerator - Writing GITLAB report to: /home/runner/work/lice-comb/lice-comb/.nvd/../target/nvd/dependency-check-gitlab.json
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.control.CompositeCacheManager 
+INFO: Shutdown hook activated. Shutdown was not called. Shutting down JCS.
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.control.event.ElementEventQueue 
+INFO: Element event queue destroyed: org.apache.commons.jcs3.engine.control.event.ElementEventQueue@5cfaba3c
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+INFO: In DISPOSE, [NODEAUDIT] fromRemote [false]
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+INFO: In DISPOSE, [NODEAUDIT] auxiliary [NODEAUDIT]
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.control.CompositeCache 
+INFO: In DISPOSE, [NODEAUDIT] put 0 into auxiliary [NODEAUDIT]
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.auxiliary.disk.AbstractDiskCache 
+INFO: In dispose, destroying event queue.
+Jul 23, 2024 2:38:28 AM org.apache.commons.jcs3.engine.PooledCacheEventQueue 
+INFO: Cache event queue destroyed: CacheEventQueue [listenerId=-579780680, cacheName=NODEAUDIT]