Skip to content
Tools / onedev / Dependencies

Dependency Analysis

onedev

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

100% Freshness
269 Dependencies
0 Outdated
0 Stale
Avg Behind

Dependency List

Latest release v15.0.5

Dependency Type Current Latest Behind CVE License
ch.qos.logback:logback-core
maven
Direct 1.4.14 4 medium LGPL-2.1
org.apache.commons:commons-lang3
maven
Direct 3.17.0 1 medium Apache-2.0
ch.qos.logback:logback-classic
maven
Direct 1.4.14 LGPL-2.1
com.fasterxml.jackson.core:jackson-annotations
maven
Direct 2.18.6 Apache-2.0
com.fasterxml.jackson.core:jackson-core
maven
Direct 2.18.6 Apache-2.0 AND BSD-2-Clause AND MIT
com.fasterxml.jackson.core:jackson-databind
maven
Direct 2.18.6 Apache-2.0
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
maven
Direct 2.18.6 Unknown
com.fasterxml.jackson.datatype:jackson-datatype-jsr310
maven
Direct 2.18.6 Apache-2.0
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
maven
Direct 2.18.6 Unknown
com.github.albfernandez:juniversalchardet
Direct Unknown
com.github.albfernandez:juniversalchardet
maven
Direct 2.4.0 LGPL-3.0
com.google.code.gson:gson
maven
Direct 2.8.9 Apache-2.0
com.google.guava:guava
Direct Unknown
com.google.guava:guava
maven
Direct 33.5.0-jre Apache-2.0
com.google.zxing:javase
Direct Unknown
com.google.zxing:javase
maven
Direct 3.2.1 Apache-2.0
com.hazelcast:hazelcast
Direct Unknown
com.hazelcast:hazelcast
maven
Direct 5.3.8 Apache-2.0
com.hazelcast:hazelcast-hibernate53
Direct Unknown
com.hazelcast:hazelcast-hibernate53
maven
Direct 2.2.1 Apache-2.0
com.joestelmach:natty
Direct Unknown
com.joestelmach:natty
maven
Direct 0.13 MIT
com.moandjiezana.toml:toml4j
maven
Direct 0.7.2 MIT
com.nimbusds:oauth2-oidc-sdk
Direct Unknown
com.nimbusds:oauth2-oidc-sdk
maven
Direct 11.28 Apache-2.0
com.slack.api:slack-api-client
maven
Direct 1.25.0 Apache-2.0
com.sun.mail:javax.mail
Direct Unknown
com.sun.mail:javax.mail
maven
Direct 1.6.2 CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0
com.thoughtworks.xstream:xstream
Direct Unknown
com.thoughtworks.xstream:xstream
maven
Direct 1.4.21 BSD-3-Clause
com.vladsch.flexmark:flexmark
Direct Unknown
com.vladsch.flexmark:flexmark
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-anchorlink
Direct Unknown
com.vladsch.flexmark:flexmark-ext-anchorlink
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-autolink
Direct Unknown
com.vladsch.flexmark:flexmark-ext-autolink
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-definition
Direct Unknown
com.vladsch.flexmark:flexmark-ext-definition
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-gfm-tasklist
Direct Unknown
com.vladsch.flexmark:flexmark-ext-gfm-tasklist
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-gitlab
Direct Unknown
com.vladsch.flexmark:flexmark-ext-gitlab
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-tables
Direct Unknown
com.vladsch.flexmark:flexmark-ext-tables
maven
Direct 0.64.8 BSD-2-Clause
com.vladsch.flexmark:flexmark-ext-toc
Direct Unknown
com.vladsch.flexmark:flexmark-ext-toc
maven
Direct 0.64.8 BSD-2-Clause
com.zaxxer:HikariCP
Direct Unknown
com.zaxxer:HikariCP
maven
Direct 2.7.9 Apache-2.0
commons-beanutils:commons-beanutils
maven
Direct 1.11.0 Apache-2.0
commons-codec:commons-codec
maven
Direct 1.13 Apache-2.0
commons-fileupload:commons-fileupload
Direct Unknown
commons-fileupload:commons-fileupload
maven
Direct 1.6.0 Apache-2.0
commons-io:commons-io
maven
Direct 2.18.0 Apache-2.0
commons-validator:commons-validator
Direct Unknown
commons-validator:commons-validator
maven
Direct 1.4.0 Apache-2.0
de.taimos:totp
Direct Unknown
de.taimos:totp
maven
Direct 1.0 Apache-2.0
dev.langchain4j:langchain4j
Direct Unknown
dev.langchain4j:langchain4j
maven
Direct 1.8.0 Unknown
dev.langchain4j:langchain4j-http-client-jdk
Direct Unknown
dev.langchain4j:langchain4j-http-client-jdk
maven
Direct 1.8.0 Unknown
dev.langchain4j:langchain4j-open-ai
Direct Unknown
dev.langchain4j:langchain4j-open-ai
maven
Direct 1.8.0 Unknown
io.onedev:agent
Direct Unknown
io.onedev:agent
maven
Direct 2.5.8 Unknown
io.onedev:commons-bootstrap
Direct Unknown
io.onedev:commons-bootstrap
maven
Direct 3.3.0 Unknown
io.onedev:commons-codeassist
Direct Unknown
io.onedev:commons-codeassist
maven
Direct 3.3.0 Unknown
io.onedev:commons-jsymbol
Direct Unknown
io.onedev:commons-jsymbol
maven
Direct 3.3.0 Unknown
io.onedev:commons-loader
Direct Unknown
io.onedev:commons-loader
maven
Direct 3.3.0 Unknown
io.onedev:commons-utils
maven
Direct 3.3.0 Unknown
io.onedev:plugin-maven
maven
Direct 2.7.0 Unknown
io.onedev:plugin-maven
maven
Direct 2.0.1 Unknown
io.onedev:server-core
maven
Direct 15.1.0 Unknown
io.onedev:server-ee
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-authenticator-ldap
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-bazel
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-cmake
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-dotnet
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-golang
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-gradle
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-maven
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-node
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-python
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-buildspec-rust
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-executor-kubernetes
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-executor-remotedocker
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-executor-remoteshell
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-executor-serverdocker
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-executor-servershell
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-bitbucketcloud
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-gitea
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-github
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-gitlab
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-jiracloud
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-url
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-import-youtrack
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-mail-gmail
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-mail-office365
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-mail-smtpimap
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-notification-discord
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-notification-ntfy
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-notification-slack
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-container
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-gem
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-helm
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-maven
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-npm
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-nuget
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-pack-pypi
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-provisioner-docker
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-provisioner-shell
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-checkstyle
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-clippy
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-clover
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-cobertura
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-coverage
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-cpd
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-cppcheck
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-gtest
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-html
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-jacoco
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-jest
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-junit
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-markdown
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-mypy
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-pmd
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-problem
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-pylint
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-roslynator
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-ruff
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-spotbugs
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-trx
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-report-unittest
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-sso-discord
maven
Direct 15.1.0 Unknown
io.onedev:server-plugin-sso-openid
maven
Direct 15.1.0 Unknown
io.onedev:server-product
Direct Unknown
javax.activation:activation
maven
Direct 1.1.1 CDDL-1.0
javax.xml.bind:jaxb-api
Direct Unknown
javax.xml.bind:jaxb-api
maven
Direct 2.3.1 CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0
jaxen:jaxen
Direct Unknown
jaxen:jaxen
maven
Direct 1.1.6 BSD-3-Clause
joda-time:joda-time
Direct Unknown
joda-time:joda-time
maven
Direct 2.2 Apache-2.0
net.bytebuddy:byte-buddy
maven
Direct 1.12.14 Apache-2.0 AND BSD-3-Clause
net.i2p.crypto:eddsa
Direct Unknown
net.i2p.crypto:eddsa
maven
Direct 0.3.0 CC0-1.0
org.antlr:antlr4-maven-plugin
Direct Unknown
org.antlr:antlr4-maven-plugin
maven
Direct 4.7.2 Unknown
org.apache.commons:commons-collections4
maven
Direct 4.1 Apache-2.0
org.apache.commons:commons-compress
Direct Unknown
org.apache.commons:commons-compress
maven
Direct 1.28.0 Apache-2.0
org.apache.commons:commons-csv
maven
Direct 1.10.0 Apache-2.0
org.apache.commons:commons-text
maven
Direct 1.10.0 Apache-2.0
org.apache.httpcomponents:httpclient
Direct Unknown
org.apache.httpcomponents:httpclient
maven
Direct 4.5.13 Apache-2.0
org.apache.lucene:lucene-analyzers-common
Direct Unknown
org.apache.lucene:lucene-analyzers-common
maven
Direct 8.7.0 Apache-2.0
org.apache.lucene:lucene-backward-codecs
Direct Unknown
org.apache.lucene:lucene-backward-codecs
maven
Direct 8.7.0 Apache-2.0
org.apache.lucene:lucene-core
Direct Unknown
org.apache.lucene:lucene-core
maven
Direct 8.7.0 Unknown
org.apache.lucene:lucene-queries
Direct Unknown
org.apache.lucene:lucene-queries
maven
Direct 8.7.0 Apache-2.0
org.apache.lucene:lucene-queryparser
Direct Unknown
org.apache.lucene:lucene-queryparser
maven
Direct 8.7.0 Apache-2.0
org.apache.maven.plugins:maven-resources-plugin
maven
Direct 2.5 Apache-2.0
org.apache.shiro:shiro-core
Direct Unknown
org.apache.shiro:shiro-core
maven
Direct 1.13.0 Apache-2.0
org.apache.shiro:shiro-guice
Direct Unknown
org.apache.shiro:shiro-guice
maven
Direct 1.13.0 Apache-2.0
org.apache.shiro:shiro-web
Direct Unknown
org.apache.shiro:shiro-web
maven
Direct 1.13.0 Apache-2.0 AND BSD-3-Clause AND MIT
org.apache.sshd:sshd-core
Direct Unknown
org.apache.sshd:sshd-core
maven
Direct 2.16.0 Apache-2.0 AND MIT
org.apache.tika:tika-core
Direct Unknown
org.apache.tika:tika-core
maven
Direct 3.2.2 Apache-2.0
org.apache.wicket:wicket-core
Direct Unknown
org.apache.wicket:wicket-core
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-devutils
Direct Unknown
org.apache.wicket:wicket-devutils
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-extensions
Direct Unknown
org.apache.wicket:wicket-extensions
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-guice
Direct Unknown
org.apache.wicket:wicket-guice
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-native-websocket-core
Direct Unknown
org.apache.wicket:wicket-native-websocket-core
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-request
Direct Unknown
org.apache.wicket:wicket-request
maven
Direct 7.18.0 Apache-2.0
org.apache.wicket:wicket-util
Direct Unknown
org.apache.wicket:wicket-util
maven
Direct 7.18.0 Apache-2.0
org.bouncycastle:bcpg-jdk18on
Direct Unknown
org.bouncycastle:bcpg-jdk18on
maven
Direct 1.84 Unknown
org.bouncycastle:bcpkix-jdk18on
Direct Unknown
org.bouncycastle:bcpkix-jdk18on
maven
Direct 1.84 Unknown
org.bouncycastle:bcprov-jdk18on
Direct Unknown
org.bouncycastle:bcprov-jdk18on
maven
Direct 1.84 Unknown
org.bouncycastle:bctls-jdk18on
Direct Unknown
org.bouncycastle:bctls-jdk18on
maven
Direct 1.84 Unknown
org.bouncycastle:bcutil-jdk18on
Direct Unknown
org.bouncycastle:bcutil-jdk18on
maven
Direct 1.84 Unknown
org.codehaus.groovy:groovy-templates
Direct Unknown
org.codehaus.groovy:groovy-templates
maven
Direct 3.0.25 Apache-2.0
org.connectbot:sshlib
maven
Direct 2.2.23 Unknown
org.dhatim:fastexcel
Direct Unknown
org.dhatim:fastexcel
maven
Direct 0.15.7 Apache-2.0
org.dom4j:dom4j
Direct Unknown
org.dom4j:dom4j
maven
Direct 2.1.3 Plexus
org.eclipse.jetty.websocket:websocket-server
Direct Unknown
org.eclipse.jetty.websocket:websocket-server
maven
Direct 9.4.57.v20241219 Apache-2.0 AND EPL-1.0 AND EPL-2.0
org.eclipse.jetty:jetty-server
Direct Unknown
org.eclipse.jetty:jetty-server
maven
Direct 9.4.57.v20241219 Apache-2.0 AND EPL-1.0 AND EPL-2.0
org.eclipse.jetty:jetty-servlet
Direct Unknown
org.eclipse.jetty:jetty-servlet
maven
Direct 9.4.57.v20241219 Apache-2.0 AND EPL-1.0 AND EPL-2.0
org.eclipse.jetty:jetty-servlets
Direct Unknown
org.eclipse.jetty:jetty-servlets
maven
Direct 9.4.57.v20241219 Apache-2.0 AND EPL-1.0 AND EPL-2.0
org.eclipse.jgit:org.eclipse.jgit.archive
Direct Unknown
org.eclipse.jgit:org.eclipse.jgit.archive
maven
Direct 6.10.1.202505221210-r Unknown
org.eclipse.jgit:org.eclipse.jgit.gpg.bc
Direct Unknown
org.eclipse.jgit:org.eclipse.jgit.gpg.bc
maven
Direct 6.10.1.202505221210-r Unknown
org.eclipse.jgit:org.eclipse.jgit.http.server
Direct Unknown
org.eclipse.jgit:org.eclipse.jgit.http.server
maven
Direct 6.10.1.202505221210-r Unknown
org.eclipse.m2e:lifecycle-mapping
maven
Direct 1.0.0 Unknown
org.glassfish.hk2:guice-bridge
Direct Unknown
org.glassfish.hk2:guice-bridge
maven
Direct 2.5.0 EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
org.glassfish.jersey.containers:jersey-container-servlet
Direct Unknown
org.glassfish.jersey.containers:jersey-container-servlet
maven
Direct 2.38 Unknown
org.glassfish.jersey.ext:jersey-bean-validation
Direct Unknown
org.glassfish.jersey.ext:jersey-bean-validation
maven
Direct 2.38 Unknown
org.glassfish.jersey.security:oauth2-client
Direct Unknown
org.glassfish.jersey.security:oauth2-client
maven
Direct 2.38 Unknown
org.glassfish:javax.el
Direct Unknown
org.glassfish:javax.el
maven
Direct 3.0.0 GPL-2.0-only OR CDDL-1.1
org.hibernate.validator:hibernate-validator
Direct Unknown
org.hibernate.validator:hibernate-validator
maven
Direct 6.2.5 Unknown
org.hibernate:hibernate-core
Direct Unknown
org.hibernate:hibernate-core
maven
Direct 5.4.24 Unknown
org.hibernate:hibernate-entitymanager
Direct Unknown
org.hibernate:hibernate-entitymanager
maven
Direct 5.4.24 Unknown
org.hibernate:hibernate-hikaricp
Direct Unknown
org.hibernate:hibernate-hikaricp
maven
Direct 5.4.24 Unknown
org.hibernate:hibernate-jcache
Direct Unknown
org.hibernate:hibernate-jcache
maven
Direct 5.4.24 Unknown
org.hsqldb:hsqldb
Direct Unknown
org.hsqldb:hsqldb
maven
Direct 2.7.1 BSD-3-Clause
org.javassist:javassist
maven
Direct 3.29.1-GA (Apache-2.0 AND LGPL-2.1 AND LGPL-2.1-only AND MPL-1.1) OR (Apache-2.0 AND LGPL-2.1-only AND MPL-1.1)
org.jetbrains.xodus:xodus-entity-store
Direct Unknown
org.jetbrains.xodus:xodus-entity-store
maven
Direct 2.0.1 Apache-2.0
org.jetbrains:annotations
maven
Direct 20.1.0 Apache-2.0
org.json:json
Direct Unknown
org.json:json
maven
Direct 20231013 LicenseRef-scancode-public-domain
org.objenesis:objenesis
Direct Unknown
org.objenesis:objenesis
maven
Direct 3.2 Apache-2.0
org.ocpsoft.prettytime:prettytime
Direct Unknown
org.ocpsoft.prettytime:prettytime
maven
Direct 4.0.1 Unknown
org.ow2.asm:asm-util
maven
Direct 9.2 BSD-3-Clause
org.quartz-scheduler:quartz
Direct Unknown
org.quartz-scheduler:quartz
maven
Direct 2.3.2 Apache-2.0
org.slf4j:jul-to-slf4j
maven
Direct 2.0.9 MIT
org.slf4j:log4j-over-slf4j
maven
Direct 2.0.9 Apache-2.0
org.slf4j:slf4j-api
maven
Direct 2.0.9 MIT
org.unbescape:unbescape
Direct Unknown
org.unbescape:unbescape
maven
Direct 1.1.2 Unknown
org.yaml:snakeyaml
Direct Unknown
org.yaml:snakeyaml
maven
Direct 2.2 Apache-2.0

License Breakdown

Unknown 185
Apache-2.0 47
BSD-2-Clause 8
Apache-2.0 AND EPL-1.0 AND EPL-2.0 4
BSD-3-Clause 4
MIT 4
CDDL-1.1 OR GPL-2.0-only WITH Classpath-exception-2.0 2
LGPL-2.1 2
(Apache-2.0 AND LGPL-2.1 AND LGPL-2.1-only AND MPL-1.1) OR (Apache-2.0 AND LGPL-2.1-only AND MPL-1.1) 1
Apache-2.0 AND BSD-2-Clause AND MIT 1
Apache-2.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-3-Clause AND MIT 1
Apache-2.0 AND MIT 1
CC0-1.0 1
CDDL-1.0 1
EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0 1
GPL-2.0-only OR CDDL-1.1 1
LGPL-3.0 1
LicenseRef-scancode-public-domain 1
Plexus 1

CVE Severity

critical 0
high 0
medium 2
low 0
unknown 0

Beta — feedback welcome: [email protected]