1<!--
2This file is part of Dependency-Check.
3
4Licensed under the Apache License, Version 2.0 (the "License");
5you may not use this file except in compliance with the License.
6You may obtain a copy of the License at
7
8    http://www.apache.org/licenses/LICENSE-2.0
9
10Unless required by applicable law or agreed to in writing, software
11distributed under the License is distributed on an "AS IS" BASIS,
12WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13See the License for the specific language governing permissions and
14limitations under the License.
15
16Copyright (c) 2012 - Jeremy Long
17-->
18<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
19    <modelVersion>4.0.0</modelVersion>
20
21    <groupId>org.owasp</groupId>
22    <artifactId>dependency-check-parent</artifactId>
23    <version>3.1.1</version>
24    <packaging>pom</packaging>
25
26    <modules>
27        <module>dependency-check-core</module>
28        <module>dependency-check-cli</module>
29        <module>dependency-check-ant</module>
30        <module>dependency-check-maven</module>
31        <module>dependency-check-utils</module>
32        <module>dependency-check-plugin</module>
33        <module>build-reporting</module>
34    </modules>
35    <name>Dependency-Check</name>
36    <url>https://github.com/jeremylong/DependencyCheck.git</url>
37    <description>dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities.</description>
38    <inceptionYear>2012</inceptionYear>
39
40    <organization>
41        <name>OWASP</name>
42        <url>http://www.owasp.org</url>
43    </organization>
44
45    <developers>
46        <developer>
47            <name>Jeremy Long</name>
48            <email>jeremy.long@owasp.org</email>
49            <organization>OWASP</organization>
50            <organizationUrl>https://www.owasp.org/</organizationUrl>
51            <roles>
52                <role>architect</role>
53                <role>developer</role>
54            </roles>
55        </developer>
56        <developer>
57            <name>Steve Springett</name>
58            <email>Steve.Springett@owasp.org</email>
59            <organization>OWASP</organization>
60            <organizationUrl>https://www.owasp.org/</organizationUrl>
61            <roles>
62                <role>developer</role>
63            </roles>
64        </developer>
65        <developer>
66            <name>Will Stranathan</name>
67            <email>Will.Stranathan@owasp.org</email>
68            <organization>OWASP</organization>
69            <organizationUrl>https://www.owasp.org/</organizationUrl>
70            <roles>
71                <role>developer</role>
72            </roles>
73        </developer>
74        <developer>
75            <name>Dale Visser</name>
76            <email>dvisser@ida.org</email>
77            <organization>Institute for Defense Analyses</organization>
78            <organizationUrl>https://www.ida.org/</organizationUrl>
79            <roles>
80                <role>developer</role>
81            </roles>
82        </developer>
83    </developers>
84    <contributors>
85        <contributor>
86            <name>Hugo Costa</name>
87            <organization>OWASP</organization>
88            <organizationUrl>https://www.owasp.org/</organizationUrl>
89            <roles>
90                <role>logo design</role>
91            </roles>
92        </contributor>
93    </contributors>
94    <scm>
95        <connection>scm:git:git@github.com:jeremylong/DependencyCheck.git</connection>
96        <url>https://github.com/jeremylong/DependencyCheck</url>
97        <developerConnection>scm:git:git@github.com:jeremylong/DependencyCheck.git</developerConnection>
98        <tag>HEAD</tag>
99    </scm>
100    <issueManagement>
101        <system>github</system>
102        <url>https://github.com/jeremylong/DependencyCheck/issues</url>
103    </issueManagement>
104    <ciManagement>
105        <system>travis-ci</system>
106        <url>https://travis-ci.org/jeremylong/DependencyCheck</url>
107    </ciManagement>
108    <mailingLists>
109        <mailingList>
110            <name>Dependency Check</name>
111            <subscribe>dependency-check+subscribe@googlegroups.com</subscribe>
112            <unsubscribe>dependency-check+unsubscribe@googlegroups.com</unsubscribe>
113            <post>dependency-check@googlegroups.com</post>
114            <archive>https://groups.google.com/forum/?fromgroups#!forum/dependency-check</archive>
115        </mailingList>
116    </mailingLists>
117    <licenses>
118        <license>
119            <name>The Apache Software License, Version 2.0</name>
120            <url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
121        </license>
122    </licenses>
123    <properties>
124        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
125        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
126        <github.global.server>github</github.global.server>
127        <apache.lucene.version>5.5.5</apache.lucene.version>
128        <apache.ant.version>1.9.9</apache.ant.version>
129        <!--upgrading to the 1.8 requires Java 8 compatability  - we are maintaining 7 atm-->
130        <slf4j.version>1.7.25</slf4j.version>
131        <logback.version>1.2.3</logback.version>
132        <!-- Note that Maven will use classes from the distro, ignoring declared dependencies for Maven core... -->
133        <maven.api.version>3.1.0</maven.api.version>
134        <reporting.checkstyle-plugin.version>2.17</reporting.checkstyle-plugin.version>
135        <reporting.pmd-plugin.version>3.6</reporting.pmd-plugin.version>
136        <doxia-module-markdown.version>1.7</doxia-module-markdown.version>
137        <maven-antrun-plugin.version>1.8</maven-antrun-plugin.version>
138        <maven-dependency-plugin.version>3.0.2</maven-dependency-plugin.version>
139        <maven-javadoc-plugin.version>3.0.0-M1</maven-javadoc-plugin.version>
140        <maven-jxr-plugin.version>2.5</maven-jxr-plugin.version>
141        <maven-project-info-reports-plugin.version>2.9</maven-project-info-reports-plugin.version>
142        <maven-surefire-report-plugin.version>2.20.1</maven-surefire-report-plugin.version>
143        <jacoco-maven-plugin.version>0.7.9</jacoco-maven-plugin.version>
144        <findbugs-maven-plugin.version>3.0.5</findbugs-maven-plugin.version>
145        <taglist-maven-plugin.version>2.4</taglist-maven-plugin.version>
146        <versions-maven-plugin.version>2.5</versions-maven-plugin.version>
147
148        <!-- analysis core (used by Jenkins) uses 1.6-->
149        <joda-time.version>1.6</joda-time.version>
150        <com.google.code.findbugs.annotations.version>3.0.1u2</com.google.code.findbugs.annotations.version>
151        <com.google.code.gson.version>2.8.2</com.google.code.gson.version>
152        <com.h2database.version>1.4.196</com.h2database.version>
153        <commons-cli.version>1.4</commons-cli.version>
154        <commons-io.version>2.6</commons-io.version>
155
156        <!--upgrading beyond lang3 3.4 may cause issues with the Jenkins plugin-->
157        <commons-lang3.version>3.4</commons-lang3.version>
158        <com.sun.mail.mailapi.version>1.6.0</com.sun.mail.mailapi.version>
159        <junit.version>4.12</junit.version>
160        <hamcrest-core.version>1.3</hamcrest-core.version>
161        <org.jmockit.version>1.38</org.jmockit.version>
162
163        <jsoup.version>1.11.2</jsoup.version>
164        <commons-compress.version>1.15</commons-compress.version>
165        <org.apache.maven.shared.file-management.version>3.0.0</org.apache.maven.shared.file-management.version>
166        <maven-plugin-testing-harness.version>3.3.0</maven-plugin-testing-harness.version>
167        <maven-plugin-annotations.version>3.5.1</maven-plugin-annotations.version>
168        <maven-reporting-api.version>3.0</maven-reporting-api.version>
169        <commons-collections.version>3.2.2</commons-collections.version>
170        <org.apache.velocity.version>1.7</org.apache.velocity.version>
171        <plexus-sec-dispatcher.version>1.4</plexus-sec-dispatcher.version>
172
173        <!-- upgrading beyond 2.2 requires reworking the dependency resolution -->
174        <maven-dependency-tree.version>2.2</maven-dependency-tree.version>
175
176        <org.glassfish.javax.json.version>1.0.4</org.glassfish.javax.json.version>
177        <maven-artifact-transfer.version>0.9.1</maven-artifact-transfer.version>
178
179        <surefireArgLine/>
180    </properties>
181    <distributionManagement>
182        <snapshotRepository>
183            <id>snapshot</id>
184            <name>snapshot</name>
185            <url>https://dependencycheck.jfrog.io/dependencycheck/libs-snapshot-local</url>
186        </snapshotRepository>
187        <repository>
188            <id>release</id>
189            <name>release</name>
190            <url>https://dependencycheck.jfrog.io/dependencycheck/libs-release-local</url>
191        </repository>
192        <site>
193            <id>gh-pages</id>
194            <name>gh-pages</name>
195            <url>https://jeremylong.github.io/DependencyCheck/</url>
196        </site>
197    </distributionManagement>
198    <build>
199        <defaultGoal>clean install</defaultGoal>
200        <pluginManagement>
201            <plugins>
202                <plugin>
203                    <groupId>org.codehaus.mojo</groupId>
204                    <artifactId>appassembler-maven-plugin</artifactId>
205                    <version>1.10</version>
206                </plugin>
207                <plugin>
208                    <groupId>org.jacoco</groupId>
209                    <artifactId>jacoco-maven-plugin</artifactId>
210                    <version>0.7.9</version>
211                </plugin>
212                <plugin>
213                    <groupId>org.apache.maven.plugins</groupId>
214                    <artifactId>maven-assembly-plugin</artifactId>
215                    <version>3.0.0</version>
216                </plugin>
217                <plugin>
218                    <groupId>org.apache.maven.plugins</groupId>
219                    <artifactId>maven-clean-plugin</artifactId>
220                    <version>3.0.0</version>
221                </plugin>
222                <plugin>
223                    <groupId>org.apache.maven.plugins</groupId>
224                    <artifactId>maven-compiler-plugin</artifactId>
225                    <version>3.6.1</version>
226                </plugin>
227                <plugin>
228                    <groupId>org.apache.maven.plugins</groupId>
229                    <artifactId>maven-dependency-plugin</artifactId>
230                    <version>3.0.0</version>
231                </plugin>
232                <plugin>
233                    <groupId>org.apache.maven.plugins</groupId>
234                    <artifactId>maven-enforcer-plugin</artifactId>
235                    <version>3.0.0-M1</version>
236                </plugin>
237                <plugin>
238                    <groupId>org.codehaus.mojo</groupId>
239                    <artifactId>animal-sniffer-maven-plugin</artifactId>
240                    <version>1.16</version>
241                </plugin>
242                <plugin>
243                    <groupId>org.apache.maven.plugins</groupId>
244                    <artifactId>maven-deploy-plugin</artifactId>
245                    <version>2.8.2</version>
246                </plugin>
247                <plugin>
248                    <groupId>org.apache.maven.plugins</groupId>
249                    <artifactId>maven-failsafe-plugin</artifactId>
250                    <version>2.20</version>
251                </plugin>
252                <plugin>
253                    <groupId>org.apache.maven.plugins</groupId>
254                    <artifactId>maven-gpg-plugin</artifactId>
255                    <version>1.6</version>
256                </plugin>
257                <plugin>
258                    <groupId>org.apache.maven.plugins</groupId>
259                    <artifactId>maven-install-plugin</artifactId>
260                    <version>2.5.2</version>
261                </plugin>
262                <plugin>
263                    <groupId>org.apache.maven.plugins</groupId>
264                    <artifactId>maven-jar-plugin</artifactId>
265                    <version>3.0.2</version>
266                </plugin>
267                <plugin>
268                    <groupId>org.apache.maven.plugins</groupId>
269                    <artifactId>maven-release-plugin</artifactId>
270                    <version>2.5.3</version>
271                </plugin>
272                <plugin>
273                    <groupId>org.apache.maven.plugins</groupId>
274                    <artifactId>maven-resources-plugin</artifactId>
275                    <version>3.0.2</version>
276                </plugin>
277                <plugin>
278                    <groupId>org.apache.maven.plugins</groupId>
279                    <artifactId>maven-site-plugin</artifactId>
280                    <version>3.6</version>
281                </plugin>
282                <plugin>
283                    <groupId>org.apache.maven.plugins</groupId>
284                    <artifactId>maven-surefire-plugin</artifactId>
285                    <version>2.20</version>
286                </plugin>
287                <plugin>
288                    <groupId>org.apache.maven.plugins</groupId>
289                    <artifactId>maven-antrun-plugin</artifactId>
290                    <version>1.8</version>
291                </plugin>
292                <plugin>
293                    <groupId>org.apache.maven.plugins</groupId>
294                    <artifactId>maven-source-plugin</artifactId>
295                    <version>3.0.1</version>
296                </plugin>
297                <plugin>
298                    <groupId>org.apache.maven.plugins</groupId>
299                    <artifactId>maven-javadoc-plugin</artifactId>
300                    <version>2.10.4</version>
301                </plugin>
302                <plugin>
303                    <groupId>org.apache.maven.plugins</groupId>
304                    <artifactId>maven-invoker-plugin</artifactId>
305                    <version>3.0.1</version>
306                    <dependencies>
307                        <dependency>
308                            <groupId>org.codehaus.groovy</groupId>
309                            <artifactId>groovy-all</artifactId>
310                            <version>2.4.11</version>
311                        </dependency>
312                    </dependencies>
313                </plugin>
314            </plugins>
315        </pluginManagement>
316        <plugins>
317            <plugin>
318                <groupId>org.codehaus.gmavenplus</groupId>
319                <artifactId>gmavenplus-plugin</artifactId>
320                <!-- upgrading beyond 1.5 will cause the build to fail on Java 7 -->
321                <version>1.5</version>
322                <dependencies>
323                    <dependency>
324                        <groupId>org.codehaus.groovy</groupId>
325                        <artifactId>groovy-all</artifactId>
326                        <version>2.4.12</version>
327                        <scope>runtime</scope>
328                    </dependency>
329                </dependencies>
330                <executions>
331                    <execution>
332                        <id>add-dynamic-properties-pc</id>
333                        <phase>pre-clean</phase>
334                        <goals>
335                            <goal>execute</goal>
336                        </goals>
337                    </execution>
338                    <execution>
339                        <id>add-dynamic-properties-init</id>
340                        <phase>initialize</phase>
341                        <goals>
342                            <goal>execute</goal>
343                        </goals>
344                    </execution>
345                </executions>
346                <configuration>
347                    <scripts>
348                        <script><![CDATA[
349                        if ("dependency-check-parent".equals("${project.artifactId}")) {
350                            config = "file:///${project.basedir}/src/main/config"
351                        } else {
352                            config = "file:///${project.basedir}/../src/main/config"
353                        }
354                        project.properties['odc.config']= config
355                        ]]></script>
356                    </scripts>
357                </configuration>
358            </plugin>
359            <plugin>
360                <groupId>org.codehaus.mojo</groupId>
361                <artifactId>versions-maven-plugin</artifactId>
362                <version>2.5</version>
363                <executions>
364                    <execution>
365                        <phase>pre-clean</phase>
366                        <goals>
367                            <goal>update-properties</goal>
368                        </goals>
369                        <configuration>
370                            <allowSnapshots>false</allowSnapshots>
371                            <rulesUri>${odc.config}/version-rules.xml</rulesUri>
372                            <excludes>
373                                <!-- needed to support maven 3.1.0 -->
374                                <exclude>org.apache.maven:*:*</exclude>
375                                <exclude>org.apache.maven.shared:maven-dependency-tree:*</exclude>Ï
376                                <exclude>org.apache.commons:commons-lang3:*</exclude>
377                                <exclude>org.apache.lucene:*:*</exclude>
378                                <exclude>commons-collections:commons-collections:*</exclude>
379                                <exclude>joda-time:joda-time:*</exclude>
380                                <exclude>org.slf4j:*:*</exclude>
381                                <exclude>org.apache.ant:*:*</exclude>
382                                <!--TODO remove javax.json - use GSON instead-->
383                                <exclude>org.glassfish:javax.json:*</exclude>
384                            </excludes>
385                        </configuration>
386                    </execution>
387                </executions>
388            </plugin>
389            <plugin>
390                <groupId>org.apache.maven.plugins</groupId>
391                <artifactId>maven-compiler-plugin</artifactId>
392                <configuration>
393                    <compilerArgument>-Xlint</compilerArgument>
394                    <showDeprecation>true</showDeprecation>
395                    <source>1.7</source>
396                    <target>1.7</target>
397                </configuration>
398            </plugin>
399            <plugin>
400                <groupId>org.apache.maven.plugins</groupId>
401                <artifactId>maven-jar-plugin</artifactId>
402                <configuration>
403                    <archive>
404                        <manifest>
405                            <addDefaultImplementationEntries>true</addDefaultImplementationEntries>
406                        </manifest>
407                    </archive>
408                    <excludes>
409                        <exclude>**/checkstyle*</exclude>
410                    </excludes>
411                </configuration>
412            </plugin>
413            <plugin>
414                <groupId>org.apache.maven.plugins</groupId>
415                <artifactId>maven-enforcer-plugin</artifactId>
416                <dependencies>
417                    <dependency>
418                        <groupId>org.owasp.maven.enforcer</groupId>
419                        <artifactId>class-file-format-rule</artifactId>
420                        <version>1.0.0</version>
421                    </dependency>
422                </dependencies>
423                <inherited>true</inherited>
424                <executions>
425                    <execution>
426                        <id>enforce-java</id>
427                        <goals>
428                            <goal>enforce</goal>
429                        </goals>
430                        <configuration>
431                            <rules>
432                                <requireJavaVersion>
433                                    <version>1.7.0</version>
434                                </requireJavaVersion>
435                            </rules>
436                        </configuration>
437                    </execution>
438                    <execution>
439                        <id>enforce-classfileformat</id>
440                        <configuration>
441                            <rules>
442                                <byteCodeRule implementation="org.owasp.maven.enforcer.rule.ClassFileFormatRule">
443                                    <supportedClassFileFormat>51</supportedClassFileFormat>
444                                </byteCodeRule>
445                            </rules>
446                        </configuration>
447                        <goals>
448                            <goal>enforce</goal>
449                        </goals>
450                    </execution>
451                    <execution>
452                        <id>enforce-maven-3</id>
453                        <goals>
454                            <goal>enforce</goal>
455                        </goals>
456                        <configuration>
457                            <rules>
458                                <requireMavenVersion>
459                                    <version>[3.1,]</version>
460                                </requireMavenVersion>
461                            </rules>
462                            <fail>true</fail>
463                        </configuration>
464                    </execution>
465                </executions>
466            </plugin>
467            <plugin>
468                <groupId>org.codehaus.mojo</groupId>
469                <artifactId>animal-sniffer-maven-plugin</artifactId>
470                <executions>
471                    <execution>
472                        <id>signature-check</id>
473                        <phase>verify</phase>
474                        <goals>
475                            <goal>check</goal>
476                        </goals>
477                    </execution>
478                </executions>
479                <configuration>
480                    <signature>
481                        <groupId>org.codehaus.mojo.signature</groupId>
482                        <artifactId>java17</artifactId>
483                        <version>1.0</version>
484                    </signature>
485                </configuration>
486            </plugin>
487            <plugin>
488                <groupId>org.jacoco</groupId>
489                <artifactId>jacoco-maven-plugin</artifactId>
490                <executions>
491                    <execution>
492                        <id>pre-unit-test</id>
493                        <goals>
494                            <goal>prepare-agent</goal>
495                        </goals>
496                        <configuration>
497                            <destFile>${project.build.directory}/coverage-reports/jacoco-ut.exec</destFile>
498                            <propertyName>surefireArgLine</propertyName>
499                        </configuration>
500                    </execution>
501                    <execution>
502                        <id>pre-integration-test</id>
503                        <phase>pre-integration-test</phase>
504                        <goals>
505                            <goal>prepare-agent</goal>
506                        </goals>
507                        <configuration>
508                            <destFile>${project.build.directory}/coverage-reports/jacoco-it.exec</destFile>
509                            <propertyName>failsafeArgLine</propertyName>
510                        </configuration>
511                    </execution>
512                </executions>
513            </plugin>
514            <plugin>
515                <groupId>org.codehaus.gmaven</groupId>
516                <artifactId>gmaven-plugin</artifactId>
517                <version>1.5</version>
518                <executions>
519                    <execution>
520                        <id>add-dynamic-properties</id>
521                        <phase>pre-integration-test</phase>
522                        <goals>
523                            <goal>execute</goal>
524                        </goals>
525                        <configuration>
526                            <source>
527                                project.properties['invoker.mavenOpts']=project.properties.failsafeArgLine
528                            </source>
529                        </configuration>
530                    </execution>
531                </executions>
532            </plugin>
533            <plugin>
534                <groupId>org.apache.maven.plugins</groupId>
535                <artifactId>maven-surefire-plugin</artifactId>
536                <configuration>
537                    <argLine>${surefireArgLine} -Dfile.encoding=UTF-8</argLine>
538                    <systemProperties>
539                        <property>
540                            <name>data.directory</name>
541                            <value>${project.build.directory}/data</value>
542                        </property>
543                        <property>
544                            <name>temp.directory</name>
545                            <value>${project.build.directory}/temp</value>
546                        </property>
547                    </systemProperties>
548                </configuration>
549            </plugin>
550            <plugin>
551                <groupId>org.apache.maven.plugins</groupId>
552                <artifactId>maven-failsafe-plugin</artifactId>
553                <configuration>
554                    <argLine>${failsafeArgLine}</argLine>
555                    <systemProperties>
556                        <property>
557                            <name>temp.directory</name>
558                            <value>${project.build.directory}/temp</value>
559                        </property>
560                    </systemProperties>
561                    <excludes>
562                        <exclude>**/*MySqlIT.java</exclude>
563                    </excludes>
564                </configuration>
565                <executions>
566                    <execution>
567                        <goals>
568                            <goal>integration-test</goal>
569                            <goal>verify</goal>
570                        </goals>
571                    </execution>
572                </executions>
573            </plugin>
574            <plugin>
575                <groupId>org.apache.maven.plugins</groupId>
576                <artifactId>maven-resources-plugin</artifactId>
577                <executions>
578                    <execution>
579                        <id>site-filtering-hack</id>
580                        <phase>pre-site</phase>
581                        <goals>
582                            <goal>copy-resources</goal>
583                        </goals>
584                        <inherited>false</inherited>
585                        <configuration>
586                            <outputDirectory>${project.build.directory}/site/</outputDirectory>
587                            <resources>
588                                <resource>
589                                    <directory>src/main/site-resources/</directory>
590                                    <filtering>true</filtering>
591                                </resource>
592                            </resources>
593                            <encoding>UTF-8</encoding>
594                        </configuration>
595                    </execution>
596                </executions>
597            </plugin>
598            <plugin>
599                <groupId>org.apache.maven.plugins</groupId>
600                <artifactId>maven-site-plugin</artifactId>
601                <dependencies>
602                    <dependency>
603                        <groupId>org.apache.maven.doxia</groupId>
604                        <artifactId>doxia-module-markdown</artifactId>
605                        <version>${doxia-module-markdown.version}</version>
606                    </dependency>
607                </dependencies>
608                <configuration>
609                    <skipDeploy>true</skipDeploy>
610                </configuration>
611            </plugin>
612            <plugin>
613                <inherited>false</inherited>
614                <groupId>org.apache.maven.plugins</groupId>
615                <artifactId>maven-antrun-plugin</artifactId>
616                <version>${maven-antrun-plugin.version}</version>
617                <executions>
618                    <execution>
619                        <id>copy-xsd</id>
620                        <phase>compile</phase>
621                        <goals>
622                            <goal>run</goal>
623                        </goals>
624                        <configuration>
625                            <target name="copy xsd to site">
626                                <copy todir="target/site/">
627                                    <fileset dir="dependency-check-core/src/main/resources/schema/">
628                                        <include name="**/*.xsd"/>
629                                    </fileset>
630                                </copy>
631                            </target>
632                        </configuration>
633                    </execution>
634                </executions>
635            </plugin>
636        </plugins>
637    </build>
638    <reporting>
639        <plugins>
640            <plugin>
641                <groupId>org.apache.maven.plugins</groupId>
642                <artifactId>maven-dependency-plugin</artifactId>
643                <version>${maven-dependency-plugin.version}</version>
644            </plugin>
645            <plugin>
646                <groupId>org.apache.maven.plugins</groupId>
647                <artifactId>maven-javadoc-plugin</artifactId>
648                <version>${maven-javadoc-plugin.version}</version>
649                <configuration>
650                    <failOnError>false</failOnError>
651                    <bottom>Copyright© 2012-17 Jeremy Long. All Rights Reserved.</bottom>
652                </configuration>
653                <reportSets>
654                    <reportSet>
655                        <id>default</id>
656                        <reports>
657                            <report>javadoc</report>
658                        </reports>
659                    </reportSet>
660                </reportSets>
661            </plugin>
662            <plugin>
663                <groupId>org.apache.maven.plugins</groupId>
664                <artifactId>maven-jxr-plugin</artifactId>
665                <version>${maven-jxr-plugin.version}</version>
666            </plugin>
667            <plugin>
668                <groupId>org.apache.maven.plugins</groupId>
669                <artifactId>maven-project-info-reports-plugin</artifactId>
670                <version>${maven-project-info-reports-plugin.version}</version>
671                <reportSets>
672                    <reportSet>
673                        <reports>
674                            <report>cim</report>
675                            <!--
676                            <report>dependencies</report>
677                            <report>dependency-convergence</report>
678                            <report>dependency-info</report>
679                            <report>dependency-management</report>
680                            <report>distribution-management</report>
681                            <report>index</report>
682                            -->
683                            <report>summary</report>
684                            <report>mailing-list</report>
685                            <report>issue-tracking</report>
686                            <report>modules</report>
687                            <report>project-team</report>
688                            <report>scm</report>
689                            <report>license</report>
690                        </reports>
691                    </reportSet>
692                </reportSets>
693            </plugin>
694            <plugin>
695                <groupId>org.apache.maven.plugins</groupId>
696                <artifactId>maven-surefire-report-plugin</artifactId>
697                <version>${maven-surefire-report-plugin.version}</version>
698                <reportSets>
699                    <reportSet>
700                        <reports>
701                            <report>report-only</report>
702                        </reports>
703                    </reportSet>
704                </reportSets>
705            </plugin>
706            <plugin>
707                <groupId>org.jacoco</groupId>
708                <artifactId>jacoco-maven-plugin</artifactId>
709                <version>${jacoco-maven-plugin.version}</version>
710                <configuration>
711                    <dataFileIncludes>
712                        <dataFileInclude>target/coverage-reports/jacoco-ut.exec</dataFileInclude>
713                        <dataFileInclude>target/coverage-reports/jacoco-it.exec</dataFileInclude>
714                    </dataFileIncludes>
715                </configuration>
716                <reportSets>
717                    <reportSet>
718                        <reports>
719                            <report>report-aggregate</report>
720                        </reports>
721                    </reportSet>
722                </reportSets>
723            </plugin>
724            <plugin>
725                <groupId>org.codehaus.mojo</groupId>
726                <artifactId>findbugs-maven-plugin</artifactId>
727                <version>${findbugs-maven-plugin.version}</version>
728            </plugin>
729            <plugin>
730                <groupId>org.codehaus.mojo</groupId>
731                <artifactId>taglist-maven-plugin</artifactId>
732                <version>${taglist-maven-plugin.version}</version>
733                <configuration>
734                    <tagListOptions>
735                        <tagClasses>
736                            <tagClass>
737                                <displayName>Todo Work</displayName>
738                                <tags>
739                                    <tag>
740                                        <matchString>todo</matchString>
741                                        <matchType>ignoreCase</matchType>
742                                    </tag>
743                                    <tag>
744                                        <matchString>FIXME</matchString>
745                                        <matchType>exact</matchType>
746                                    </tag>
747                                </tags>
748                            </tagClass>
749                        </tagClasses>
750                    </tagListOptions>
751                </configuration>
752            </plugin>
753            <plugin>
754                <groupId>org.codehaus.mojo</groupId>
755                <artifactId>versions-maven-plugin</artifactId>
756                <version>${versions-maven-plugin.version}</version>
757                <reportSets>
758                    <reportSet>
759                        <reports>
760                            <report>dependency-updates-report</report>
761                            <report>plugin-updates-report</report>
762                        </reports>
763                    </reportSet>
764                </reportSets>
765            </plugin>
766        </plugins>
767    </reporting>
768    <dependencyManagement>
769        <dependencies>
770            <dependency>
771                <groupId>com.vdurmont</groupId>
772                <artifactId>semver4j</artifactId>
773                <version>2.1.0</version>
774            </dependency>
775            <!-- analysis core (used by Jenkins) uses 1.6-->
776            <dependency>
777                <groupId>joda-time</groupId>
778                <artifactId>joda-time</artifactId>
779                <version>${joda-time.version}</version>
780            </dependency>
781            <dependency>
782                <groupId>com.google.code.findbugs</groupId>
783                <artifactId>annotations</artifactId>
784                <version>${com.google.code.findbugs.annotations.version}</version>
785            </dependency>
786            <dependency>
787                <groupId>com.google.code.gson</groupId>
788                <artifactId>gson</artifactId>
789                <version>${com.google.code.gson.version}</version>
790            </dependency>
791            <dependency>
792                <groupId>com.h2database</groupId>
793                <artifactId>h2</artifactId>
794                <version>${com.h2database.version}</version>
795            </dependency>
796            <dependency>
797                <groupId>commons-cli</groupId>
798                <artifactId>commons-cli</artifactId>
799                <version>${commons-cli.version}</version>
800            </dependency>
801            <dependency>
802                <groupId>commons-io</groupId>
803                <artifactId>commons-io</artifactId>
804                <version>${commons-io.version}</version>
805            </dependency>
806            <dependency>
807                <groupId>org.apache.commons</groupId>
808                <artifactId>commons-lang3</artifactId>
809                <!--upgrading beyond this may cause issues with the Jenkins plugin-->
810                <version>${commons-lang3.version}</version>
811            </dependency>
812            <dependency>
813                <groupId>com.sun.mail</groupId>
814                <artifactId>mailapi</artifactId>
815                <version>${com.sun.mail.mailapi.version}</version>
816            </dependency>
817            <dependency>
818                <groupId>ch.qos.logback</groupId>
819                <artifactId>logback-core</artifactId>
820                <version>${logback.version}</version>
821            </dependency>
822            <dependency>
823                <groupId>ch.qos.logback</groupId>
824                <artifactId>logback-classic</artifactId>
825                <version>${logback.version}</version>
826            </dependency>
827            <dependency>
828                <groupId>junit</groupId>
829                <artifactId>junit</artifactId>
830                <version>${junit.version}</version>
831                <scope>test</scope>
832            </dependency>
833            <dependency>
834                <groupId>org.apache.commons</groupId>
835                <artifactId>commons-compress</artifactId>
836                <version>${commons-compress.version}</version>
837            </dependency>
838            <dependency>
839                <groupId>org.apache.ant</groupId>
840                <artifactId>ant</artifactId>
841                <version>${apache.ant.version}</version>
842            </dependency>
843            <dependency>
844                <groupId>org.apache.ant</groupId>
845                <artifactId>ant-testutil</artifactId>
846                <version>${apache.ant.version}</version>
847            </dependency>
848            <dependency>
849                <groupId>org.apache.lucene</groupId>
850                <artifactId>lucene-analyzers-common</artifactId>
851                <version>${apache.lucene.version}</version>
852            </dependency>
853            <dependency>
854                <groupId>org.apache.lucene</groupId>
855                <artifactId>lucene-core</artifactId>
856                <version>${apache.lucene.version}</version>
857            </dependency>
858            <dependency>
859                <groupId>org.apache.lucene</groupId>
860                <artifactId>lucene-queryparser</artifactId>
861                <version>${apache.lucene.version}</version>
862            </dependency>
863            <dependency>
864                <groupId>org.apache.lucene</groupId>
865                <artifactId>lucene-test-framework</artifactId>
866                <version>${apache.lucene.version}</version>
867            </dependency>
868            <dependency>
869                <groupId>org.apache.maven</groupId>
870                <artifactId>maven-core</artifactId>
871                <version>${maven.api.version}</version>
872            </dependency>
873            <dependency>
874                <groupId>org.apache.maven</groupId>
875                <artifactId>maven-plugin-api</artifactId>
876                <version>${maven.api.version}</version>
877            </dependency>
878            <dependency>
879                <groupId>org.apache.maven.shared</groupId>
880                <artifactId>file-management</artifactId>
881                <version>${org.apache.maven.shared.file-management.version}</version>
882            </dependency>
883            <dependency>
884                <groupId>org.apache.maven</groupId>
885                <artifactId>maven-settings</artifactId>
886                <version>${maven.api.version}</version>
887            </dependency>
888            <dependency>
889                <groupId>org.apache.maven.plugin-testing</groupId>
890                <artifactId>maven-plugin-testing-harness</artifactId>
891                <version>${maven-plugin-testing-harness.version}</version>
892            </dependency>
893            <dependency>
894                <groupId>org.apache.maven.plugin-tools</groupId>
895                <artifactId>maven-plugin-annotations</artifactId>
896                <version>${maven-plugin-annotations.version}</version>
897            </dependency>
898            <dependency>
899                <groupId>org.apache.maven.reporting</groupId>
900                <artifactId>maven-reporting-api</artifactId>
901                <version>${maven-reporting-api.version}</version>
902            </dependency>
903            <!-- Upgrading transitive commons-collections-3.2.1 from velocity-1.7. -->
904            <dependency>
905                <groupId>commons-collections</groupId>
906                <artifactId>commons-collections</artifactId>
907                <version>${commons-collections.version}</version>
908            </dependency>
909            <dependency>
910                <groupId>org.apache.velocity</groupId>
911                <artifactId>velocity</artifactId>
912                <version>${org.apache.velocity.version}</version>
913            </dependency>
914            <dependency>
915                <groupId>org.sonatype.plexus</groupId>
916                <artifactId>plexus-sec-dispatcher</artifactId>
917                <version>${plexus-sec-dispatcher.version}</version>
918            </dependency>
919            <!-- upgrading beyond 2.2 requires reworking the dependency resolution -->
920            <dependency>
921                <groupId>org.apache.maven.shared</groupId>
922                <artifactId>maven-dependency-tree</artifactId>
923                <version>${maven-dependency-tree.version}</version>
924            </dependency>
925            <dependency>
926                <groupId>org.glassfish</groupId>
927                <artifactId>javax.json</artifactId>
928                <version>${org.glassfish.javax.json.version}</version>
929            </dependency>
930            <dependency>
931                <groupId>org.hamcrest</groupId>
932                <artifactId>hamcrest-core</artifactId>
933                <version>${hamcrest-core.version}</version>
934                <scope>test</scope>
935            </dependency>
936            <dependency>
937                <groupId>org.jmockit</groupId>
938                <artifactId>jmockit</artifactId>
939                <version>${org.jmockit.version}</version>
940                <scope>test</scope>
941            </dependency>
942            <dependency>
943                <groupId>org.jsoup</groupId>
944                <artifactId>jsoup</artifactId>
945                <version>${jsoup.version}</version>
946            </dependency>
947            <dependency>
948                <groupId>org.slf4j</groupId>
949                <artifactId>slf4j-api</artifactId>
950                <version>${slf4j.version}</version>
951            </dependency>
952            <dependency>
953                <groupId>org.slf4j</groupId>
954                <artifactId>slf4j-simple</artifactId>
955                <version>${slf4j.version}</version>
956            </dependency>
957            <dependency>
958                <groupId>org.apache.maven.shared</groupId>
959                <artifactId>maven-artifact-transfer</artifactId>
960                <version>${maven-artifact-transfer.version}</version>
961            </dependency>
962        </dependencies>
963    </dependencyManagement>
964    <dependencies>
965        <dependency>
966            <groupId>junit</groupId>
967            <artifactId>junit</artifactId>
968            <scope>test</scope>
969        </dependency>
970        <dependency>
971            <groupId>org.hamcrest</groupId>
972            <artifactId>hamcrest-core</artifactId>
973            <scope>test</scope>
974        </dependency>
975        <dependency>
976            <groupId>com.google.code.findbugs</groupId>
977            <artifactId>annotations</artifactId>
978            <scope>provided</scope>
979        </dependency>
980    </dependencies>
981</project>
982