Skip to content
Tools / reitti / Dependencies

Dependency Analysis

reitti

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

100% Freshness
203 Dependencies
0 Outdated
0 Stale
Avg Behind

Dependency List

Latest release v4.0.5

Dependency Type Current Latest Behind CVE License
org.apache.tomcat.embed:tomcat-embed-core
maven
Transitive 10.1.43 12 critical Apache-2.0
org.springframework.security:spring-security-web
maven
Transitive 6.5.2 1 critical Apache-2.0
org.thymeleaf:thymeleaf
maven
Transitive 3.1.3.RELEASE 3 critical Apache-2.0
org.thymeleaf:thymeleaf-spring6
maven
Transitive 3.1.3.RELEASE 3 critical Apache-2.0
io.netty:netty-codec
maven
Transitive 4.1.123.Final 2 high Apache-2.0
org.assertj:assertj-core
maven
Transitive 3.27.3 1 high Apache-2.0
org.postgresql:postgresql
maven
Direct 42.7.7 1 high BSD-2-Clause
org.springframework.boot:spring-boot
maven
Transitive 3.5.4 1 high Apache-2.0
org.springframework.boot:spring-boot-starter-actuator
maven
Direct 3.5.4 2 high Apache-2.0
org.springframework.security:spring-security-core
maven
Transitive 6.5.2 3 high Apache-2.0
org.springframework:spring-core
maven
Transitive 6.2.9 1 high Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
ch.qos.logback:logback-core
maven
Transitive 1.5.18 2 medium (EPL-1.0 AND LGPL-2.1 AND LGPL-2.1-only) OR (EPL-1.0 AND LGPL-2.1-only)
com.fasterxml.jackson.core:jackson-core
maven
Transitive 2.19.2 1 medium Apache-2.0 AND BSD-2-Clause AND MIT
com.nimbusds:nimbus-jose-jwt
maven
Transitive 9.37.3 1 medium Apache-2.0
org.apache.commons:commons-compress
maven
Transitive 1.24.0 2 medium Apache-2.0 AND LicenseRef-scancode-public-domain AND bzip2-1.0.6
org.springframework.security:spring-security-oauth2-jose
maven
Transitive 6.5.2 1 medium Apache-2.0
org.springframework:spring-webmvc
maven
Transitive 6.2.9 5 medium Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
actions/checkout
githubactions
Direct 4.*.* Unknown
actions/checkout
githubactions
Direct 6.*.* Unknown
actions/download-artifact
githubactions
Direct 4.*.* Unknown
actions/setup-java
githubactions
Direct 4.*.* Unknown
actions/setup-java
githubactions
Direct 5.*.* Unknown
actions/upload-artifact
githubactions
Direct 7.*.* Unknown
actions/upload-artifact
githubactions
Direct 4.*.* Unknown
ch.qos.logback:logback-classic
maven
Transitive 1.5.18 (EPL-1.0 AND LGPL-2.1 AND LGPL-2.1-only) OR (EPL-1.0 AND LGPL-2.1-only)
com.fasterxml.jackson.core:jackson-annotations
maven
Transitive 2.19.2 Apache-2.0
com.fasterxml.jackson.core:jackson-databind
maven
Direct 2.19.2 Apache-2.0
com.fasterxml.jackson.core:jackson-databind
Direct Unknown
com.fasterxml.jackson.core:jackson-databind
maven
Direct 2.15.2 Apache-2.0
com.fasterxml.jackson.dataformat:jackson-dataformat-toml
maven
Transitive 2.19.2 Apache-2.0
com.fasterxml.jackson.datatype:jackson-datatype-jdk8
maven
Transitive 2.19.2 Apache-2.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310
maven
Transitive 2.19.2 Apache-2.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310
Direct Unknown
com.fasterxml.jackson.datatype:jackson-datatype-jsr310
maven
Direct 2.15.2 Apache-2.0
com.fasterxml.jackson.module:jackson-module-parameter-names
maven
Transitive 2.19.2 Apache-2.0
com.fasterxml:classmate
maven
Transitive 1.7.0 Apache-2.0
com.github.docker-java:docker-java-api
maven
Transitive 3.3.4 Apache-2.0
com.github.docker-java:docker-java-transport
maven
Transitive 3.3.4 Apache-2.0
com.github.docker-java:docker-java-transport-zerodep
maven
Transitive 3.3.4 Apache-2.0
com.github.stephenc.jcip:jcip-annotations
maven
Transitive 1.0-1 Apache-2.0
com.hivemq:hivemq-mqtt-client
maven
Direct 1.3.12 Apache-2.0
com.jayway.jsonpath:json-path
maven
Transitive 2.9.0 Apache-2.0
com.nimbusds:content-type
maven
Transitive 2.2 Apache-2.0
com.nimbusds:lang-tag
maven
Transitive 1.7 Apache-2.0
com.nimbusds:oauth2-oidc-sdk
maven
Transitive 9.43.6 Apache-2.0
com.rabbitmq:amqp-client
maven
Transitive 5.25.0 Unknown
com.redis:testcontainers-redis
maven
Direct 2.2.4 Apache-2.0
com.redis:testcontainers-redis
maven
Direct 2.2.4 Apache-2.0
com.redis:testcontainers-redis-common
maven
Transitive 2.2.4 Apache-2.0
com.vaadin.external.google:android-json
maven
Transitive 0.0.20131108.vaadin1 Apache-2.0
com.zaxxer:HikariCP
maven
Transitive 6.3.1 Apache-2.0
de.siegmar:fastcsv
maven
Direct 2.2.0 MIT
de.siegmar:fastcsv
maven
Direct 2.2.0 MIT
docker/build-push-action
githubactions
Direct 6.*.* Unknown
docker/login-action
githubactions
Direct 3.*.* Unknown
docker/login-action
githubactions
Direct 2.*.* Unknown
docker/metadata-action
githubactions
Direct 5.*.* Unknown
docker/setup-buildx-action
githubactions
Direct 3.*.* Unknown
docker/setup-qemu-action
githubactions
Direct 3.*.* Unknown
io.github.git-commit-id:git-commit-id-maven-plugin
maven
Direct 9.0.1 Unknown
io.lettuce:lettuce-core
maven
Transitive 6.6.0.RELEASE MIT
io.micrometer:micrometer-commons
maven
Transitive 1.15.2 Apache-2.0
io.micrometer:micrometer-core
maven
Transitive 1.15.2 Apache-2.0
io.micrometer:micrometer-jakarta9
maven
Transitive 1.15.2 Apache-2.0
io.micrometer:micrometer-observation
maven
Transitive 1.15.2 Apache-2.0
io.netty:netty-buffer
maven
Transitive 4.1.123.Final Apache-2.0
io.netty:netty-common
maven
Transitive 4.1.123.Final Apache-2.0
io.netty:netty-handler
maven
Transitive 4.1.123.Final Apache-2.0
io.netty:netty-resolver
maven
Transitive 4.1.123.Final Apache-2.0
io.netty:netty-transport
maven
Transitive 4.1.123.Final Apache-2.0
io.netty:netty-transport-native-unix-common
maven
Transitive 4.1.123.Final Apache-2.0
io.projectreactor:reactor-core
maven
Transitive 3.7.8 Apache-2.0
jakarta.activation:jakarta.activation-api
maven
Transitive 2.1.3 EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
jakarta.annotation:jakarta.annotation-api
maven
Transitive 2.1.1 EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
jakarta.validation:jakarta.validation-api
maven
Transitive 3.0.2 Apache-2.0
jakarta.xml.bind:jakarta.xml.bind-api
maven
Transitive 4.0.2 BSD-3-Clause
junit:junit
maven
Transitive 4.13.2 EPL-1.0
net.bytebuddy:byte-buddy
maven
Transitive 1.17.6 Apache-2.0 AND BSD-3-Clause
net.bytebuddy:byte-buddy-agent
maven
Transitive 1.17.6 Apache-2.0
net.coobird:thumbnailator
maven
Direct 0.4.21 Unknown
net.iakovlev:timeshape
maven
Direct 2025b.28 MIT
net.java.dev.jna:jna
maven
Transitive 5.13.0 Apache-2.0 OR LGPL-2.1-or-later
net.minidev:accessors-smart
maven
Transitive 2.5.2 Apache-2.0
net.minidev:json-smart
maven
Transitive 2.5.2 Apache-2.0
org.apache.httpcomponents.client5:httpclient5
maven
Direct 5.2.1 Apache-2.0
org.apache.logging.log4j:log4j-api
maven
Transitive 2.24.3 Apache-2.0
org.apache.logging.log4j:log4j-to-slf4j
maven
Transitive 2.24.3 Apache-2.0 AND MIT
org.apache.maven.plugins:maven-compiler-plugin
maven
Direct 3.11.0 Apache-2.0
org.apache.maven.plugins:maven-dependency-plugin
Direct Unknown
org.apache.maven.plugins:maven-shade-plugin
maven
Direct 3.4.1 Apache-2.0
org.apache.maven.plugins:maven-surefire-plugin
Direct Unknown
org.apache.tomcat.embed:tomcat-embed-el
maven
Transitive 10.1.43 Apache-2.0
org.apache.tomcat.embed:tomcat-embed-websocket
maven
Transitive 10.1.43 Apache-2.0
org.apiguardian:apiguardian-api
maven
Transitive 1.1.2 Apache-2.0
org.attoparser:attoparser
maven
Transitive 2.0.7.RELEASE Apache-2.0
org.awaitility:awaitility
maven
Transitive 4.2.2 Apache-2.0
org.checkerframework:checker-qual
maven
Transitive 3.49.3 MIT
org.flywaydb:flyway-core
maven
Direct 11.7.2 Apache-2.0
org.flywaydb:flyway-core
Direct Unknown
org.flywaydb:flyway-database-postgresql
maven
Direct 11.7.2 Unknown
org.flywaydb:flyway-database-postgresql
Direct Unknown
org.hamcrest:hamcrest
maven
Transitive 3.0 BSD-3-Clause
org.hamcrest:hamcrest-core
maven
Transitive 3.0 BSD-3-Clause
org.hdrhistogram:HdrHistogram
maven
Transitive 2.2.2 BSD-2-Clause AND BSD-3-Clause AND CC0-1.0
org.hibernate.validator:hibernate-validator
maven
Transitive 8.0.2.Final Apache-2.0
org.jacoco:jacoco-maven-plugin
maven
Direct 0.8.14 EPL-2.0 OR (Apache-2.0 AND EPL-2.0)
org.jboss.logging:jboss-logging
maven
Transitive 3.6.1.Final Apache-2.0
org.jetbrains:annotations
maven
Transitive 17.0.0 Apache-2.0
org.junit.jupiter:junit-jupiter
maven
Transitive 5.12.2 LicenseRef-scancode-unknown-license-reference AND EPL-2.0
org.junit.jupiter:junit-jupiter-api
maven
Transitive 5.12.2 LicenseRef-scancode-unknown-license-reference AND EPL-2.0
org.junit.jupiter:junit-jupiter-engine
maven
Transitive 5.12.2 LicenseRef-scancode-unknown-license-reference AND EPL-2.0
org.junit.jupiter:junit-jupiter-params
maven
Transitive 5.12.2 LicenseRef-scancode-unknown-license-reference AND Apache-2.0 AND EPL-2.0
org.junit.platform:junit-platform-commons
maven
Transitive 1.12.2 LicenseRef-scancode-unknown-license-reference AND EPL-2.0
org.junit.platform:junit-platform-engine
maven
Transitive 1.12.2 LicenseRef-scancode-unknown-license-reference AND EPL-2.0
org.latencyutils:LatencyUtils
maven
Transitive 2.0.3 CC0-1.0
org.locationtech.jts:jts-core
maven
Direct 1.20.0 BSD-3-Clause OR EPL-2.0
org.locationtech.jts:jts-core
maven
Direct 1.20.0 BSD-3-Clause OR EPL-2.0
org.mockito:mockito-core
maven
Direct 5.17.0 MIT
org.mockito:mockito-core
Direct Unknown
org.mockito:mockito-junit-jupiter
maven
Transitive 5.17.0 MIT
org.objenesis:objenesis
maven
Transitive 3.3 Apache-2.0
org.opentest4j:opentest4j
maven
Transitive 1.3.0 Apache-2.0
org.ow2.asm:asm
maven
Transitive 9.7.1 BSD-3-Clause
org.postgresql:postgresql
Direct Unknown
org.reactivestreams:reactive-streams
maven
Transitive 1.0.4 MIT-0
org.rnorth.duct-tape:duct-tape
maven
Transitive 1.0.8 MIT
org.skyscreamer:jsonassert
maven
Transitive 1.5.3 Apache-2.0
org.slf4j:jul-to-slf4j
maven
Transitive 2.0.17 MIT
org.slf4j:slf4j-api
maven
Transitive 2.0.17 MIT
org.springframework.amqp:spring-amqp
maven
Transitive 3.2.6 Apache-2.0
org.springframework.amqp:spring-rabbit
maven
Transitive 3.2.6 Apache-2.0
org.springframework.boot:spring-boot-actuator
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-actuator-autoconfigure
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-autoconfigure
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-maven-plugin
Direct Unknown
org.springframework.boot:spring-boot-starter
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-actuator
Direct Unknown
org.springframework.boot:spring-boot-starter-amqp
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-cache
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-cache
Direct Unknown
org.springframework.boot:spring-boot-starter-data-redis
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-data-redis
Direct Unknown
org.springframework.boot:spring-boot-starter-jdbc
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-jdbc
Direct Unknown
org.springframework.boot:spring-boot-starter-json
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-logging
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-oauth2-client
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-oauth2-client
Direct Unknown
org.springframework.boot:spring-boot-starter-security
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-security
Direct Unknown
org.springframework.boot:spring-boot-starter-test
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-test
Direct Unknown
org.springframework.boot:spring-boot-starter-thymeleaf
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-thymeleaf
Direct Unknown
org.springframework.boot:spring-boot-starter-tomcat
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-validation
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-validation
Direct Unknown
org.springframework.boot:spring-boot-starter-web
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-starter-web
Direct Unknown
org.springframework.boot:spring-boot-test
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-test-autoconfigure
maven
Transitive 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-testcontainers
maven
Direct 3.5.4 Apache-2.0
org.springframework.boot:spring-boot-testcontainers
Direct Unknown
org.springframework.data:spring-data-commons
maven
Transitive 3.5.2 Apache-2.0 AND LicenseRef-scancode-unknown-license-reference
org.springframework.data:spring-data-keyvalue
maven
Transitive 3.5.2 Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference
org.springframework.data:spring-data-redis
maven
Transitive 3.5.2 Apache-2.0
org.springframework.retry:spring-retry
maven
Transitive 2.0.12 Apache-2.0
org.springframework.security:spring-security-config
maven
Transitive 6.5.2 Apache-2.0
org.springframework.security:spring-security-crypto
maven
Transitive 6.5.2 Apache-2.0
org.springframework.security:spring-security-oauth2-client
maven
Transitive 6.5.2 Apache-2.0
org.springframework.security:spring-security-oauth2-core
maven
Transitive 6.5.2 Apache-2.0
org.springframework.security:spring-security-test
maven
Direct 6.5.2 Apache-2.0
org.springframework.security:spring-security-test
Direct Unknown
org.springframework:spring-aop
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-beans
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-context
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-context-support
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-expression
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-jcl
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-jdbc
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-messaging
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-oxm
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-test
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-tx
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.springframework:spring-web
maven
Transitive 6.2.9 Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft
org.testcontainers:database-commons
maven
Transitive 1.19.5 MIT
org.testcontainers:jdbc
maven
Transitive 1.19.5 MIT
org.testcontainers:junit-jupiter
maven
Direct 1.19.5 MIT
org.testcontainers:junit-jupiter
maven
Direct 1.21.3 MIT
org.testcontainers:postgresql
maven
Direct 1.19.5 MIT
org.testcontainers:postgresql
maven
Direct 1.21.3 MIT
org.testcontainers:rabbitmq
maven
Direct 1.19.5 MIT
org.testcontainers:testcontainers
maven
Transitive 1.19.5 MIT
org.testcontainers:testcontainers-bom
maven
Direct 2.0.2 Unknown
org.testcontainers:testcontainers-rabbitmq
maven
Direct 2.0.2 MIT
org.thymeleaf.extras:thymeleaf-extras-springsecurity6
maven
Direct 3.1.3.RELEASE Apache-2.0
org.thymeleaf.extras:thymeleaf-extras-springsecurity6
Direct Unknown
org.unbescape:unbescape
maven
Transitive 1.1.6.RELEASE Apache-2.0
org.xmlunit:xmlunit-core
maven
Transitive 2.10.3 Apache-2.0
org.yaml:snakeyaml
maven
Transitive 2.4 Apache-2.0
redis.clients.authentication:redis-authx-core
maven
Transitive 0.1.1-beta2 MIT
softprops/action-gh-release
githubactions
Direct 2.*.* Unknown

License Breakdown

Apache-2.0 98
Unknown 41
MIT 20
Apache-2.0 AND BSD-3-Clause AND EPL-1.0 AND LicenseRef-scancode-other-copyleft 14
LicenseRef-scancode-unknown-license-reference AND EPL-2.0 5
BSD-3-Clause 4
(EPL-1.0 AND LGPL-2.1 AND LGPL-2.1-only) OR (EPL-1.0 AND LGPL-2.1-only) 2
BSD-3-Clause OR EPL-2.0 2
EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0 2
Apache-2.0 AND BSD-2-Clause AND MIT 1
Apache-2.0 AND BSD-3-Clause 1
Apache-2.0 AND BSD-3-Clause AND LicenseRef-scancode-unknown-license-reference 1
Apache-2.0 AND LicenseRef-scancode-public-domain AND bzip2-1.0.6 1
Apache-2.0 AND LicenseRef-scancode-unknown-license-reference 1
Apache-2.0 AND MIT 1
Apache-2.0 OR LGPL-2.1-or-later 1
BSD-2-Clause 1
BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 1
CC0-1.0 1
EPL-1.0 1
EPL-2.0 OR (Apache-2.0 AND EPL-2.0) 1
LicenseRef-scancode-unknown-license-reference AND Apache-2.0 AND EPL-2.0 1
MIT-0 1

CVE Severity

critical 4
high 7
medium 6
low 0
unknown 0

Beta — feedback welcome: [email protected]