application composition report · 12/27/2017 · application composition report of vid, build...

Application Composition ReportOf vid, Build Scanned On Sat Dec 23 2017 at 09:18:54

Using Scanner 2.21.0-01 Report Created On Wed Dec 27 2017 at 23:21:30

Scope of Analysis

1020COMPONENTS IDENTIFIED99% OF ALL COMPONENTS ARE IDENTIFIED

10 30POLICY ALERTSAFFECTING 40 COMPONENTS

70SECURITY ALERTSAFFECTING 26 COMPONENTS

53LICENSE ALERTS

Security Issues

How bad are the vulnerabilities and how many are there?

Critical (7-10)

18Severe (4-6)

42Moderate (1-3)

10

The summary of security issues demonstrates the breakdown of vulnerabilities based on severity and the threat level it poses to your application.The dependency depth highlights quantity and severity and distribution within the application's dependencies.

Dependency Depth

1

2

3

4

5+

License Analysis

What type of licenses and how many of each?

Critical (8-10)

0Severe (4-7)

24Moderate (1-3)

29No Threat (0)

187

The summary of license analysis demonstrates the number of licenses detected in each category.The dependency depth compares quantity by category and the distribution within your application's dependencies.

Dependency Depth

1

2

3

4

5+

Policy Violations

Threat Policy Name Actions Component Conditions

7 No use restrictions Warning dom4j : dom4j : 1.6.1 License Threat Group is 'Use Restrictions'

org.json : json : 20160212 License Threat Group is 'Use Restrictions'

5 No standards body terms Warning org.apache.lucene : lucene-analyzers-common : 5.4.1

License Threat Group is 'Standards Bodies'

xml-apis : xml-apis : 1.4.01 License Threat Group is 'Standards Bodies'

5 No weak copyleft LGPL Warning net.java.dev.jna : jna : 4.1.0 License Threat Group is 'Weak Copyleft - LGPL'

net.java.dev.jna : jna-platform : 4.1.0 License Threat Group is 'Weak Copyleft - LGPL'

org.hibernate : hibernate-core : 4.3.11.Final

License Threat Group is 'Weak Copyleft - LGPL'

org.hibernate : hibernate-validator : 5.1.3.Final


org.hibernate.common : hibernate-commons-annotations : 4.0.5.Final


org.mariadb.jdbc : mariadb-java-client : 1.5.8



3 No weak copyleft - non-LGPL Warning ch.qos.logback : logback-classic : 1.1.3 License Threat Group is 'Weak Copyleft - non-LGPL'

ch.qos.logback : logback-core : 1.1.3 License Threat Group is 'Weak Copyleft - non-LGPL'

com.lowagie : itext : 2.0.8 License Threat Group is 'Weak Copyleft - non-LGPL'

com.mchange : c3p0 : 0.9.5.2 License Threat Group is 'Weak Copyleft - non-LGPL'

com.mchange : mchange-commons-java : 0.2.11

License Threat Group is 'Weak Copyleft - non-LGPL'

javax.annotation : javax.annotation-api : 1.2


javax.servlet : javax.servlet-api : 3.1.0 License Threat Group is 'Weak Copyleft - non-LGPL'

javax.servlet : jstl : 1.2 License Threat Group is 'Weak Copyleft - non-LGPL'

javax.servlet.jsp : javax.servlet.jsp-api : 2.3.1


javax.ws.rs : javax.ws.rs-api : 2.0.1 License Threat Group is 'Weak Copyleft - non-LGPL'

junit : junit : 4.12 License Threat Group is 'Weak Copyleft - non-LGPL'

org.aspectj : aspectjrt : 1.8.9 License Threat Group is 'Weak Copyleft - non-LGPL'

org.aspectj : aspectjweaver : 1.8.9 License Threat Group is 'Weak Copyleft - non-LGPL'

org.eclipse.jdt.core.compiler : ecj : 4.4.2 License Threat Group is 'Weak Copyleft - non-LGPL'

org.glassfish.hk2 : hk2-api : 2.4.0-b34 License Threat Group is 'Weak Copyleft - non-LGPL'

org.glassfish.hk2 : hk2-locator : 2.4.0-b34 License Threat Group is 'Weak Copyleft - non-LGPL'

org.glassfish.hk2 : hk2-utils : 2.4.0-b34 License Threat Group is 'Weak Copyleft - non-LGPL'

org.glassfish.hk2 : osgi-resource-locator : 1.0.1


org.glassfish.hk2.external : aopalliance-repackaged : 2.4.0-b34


org.glassfish.hk2.external : javax.inject : 2.4.0-b34



org.glassfish.jersey.bundles.repackaged : jersey-guava : 2.23.1


org.glassfish.jersey.connectors : jersey-jetty-connector : 2.23.1


org.glassfish.jersey.core : jersey-client : 2.23.1


org.glassfish.jersey.core : jersey-common : 2.23.1


org.hibernate.javax.persistence : hibernate-jpa-2.1-api : 1.0.0.Final


org.jboss.spec.javax.transaction : jboss-transaction-api_1.2_spec : 1.0.0.Final


2 No advertising clause Warning com.att.eelf : eelf-core : 1.0.0 License Threat Group is 'Advertising Clause'

com.att.nsa : cambriaClient : 0.0.1 License Threat Group is 'Advertising Clause'

com.att.nsa : saClientLibrary : 0.0.1 License Threat Group is 'Advertising Clause'

com.att.nsa : saToolkit : 0.0.1 License Threat Group is 'Advertising Clause'

dom4j : dom4j : 1.6.1 License Threat Group is 'Advertising Clause'

org.aspectj : aspectjweaver : 1.8.9 License Threat Group is 'Advertising Clause'

Security Issues

Threat Level Problem Code Component Status

9 sonatype-2015-0003

org.springframework : spring-core : 4.2.0.RELEASE Open

CVE-2015-5211 org.springframework : spring-webmvc : 4.2.0.RELEASE Open


angular 1.4.8 Open

sonatype-2016-0064

angular 1.4.8 Open

sonatype-2016-0064

angular 1.5.0-beta.2 Open

CVE-2017-7525 com.fasterxml.jackson.core : jackson-databind : 2.6.3 Open

CVE-2017-7525 org.codehaus.jackson : jackson-mapper-asl : 1.9.13 Open


moment 2.1.0 Open

CVE-2016-1000341

bouncycastle : bcprov-jdk14 : 138 Open

CVE-2017-5929 ch.qos.logback : logback-classic : 1.1.3 Open

sonatype-2017-0355

com.fasterxml.jackson.core : jackson-core : 2.6.3 Open

CVE-2017-7957 com.thoughtworks.xstream : xstream : 1.4.7 Open

CVE-2014-0114 commons-beanutils : commons-beanutils : 1.9.3 Open

CVE-2015-0254 javax.servlet : jstl : 1.2 Open

sonatype-2017-0359

org.apache.httpcomponents : httpclient : 4.5.1 Open

CVE-2017-12629

org.apache.lucene : lucene-queryparser : 5.4.1 Open

CVE-2017-5644 org.apache.poi : poi-ooxml : 3.5-FINAL Open

CVE-2016-1000341

org.bouncycastle : bcprov-jdk16 : 1.45 Open


angular 1.4.8 Open

sonatype-2016-0282

angular 1.4.8 Open

sonatype-2015-0057

angular 1.4.8 Open

sonatype-2016-0282

angular 1.4.8 Open

sonatype-2015-0057


sonatype-2016-0282


sonatype-2015-0060

angular-sanitize 1.4.8 Open

sonatype-2016-0117


sonatype-2015-0060


sonatype-2016-0117


http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5211


























sonatype-2016-0107

jquery 2.2.2 Open

sonatype-2016-0107

jquery 2.2.4 Open

sonatype-2016-0105

moment 2.12.0 Open

CVE-2017-7536 org.hibernate : hibernate-validator : 5.1.3.Final Open



sonatype-2015-0043


sonatype-2016-0129

bootstrap 3.3.7 Open

CVE-2015-7940 bouncycastle : bcprov-jdk14 : 138 Open

CVE-2016-1000346


sonatype-2016-0397

com.fasterxml.jackson.core : jackson-core : 2.6.3 Open

CVE-2016-3674 com.thoughtworks.xstream : xstream : 1.4.7 Open

CVE-2012-0213 org.apache.poi : poi-scratchpad : 3.5-FINAL Open

CVE-2014-9527 org.apache.poi : poi-scratchpad : 3.5-FINAL Open

CVE-2015-7940 org.bouncycastle : bcprov-jdk16 : 1.45 Open

CVE-2016-1000346


CVE-2017-9735 org.eclipse.jetty : jetty-util : 9.2.14.v20151106 Open

CVE-2016-9878 org.springframework : spring-webmvc : 4.2.0.RELEASE Open


angular 1.4.8 Open

sonatype-2017-0023

angular 1.4.8 Open

sonatype-2015-0078

angular 1.4.8 Open

sonatype-2017-0023

angular 1.4.8 Open

sonatype-2015-0078


sonatype-2017-0023


CVE-2011-4969 faker 1.0.0 Open

CVE-2013-1624 bouncycastle : bcprov-jdk14 : 138 Open

CVE-2016-1000344


CVE-2016-1000352




CVE-2013-1624 org.bouncycastle : bcprov-jdk16 : 1.45 Open








































CVE-2016-1000344


CVE-2016-1000352


3 CVE-2016-1000338


CVE-2016-1000339


CVE-2016-1000342


CVE-2016-1000343


CVE-2016-1000345


CVE-2016-1000338


CVE-2016-1000339


CVE-2016-1000342


CVE-2016-1000343


CVE-2016-1000345






































License Analysis

License Threat Component Status

Apache-1.1, Sun-IP dom4j : dom4j : 1.6.1 Selected

JSON org.json : json : 20160212 Selected

Non-Standard, Not Supported

org.webjars amcharts 3.15.0 Open

Adobe-AFM, Apache-2.0, BSD-3-Clause, MPL-1.1, Public Domain, Non-Standard, Unicode

com.lowagie : itext : 2.0.8 Overridden

Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISO-8879

org.apache.lucene : lucene-analyzers-common : 5.4.1 Selected

Not Declared, Not Supported

angularjs 1.4.8 Open


crossfilter 1.0.3 Open


d3 2.10.1 Open


faker 1.0.0 Open

Not Provided, Not Supported

jquery-ui 1.10.4 Open


qs 0.5.0 Open


rickshaw 1.1.2 Open


selenium-webdriver 2.34.0 Open

Not Provided, Not Supported

showdown 0.3.0 Open


sizzle 1.0.0 Open


stacktrace-js 0.3.0 Open

Not Declared, No Sources

concurrent : concurrent : 1.3.2 Confirmed

Apache-2.0, LGPL-2.1 net.java.dev.jna : jna : 4.1.0 Selected

Apache-2.0, LGPL-2.1, LGPL-3.0

net.java.dev.jna : jna-platform : 4.1.0 Selected

LGPL-2.1 org.hibernate : hibernate-core : 4.3.11.Final Selected

Apache-2.0, LGPL-2.1, Public Domain

org.hibernate : hibernate-validator : 5.1.3.Final Overridden

LGPL-2.1 org.hibernate.common : hibernate-commons-annotations : 4.0.5.Final Selected

BSD-3-Clause, LGPL-2.1 org.mariadb.jdbc : mariadb-java-client : 1.5.8 Selected

Apache-2.0, Public Domain, W3C

xml-apis : xml-apis : 1.4.01 Selected

EPL-1.0 ch.qos.logback : logback-classic : 1.1.3 Selected

EPL-1.0 ch.qos.logback : logback-core : 1.1.3 Selected


EPL-1.0 com.mchange : c3p0 : 0.9.5.2 Selected

EPL-1.0 com.mchange : mchange-commons-java : 0.2.11 Selected

CDDL-1.1 javax.annotation : javax.annotation-api : 1.2 Selected

Apache-2.0, CDDL-1.0, CDDL-1.1

javax.servlet : javax.servlet-api : 3.1.0 Selected

CDDL-1.0 javax.servlet : jstl : 1.2 Selected

Apache-2.0, CDDL-1.1 javax.servlet.jsp : javax.servlet.jsp-api : 2.3.1 Selected

Apache-2.0, CDDL-1.1 javax.ws.rs : javax.ws.rs-api : 2.0.1 Selected

EPL-1.0 junit : junit : 4.12 Selected

EPL-1.0 org.aspectj : aspectjrt : 1.8.9 Selected

Apache-1.1, EPL-1.0 org.aspectj : aspectjweaver : 1.8.9 Selected

EPL-1.0 org.eclipse.jdt.core.compiler : ecj : 4.4.2 Selected

CDDL-1.1 org.glassfish.hk2 : hk2-api : 2.4.0-b34 Selected

CDDL-1.1 org.glassfish.hk2 : hk2-locator : 2.4.0-b34 Selected

CDDL-1.1 org.glassfish.hk2 : hk2-utils : 2.4.0-b34 Selected

CDDL-1.1 org.glassfish.hk2 : osgi-resource-locator : 1.0.1 Selected

CDDL-1.1 org.glassfish.hk2.external : aopalliance-repackaged : 2.4.0-b34 Selected

Apache-2.0, CDDL-1.1 org.glassfish.hk2.external : javax.inject : 2.4.0-b34 Selected

Apache-2.0, CDDL-1.1, Public Domain

org.glassfish.jersey.bundles.repackaged : jersey-guava : 2.23.1 Selected

CDDL-1.1 org.glassfish.jersey.connectors : jersey-jetty-connector : 2.23.1 Selected

CDDL-1.1 org.glassfish.jersey.core : jersey-client : 2.23.1 Selected

CDDL-1.1 org.glassfish.jersey.core : jersey-common : 2.23.1 Selected

BSD-3-Clause, EPL-1.0 org.hibernate.javax.persistence : hibernate-jpa-2.1-api : 1.0.0.Final Selected

CDDL-1.0 org.jboss.spec.javax.transaction : jboss-transaction-api_1.2_spec : 1.0.0.Final

Selected

BSD-4-Clause com.att.eelf : eelf-core : 1.0.0 Overridden

BSD-4-Clause com.att.nsa : cambriaClient : 0.0.1 Overridden

BSD-4-Clause com.att.nsa : saClientLibrary : 0.0.1 Overridden

Apache-2.0, BSD-4-Clause

com.att.nsa : saToolkit : 0.0.1 Overridden

MIT angular 1.4.8 Selected

MIT angular 1.5.0-beta.2 Selected

MIT, Not Supported angular-animate 1.4.0 Open

MIT angular-animate 1.4.8 Selected

MIT angular-aria 1.4.8 Selected

MIT angular-cookies 1.4.8 Selected

MIT, Not Supported angular-gridster 0.13.3 Open


MIT angular-i18n 1.2.29 Selected




MIT, Not Supported angular-loader 1.4.8 Open

MIT angular-markdown-directive 0.3.1 Selected

MIT angular-messages 1.4.8 Selected

MIT angular-mocks 1.4.8 Selected

MIT angular-resource 1.4.8 Selected

MIT angular-route 1.4.8 Selected

MIT, Not Supported angular-sanitize 1.4.8 Open

MIT, Not Supported angular-touch 1.3.0 Open

MIT angular-touch 1.4.8 Selected

MIT angular-ui-grid 3.0.7 Selected

MIT angular-ui-grid 4.0.2 Selected

Apache-2.0, MIT, Not Supported

bootstrap 3.3.7 Open

MIT d3 3.5.0 Selected

MIT d3-plugins-dist 1.0.0 Selected

MIT dygraphs 1.0.1-npm Selected

MIT, Not Supported javascript-detect-element-resize 0.5.3 Open

MIT, Not Supported jquery 2.2.2 Open

MIT jquery 2.2.4 Selected

BSD-2-Clause, Not Supported

leaflet 0.7.3 Open

MIT, Not Supported lodash 3.7.0 Open

MIT, Not Supported lodash 4.17.4 Open

MIT, Not Supported moment 2.1.0 Open

MIT, Not Supported moment 2.12.0 Open

Apache-2.0 org.apache.marmotta.webjars strftime 3.1.0-incubating Selected

MIT org.webjars angularjs 1.4.8 Selected

Apache-2.0, Not Supported

org.webjars bootstrap 3.3.0 Open

BSD-3-Clause org.webjars d3-plugins a3c809c322 Selected

CC-BY-3.0, Not Supported org.webjars font-awesome 2.0.0 Open

MIT org.webjars.bower angular-bootstrap 0.13.2 Selected




MIT, Not Supported org.webjars.bower angular-bootstrap 2.5.0 Open

MIT org.webjars.bower angular-resource 1.4.8 Selected

MIT org.webjars.bower datamaps 0.3.2 Selected

MIT, Not Supported org.webjars.bower github-com-bentorfs-angular-bootstrap-multiselect 1.1.6

Open

MIT, Not Supported org.webjars.bower jquery-knob 1.2.12 Open

MIT, Not Supported org.webjars.npm angular-ui-sortable 0.13.4 Open

MIT, Not Supported org.webjars.npm bootstrap 3.3.7 Open

ISC, Not Supported swim-ui-core 1.0.2 Open

ANTLR-PD, BSD-3-Clause

antlr : antlr : 2.7.7 Selected

Public Domain aopalliance : aopalliance : 1.0 Selected

MIT bouncycastle : bcmail-jdk14 : 138 Selected

MIT bouncycastle : bcprov-jdk14 : 138 Selected

Apache-2.0 cglib : cglib-nodep : 2.1_3 Selected

Apache-2.0 com.carrotsearch : hppc : 0.7.1 Selected

Apache-2.0 com.fasterxml : classmate : 1.0.0 Selected

Apache-2.0 com.fasterxml.jackson.core : jackson-annotations : 2.6.3 Selected

Apache-2.0 com.fasterxml.jackson.core : jackson-core : 2.6.3 Selected

Apache-2.0 com.fasterxml.jackson.core : jackson-databind : 2.6.3 Selected

Apache-2.0 com.fasterxml.jackson.dataformat : jackson-dataformat-cbor : 2.6.2 Selected

Apache-2.0 com.fasterxml.jackson.dataformat : jackson-dataformat-smile : 2.6.2 Selected

Apache-2.0 com.fasterxml.jackson.dataformat : jackson-dataformat-yaml : 2.6.2 Selected

Apache-2.0 com.fasterxml.jackson.jaxrs : jackson-jaxrs-base : 2.6.3 Selected

Apache-2.0 com.fasterxml.jackson.jaxrs : jackson-jaxrs-json-provider : 2.6.3 Selected

Apache-2.0 com.fasterxml.jackson.module : jackson-module-jaxb-annotations : 2.6.3 Selected

Apache-2.0 com.google.code.gson : gson : 2.3.1 Selected

Apache-2.0, CC0-1.0, Public Domain

com.google.guava : guava : 18.0 Overridden

Apache-2.0, CC0-1.0, Public Domain

com.google.guava : guava : 19.0 Overridden

BSD-3-Clause com.google.protobuf : protobuf-java : 2.6.0 Selected

Apache-2.0 com.googlecode.json-simple : json-simple : 1.1.1 Selected

Apache-2.0 com.ning : compress-lzf : 1.0.2 Selected

Apache-2.0 com.spatial4j : spatial4j : 0.5 Selected

Apache-2.0 com.tdunning : t-digest : 3.0 Selected

BSD-3-Clause com.thoughtworks.xstream : xstream : 1.4.7 Selected

CC0-1.0, Public Domain com.twitter : jsr166e : 1.1.0 Selected


Apache-2.0 com.vaadin.external.google : android-json : 0.0.20131108.vaadin1 Selected

Apache-2.0 commons-beanutils : commons-beanutils : 1.9.3 Selected

Apache-2.0 commons-cli : commons-cli : 1.3.1 Selected

Apache-2.0 commons-codec : commons-codec : 1.10 Selected

Apache-2.0 commons-collections : commons-collections : 3.2.2 Selected

Apache-2.0 commons-digester : commons-digester : 2.0 Selected

Apache-2.0 commons-io : commons-io : 2.4 Selected

Apache-2.0 commons-lang : commons-lang : 2.6 Selected

Apache-2.0 commons-logging : commons-logging : 1.2 Selected

Apache-2.0, BSD-3-Clause, MIT

io.netty : netty : 3.10.5.Final Selected

Apache-2.0 io.searchbox : jest : 2.0.0 Selected

Apache-2.0 io.searchbox : jest-common : 2.0.0 Selected

Apache-2.0 javax.validation : validation-api : 1.1.0.Final Selected

Apache-2.0 jcs : jcs : 1.3 Selected

BSD-2-Clause jline : jline : 2.12.1 Selected

Apache-2.0 joda-time : joda-time : 2.8.2 Selected

BSD-3-Clause org.antlr : antlr-runtime : 3.5 Selected

Apache-2.0 org.apache.commons : commons-exec : 1.3 Selected

Apache-2.0 org.apache.commons : commons-lang3 : 3.5 Selected

Apache-2.0 org.apache.httpcomponents : httpasyncclient : 4.1.1 Selected

Apache-2.0 org.apache.httpcomponents : httpclient : 4.5.1 Selected

Apache-2.0 org.apache.httpcomponents : httpclient-cache : 4.5 Selected

Apache-2.0 org.apache.httpcomponents : httpcore : 4.4.4 Selected

Apache-2.0 org.apache.httpcomponents : httpcore-nio : 4.4.4 Selected

Apache-2.0 org.apache.lucene : lucene-backward-codecs : 5.4.1 Selected


org.apache.lucene : lucene-core : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-grouping : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-highlighter : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-join : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-memory : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-misc : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-queries : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-queryparser : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-sandbox : 5.4.1 Selected

Apache-2.0 org.apache.lucene : lucene-spatial : 5.4.1 Selected


Apache-2.0 org.apache.lucene : lucene-spatial3d : 5.4.1 Selected


org.apache.lucene : lucene-suggest : 5.4.1 Selected

Apache-2.0 org.apache.poi : ooxml-schemas : 1.0 Selected

Apache-2.0 org.apache.poi : poi : 3.5-FINAL Selected

Apache-2.0 org.apache.poi : poi-contrib : 3.5-FINAL Selected

Apache-2.0 org.apache.poi : poi-ooxml : 3.5-FINAL Selected

Apache-2.0 org.apache.poi : poi-scratchpad : 3.5-FINAL Selected

Apache-2.0 org.apache.tiles : tiles-api : 3.0.5 Selected

Apache-2.0 org.apache.tiles : tiles-autotag-core-runtime : 1.1.0 Selected

Apache-2.0 org.apache.tiles : tiles-core : 3.0.5 Selected

Apache-2.0 org.apache.tiles : tiles-jsp : 3.0.5 Selected

Apache-2.0 org.apache.tiles : tiles-request-api : 1.0.6 Selected

Apache-2.0 org.apache.tiles : tiles-request-jsp : 1.0.6 Selected

Apache-2.0 org.apache.tiles : tiles-request-servlet : 1.0.6 Selected

Apache-2.0 org.apache.tiles : tiles-servlet : 3.0.5 Selected

Apache-2.0 org.apache.tiles : tiles-template : 3.0.5 Selected

Apache-2.0 org.apache.xmlbeans : xmlbeans : 2.3.0 Selected

MIT org.bouncycastle : bcprov-jdk16 : 1.45 Selected

Apache-2.0 org.codehaus.jackson : jackson-core-asl : 1.9.13 Selected

Apache-2.0 org.codehaus.jackson : jackson-mapper-asl : 1.9.13 Selected

Apache-2.0 org.drools : drools-compiler : 6.4.0.Final Selected

Apache-2.0, BSD org.drools : drools-core : 6.4.0.Final Overridden

Apache-2.0 org.eclipse.jetty : jetty-client : 9.2.14.v20151106 Selected

Apache-2.0 org.eclipse.jetty : jetty-http : 9.2.14.v20151106 Selected

Apache-2.0 org.eclipse.jetty : jetty-io : 9.2.14.v20151106 Selected

Apache-2.0, MIT org.eclipse.jetty : jetty-util : 9.2.14.v20151106 Selected

Apache-2.0 org.elasticsearch : elasticsearch : 2.2.0 Selected

Apache-2.0 org.elasticsearch : securesm : 1.0 Selected

BSD-3-Clause org.functionaljava : functionaljava : 4.2 Selected

BSD-3-Clause org.hamcrest : hamcrest-core : 1.3 Selected

CC0-1.0, Public Domain org.hdrhistogram : HdrHistogram : 2.1.6 Selected

Apache-2.0 org.javassist : javassist : 3.18.1-GA Selected

Apache-2.0 org.jboss : jandex : 1.1.0.Final Selected

Apache-2.0 org.jboss.logging : jboss-logging : 3.1.3.GA Selected

Apache-2.0, CC0-1.0 org.jboss.logging : jboss-logging-annotations : 1.2.0.Beta1 Selected


Apache-2.0 org.joda : joda-convert : 1.2 Selected

Apache-2.0 org.kie : kie-api : 6.4.0.Final Selected

Apache-2.0 org.kie : kie-internal : 6.4.0.Final Selected


org.mockito : mockito-core : 1.10.19 Selected


org.mvel : mvel2 : 2.2.8.Final Selected

Apache-2.0 org.objenesis : objenesis : 2.1 Selected

Apache-2.0, MIT org.powermock : powermock-api-mockito : 1.6.4 Selected

Apache-2.0 org.powermock : powermock-api-support : 1.6.4 Selected

Apache-2.0 org.powermock : powermock-core : 1.6.4 Selected

Apache-2.0 org.powermock : powermock-module-junit4 : 1.6.4 Selected

Apache-2.0 org.powermock : powermock-module-junit4-common : 1.6.4 Selected

Apache-2.0 org.powermock : powermock-reflect : 1.6.4 Selected

Apache-2.0 org.quartz-scheduler : quartz : 2.2.1 Selected


org.seleniumhq.selenium : selenium-api : 2.53.1 Selected

Apache-2.0 org.seleniumhq.selenium : selenium-firefox-driver : 2.53.1 Selected

Apache-2.0 org.seleniumhq.selenium : selenium-remote-driver : 2.53.1 Selected

Apache-2.0 org.skyscreamer : jsonassert : 1.5.0 Selected

Apache-2.0, MIT org.slf4j : jcl-over-slf4j : 1.7.12 Selected

MIT org.slf4j : jul-to-slf4j : 1.7.13 Selected

Apache-2.0 org.slf4j : log4j-over-slf4j : 1.7.12 Selected

MIT org.slf4j : slf4j-api : 1.7.13 Selected

Apache-2.0 org.springframework : spring-aop : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-beans : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-context : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-context-support : 4.2.0.RELEASE Selected


org.springframework : spring-core : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-expression : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-jdbc : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-orm : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-test : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-tx : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-web : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework : spring-webmvc : 4.2.0.RELEASE Selected

Apache-2.0 org.springframework.boot : spring-boot : 1.3.0.RELEASE Selected


Apache-2.0 org.springframework.boot : spring-boot-autoconfigure : 1.3.0.RELEASE Selected

Apache-2.0 org.springframework.boot : spring-boot-starter : 1.3.0.RELEASE Selected

Apache-2.0 org.springframework.boot : spring-boot-starter-logging : 1.3.0.RELEASE Selected

Apache-2.0 org.yaml : snakeyaml : 1.16 Selected

Apache-2.0 stax : stax-api : 1.0.1 Selected

Public Domain xmlpull : xmlpull : 1.1.3.1 Selected

Public Domain, XPP-1.2 xpp3 : xpp3_min : 1.1.4c Selected

Components

Component / Declared and Observed License Match State Age / Security Summary Policy Violations

angular 1.4.8 exact 2 years 0 0 0 0MIT 8 within 5 Security Issues

angular 1.4.8 exact 2 years 0 0 0 0MIT 8 within 5 Security Issues

angular 1.5.0-beta.2 exact 2 years 0 0 0 0MIT 8 within 5 Security Issues

angular-animate 1.4.0 exact 2 years 0 0 0 0MIT; Not Supported NA

angular-animate 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-animate 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-aria 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-aria 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-cookies 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-cookies 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-gridster 0.13.3 exact 2 years 0 0 0 0MIT; Not Supported NA

angular-i18n 1.2.29 exact 2 years 0 0 0 0MIT NA

























angular-loader 1.4.8 exact 2 years 0 0 0 0MIT; Not Supported NA

angular-markdown-directive 0.3.1 exact 3 years 0 0 0 0MIT NA

angular-messages 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-messages 1.4.8 exact 2 years 0 0 0 0MIT NA


angular-mocks 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-resource 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-route 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-route 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-sanitize 1.4.8 exact 2 years 0 0 0 0MIT; Not Supported 6 within 3 Security Issues

angular-sanitize 1.4.8 exact 2 years 0 0 0 0MIT; Not Supported 6 within 3 Security Issues

angular-touch 1.3.0 exact 3 years 0 0 0 0MIT; Not Supported NA

angular-touch 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-touch 1.4.8 exact 2 years 0 0 0 0MIT NA

angular-ui-grid 3.0.7 exact 2 years 0 0 0 0MIT NA

angular-ui-grid 4.0.2 exact 1 year 0 0 0 0MIT NA



angularjs 1.4.8 exact 2 years 0 0 0 0Not Declared; Not Supported NA



bootstrap 3.3.7 exact 1 year 0 0 0 0Apache-2.0, MIT; Not Supported 5

crossfilter 1.0.3 exact 5 years 0 0 0 0Not Declared; Not Supported NA

d3 2.10.1 exact 5 years 0 0 0 0Not Declared; Not Supported NA

d3 3.5.0 exact 3 years 0 0 0 0MIT NA


d3-plugins-dist 1.0.0 exact 2 years 0 0 0 0MIT NA

dygraphs 1.0.1-npm exact 3 years 0 0 0 0MIT NA





















faker 1.0.0 exact 3 years 0 0 0 0Not Declared; Not Supported 4

javascript-detect-element-resize 0.5.3 exact 1 year 0 0 0 0MIT; Not Supported NA

javascript-detect-element-resize 0.5.3 exact 1 year 0 0 0 0MIT; Not Supported NA

jquery 2.2.2 exact 1 year 0 0 0 0MIT; Not Supported NA



jquery 2.2.4 exact 1 year 0 0 0 0MIT 6

jquery-ui 1.10.4 exact 3 years 0 0 0 0Not Provided; Not Supported NA

leaflet 0.7.3 exact 3 years 0 0 0 0BSD-2-Clause; Not Supported NA

lodash 3.7.0 exact 2 years 0 0 0 0MIT; Not Supported NA

lodash 4.17.4 exact 1 year 0 0 0 0MIT; Not Supported NA

moment 2.1.0 exact 4 years 0 0 0 0MIT; Not Supported 7

moment 2.12.0 exact 1 year 0 0 0 0MIT; Not Supported 6

org.apache.marmotta.webjars strftime 3.1.0-incubating

exact 4 years 0 0 0 0

Apache-2.0 NA

org.apache.marmotta.webjars strftime 3.1.0-incubating


Apache-2.0 NA

org.webjars amcharts 3.15.0 exact 2 years 0 0 0 0Non-Standard; Not Supported NA

org.webjars angularjs 1.4.8 exact 2 years 0 0 0 0MIT NA

org.webjars bootstrap 3.3.0 exact 3 years 0 0 0 0Apache-2.0; Not Supported NA


org.webjars d3-plugins a3c809c322 exact 4 years 0 0 0 0BSD-3-Clause NA



org.webjars font-awesome 2.0.0 exact 5 years 0 0 0 0CC-BY-3.0; Not Supported NA

org.webjars.bower angular-bootstrap 0.13.2 exact 2 years 0 0 0 0MIT NA

org.webjars.bower angular-bootstrap 1.1.2 exact 1 year 0 0 0 0MIT NA

org.webjars.bower angular-bootstrap 1.2.4 exact 1 year 0 0 0 0MIT NA

org.webjars.bower angular-bootstrap 2.5.0 exact 11 months 0 0 0 0MIT; Not Supported NA




org.webjars.bower angular-resource 1.4.8 exact 2 years 0 0 0 0MIT NA

org.webjars.bower datamaps 0.3.2 exact 2 years 0 0 0 0MIT NA

org.webjars.bower github-com-bentorfs-angular-bootstrap-multiselect 1.1.6

exact 10 months 0 0 0 0

MIT; Not Supported NA

org.webjars.bower jquery-knob 1.2.12 exact 1 year 0 0 0 0MIT; Not Supported NA

org.webjars.npm angular-ui-sortable 0.13.4 exact 11 months 0 0 0 0MIT; Not Supported NA

org.webjars.npm bootstrap 3.3.7 exact 1 year 0 0 0 0MIT; Not Supported NA

qs 0.5.0 exact 5 years 0 0 0 0Not Declared; Not Supported NA

rickshaw 1.1.2 exact 5 years 0 0 0 0Not Declared; Not Supported NA


selenium-webdriver 2.34.0 exact 4 years 0 0 0 0Not Declared; Not Supported NA

showdown 0.3.0 exact 5 years 0 0 0 0Not Provided; Not Supported NA

sizzle 1.0.0 exact 6 years 0 0 0 0Not Declared; Not Supported NA

stacktrace-js 0.3.0 exact 6 years 0 0 0 0Not Declared; Not Supported NA

swim-ui-core 1.0.2 exact 8 months 0 0 0 0ISC; Not Supported NA

antlr : antlr : 2.7.7 exact 11 years 0 0 0 0ANTLR-PD, BSD-3-Clause NA

aopalliance : aopalliance : 1.0 exact 12 years 0 0 0 0Public Domain NA

bouncycastle : bcmail-jdk14 : 138 exact 9 years 0 0 0 0MIT NA

bouncycastle : bcprov-jdk14 : 138 exact 9 years 0 0 0 0MIT 7 within 11 Security Issues

cglib : cglib-nodep : 2.1_3 exact 12 years 0 0 0 0Apache-2.0 NA

ch.qos.logback : logback-classic : 1.1.3 exact 2 years 0 0 1 0EPL-1.0 7

ch.qos.logback : logback-core : 1.1.3 exact 2 years 0 0 1 0EPL-1.0 NA

com.att.eelf : eelf-core : 1.0.0 exact 9 months 0 0 1 0BSD-4-Clause NA

com.att.nsa : cambriaClient : 0.0.1 exact 1 year 0 0 1 0BSD-4-Clause NA

com.att.nsa : saClientLibrary : 0.0.1 exact 1 year 0 0 1 0BSD-4-Clause NA

com.att.nsa : saToolkit : 0.0.1 exact 1 year 0 0 1 0Apache-2.0, BSD-4-Clause NA

com.carrotsearch : hppc : 0.7.1 exact 2 years 0 0 0 0Apache-2.0 NA

com.fasterxml : classmate : 1.0.0 exact 4 years 0 0 0 0Apache-2.0 NA

com.fasterxml.jackson.core : jackson-annotations : 2.6.3


Apache-2.0 NA

http://aopalliance.sourceforge.net

http://aopalliance.sourceforge.net

http://cglib.sourceforge.net/

http://cglib.sourceforge.net/

http://logback.qos.ch




http://wiki.fasterxml.com/JacksonHome



com.fasterxml.jackson.core : jackson-core : 2.6.3


Apache-2.0 7 within 2 Security Issues

com.fasterxml.jackson.core : jackson-databind : 2.6.3


Apache-2.0 8

com.fasterxml.jackson.dataformat : jackson-dataformat-cbor : 2.6.2


Apache-2.0 NA

com.fasterxml.jackson.dataformat : jackson-dataformat-smile : 2.6.2


Apache-2.0 NA

com.fasterxml.jackson.dataformat : jackson-dataformat-yaml : 2.6.2


Apache-2.0 NA

com.fasterxml.jackson.jaxrs : jackson-jaxrs-base : 2.6.3


Apache-2.0 NA

com.fasterxml.jackson.jaxrs : jackson-jaxrs-json-provider : 2.6.3


Apache-2.0 NA

com.fasterxml.jackson.module : jackson-module-jaxb-annotations : 2.6.3


Apache-2.0 NA

com.google.code.gson : gson : 2.3.1 exact 3 years 0 0 0 0Apache-2.0 NA

com.google.guava : guava : 18.0 exact 3 years 0 0 0 0Apache-2.0, CC0-1.0, Public Domain NA

com.google.guava : guava : 19.0 exact 2 years 0 0 0 0Apache-2.0, CC0-1.0, Public Domain NA

com.google.protobuf : protobuf-java : 2.6.0 exact 3 years 0 0 0 0BSD-3-Clause NA

com.googlecode.json-simple : json-simple : 1.1.1


Apache-2.0 NA

com.lowagie : itext : 2.0.8 exact 10 years 0 0 1 0Adobe-AFM, Apache-2.0, BSD-3-Clause, MPL-1.1, Public Domain, Non-Standard, Unicode

NA

com.mchange : c3p0 : 0.9.5.2 exact 2 years 0 0 1 0EPL-1.0 NA

com.mchange : mchange-commons-java : 0.2.11


EPL-1.0 NA

com.ning : compress-lzf : 1.0.2 exact 3 years 0 0 0 0Apache-2.0 NA

com.spatial4j : spatial4j : 0.5 exact 2 years 0 0 0 0Apache-2.0 NA





http://wiki.fasterxml.com/JacksonForSmile

http://wiki.fasterxml.com/JacksonForSmile

http://wiki.fasterxml.com/JacksonExtensionYAML

http://wiki.fasterxml.com/JacksonExtensionYAML

http://wiki.fasterxml.com/JacksonJAXBAnnotations

http://wiki.fasterxml.com/JacksonJAXBAnnotations

http://code.google.com/p/json-simple/

http://code.google.com/p/json-simple/

https://github.com/weiyeh/iText-4.2.0

https://github.com/weiyeh/iText-4.2.0

https://github.com/swaldman/c3p0

https://github.com/swaldman/c3p0

https://github.com/swaldman/mchange-commons-java

https://github.com/swaldman/mchange-commons-java

https://github.com/spatial4j/spatial4j

https://github.com/spatial4j/spatial4j


com.tdunning : t-digest : 3.0 exact 3 years 0 0 0 0Apache-2.0 NA

com.thoughtworks.xstream : xstream : 1.4.7 exact 3 years 0 0 0 0BSD-3-Clause 7 within 2 Security Issues

com.twitter : jsr166e : 1.1.0 exact 3 years 0 0 0 0CC0-1.0, Public Domain NA

com.vaadin.external.google : android-json : 0.0.20131108.vaadin1


Apache-2.0 NA

commons-beanutils : commons-beanutils : 1.9.3 exact 1 year 0 0 0 0Apache-2.0 7

commons-cli : commons-cli : 1.3.1 exact 2 years 0 0 0 0Apache-2.0 NA

commons-codec : commons-codec : 1.10 exact 3 years 0 0 0 0Apache-2.0 NA

commons-collections : commons-collections : 3.2.2


Apache-2.0 NA

commons-digester : commons-digester : 2.0 exact 9 years 0 0 0 0Apache-2.0 NA

commons-io : commons-io : 2.4 exact 5 years 0 0 0 0Apache-2.0 NA

commons-lang : commons-lang : 2.6 exact 7 years 0 0 0 0Apache-2.0 NA

commons-logging : commons-logging : 1.2 exact 3 years 0 0 0 0Apache-2.0 NA

concurrent : concurrent : 1.3.2 exact 12 years 0 0 0 0Not Declared; No Sources NA

dom4j : dom4j : 1.6.1 exact 12 years 0 1 1 0Apache-1.1, Sun-IP NA

io.netty : netty : 3.10.5.Final exact 2 years 0 0 0 0Apache-2.0, BSD-3-Clause, MIT NA

io.searchbox : jest : 2.0.0 exact 2 years 0 0 0 0Apache-2.0 NA

io.searchbox : jest-common : 2.0.0 exact 2 years 0 0 0 0Apache-2.0 NA

javax.annotation : javax.annotation-api : 1.2 exact 4 years 0 0 1 0CDDL-1.1 NA

javax.servlet : javax.servlet-api : 3.1.0 exact 4 years 0 0 1 0Apache-2.0, CDDL-1.0, CDDL-1.1 NA

https://github.com/tdunning/t-digest

https://github.com/tdunning/t-digest

http://gee.cs.oswego.edu/dl/classes/EDU/oswego/cs/dl/util/concurrent/intro.html

http://gee.cs.oswego.edu/dl/classes/EDU/oswego/cs/dl/util/concurrent/intro.html

https://github.com/searchbox-io/Jest





javax.servlet : jstl : 1.2 exact 11 years 0 0 1 0CDDL-1.0 7

javax.servlet.jsp : javax.servlet.jsp-api : 2.3.1 exact 4 years 0 0 1 0Apache-2.0, CDDL-1.1 NA

javax.validation : validation-api : 1.1.0.Final exact 4 years 0 0 0 0Apache-2.0 NA

javax.ws.rs : javax.ws.rs-api : 2.0.1 exact 3 years 0 0 1 0Apache-2.0, CDDL-1.1 NA

jcs : jcs : 1.3 exact 10 years 0 0 0 0Apache-2.0 NA

jline : jline : 2.12.1 exact 2 years 0 0 0 0BSD-2-Clause NA

joda-time : joda-time : 2.8.2 exact 2 years 0 0 0 0Apache-2.0 NA

junit : junit : 4.12 exact 3 years 0 0 1 0EPL-1.0 NA

net.java.dev.jna : jna : 4.1.0 exact 3 years 0 1 0 0Apache-2.0, LGPL-2.1 NA

net.java.dev.jna : jna-platform : 4.1.0 exact 3 years 0 1 0 0Apache-2.0, LGPL-2.1, LGPL-3.0 NA

org.antlr : antlr-runtime : 3.5 exact 5 years 0 0 0 0BSD-3-Clause NA

org.apache.commons : commons-exec : 1.3 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.commons : commons-lang3 : 3.5 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.httpcomponents : httpasyncclient : 4.1.1


Apache-2.0 NA

org.apache.httpcomponents : httpclient : 4.5.1 exact 2 years 0 0 0 0Apache-2.0 7

org.apache.httpcomponents : httpclient-cache : 4.5


Apache-2.0 NA

org.apache.httpcomponents : httpcore : 4.4.4 exact 2 years 0 0 0 0Apache-2.0 NA

org.apache.httpcomponents : httpcore-nio : 4.4.4


Apache-2.0 NA

org.apache.lucene : lucene-analyzers-common : 5.4.1

exact 1 year 0 1 0 0

Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISO-8879 NA

http://beanvalidation.org

http://beanvalidation.org

http://www.joda.org/joda-time/

http://www.joda.org/joda-time/

http://junit.org

http://junit.org

https://github.com/twall/jna

https://github.com/twall/jna

http://commons.apache.org/proper/commons-exec/

http://commons.apache.org/proper/commons-exec/

http://commons.apache.org/proper/commons-lang/

http://commons.apache.org/proper/commons-lang/


org.apache.lucene : lucene-backward-codecs : 5.4.1


Apache-2.0 NA

org.apache.lucene : lucene-core : 5.4.1 exact 1 year 0 0 0 0Apache-2.0, BSD-3-Clause, MIT NA

org.apache.lucene : lucene-grouping : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-highlighter : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-join : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-memory : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-misc : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-queries : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-queryparser : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 7

org.apache.lucene : lucene-sandbox : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-spatial : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-spatial3d : 5.4.1 exact 1 year 0 0 0 0Apache-2.0 NA

org.apache.lucene : lucene-suggest : 5.4.1 exact 1 year 0 0 0 0Apache-2.0, BSD-3-Clause NA

org.apache.poi : ooxml-schemas : 1.0 exact 9 years 0 0 0 0Apache-2.0 NA

org.apache.poi : poi : 3.5-FINAL exact 8 years 0 0 0 0Apache-2.0 NA

org.apache.poi : poi-contrib : 3.5-FINAL exact 8 years 0 0 0 0Apache-2.0 NA

org.apache.poi : poi-ooxml : 3.5-FINAL exact 8 years 0 0 0 0Apache-2.0 7 within 3 Security Issues

org.apache.poi : poi-scratchpad : 3.5-FINAL exact 8 years 0 0 0 0Apache-2.0 5 within 2 Security Issues

org.apache.tiles : tiles-api : 3.0.5 exact 3 years 0 0 0 0Apache-2.0 NA

http://poi.apache.org/








http://tiles.apache.org/framework/tiles-api/

http://tiles.apache.org/framework/tiles-api/


org.apache.tiles : tiles-autotag-core-runtime : 1.1.0


Apache-2.0 NA

org.apache.tiles : tiles-core : 3.0.5 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-jsp : 3.0.5 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-request-api : 1.0.6 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-request-jsp : 1.0.6 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-request-servlet : 1.0.6 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-servlet : 3.0.5 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.tiles : tiles-template : 3.0.5 exact 3 years 0 0 0 0Apache-2.0 NA

org.apache.xmlbeans : xmlbeans : 2.3.0 exact 10 years 0 0 0 0Apache-2.0 NA

org.aspectj : aspectjrt : 1.8.9 exact 1 year 0 0 1 0EPL-1.0 NA

org.aspectj : aspectjweaver : 1.8.9 exact 1 year 0 0 2 0Apache-1.1, EPL-1.0 NA

org.bouncycastle : bcprov-jdk16 : 1.45 exact 8 years 0 0 0 0MIT 7 within 11 Security Issues

org.codehaus.jackson : jackson-core-asl : 1.9.13


Apache-2.0 NA

org.codehaus.jackson : jackson-mapper-asl : 1.9.13


Apache-2.0 8

org.drools : drools-compiler : 6.4.0.Final exact 1 year 0 0 0 0Apache-2.0 NA

org.drools : drools-core : 6.4.0.Final exact 1 year 0 0 0 0Apache-2.0, BSD NA

org.eclipse.jdt.core.compiler : ecj : 4.4.2 exact 2 years 0 0 1 0EPL-1.0 NA

org.eclipse.jetty : jetty-client : 9.2.14.v20151106 exact 2 years 0 0 0 0Apache-2.0 NA

org.eclipse.jetty : jetty-http : 9.2.14.v20151106 exact 2 years 0 0 0 0Apache-2.0 NA

http://tiles.apache.org/tiles-autotag/tiles-autotag-core-runtime/

http://tiles.apache.org/tiles-autotag/tiles-autotag-core-runtime/

http://tiles.apache.org/framework/tiles-core/

http://tiles.apache.org/framework/tiles-core/

http://tiles.apache.org/framework/tiles-jsp/

http://tiles.apache.org/framework/tiles-jsp/

http://tiles.apache.org/tiles-request/tiles-request-api/

http://tiles.apache.org/tiles-request/tiles-request-api/

http://tiles.apache.org/tiles-request/tiles-request-jsp/

http://tiles.apache.org/tiles-request/tiles-request-jsp/

http://tiles.apache.org/tiles-request/tiles-request-servlet/

http://tiles.apache.org/tiles-request/tiles-request-servlet/

http://tiles.apache.org/framework/tiles-servlet/

http://tiles.apache.org/framework/tiles-servlet/

http://tiles.apache.org/framework/tiles-template/

http://tiles.apache.org/framework/tiles-template/

http://xmlbeans.apache.org

http://xmlbeans.apache.org

http://www.bouncycastle.org/java.html

http://www.bouncycastle.org/java.html

http://jackson.codehaus.org




http://www.eclipse.org/jdt/

http://www.eclipse.org/jdt/


org.eclipse.jetty : jetty-io : 9.2.14.v20151106 exact 2 years 0 0 0 0Apache-2.0 NA

org.eclipse.jetty : jetty-util : 9.2.14.v20151106 exact 2 years 0 0 0 0Apache-2.0, MIT 5

org.elasticsearch : elasticsearch : 2.2.0 exact 1 year 0 0 0 0Apache-2.0 NA

org.elasticsearch : securesm : 1.0 exact 2 years 0 0 0 0Apache-2.0 NA

org.functionaljava : functionaljava : 4.2 exact 3 years 0 0 0 0BSD-3-Clause NA

org.glassfish.hk2 : hk2-api : 2.4.0-b34 exact 2 years 0 0 1 0CDDL-1.1 NA

org.glassfish.hk2 : hk2-locator : 2.4.0-b34 exact 2 years 0 0 1 0CDDL-1.1 NA

org.glassfish.hk2 : hk2-utils : 2.4.0-b34 exact 2 years 0 0 1 0CDDL-1.1 NA

org.glassfish.hk2 : osgi-resource-locator : 1.0.1 exact 7 years 0 0 1 0CDDL-1.1 NA

org.glassfish.hk2.external : aopalliance-repackaged : 2.4.0-b34


CDDL-1.1 NA

org.glassfish.hk2.external : javax.inject : 2.4.0-b34


Apache-2.0, CDDL-1.1 NA

org.glassfish.jersey.bundles.repackaged : jersey-guava : 2.23.1


Apache-2.0, CDDL-1.1, Public Domain NA

org.glassfish.jersey.connectors : jersey-jetty-connector : 2.23.1


CDDL-1.1 NA

org.glassfish.jersey.core : jersey-client : 2.23.1 exact 1 year 0 0 1 0CDDL-1.1 NA

org.glassfish.jersey.core : jersey-common : 2.23.1


CDDL-1.1 NA

org.hamcrest : hamcrest-core : 1.3 exact 5 years 0 0 0 0BSD-3-Clause NA

org.hdrhistogram : HdrHistogram : 2.1.6 exact 2 years 0 0 0 0CC0-1.0, Public Domain NA

org.hibernate : hibernate-core : 4.3.11.Final exact 2 years 0 1 0 0LGPL-2.1 NA

org.hibernate : hibernate-validator : 5.1.3.Final exact 3 years 0 1 0 0Apache-2.0, LGPL-2.1, Public Domain 6

http://functionaljava.org

http://functionaljava.org

http://giltene.github.io/HdrHistogram/

http://giltene.github.io/HdrHistogram/


org.hibernate.common : hibernate-commons-annotations : 4.0.5.Final


LGPL-2.1 NA

org.hibernate.javax.persistence : hibernate-jpa-2.1-api : 1.0.0.Final


BSD-3-Clause, EPL-1.0 NA

org.javassist : javassist : 3.18.1-GA exact 4 years 0 0 0 0Apache-2.0 NA

org.jboss : jandex : 1.1.0.Final exact 4 years 0 0 0 0Apache-2.0 NA

org.jboss.logging : jboss-logging : 3.1.3.GA exact 4 years 0 0 0 0Apache-2.0 NA

org.jboss.logging : jboss-logging-annotations : 1.2.0.Beta1


Apache-2.0, CC0-1.0 NA

org.jboss.spec.javax.transaction : jboss-transaction-api_1.2_spec : 1.0.0.Final


CDDL-1.0 NA

org.joda : joda-convert : 1.2 exact 6 years 0 0 0 0Apache-2.0 NA

org.json : json : 20160212 exact 1 year 0 1 0 0JSON NA

org.kie : kie-api : 6.4.0.Final exact 1 year 0 0 0 0Apache-2.0 NA

org.kie : kie-internal : 6.4.0.Final exact 1 year 0 0 0 0Apache-2.0 NA

org.mariadb.jdbc : mariadb-java-client : 1.5.8 exact 10 months 0 1 0 0BSD-3-Clause, LGPL-2.1 NA

org.mockito : mockito-core : 1.10.19 exact 3 years 0 0 0 0Apache-2.0, BSD-3-Clause, MIT NA

org.mvel : mvel2 : 2.2.8.Final exact 1 year 0 0 0 0Apache-2.0, BSD-3-Clause NA

org.objenesis : objenesis : 2.1 exact 4 years 0 0 0 0Apache-2.0 NA

org.powermock : powermock-api-mockito : 1.6.4


Apache-2.0, MIT NA

org.powermock : powermock-api-support : 1.6.4 exact 2 years 0 0 0 0Apache-2.0 NA

org.powermock : powermock-core : 1.6.4 exact 2 years 0 0 0 0Apache-2.0 NA

org.powermock : powermock-module-junit4 : 1.6.4


Apache-2.0 NA

http://hibernate.org

http://hibernate.org

http://www.joda.org/joda-convert/

http://www.joda.org/joda-convert/

https://github.com/douglascrockford/JSON-java

https://github.com/douglascrockford/JSON-java

http://objenesis.org

http://objenesis.org


org.powermock : powermock-module-junit4-common : 1.6.4


Apache-2.0 NA

org.powermock : powermock-reflect : 1.6.4 exact 2 years 0 0 0 0Apache-2.0 NA

org.quartz-scheduler : quartz : 2.2.1 exact 4 years 0 0 0 0Apache-2.0 NA

org.seleniumhq.selenium : selenium-api : 2.53.1 exact 1 year 0 0 0 0Apache-2.0, BSD-3-Clause NA

org.seleniumhq.selenium : selenium-firefox-driver : 2.53.1


Apache-2.0 NA

org.seleniumhq.selenium : selenium-remote-driver : 2.53.1


Apache-2.0 NA

org.skyscreamer : jsonassert : 1.5.0 exact 9 months 0 0 0 0Apache-2.0 NA

org.slf4j : jcl-over-slf4j : 1.7.12 exact 2 years 0 0 0 0Apache-2.0, MIT NA

org.slf4j : jul-to-slf4j : 1.7.13 exact 2 years 0 0 0 0MIT NA

org.slf4j : log4j-over-slf4j : 1.7.12 exact 2 years 0 0 0 0Apache-2.0 NA

org.slf4j : slf4j-api : 1.7.13 exact 2 years 0 0 0 0MIT NA

org.springframework : spring-aop : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-beans : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-context : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-context-support : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-core : 4.2.0.RELEASE


Apache-2.0, BSD-3-Clause 9

org.springframework : spring-expression : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-jdbc : 4.2.0.RELEASE


Apache-2.0 NA


org.springframework : spring-orm : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-test : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-tx : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-web : 4.2.0.RELEASE


Apache-2.0 NA

org.springframework : spring-webmvc : 4.2.0.RELEASE


Apache-2.0 9 within 2 Security Issues

org.springframework.boot : spring-boot : 1.3.0.RELEASE


Apache-2.0 NA

org.springframework.boot : spring-boot-autoconfigure : 1.3.0.RELEASE


Apache-2.0 NA

org.springframework.boot : spring-boot-starter : 1.3.0.RELEASE


Apache-2.0 NA

org.springframework.boot : spring-boot-starter-logging : 1.3.0.RELEASE


Apache-2.0 NA

org.yaml : snakeyaml : 1.16 exact 2 years 0 0 0 0Apache-2.0 NA

stax : stax-api : 1.0.1 exact 11 years 0 0 0 0Apache-2.0 NA

xml-apis : xml-apis : 1.4.01 exact 6 years 0 1 0 0Apache-2.0, Public Domain, W3C NA

xmlpull : xmlpull : 1.1.3.1 exact 14 years 0 0 0 0Public Domain NA

xpp3 : xpp3_min : 1.1.4c exact 10 years 0 0 0 0Public Domain, XPP-1.2 NA

csar3933948645405128424.zip unknown NA 0 0 0 0epsdk-analytics-1.3.2.jar unknown NA 0 0 0 0epsdk-app-common-1.3.2.jar unknown NA 0 0 0 0epsdk-app-overlay-1.3.2.war unknown NA 0 0 0 0epsdk-core-1.3.2.jar unknown NA 0 0 0 0epsdk-fw-1.3.2.jar unknown NA 0 0 0 0epsdk-workflow-1.3.2.jar unknown NA 0 0 0 0

http://stax.codehaus.org/

http://stax.codehaus.org/

http://www.xmlpull.org

http://www.xmlpull.org

http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/

http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/


jtosca-1.1.1.jar unknown NA 0 0 0 0sdc-tosca-1.1.32.jar unknown NA 0 0 0 0service-vf-csar.zip unknown NA 0 0 0 0service-vl-csar.zip unknown NA 0 0 0 0vid-app-common-1.1.1-SNAPSHOT-classes.jar, vid-common-classes.jar

unknown NA 0 0 0 0

vid-common.war unknown NA 0 0 0 0vid.war unknown NA 0 0 0 0

application composition report · 12/27/2017 · application composition report of vid, build...

Documents