Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.2.0
Report Generated On: Tue, 3 Feb 2026 04:29:51 GMT
Dependencies Scanned: 4 (4 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2026-02-03T04:29:43Z
NVD API Last Modified: 2026-02-03T04:15:56Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
clojure-1.12.4.jar	cpe:2.3:a:clojure:clojure:1.12.4:::::::*	pkg:maven/org.clojure/clojure@1.12.4	Highest	22
core.specs.alpha-0.4.74.jar	cpe:2.3:a:alex_project:alex:0.4.74:::::::*	pkg:maven/org.clojure/core.specs.alpha@0.4.74	Low	17
spec.alpha-0.5.238.jar		pkg:maven/org.clojure/spec.alpha@0.5.238		26
tools.logging-1.3.1.jar	cpe:2.3:a:alex_project:alex:1.3.1:::::::*	pkg:maven/org.clojure/tools.logging@1.3.1	Low	17

Dependencies (vulnerable)

clojure-1.12.4.jar

Description:

Clojure core environment and runtime library.

License:

Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.php

File Path: /home/runner/.m2/repository/org/clojure/clojure/1.12.4/clojure-1.12.4.jar
MD5: c9e27ed601e1c83392c78fd9f3e7ecec
SHA1: 580cd548600f63b597efea7e94c3e55be2d12537
SHA256:4b81e9ba6da38c45d9cc58023c674062b8c9f0714f33ff00ded22e6a949da177

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	clojure	High
Vendor	jar	package name	clojure	Highest
Vendor	jar	package name	core	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	clojure	Low
Vendor	pom	developer email	richhickey@gmail.com	Low
Vendor	pom	developer name	Rich Hickey	Medium
Vendor	pom	groupid	org.clojure	Highest
Vendor	pom	name	clojure	High
Vendor	pom	url	http://clojure.org/	Highest
Product	file	name	clojure	High
Product	jar	package name	clojure	Highest
Product	jar	package name	core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	clojure	Highest
Product	pom	developer email	richhickey@gmail.com	Low
Product	pom	developer name	Rich Hickey	Low
Product	pom	groupid	org.clojure	Highest
Product	pom	name	clojure	High
Product	pom	url	http://clojure.org/	Medium
Version	file	version	1.12.4	High
Version	pom	version	1.12.4	Highest

Identifiers

pkg:maven/org.clojure/clojure@1.12.4 (Confidence:High)
cpe:2.3:a:clojure:clojure:1.12.4:*:*:*:*:*:*:* (Confidence:Highest)

core.specs.alpha-0.4.74.jar

Description:

Specs for clojure.core

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/

File Path: /home/runner/.m2/repository/org/clojure/core.specs.alpha/0.4.74/core.specs.alpha-0.4.74.jar
MD5: ebd37b9a3c39e6b769fc1463737cb8d4
SHA1: d56a8d4c666ff8140e6d0a62d41263134be39254
SHA256:eb73ac08cf49ba840c88ba67beef11336ca554333d9408808d78946e0feb9ddb

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	core.specs.alpha	High
Vendor	pom	artifactid	core.specs.alpha	Low
Vendor	pom	developer id	puredanger	Medium
Vendor	pom	developer name	Alex Miller	Medium
Vendor	pom	groupid	org.clojure	Highest
Vendor	pom	name	core.specs.alpha	High
Vendor	pom	parent-artifactid	pom.contrib	Low
Product	file	name	core.specs.alpha	High
Product	pom	artifactid	core.specs.alpha	Highest
Product	pom	developer id	puredanger	Low
Product	pom	developer name	Alex Miller	Low
Product	pom	groupid	org.clojure	Highest
Product	pom	name	core.specs.alpha	High
Product	pom	parent-artifactid	pom.contrib	Medium
Version	file	version	0.4.74	High
Version	pom	parent-version	0.4.74	Low
Version	pom	version	0.4.74	Highest

Identifiers

pkg:maven/org.clojure/core.specs.alpha@0.4.74 (Confidence:High)
cpe:2.3:a:alex_project:alex:0.4.74:*:*:*:*:*:*:* (Confidence:Low)

spec.alpha-0.5.238.jar

Description:

Specification of data and functions

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/

File Path: /home/runner/.m2/repository/org/clojure/spec.alpha/0.5.238/spec.alpha-0.5.238.jar
MD5: 9f5ea5239dc04d6a8115add1e4f5f23a
SHA1: 4eb5dea521c4e6e1f68c2c47517f14a922003e60
SHA256:94cd99b6ea639641f37af4860a643b6ed399ee5a8be5d717cff0b663c8d75077

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spec.alpha	High
Vendor	jar	package name	alpha	Highest
Vendor	jar	package name	clojure	Highest
Vendor	jar	package name	clojure	Low
Vendor	jar	package name	spec	Highest
Vendor	jar	package name	spec	Low
Vendor	pom	artifactid	spec.alpha	Low
Vendor	pom	developer id	richhickey	Medium
Vendor	pom	developer name	Rich Hickey	Medium
Vendor	pom	groupid	org.clojure	Highest
Vendor	pom	name	spec.alpha	High
Vendor	pom	parent-artifactid	pom.contrib	Low
Product	file	name	spec.alpha	High
Product	jar	package name	alpha	Highest
Product	jar	package name	clojure	Highest
Product	jar	package name	spec	Highest
Product	jar	package name	spec	Low
Product	pom	artifactid	spec.alpha	Highest
Product	pom	developer id	richhickey	Low
Product	pom	developer name	Rich Hickey	Low
Product	pom	groupid	org.clojure	Highest
Product	pom	name	spec.alpha	High
Product	pom	parent-artifactid	pom.contrib	Medium
Version	file	version	0.5.238	High
Version	pom	parent-version	0.5.238	Low
Version	pom	version	0.5.238	Highest

Identifiers

pkg:maven/org.clojure/spec.alpha@0.5.238 (Confidence:High)

tools.logging-1.3.1.jar

Description:

Clojure logging API.

File Path: /home/runner/.m2/repository/org/clojure/tools.logging/1.3.1/tools.logging-1.3.1.jar
MD5: 0cacd8c68d9b18b60252b5e75a950b24
SHA1: f085212fd30ba7fa5031cb5fdbc2467210426ed6
SHA256:13fb97ea2472056ea0660d4f8e88b4f66486c2cfff380b82859ab3cd33592935

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tools.logging	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	tools.logging	Low
Vendor	pom	developer name	Alex Taggart	Medium
Vendor	pom	groupid	org.clojure	Highest
Vendor	pom	name	tools.logging	High
Vendor	pom	parent-artifactid	pom.contrib	Low
Product	file	name	tools.logging	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	tools.logging	Highest
Product	pom	developer name	Alex Taggart	Low
Product	pom	groupid	org.clojure	Highest
Product	pom	name	tools.logging	High
Product	pom	parent-artifactid	pom.contrib	Medium
Version	file	version	1.3.1	High
Version	pom	parent-version	1.3.1	Low
Version	pom	version	1.3.1	Highest

Identifiers

pkg:maven/org.clojure/tools.logging@1.3.1 (Confidence:High)
cpe:2.3:a:alex_project:alex:1.3.1:*:*:*:*:*:*:* (Confidence:Low)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: com.github.pmonks/urlocal 1.0.79-SNAPSHOT

Summary

Dependencies (vulnerable)

clojure-1.12.4.jar

Evidence

Identifiers

core.specs.alpha-0.4.74.jar

Evidence

Identifiers

spec.alpha-0.5.238.jar

Evidence

Identifiers

tools.logging-1.3.1.jar

Evidence

Identifiers