sonatype/ossindex-maven

Issues

• Unsupported proxy authentication?

  #82 opened 2 years ago by rmannibucau
  4

• Fix documentation link

  #75 opened 3 years ago by farnulfo
  1

• How to configure ossindex-maven to use a proxy ?

  #73 opened 3 years ago by farnulfo
  1

• DepShield Deprecation Notice

  #81 opened 2 years ago by sonatype-depshield
  0

• Allow for external configuration of excludes

  #80 opened 2 years ago by lfvjimisola
  1

• Dont skip POM modules

  #79 opened 2 years ago by delanym
  2

• Plugin requires JAXB classes for JDK11+

  #74 opened 3 years ago by delanym
  1

• False positive on icu4j? CVE-2018-18928 applies to c/c++ icu code not icu4j

  #77 opened 2 years ago by tballison
  1

• guava fail guava 31.1-re, false positive?

  #76 opened 3 years ago by THausherr
  15

• Excludes artifacts by their group id

  #72 opened 3 years ago by Massinissab
  1

• vulnerability is not detected

  #71 opened 3 years ago by zied-ellouze
  0

• please publish site for 3.2.0

  #70 opened 3 years ago by hboutemy
  0

• unexpected behavior on scope

  #69 opened 3 years ago by zhaolida98
  4

• quiet out-of-scope

  #65 opened 3 years ago by delanym
  5

• What's the advantage of running this as part of enforcer vs using the plugin directly?

  #60 opened 3 years ago by astubbs
  5

• threading issue?

  #63 opened 3 years ago by delanym
  1

• ossindex-maven-plugin has wrong url in pom file

  #52 opened 3 years ago by jakobbraun
  0

• Excluded coordinates should not be queried in the OSS Index ?

  #66 opened 3 years ago by dvbarnz
  4

• include config in the report file

  #64 opened 3 years ago by delanym
  0

• releases

  #62 opened 3 years ago by delanym
  1

• [DepShield] (CVSS 9.8) Vulnerability due to usage of org.codehaus.plexus:plexus-utils:2.0.4

  #30 opened 3 years ago by sonatype-depshield-staging
  1

• Not compatible with Maven Enforcer Plugin 3.0.0?

  #56 opened 3 years ago by mthmulders
  4

• Does not work with version 3.0.0 of maven-enforcer-plugin

  #55 opened 3 years ago by svekar
  2

• [DepShield] (CVSS 5.9) Vulnerability due to usage of com.google.guava:guava:20.0

  #31 opened 3 years ago by sonatype-depshield-staging
  1

• Maven plugin does not decrypt encrypted proxy password

  #54 opened 4 years ago by shmyer
  0

• Is there a way to DEBUG usage of authId?

  #45 opened 4 years ago by vveider
  2

• [DepShield] (CVSS 7.5) Vulnerability due to usage of com.fasterxml.jackson.core:jackson-databind:2.9.8

  #29 opened 5 years ago by sonatype-depshield-staging
  0

• HTTP/1.1 429 Too many requests when running 'audit' in a large project

  #17 opened 6 years ago by seanf
  11

• Add JUnit report support

  #32 opened 5 years ago by ken-duck
  3

• False positive for Elasticsearch 5.6.15

  #28 opened 6 years ago by dadoonet
  6

• False positive CVE in transtive dependency

  #26 opened 6 years ago by dadoonet
  1

• Failed build with multi module build which contains a tests jar dependency

  #27 opened 6 years ago by khmarbaise
  3

• ossindex-maven-plugin is not marked @threadSafe for parallel builds

  #18 opened 6 years ago by seanf
  1

• Enable to audit at the end

  #25 opened 6 years ago by rmannibucau
  4

• NullPointerException @ org.sonatype.ossindex.maven.common.ComponentReportAssistant.match (ComponentReportAssistant.java:180)

  #23 opened 6 years ago by m0schaefer
  17

• Is there a local cache in ossindex-maven-plugin like the one in ossindex-gradle-plugin?

  #21 opened 6 years ago by gwenneg
  11

• The README.md says ossindex-maven requires Maven 3.3+ but the pom.xml says otherwise

  #20 opened 6 years ago by gwenneg
  10

• [RFE] provide information on 'fixability' of reported vulnerabilities

  #10 opened 6 years ago by McFoggy
  2

• Document relationship with OSSIndex/ossindex-maven-plugin

  #11 opened 6 years ago by ewanmellor
  3

• 'Audit' is too verbose

  #15 opened 6 years ago by seanf
  3