About

About

This app started as a bad example app for a talk for AllDayDevops in 2020, "DevSecOps — Our Secret Management Journey from Code to Vault". How an organisation handles its secrets reflects its security maturity, yet secrets management is not a "sexy" topic even within security. Many security breaches have their roots in improper management of secrets. It turns out people do want some more guidance on it!

Hence, we reworked the code base of this project and filed for it to become an OWASP project. Our goal is to educate people about secrets management and its pitfalls while they have a good time learning!

We hope you can better assess and implement proper secrets management after going through the challenges and explanations in our app. Have fun, and remember to star us on GitHub!

If you like WrongSecrets and its mission, please consider supporting OWASP in our name!

Copyright (c) 2020-2023 Jeroen Willemsen and WrongSecrets contributors.

Licensed under AGPLv3

Licenses

The list below is generated with `mvn license:add-third-party`
  • Lists of 361 third-party dependencies.
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Classic Module (ch.qos.logback:logback-classic:1.4.14 - http://logback.qos.ch/logback-classic)
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Core Module (ch.qos.logback:logback-core:1.4.14 - http://logback.qos.ch/logback-core)
  • (The MIT License (MIT)) Microsoft Azure Java Core Library (com.azure:azure-core:1.47.0 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Java Core AMQP Library (com.azure:azure-core-amqp:2.9.2 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Netty HTTP Client Library (com.azure:azure-core-http-netty:1.14.1 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Management Java Core Library (com.azure:azure-core-management:1.12.0 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure client library for Identity (com.azure:azure-identity:1.11.4 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Java JSON Library (com.azure:azure-json:1.1.0 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure client library for KeyVault Secrets (com.azure:azure-security-keyvault-secrets:4.8.1 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Spring Cloud Azure AutoConfigure (com.azure.spring:spring-cloud-azure-autoconfigure:5.11.0 - https://microsoft.github.io/spring-cloud-azure)
  • (The MIT License (MIT)) Spring Cloud Azure Core (com.azure.spring:spring-cloud-azure-core:5.11.0 - https://microsoft.github.io/spring-cloud-azure)
  • (The MIT License (MIT)) Spring Cloud Azure Service (com.azure.spring:spring-cloud-azure-service:5.11.0 - https://microsoft.github.io/spring-cloud-azure)
  • (The MIT License (MIT)) Spring Cloud Azure Starter (com.azure.spring:spring-cloud-azure-starter:5.11.0 - https://microsoft.github.io/spring-cloud-azure)
  • (The MIT License (MIT)) Spring Cloud Azure Starter Key Vault Secrets (com.azure.spring:spring-cloud-azure-starter-keyvault-secrets:5.11.0 - https://microsoft.github.io/spring-cloud-azure)
  • (Apache License, Version 2.0) jcommander (com.beust:jcommander:1.82 - https://jcommander.org)
  • (The Apache Software License, Version 2.0) Simple XML (safe) (com.carrotsearch.thirdparty:simple-xml-safe:2.7.1 - https://github.com/dweiss/simplexml)
  • (3-Clause BSD License) MinLog (com.esotericsoftware:minlog:1.3.1 - https://github.com/EsotericSoftware/minlog)
  • (Apache License, Version 2.0) Internet Time Utility (com.ethlo.time:itu:1.7.0 - https://github.com/ethlo/itu)
  • (The Apache Software License, Version 2.0) aalto-xml (com.fasterxml:aalto-xml:1.3.2 - https://github.com/FasterXML/aalto-xml)
  • (The Apache Software License, Version 2.0) Jackson-annotations (com.fasterxml.jackson.core:jackson-annotations:2.15.4 - https://github.com/FasterXML/jackson)
  • (The Apache Software License, Version 2.0) Jackson-core (com.fasterxml.jackson.core:jackson-core:2.15.4 - https://github.com/FasterXML/jackson-core)
  • (The Apache Software License, Version 2.0) jackson-databind (com.fasterxml.jackson.core:jackson-databind:2.15.4 - https://github.com/FasterXML/jackson)
  • (The Apache Software License, Version 2.0) Jackson-dataformat-XML (com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.15.4 - https://github.com/FasterXML/jackson-dataformat-xml)
  • (The Apache Software License, Version 2.0) Jackson-dataformat-YAML (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.15.4 - https://github.com/FasterXML/jackson-dataformats-text)
  • (The Apache Software License, Version 2.0) Jackson datatype: jdk8 (com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.15.4 - https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8)
  • (The Apache Software License, Version 2.0) Jackson datatype: JSR310 (com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.15.4 - https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310)
  • (The Apache Software License, Version 2.0) Jackson module: Afterburner (com.fasterxml.jackson.module:jackson-module-afterburner:2.15.4 - https://github.com/FasterXML/jackson-modules-base)
  • (The Apache Software License, Version 2.0) Jackson module: Blackbird (com.fasterxml.jackson.module:jackson-module-blackbird:2.15.4 - https://github.com/FasterXML/jackson-modules-base)
  • (The Apache Software License, Version 2.0) Jackson-module-parameter-names (com.fasterxml.jackson.module:jackson-module-parameter-names:2.15.4 - https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names)
  • (The Apache License, Version 2.0) Woodstox (com.fasterxml.woodstox:woodstox-core:6.5.1 - https://github.com/FasterXML/woodstox)
  • (GNU Lesser General Public License version 3) (The Apache Software License, Version 2.0) jffi (com.github.jnr:jffi:1.3.13 - http://github.com/jnr/jffi)
  • (The Apache Software License, Version 2.0) jnr-a64asm (com.github.jnr:jnr-a64asm:1.0.0 - http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm)
  • (The Apache Software License, Version 2.0) jnr-constants (com.github.jnr:jnr-constants:0.10.4 - http://github.com/jnr/jnr-constants)
  • (The Apache Software License, Version 2.0) jnr-enxio (com.github.jnr:jnr-enxio:0.32.17 - http://github.com/jnr/jnr-enxio)
  • (The Apache Software License, Version 2.0) jnr-ffi (com.github.jnr:jnr-ffi:2.2.16 - http://github.com/jnr/jnr-ffi)
  • (The Apache Software License, Version 2.0) jnr-netdb (com.github.jnr:jnr-netdb:1.2.0 - http://github.com/jnr/jnr-netdb)
  • (Eclipse Public License - v 2.0) (GNU General Public License Version 2) (GNU Lesser General Public License Version 2.1) jnr-posix (com.github.jnr:jnr-posix:3.1.19 - http://nexus.sonatype.org/oss-repository-hosting.html/jnr-posix)
  • (The Apache Software License, Version 2.0) jnr-unixsocket (com.github.jnr:jnr-unixsocket:0.38.22 - http://github.com/jnr/jnr-unixsocket)
  • (MIT License) jnr-x86asm (com.github.jnr:jnr-x86asm:1.0.2 - http://github.com/jnr/jnr-x86asm)
  • (MIT) Package URL (com.github.package-url:packageurl-java:1.4.1 - https://github.com/package-url/packageurl-java)
  • (GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1) SpotBugs Annotations (com.github.spotbugs:spotbugs-annotations:4.8.4 - https://spotbugs.github.io/)
  • (Apache License 2.0) compiler (com.github.spullara.mustache.java:compiler:0.9.6 - http://github.com/spullara/mustache.java)
  • (Apache License, Version 2.0) JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations)
  • (Apache 2.0) Google Android Annotations Library (com.google.android:annotations:4.1.1.4 - http://source.android.com/)
  • (BSD-3-Clause) API Common (com.google.api:api-common:2.29.1 - https://github.com/googleapis/sdk-platform-java)
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.46.1 - https://github.com/googleapis/sdk-platform-java)
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.46.1 - https://github.com/googleapis/sdk-platform-java)
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:2.46.1 - https://github.com/googleapis/sdk-platform-java)
  • (Apache-2.0) grpc-google-common-protos (com.google.api.grpc:grpc-google-common-protos:2.37.1 - https://github.com/googleapis/sdk-platform-java)
  • (Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.39.0 - https://github.com/googleapis/google-cloud-java)
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta2 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta2:2.39.0 - https://github.com/googleapis/google-cloud-java)
  • (Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.37.1 - https://github.com/googleapis/sdk-platform-java)
  • (Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.32.1 - https://github.com/googleapis/sdk-platform-java)
  • (BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.23.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)
  • (BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.23.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)
  • (Apache 2.0) AutoValue Annotations (com.google.auto.value:auto-value-annotations:1.10.4 - https://github.com/google/auto/tree/main/value)
  • (Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.39.0 - https://github.com/googleapis/google-cloud-java)
  • (The Apache Software License, Version 2.0) FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)
  • (Apache-2.0) Gson (com.google.code.gson:gson:2.10.1 - https://github.com/google/gson/gson)
  • (Apache 2.0) error-prone annotations (com.google.errorprone:error_prone_annotations:2.26.1 - https://errorprone.info/error_prone_annotations)
  • (The Apache Software License, Version 2.0) Guava InternalFutureFailureAccess and InternalFutures (com.google.guava:failureaccess:1.0.2 - https://github.com/google/guava/failureaccess)
  • (Apache License, Version 2.0) Guava: Google Core Libraries for Java (com.google.guava:guava:33.1.0-jre - https://github.com/google/guava)
  • (The Apache Software License, Version 2.0) Guava ListenableFuture only (com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava - https://github.com/google/guava/listenablefuture)
  • (The Apache Software License, Version 2.0) Google HTTP Client Library for Java (com.google.http-client:google-http-client:1.44.1 - https://github.com/googleapis/google-http-java-client/google-http-client)
  • (The Apache Software License, Version 2.0) GSON extensions to the Google HTTP Client Library for Java. (com.google.http-client:google-http-client-gson:1.44.1 - https://github.com/googleapis/google-http-java-client/google-http-client-gson)
  • (Apache License, Version 2.0) J2ObjC Annotations (com.google.j2objc:j2objc-annotations:3.0.0 - https://github.com/google/j2objc/)
  • (BSD-3-Clause) Protocol Buffers [Core] (com.google.protobuf:protobuf-java:3.25.2 - https://developers.google.com/protocol-buffers/protobuf-java/)
  • (BSD-3-Clause) Protocol Buffers [Util] (com.google.protobuf:protobuf-java-util:3.25.2 - https://developers.google.com/protocol-buffers/protobuf-java-util/)
  • (Go License) RE2/J (com.google.re2j:re2j:1.7 - http://github.com/google/re2j)
  • (EPL 1.0) (MPL 2.0) H2 Database Engine (com.h2database:h2:2.2.224 - https://h2database.com)
  • (The Apache Software License, Version 2.0) retirejs-core (com.h3xstream.retirejs:retirejs-core:3.0.4 - https://github.com/h3xstream/burp-retire-js/retirejs-core)
  • (Apache License Version 2.0) AhoCorasickDoubleArrayTrie (com.hankcs:aho-corasick-double-array-trie:1.2.3 - https://github.com/hankcs/AhoCorasickDoubleArrayTrie)
  • (The Apache Software License, Version 2.0) backport9 (com.headius:backport9:1.13 - http://nexus.sonatype.org/oss-repository-hosting.html/backport9)
  • (The Apache Software License, Version 2.0) invokebinder (com.headius:invokebinder:1.13 - http://maven.apache.org)
  • (The Apache Software License, Version 2.0) options (com.headius:options:1.6 - https://github.com/headius/options)
  • (MIT License) msal4j (com.microsoft.azure:msal4j:1.14.3 - https://github.com/AzureAD/microsoft-authentication-library-for-java)
  • (MIT License) msal4j-persistence-extension (com.microsoft.azure:msal4j-persistence-extension:1.2.0 - https://github.com/AzureAD/microsoft-authentication-extensions-for-java)
  • (The MIT License (MIT)) Extensions on Apache Proton-J library (com.microsoft.azure:qpid-proton-j-extensions:1.2.4 - https://github.com/Azure/qpid-proton-j-extensions)
  • (The MIT License) toml4j (com.moandjiezana.toml:toml4j:0.7.2 - http://moandjiezana.com/toml/toml4j)
  • (Apache License Version 2.0) JsonSchemaValidator (com.networknt:json-schema-validator:1.0.87 - https://github.com/networknt/json-schema-validator)
  • (The Apache Software License, Version 2.0) Nimbus Content Type (com.nimbusds:content-type:2.3 - https://bitbucket.org/connect2id/nimbus-content-type)
  • (The Apache Software License, Version 2.0) Nimbus LangTag (com.nimbusds:lang-tag:1.7 - https://bitbucket.org/connect2id/nimbus-language-tags)
  • (The Apache Software License, Version 2.0) Nimbus JOSE+JWT (com.nimbusds:nimbus-jose-jwt:9.37.3 - https://bitbucket.org/connect2id/nimbus-jose-jwt)
  • (Apache License, version 2.0) OAuth 2.0 SDK with OpenID Connect extensions (com.nimbusds:oauth2-oidc-sdk:11.9.1 - https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
  • (The (New) BSD License) jmustache (com.samskivert:jmustache:1.15 - http://github.com/samskivert/jmustache)
  • (Eclipse Distribution License - v 1.0) Old JAXB Core (com.sun.xml.bind:jaxb-core:4.0.5 - https://eclipse-ee4j.github.io/jaxb-ri/)
  • (Eclipse Distribution License - v 1.0) Old JAXB Runtime (com.sun.xml.bind:jaxb-impl:4.0.5 - https://eclipse-ee4j.github.io/jaxb-ri/)
  • (Apache License 2.0) JSON library from Android SDK (com.vaadin.external.google:android-json:0.0.20131108.vaadin1 - http://developer.android.com/sdk)
  • (Apache License, Version 2.0) Apache Commons BeanUtils (commons-beanutils:commons-beanutils:1.9.4 - https://commons.apache.org/proper/commons-beanutils/)
  • (Apache-2.0) Apache Commons Codec (commons-codec:commons-codec:1.16.1 - https://commons.apache.org/proper/commons-codec/)
  • (Apache License, Version 2.0) Apache Commons Collections (commons-collections:commons-collections:3.2.2 - http://commons.apache.org/collections/)
  • (The Apache Software License, Version 2.0) Commons Digester (commons-digester:commons-digester:2.1 - http://commons.apache.org/digester/)
  • (Apache-2.0) Apache Commons IO (commons-io:commons-io:2.14.0 - https://commons.apache.org/proper/commons-io/)
  • (The Apache Software License, Version 2.0) Apache Commons Logging (commons-logging:commons-logging:1.2 - http://commons.apache.org/proper/commons-logging/)
  • (Apache License, Version 2.0) Apache Commons Validator (commons-validator:commons-validator:1.7 - http://commons.apache.org/proper/commons-validator/)
  • (The Apache License, Version 2.0) jcs3-slf4j (io.github.jeremylong:jcs3-slf4j:1.0.5 - https://github.com/jeremylong/jcs3-slf4j/)
  • (The Apache License, Version 2.0) open-vulnerability-clients (io.github.jeremylong:open-vulnerability-clients:5.1.1 - https://github.com/jeremylong/vuln-tools/)
  • (Apache 2.0) io.grpc:grpc-alts (io.grpc:grpc-alts:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-api (io.grpc:grpc-api:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-auth (io.grpc:grpc-auth:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-context (io.grpc:grpc-context:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-core (io.grpc:grpc-core:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-googleapis (io.grpc:grpc-googleapis:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-grpclb (io.grpc:grpc-grpclb:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-inprocess (io.grpc:grpc-inprocess:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-netty-shaded (io.grpc:grpc-netty-shaded:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-protobuf (io.grpc:grpc-protobuf:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-protobuf-lite (io.grpc:grpc-protobuf-lite:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-util (io.grpc:grpc-util:1.62.2 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.62.2 - https://github.com/grpc/grpc-java)
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.12.4 - https://github.com/micrometer-metrics/micrometer)
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.12.4 - https://github.com/micrometer-metrics/micrometer)
  • (The Apache Software License, Version 2.0) micrometer-jakarta9 (io.micrometer:micrometer-jakarta9:1.12.4 - https://github.com/micrometer-metrics/micrometer)
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.12.4 - https://github.com/micrometer-metrics/micrometer)
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.107.Final - https://netty.io/netty-buffer/)
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.107.Final - https://netty.io/netty-codec/)
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.107.Final - https://netty.io/netty-codec-dns/)
  • (Apache License, Version 2.0) Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.107.Final - https://netty.io/netty-codec-http/)
  • (Apache License, Version 2.0) Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.107.Final - https://netty.io/netty-codec-http2/)
  • (Apache License, Version 2.0) Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.107.Final - https://netty.io/netty-codec-socks/)
  • (Apache License, Version 2.0) Netty/Common (io.netty:netty-common:4.1.107.Final - https://netty.io/netty-common/)
  • (Apache License, Version 2.0) Netty/Handler (io.netty:netty-handler:4.1.107.Final - https://netty.io/netty-handler/)
  • (Apache License, Version 2.0) Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.107.Final - https://netty.io/netty-handler-proxy/)
  • (Apache License, Version 2.0) Netty/Resolver (io.netty:netty-resolver:4.1.107.Final - https://netty.io/netty-resolver/)
  • (Apache License, Version 2.0) Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.107.Final - https://netty.io/netty-resolver-dns/)
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.107.Final - https://netty.io/netty-resolver-dns-classes-macos/)
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.107.Final - https://netty.io/netty-resolver-dns-native-macos/)
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [BoringSSL - Static] (io.netty:netty-tcnative-boringssl-static:2.0.61.Final - https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/)
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [OpenSSL - Classes] (io.netty:netty-tcnative-classes:2.0.61.Final - https://github.com/netty/netty-tcnative/netty-tcnative-classes/)
  • (Apache License, Version 2.0) Netty/Transport (io.netty:netty-transport:4.1.107.Final - https://netty.io/netty-transport/)
  • (Apache License, Version 2.0) Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.107.Final - https://netty.io/netty-transport-classes-epoll/)
  • (Apache License, Version 2.0) Netty/Transport/Classes/KQueue (io.netty:netty-transport-classes-kqueue:4.1.107.Final - https://netty.io/netty-transport-classes-kqueue/)
  • (Apache License, Version 2.0) Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.107.Final - https://netty.io/netty-transport-native-epoll/)
  • (Apache License, Version 2.0) Netty/Transport/Native/KQueue (io.netty:netty-transport-native-kqueue:4.1.107.Final - https://netty.io/netty-transport-native-kqueue/)
  • (Apache License, Version 2.0) Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.107.Final - https://netty.io/netty-transport-native-unix-common/)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-api:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-contrib-http-util:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-proto:0.2.0 - https://github.com/census-instrumentation/opencensus-proto)
  • (The Apache License, Version 2.0) OpenTelemetry Java (io.opentelemetry:opentelemetry-api:1.36.0 - https://github.com/open-telemetry/opentelemetry-java)
  • (The Apache License, Version 2.0) OpenTelemetry Java (io.opentelemetry:opentelemetry-context:1.36.0 - https://github.com/open-telemetry/opentelemetry-java)
  • (Apache 2.0) perfmark:perfmark-api (io.perfmark:perfmark-api:0.27.0 - https://github.com/perfmark/perfmark)
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.6.4 - https://github.com/reactor/reactor-core)
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.17 - https://github.com/reactor/reactor-netty)
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.17 - https://github.com/reactor/reactor-netty)
  • (Apache License 2.0) swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.21 - https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta)
  • (Apache License 2.0) swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.21 - https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta)
  • (Apache License 2.0) swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.21 - https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta)
  • (EDL 1.0) Jakarta Activation API (jakarta.activation:jakarta.activation-api:2.1.3 - https://github.com/jakartaee/jaf-api)
  • (EPL 2.0) (GPL2 w/ CPE) Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:2.1.1 - https://projects.eclipse.org/projects/ee4j.ca)
  • (EPL 2.0) (GPL2 w/ CPE) jakarta.transaction API (jakarta.transaction:jakarta.transaction-api:2.0.1 - https://projects.eclipse.org/projects/ee4j.jta)
  • (Apache License 2.0) Jakarta Bean Validation API (jakarta.validation:jakarta.validation-api:3.0.2 - https://beanvalidation.org)
  • (Eclipse Distribution License - v 1.0) Jakarta XML Binding API (jakarta.xml.bind:jakarta.xml.bind-api:4.0.2 - https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api)
  • (CDDL/GPLv2+CE) JavaBeans Activation Framework API jar (javax.activation:javax.activation-api:1.2.0 - http://java.net/all/javax.activation-api/)
  • (CDDL + GPLv2 with classpath exception) javax.annotation API (javax.annotation:javax.annotation-api:1.3.2 - http://jcp.org/en/jsr/detail?id=250)
  • (The Apache Software License, Version 2.0) javax.inject (javax.inject:javax.inject:1 - http://code.google.com/p/atinject/)
  • (CDDL 1.1) (GPL2 w/ CPE) javax.ws.rs-api (javax.ws.rs:javax.ws.rs-api:2.0.1 - http://jax-rs-spec.java.net)
  • (CDDL 1.1) (GPL2 w/ CPE) jaxb-api (javax.xml.bind:jaxb-api:2.3.1 - https://github.com/javaee/jaxb-spec/jaxb-api)
  • (Apache License, Version 2.0) Joda-Time (joda-time:joda-time:2.12.5 - https://www.joda.org/joda-time/)
  • (Eclipse Public License 1.0) JUnit (junit:junit:4.13.2 - http://junit.org)
  • (The Apache Software License, Version 2.0) jitescript (me.qmx.jitescript:jitescript:0.4.1 - https://github.com/qmx/jitescript)
  • (Apache-2.0) (LGPL-2.1-or-later) Java Native Access (net.java.dev.jna:jna:5.13.0 - https://github.com/java-native-access/jna)
  • (Apache License v2.0) (LGPL, version 2.1) Java Native Access Platform (net.java.dev.jna:jna-platform:5.6.0 - https://github.com/java-native-access/jna)
  • (The Apache Software License, Version 2.0) ASM based accessors helper used by json-smart (net.minidev:accessors-smart:2.5.0 - https://urielch.github.io/)
  • (The Apache Software License, Version 2.0) JSON Small and Fast Parser (net.minidev:json-smart:2.5.0 - https://urielch.github.io/)
  • (The Apache Software License, Version 2.0) groovy-extensions (nz.net.ultraq.groovy:groovy-extensions:2.1.0 - https://github.com/ultraq/groovy-extensions/)
  • (The Apache Software License, Version 2.0) thymeleaf-expression-processor (nz.net.ultraq.thymeleaf:thymeleaf-expression-processor:3.2.0 - https://github.com/ultraq/thymeleaf-expression-processor/)
  • (The Apache Software License, Version 2.0) thymeleaf-layout-dialect (nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect:3.3.0 - https://github.com/ultraq/thymeleaf-layout-dialect/)
  • (The Apache Software License, Version 2.0) OGNL - Object Graph Navigation Library (ognl:ognl:3.3.4 - https://github.com/jkuhnert/ognl/)
  • (Apache-2.0) jdiagnostics (org.anarres.jdiagnostics:jdiagnostics:1.0.7 - https://github.com/shevek/jdiagnostics)
  • (Apache License, Version 2.0) Apache Commons Collections (org.apache.commons:commons-collections4:4.4 - https://commons.apache.org/proper/commons-collections/)
  • (Apache-2.0) Apache Commons Compress (org.apache.commons:commons-compress:1.24.0 - https://commons.apache.org/proper/commons-compress/)
  • (Apache-2.0) Apache Commons DBCP (org.apache.commons:commons-dbcp2:2.10.0 - https://commons.apache.org/dbcp/)
  • (Apache-2.0) Apache Commons JCS :: Core (org.apache.commons:commons-jcs3-core:3.2 - http://commons.apache.org/proper/commons-jcs/commons-jcs3-core/)
  • (Apache-2.0) Apache Commons Lang (org.apache.commons:commons-lang3:3.13.0 - https://commons.apache.org/proper/commons-lang/)
  • (Apache-2.0) Apache Commons Pool (org.apache.commons:commons-pool2:2.12.0 - https://commons.apache.org/proper/commons-pool/)
  • (Apache-2.0) Apache Commons Text (org.apache.commons:commons-text:1.11.0 - https://commons.apache.org/proper/commons-text)
  • (The Apache Software License, Version 2.0) Apache Groovy (org.apache.groovy:groovy:4.0.20 - https://groovy-lang.org)
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents:httpclient:4.5.14 - http://hc.apache.org/httpcomponents-client-ga)
  • (Apache License, Version 2.0) Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents.client5:httpclient5:5.2.3 - https://hc.apache.org/httpcomponents-client-5.0.x/5.2.3/httpclient5/)
  • (Apache License, Version 2.0) Apache HttpComponents Core HTTP/1.1 (org.apache.httpcomponents.core5:httpcore5:5.2.4 - https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5/)
  • (Apache License, Version 2.0) Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.2.4 - https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5-h2/)
  • (Apache-2.0) Apache Log4j API (org.apache.logging.log4j:log4j-api:2.21.1 - https://logging.apache.org/log4j/2.x/log4j/log4j-api/)
  • (Apache-2.0) Apache Log4j to SLF4J Adapter (org.apache.logging.log4j:log4j-to-slf4j:2.21.1 - https://logging.apache.org/log4j/2.x/log4j/log4j-to-slf4j/)
  • (Apache License, Version 2.0) Lucene Common Analyzers (org.apache.lucene:lucene-analyzers-common:8.11.2 - https://lucene.apache.org/lucene-parent/lucene-analyzers-common)
  • (Apache License, Version 2.0) Lucene Core (org.apache.lucene:lucene-core:8.11.2 - https://lucene.apache.org/lucene-parent/lucene-core)
  • (Apache License, Version 2.0) Lucene Queries (org.apache.lucene:lucene-queries:8.11.2 - https://lucene.apache.org/lucene-parent/lucene-queries)
  • (Apache License, Version 2.0) Lucene QueryParsers (org.apache.lucene:lucene-queryparser:8.11.2 - https://lucene.apache.org/lucene-parent/lucene-queryparser)
  • (Apache License, Version 2.0) Lucene Sandbox (org.apache.lucene:lucene-sandbox:8.11.2 - https://lucene.apache.org/lucene-parent/lucene-sandbox)
  • (The Apache Software License, Version 2.0) Maven Aether Provider (org.apache.maven:maven-aether-provider:3.0 - http://maven.apache.org/maven-aether-provider/)
  • (Apache-2.0) Maven 4 API Meta annotations (org.apache.maven:maven-api-meta:4.0.0-alpha-7 - https://maven.apache.org/ref/4.0.0-alpha-7/api/maven-api-meta/)
  • (Apache-2.0) Maven 4 API XML (org.apache.maven:maven-api-xml:4.0.0-alpha-7 - https://maven.apache.org/ref/4.0.0-alpha-7/api/maven-api-xml/)
  • (The Apache Software License, Version 2.0) Maven Artifact (org.apache.maven:maven-artifact:3.0 - http://maven.apache.org/maven-artifact/)
  • (The Apache Software License, Version 2.0) Maven Core (org.apache.maven:maven-core:3.0 - http://maven.apache.org/maven-core/)
  • (The Apache Software License, Version 2.0) Maven Model (org.apache.maven:maven-model:3.0 - http://maven.apache.org/maven-model/)
  • (The Apache Software License, Version 2.0) Maven Model Builder (org.apache.maven:maven-model-builder:3.0 - http://maven.apache.org/maven-model-builder/)
  • (The Apache Software License, Version 2.0) Maven Plugin API (org.apache.maven:maven-plugin-api:3.0 - http://maven.apache.org/maven-plugin-api/)
  • (The Apache Software License, Version 2.0) Maven Repository Metadata Model (org.apache.maven:maven-repository-metadata:3.0 - http://maven.apache.org/maven-repository-metadata/)
  • (The Apache Software License, Version 2.0) Maven Settings (org.apache.maven:maven-settings:3.0 - http://maven.apache.org/maven-settings/)
  • (The Apache Software License, Version 2.0) Maven Settings Builder (org.apache.maven:maven-settings-builder:3.0 - http://maven.apache.org/maven-settings-builder/)
  • (Apache-2.0) Implementation of Maven API XML (org.apache.maven:maven-xml-impl:4.0.0-alpha-7 - https://maven.apache.org/ref/4.0.0-alpha-7/maven-xml-impl/)
  • (Apache License, Version 2.0) Doxia :: Logging API (org.apache.maven.doxia:doxia-logging-api:1.11.1 - https://maven.apache.org/doxia/doxia/doxia-logging-api/)
  • (Apache License, Version 2.0) Doxia :: Sink API (org.apache.maven.doxia:doxia-sink-api:1.11.1 - https://maven.apache.org/doxia/doxia/doxia-sink-api/)
  • (Apache License, Version 2.0) Apache Maven Reporting API (org.apache.maven.reporting:maven-reporting-api:3.1.1 - https://maven.apache.org/shared/maven-reporting-api/)
  • (Apache License, Version 2.0) Apache Maven File Management API (org.apache.maven.shared:file-management:3.1.0 - https://maven.apache.org/shared/file-management/)
  • (Apache License, Version 2.0) Apache Maven Artifact Transfer (org.apache.maven.shared:maven-artifact-transfer:0.13.1 - https://maven.apache.org/shared/maven-artifact-transfer/)
  • (Apache License, Version 2.0) Apache Maven Common Artifact Filters (org.apache.maven.shared:maven-common-artifact-filters:3.1.0 - https://maven.apache.org/shared/maven-common-artifact-filters/)
  • (Apache License, Version 2.0) Apache Maven Dependency Tree (org.apache.maven.shared:maven-dependency-tree:3.2.1 - https://maven.apache.org/shared/maven-dependency-tree/)
  • (Apache License, Version 2.0) Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.1.0 - https://maven.apache.org/shared/maven-shared-utils/)
  • (Apache License, Version 2.0) Proton-J (org.apache.qpid:proton-j:0.33.8 - https://qpid.apache.org/proton/proton-j)
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.19 - https://tomcat.apache.org/)
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.19 - https://tomcat.apache.org/)
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.19 - https://tomcat.apache.org/)
  • (Apache License, Version 2.0) Apache Velocity - Engine (org.apache.velocity:velocity-engine-core:2.3 - http://velocity.apache.org/engine/devel/velocity-engine-core/)
  • (The Apache Software License, Version 2.0) asciidoctorj (org.asciidoctor:asciidoctorj:2.5.12 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) asciidoctorj-api (org.asciidoctor:asciidoctorj-api:2.5.12 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) attoparser (org.attoparser:attoparser:2.0.7.RELEASE - https://www.attoparser.org)
  • (Apache Software License, Version 1.1) (Bouncy Castle Licence) Bouncy Castle OpenPGP API (org.bouncycastle:bcpg-jdk18on:1.71 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs (org.bouncycastle:bcpkix-jdk18on:1.73 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle Provider (org.bouncycastle:bcprov-jdk18on:1.77 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle ASN.1 Extension and Utility APIs (org.bouncycastle:bcutil-jdk18on:1.73 - https://www.bouncycastle.org/java.html)
  • (The MIT License) Checker Qual (org.checkerframework:checker-qual:3.42.0 - https://checkerframework.org/)
  • (MIT license) Animal Sniffer Annotations (org.codehaus.mojo:animal-sniffer-annotations:1.23 - https://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations)
  • (The Apache Software License, Version 2.0) Plexus Classworlds (org.codehaus.plexus:plexus-classworlds:2.2.3 - http://plexus.codehaus.org/plexus-classworlds/)
  • (Apache License, Version 2.0) Plexus :: Component Annotations (org.codehaus.plexus:plexus-component-annotations:2.0.0 - http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/)
  • (The Apache Software License, Version 2.0) Plexus Interpolation API (org.codehaus.plexus:plexus-interpolation:1.14 - http://plexus.codehaus.org/plexus-components/plexus-interpolation)
  • (Apache License, Version 2.0) Plexus Common Utilities (org.codehaus.plexus:plexus-utils:4.0.0 - https://codehaus-plexus.github.io/plexus-pom/plexus-utils/)
  • (Apache License, Version 2.0) Plexus XML Utilities (org.codehaus.plexus:plexus-xml:4.0.2 - https://codehaus-plexus.github.io/plexus-xml/)
  • (The BSD License) Stax2 API (org.codehaus.woodstox:stax2-api:4.2.1 - http://github.com/FasterXML/stax2-api)
  • (Apache 2) org.conscrypt:conscrypt-openjdk-uber (org.conscrypt:conscrypt-openjdk-uber:2.5.2 - https://conscrypt.org/)
  • (Apache-2.0) CycloneDX Core (Java) (org.cyclonedx:cyclonedx-core-java:8.0.3 - https://github.com/CycloneDX/cyclonedx-core-java)
  • (Eclipse Public License, Version 1.0) Aether API (org.eclipse.aether:aether-api:1.0.0.v20140518 - http://www.eclipse.org/aether/aether-api/)
  • (Eclipse Public License, Version 1.0) Aether Utilities (org.eclipse.aether:aether-util:1.0.0.v20140518 - http://www.eclipse.org/aether/aether-util/)
  • (EDL 1.0) Angus Activation Registries (org.eclipse.angus:angus-activation:2.0.2 - https://github.com/eclipse-ee4j/angus-activation/angus-activation)
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: Core (org.eclipse.packager:packager-core:0.19.0 - https://eclipse.org/packager/packager-core)
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: RPM (org.eclipse.packager:packager-rpm:0.19.0 - https://eclipse.org/packager/packager-rpm)
  • (Dual license consisting of the CDDL v1.1 and GPL v2) JSR 374 (JSON Processing) Default Provider (org.glassfish:javax.json:1.1.4 - https://javaee.github.io/jsonp)
  • (BSD License 3) Hamcrest (org.hamcrest:hamcrest:2.2 - http://hamcrest.org/JavaHamcrest/)
  • (BSD License 3) Hamcrest Core (org.hamcrest:hamcrest-core:2.2 - http://hamcrest.org/JavaHamcrest/)
  • (BSD-2-Clause) (Public Domain, per Creative Commons CC0) HdrHistogram (org.hdrhistogram:HdrHistogram:2.1.12 - http://hdrhistogram.github.io/HdrHistogram/)
  • (Apache License 2.0) (LGPL 2.1) (MPL 1.1) Javassist (org.javassist:javassist:3.29.0-GA - http://www.javassist.org/)
  • (The Apache Software License, Version 2.0) JetBrains Java Annotations (org.jetbrains:annotations:17.0.0 - https://github.com/JetBrains/java-annotations)
  • (EPL) Dirgra (org.jruby:dirgra:0.3 - https://github.com/jruby/dirgra)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Main Maven Artifact (org.jruby:jruby:9.4.6.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Base (org.jruby:jruby-base:9.4.6.0 - https://github.com/jruby/jruby/jruby-base)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Complete (org.jruby:jruby-complete:9.4.6.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby-complete)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Lib Setup (org.jruby:jruby-stdlib:9.4.6.0 - https://github.com/jruby/jruby/jruby-stdlib)
  • (BSD) JZlib (org.jruby:jzlib:1.1.5 - http://www.jcraft.com/jzlib/)
  • (MIT License) JCodings (org.jruby.jcodings:jcodings:1.0.58 - http://nexus.sonatype.org/oss-repository-hosting.html/jcodings)
  • (MIT License) Joni (org.jruby.joni:joni:2.2.1 - http://nexus.sonatype.org/oss-repository-hosting.html/joni)
  • (The MIT License) jsoup Java HTML Parser (org.jsoup:jsoup:1.16.2 - https://jsoup.org/)
  • (Public Domain, per Creative Commons CC0) LatencyUtils (org.latencyutils:LatencyUtils:2.0.3 - http://latencyutils.github.io/LatencyUtils/)
  • (Apache License, Version 2.0) KeePassJava2 :: All (org.linguafranca.pwdb:KeePassJava2:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2)
  • (Apache License, Version 2.0) KeePassJava2 :: DOM (org.linguafranca.pwdb:KeePassJava2-dom:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2-dom)
  • (Apache License, Version 2.0) KeePassJava2 :: JAXB (org.linguafranca.pwdb:KeePassJava2-jaxb:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2-jaxb)
  • (Apache License, Version 2.0) KeePassJava2 :: KDB (org.linguafranca.pwdb:KeePassJava2-kdb:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdb)
  • (Apache License, Version 2.0) KeePassJava2 :: KDBX (org.linguafranca.pwdb:KeePassJava2-kdbx:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdbx)
  • (Apache License, Version 2.0) KeePassJava2 :: Simple (org.linguafranca.pwdb:KeePassJava2-simple:2.2.1 - https://github.com/jorabin/KeePassJava2/KeePassJava2-simple)
  • (Apache License, Version 2.0) PWDB :: Database (org.linguafranca.pwdb:database:2.2.1 - https://github.com/jorabin/KeePassJava2/database)
  • (BSD-3-Clause) asm (org.ow2.asm:asm:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-analysis (org.ow2.asm:asm-analysis:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-commons (org.ow2.asm:asm-commons:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-tree (org.ow2.asm:asm-tree:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-util (org.ow2.asm:asm-util:9.2 - http://asm.ow2.io/)
  • (The Apache Software License, Version 2.0) Dependency-Check Core (org.owasp:dependency-check-core:9.0.10 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-core)
  • (The Apache Software License, Version 2.0) Dependency-Check Maven Plugin (org.owasp:dependency-check-maven:9.0.10 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-maven)
  • (The Apache Software License, Version 2.0) Dependency-Check Utils (org.owasp:dependency-check-utils:9.0.10 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-utils)
  • (The MIT License) Project Lombok (org.projectlombok:lombok:1.18.32 - https://projectlombok.org)
  • (MIT-0) reactive-streams (org.reactivestreams:reactive-streams:1.0.4 - http://www.reactive-streams.org/)
  • (The MIT License) semver4j (org.semver4j:semver4j:5.2.2 - https://github.com/semver4j/semver4j)
  • (Apache License, Version 2.0) JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.12 - http://www.slf4j.org)
  • (MIT License) JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.12 - http://www.slf4j.org)
  • (MIT License) SLF4J API Module (org.slf4j:slf4j-api:2.0.12 - http://www.slf4j.org)
  • (The Apache Software License, Version 2.0) Aether :: API (org.sonatype.aether:aether-api:1.7 - http://aether.sonatype.org/aether-api/)
  • (The Apache Software License, Version 2.0) Aether :: Implementation (org.sonatype.aether:aether-impl:1.7 - http://aether.sonatype.org/aether-impl/)
  • (The Apache Software License, Version 2.0) Aether :: SPI (org.sonatype.aether:aether-spi:1.7 - http://aether.sonatype.org/aether-spi/)
  • (The Apache Software License, Version 2.0) Aether :: Utilities (org.sonatype.aether:aether-util:1.7 - http://aether.sonatype.org/aether-util/)
  • (ASL2) org.sonatype.goodies:package-url-java (org.sonatype.goodies:package-url-java:1.1.1 - https://sonatype.github.io/package-url-java/)
  • (ASL2) org.sonatype.ossindex:ossindex-service-api (org.sonatype.ossindex:ossindex-service-api:1.8.2 - https://sonatype.github.io/ossindex-public/ossindex-service-api/)
  • (ASL2) org.sonatype.ossindex:ossindex-service-client (org.sonatype.ossindex:ossindex-service-client:1.8.2 - https://sonatype.github.io/ossindex-public/ossindex-service-client/)
  • (Apache Public License 2.0) Plexus Cipher: encryption/decryption Component (org.sonatype.plexus:plexus-cipher:1.4 - http://spice.sonatype.org/plexus-cipher)
  • (Apache Public License 2.0) Plexus Security Dispatcher Component (org.sonatype.plexus:plexus-sec-dispatcher:1.4 - http://spice.sonatype.org/plexus-sec-dispatcher)
  • (The Apache Software License, Version 2.0) Sisu - Guice (org.sonatype.sisu:sisu-guice:2.1.7 - http://forge.sonatype.com/sisu-guice/)
  • (The Apache Software License, Version 2.0) Sisu - Inject (JSR330 bean support) (org.sonatype.sisu:sisu-inject-bean:1.4.2 - http://sisu.sonatype.org/sisu-inject/guice-bean/sisu-inject-bean/)
  • (The Apache Software License, Version 2.0) Sisu - Inject (Plexus bean support) (org.sonatype.sisu:sisu-inject-plexus:1.4.2 - http://sisu.sonatype.org/sisu-inject/guice-bean/guice-plexus/sisu-inject-plexus/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.5.0 - https://springdoc.org/springdoc-openapi-starter-common/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.5.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-api/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.5.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-ui/)
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.1.5 - https://github.com/spring-projects/spring-framework)
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.2.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.1.2 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)
  • (Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.1.2 - https://projects.spring.io/spring-cloud/spring-cloud-context/)
  • (Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.1.2 - https://projects.spring.io/spring-cloud)
  • (Apache License, Version 2.0) Spring Cloud Starter Vault Config (org.springframework.cloud:spring-cloud-starter-vault-config:4.1.1 - https://cloud.spring.io/spring-cloud-vault/)
  • (Apache License, Version 2.0) Spring Cloud Vault Configuration Integration (org.springframework.cloud:spring-cloud-vault-config:4.1.1 - https://spring.io/spring-cloud/spring-cloud-vault-parent/spring-cloud-vault-config)
  • (Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.2.3 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) spring-security-core (org.springframework.security:spring-security-core:6.2.3 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.2.3 - https://spring.io/projects/spring-security)
  • (Apache 2.0) spring-security-rsa (org.springframework.security:spring-security-rsa:1.1.2 - http://github.com/spring-projects/spring-security-oauth)
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.2.3 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) Spring Vault Core (org.springframework.vault:spring-vault-core:3.1.1 - https://projects.spring.io/spring-vault/spring-vault-core/)
  • (MIT) Testcontainers :: JUnit Jupiter Extension (org.testcontainers:junit-jupiter:1.19.7 - https://java.testcontainers.org)
  • (BSD-3-Clause) ThreeTen backport (org.threeten:threetenbp:1.6.8 - https://www.threeten.org/threetenbp)
  • (The Apache Software License, Version 2.0) thymeleaf (org.thymeleaf:thymeleaf:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf)
  • (The Apache Software License, Version 2.0) thymeleaf-spring6 (org.thymeleaf:thymeleaf-spring6:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-spring6)
  • (The Apache Software License, Version 2.0) thymeleaf-extras-springsecurity6 (org.thymeleaf.extras:thymeleaf-extras-springsecurity6:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-extras-springsecurity6)
  • (Public Domain) XZ for Java (org.tukaani:xz:1.9 - https://tukaani.org/xz/java.html)
  • (The Apache Software License, Version 2.0) unbescape (org.unbescape:unbescape:1.1.6.RELEASE - http://www.unbescape.org)
  • (Apache License, Version 2.0) Bootstrap (org.webjars:bootstrap:5.3.3 - http://webjars.org)
  • (MIT) DataTables (org.webjars:datatables:1.13.5 - http://webjars.org)
  • (MIT License) jquery (org.webjars:jquery:3.7.1 - http://webjars.org)
  • (Apache 2.0) Swagger UI (org.webjars:swagger-ui:5.13.0 - http://webjars.org)
  • (BSD 2-Clause) github-buttons (org.webjars.npm:github-buttons:2.14.1 - https://www.webjars.org)
  • (Common Public 1.0) pecoff4j (org.whitesource:pecoff4j:0.0.2.1 - https://github.com/whitesource/pecoff4j-maven)
  • (Apache License, Version 2.0) SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml)
  • (Apache License, Version 2.0) AWS Java SDK :: Annotations (software.amazon.awssdk:annotations:2.25.31 - https://aws.amazon.com/sdkforjava/core/annotations)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Apache (software.amazon.awssdk:apache-client:2.25.31 - https://aws.amazon.com/sdkforjava/http-clients/apache-client)
  • (Apache License, Version 2.0) AWS Java SDK :: Auth (software.amazon.awssdk:auth:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: AWS Core (software.amazon.awssdk:aws-core:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (software.amazon.awssdk:aws-json-protocol:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Query Protocol (software.amazon.awssdk:aws-query-protocol:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums (software.amazon.awssdk:checksums:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums SPI (software.amazon.awssdk:checksums-spi:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Endpoints SPI (software.amazon.awssdk:endpoints-spi:2.25.31 - https://aws.amazon.com/sdkforjava/core/endpoints-spi)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth (software.amazon.awssdk:http-auth:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth AWS (software.amazon.awssdk:http-auth-aws:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth SPI (software.amazon.awssdk:http-auth-spi:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Client Interface (software.amazon.awssdk:http-client-spi:2.25.31 - https://aws.amazon.com/sdkforjava/http-client-spi)
  • (Apache License, Version 2.0) AWS Java SDK :: Identity SPI (software.amazon.awssdk:identity-spi:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Json Utils (software.amazon.awssdk:json-utils:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Metrics SPI (software.amazon.awssdk:metrics-spi:2.25.31 - https://aws.amazon.com/sdkforjava/core/metrics-spi)
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (software.amazon.awssdk:netty-nio-client:2.25.31 - https://aws.amazon.com/sdkforjava/http-clients/netty-nio-client)
  • (Apache License, Version 2.0) AWS Java SDK :: Profiles (software.amazon.awssdk:profiles:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Protocol Core (software.amazon.awssdk:protocol-core:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Regions (software.amazon.awssdk:regions:2.25.31 - https://aws.amazon.com/sdkforjava/core/regions)
  • (Apache License, Version 2.0) AWS Java SDK :: SDK Core (software.amazon.awssdk:sdk-core:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (software.amazon.awssdk:ssm:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS STS (software.amazon.awssdk:sts:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Third Party :: Jackson-core (software.amazon.awssdk:third-party-jackson-core:2.25.31 - https://aws.amazon.com/sdkforjava)
  • (Apache License, Version 2.0) AWS Java SDK :: Utilities (software.amazon.awssdk:utils:2.25.31 - https://aws.amazon.com/sdkforjava/utils)
  • (Apache License, Version 2.0) AWS Event Stream (software.amazon.eventstream:eventstream:1.0.1 - https://github.com/awslabs/aws-eventstream-java)
  • (Apache-2.0) CPE Parser (us.springett:cpe-parser:2.0.3 - https://github.com/stevespringett/CPE-Parser)