ruby-concurrency/concurrent-ruby

concurrent_ruby.jar included in gem has no version information included

Opened this issue · 0 comments

dominicgrindle commented

The concurrent_ruby.jar JAR file included in the gem has no version information included in the MANIFEST.MF file.

This means common dependency scanning tools like syft find the JAR, but can't determine its version, outputting the version as UNKNOWN.