Skip to content

Instantly share code, notes, and snippets.

@jashaj

jashaj/maven-owasp-debug.txt

Created September 23, 2020 07:12
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save jashaj/d5077e2291049b166dc4c9cea4615916 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save jashaj/d5077e2291049b166dc4c9cea4615916 to your computer and use it in GitHub Desktop.
Download ZIP
Maven OWASP purge debug
Raw
maven-owasp-debug.txt
mvn -X org.owasp:dependency-check-maven:6.0.1:purge
Apache Maven 3.6.3 (cecedd343002696d0abb50b32b541b8a6ba2883f)
Maven home: /usr/local/Cellar/maven/3.6.3_1/libexec
Java version: 11.0.8, vendor: AdoptOpenJDK, runtime: /Library/Java/JavaVirtualMachines/adoptopenjdk-11.jdk/Contents/Home
Default locale: en_GB, platform encoding: UTF-8
OS name: "mac os x", version: "10.15.6", arch: "x86_64", family: "mac"
[DEBUG] Created new class realm maven.api
[DEBUG] Importing foreign packages into class realm maven.api
[DEBUG] Imported: javax.annotation.* < plexus.core
[DEBUG] Imported: javax.annotation.security.* < plexus.core
[DEBUG] Imported: javax.enterprise.inject.* < plexus.core
[DEBUG] Imported: javax.enterprise.util.* < plexus.core
[DEBUG] Imported: javax.inject.* < plexus.core
[DEBUG] Imported: org.apache.maven.* < plexus.core
[DEBUG] Imported: org.apache.maven.artifact < plexus.core
[DEBUG] Imported: org.apache.maven.classrealm < plexus.core
[DEBUG] Imported: org.apache.maven.cli < plexus.core
[DEBUG] Imported: org.apache.maven.configuration < plexus.core
[DEBUG] Imported: org.apache.maven.exception < plexus.core
[DEBUG] Imported: org.apache.maven.execution < plexus.core
[DEBUG] Imported: org.apache.maven.execution.scope < plexus.core
[DEBUG] Imported: org.apache.maven.lifecycle < plexus.core
[DEBUG] Imported: org.apache.maven.model < plexus.core
[DEBUG] Imported: org.apache.maven.monitor < plexus.core
[DEBUG] Imported: org.apache.maven.plugin < plexus.core
[DEBUG] Imported: org.apache.maven.profiles < plexus.core
[DEBUG] Imported: org.apache.maven.project < plexus.core
[DEBUG] Imported: org.apache.maven.reporting < plexus.core
[DEBUG] Imported: org.apache.maven.repository < plexus.core
[DEBUG] Imported: org.apache.maven.rtinfo < plexus.core
[DEBUG] Imported: org.apache.maven.settings < plexus.core
[DEBUG] Imported: org.apache.maven.toolchain < plexus.core
[DEBUG] Imported: org.apache.maven.usability < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.* < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authentication < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.authorization < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.events < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.observers < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.proxy < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.repository < plexus.core
[DEBUG] Imported: org.apache.maven.wagon.resource < plexus.core
[DEBUG] Imported: org.codehaus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.* < plexus.core
[DEBUG] Imported: org.codehaus.plexus.classworlds < plexus.core
[DEBUG] Imported: org.codehaus.plexus.component < plexus.core
[DEBUG] Imported: org.codehaus.plexus.configuration < plexus.core
[DEBUG] Imported: org.codehaus.plexus.container < plexus.core
[DEBUG] Imported: org.codehaus.plexus.context < plexus.core
[DEBUG] Imported: org.codehaus.plexus.lifecycle < plexus.core
[DEBUG] Imported: org.codehaus.plexus.logging < plexus.core
[DEBUG] Imported: org.codehaus.plexus.personality < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.Xpp3Dom < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParser < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlPullParserException < plexus.core
[DEBUG] Imported: org.codehaus.plexus.util.xml.pull.XmlSerializer < plexus.core
[DEBUG] Imported: org.eclipse.aether.* < plexus.core
[DEBUG] Imported: org.eclipse.aether.artifact < plexus.core
[DEBUG] Imported: org.eclipse.aether.collection < plexus.core
[DEBUG] Imported: org.eclipse.aether.deployment < plexus.core
[DEBUG] Imported: org.eclipse.aether.graph < plexus.core
[DEBUG] Imported: org.eclipse.aether.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.installation < plexus.core
[DEBUG] Imported: org.eclipse.aether.internal.impl < plexus.core
[DEBUG] Imported: org.eclipse.aether.metadata < plexus.core
[DEBUG] Imported: org.eclipse.aether.repository < plexus.core
[DEBUG] Imported: org.eclipse.aether.resolution < plexus.core
[DEBUG] Imported: org.eclipse.aether.spi < plexus.core
[DEBUG] Imported: org.eclipse.aether.transfer < plexus.core
[DEBUG] Imported: org.eclipse.aether.version < plexus.core
[DEBUG] Imported: org.fusesource.jansi.* < plexus.core
[DEBUG] Imported: org.slf4j.* < plexus.core
[DEBUG] Imported: org.slf4j.event.* < plexus.core
[DEBUG] Imported: org.slf4j.helpers.* < plexus.core
[DEBUG] Imported: org.slf4j.spi.* < plexus.core
[DEBUG] Populating class realm maven.api
[INFO] Error stacktraces are turned on.
[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /usr/local/Cellar/maven/3.6.3_1/libexec/conf/settings.xml
[DEBUG] Reading user settings from /Users/account/.m2/settings.xml
[DEBUG] Reading global toolchains from /usr/local/Cellar/maven/3.6.3_1/libexec/conf/toolchains.xml
[DEBUG] Reading user toolchains from /Users/account/.m2/toolchains.xml
[DEBUG] Using local repository at /Users/account/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /Users/account/.m2/repository
[INFO] Scanning for projects...
[DEBUG] Using mirror google-maven-central (https://maven-central-eu.storage-download.googleapis.com/maven2) for central (https://repo.maven.apache.org/maven2).
[DEBUG] Extension realms for project com.company.examples:project-name:jar:DEV-SNAPSHOT: (none)
[DEBUG] Looking up lifecycle mappings for packaging jar from ClassRealm[plexus.core, parent: null]
[DEBUG] === REACTOR BUILD PLAN ================================================
[DEBUG] Project: com.company.examples:project-name:jar:DEV-SNAPSHOT
[DEBUG] Tasks: [org.owasp:dependency-check-maven:6.0.1:purge]
[DEBUG] Style: Aggregating
[DEBUG] =======================================================================
[INFO]
[INFO] ---------------< com.company.examples:project-name >----------------
[INFO] Building project-name DEV-SNAPSHOT
[INFO] --------------------------------[ jar ]---------------------------------
[DEBUG] Lifecycle default -> [validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, generate-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integration-test, post-integration-test, verify, install, deploy]
[DEBUG] Lifecycle clean -> [pre-clean, clean, post-clean]
[DEBUG] Lifecycle site -> [pre-site, site, post-site, site-deploy]
[DEBUG] === PROJECT BUILD PLAN ================================================
[DEBUG] Project: com.company.examples:project-name:DEV-SNAPSHOT
[DEBUG] Dependencies (collect): []
[DEBUG] Dependencies (resolve): []
[DEBUG] Repositories (dependencies): [google-maven-central (https://maven-central-eu.storage-download.googleapis.com/maven2, default, releases+snapshots), company Artifactory (https://repo.company.com/artifactory/public, default, releases+snapshots)]
[DEBUG] Repositories (plugins) : [google-maven-central (https://maven-central-eu.storage-download.googleapis.com/maven2, default, releases+snapshots), company Artifactory (https://repo.company.com/artifactory/public, default, releases+snapshots)]
[DEBUG] -----------------------------------------------------------------------
[DEBUG] Goal: org.owasp:dependency-check-maven:6.0.1:purge (default-cli)
[DEBUG] Style: Aggregating
[DEBUG] Configuration: <?xml version="1.0" encoding="UTF-8"?>
<configuration>
<archiveAnalyzerEnabled>${archiveAnalyzerEnabled}</archiveAnalyzerEnabled>
<artifactoryAnalyzerApiToken>${artifactoryAnalyzerApiToken}</artifactoryAnalyzerApiToken>
<artifactoryAnalyzerBearerToken>${artifactoryAnalyzerBearerToken}</artifactoryAnalyzerBearerToken>
<artifactoryAnalyzerEnabled>${artifactoryAnalyzerEnabled}</artifactoryAnalyzerEnabled>
<artifactoryAnalyzerParallelAnalysis default-value="true">${artifactoryAnalyzerParallelAnalysis}</artifactoryAnalyzerParallelAnalysis>
<artifactoryAnalyzerServerId>${artifactoryAnalyzerServerId}</artifactoryAnalyzerServerId>
<artifactoryAnalyzerUrl>${artifactoryAnalyzerUrl}</artifactoryAnalyzerUrl>
<artifactoryAnalyzerUseProxy>${artifactoryAnalyzerUseProxy}</artifactoryAnalyzerUseProxy>
<artifactoryAnalyzerUsername>${artifactoryAnalyzerUsername}</artifactoryAnalyzerUsername>
<assemblyAnalyzerEnabled>${assemblyAnalyzerEnabled}</assemblyAnalyzerEnabled>
<autoUpdate>${autoUpdate}</autoUpdate>
<autoconfAnalyzerEnabled>${autoconfAnalyzerEnabled}</autoconfAnalyzerEnabled>
<bundleAuditAnalyzerEnabled>${bundleAuditAnalyzerEnabled}</bundleAuditAnalyzerEnabled>
<bundleAuditPath>${bundleAuditPath}</bundleAuditPath>
<bundleAuditWorkingDirectory>${bundleAuditWorkingDirectory}</bundleAuditWorkingDirectory>
<centralAnalyzerEnabled>${centralAnalyzerEnabled}</centralAnalyzerEnabled>
<centralAnalyzerUseCache>${centralAnalyzerUseCache}</centralAnalyzerUseCache>
<cmakeAnalyzerEnabled>${cmakeAnalyzerEnabled}</cmakeAnalyzerEnabled>
<cocoapodsAnalyzerEnabled>${cocoapodsAnalyzerEnabled}</cocoapodsAnalyzerEnabled>
<composerAnalyzerEnabled>${composerAnalyzerEnabled}</composerAnalyzerEnabled>
<connectionString>${connectionString}</connectionString>
<connectionTimeout>${connectionTimeout}</connectionTimeout>
<cvePassword>${cvePassword}</cvePassword>
<cveServerId>${cveServerId}</cveServerId>
<cveUrlBase>${cveUrlBase}</cveUrlBase>
<cveUrlModified>${cveUrlModified}</cveUrlModified>
<cveUser>${cveUser}</cveUser>
<cveValidForHours>${cveValidForHours}</cveValidForHours>
<dataDirectory>${dataDirectory}</dataDirectory>
<databaseDriverName>${databaseDriverName}</databaseDriverName>
<databaseDriverPath>${databaseDriverPath}</databaseDriverPath>
<databasePassword>${databasePassword}</databasePassword>
<databaseUser>${databaseUser}</databaseUser>
<dbFilename>${dbFilename}</dbFilename>
<enableExperimental>${enableExperimental}</enableExperimental>
<enableRetired>${enableRetired}</enableRetired>
<failBuildOnAnyVulnerability default-value="false">${failBuildOnAnyVulnerability}</failBuildOnAnyVulnerability>
<failBuildOnCVSS default-value="11">${failBuildOnCVSS}</failBuildOnCVSS>
<failOnError default-value="true">${failOnError}</failOnError>
<format default-value="HTML">${format}</format>
<formats>${formats}</formats>
<golangDepEnabled>${golangDepEnabled}</golangDepEnabled>
<golangModEnabled>${golangModEnabled}</golangModEnabled>
<hintsFile>${hintsFile}</hintsFile>
<jarAnalyzerEnabled>${jarAnalyzerEnabled}</jarAnalyzerEnabled>
<junitFailOnCVSS default-value="0">${junitFailOnCVSS}</junitFailOnCVSS>
<mavenSettings default-value="${settings}">${mavenSettings}</mavenSettings>
<mavenSettingsProxyId>${mavenSettingsProxyId}</mavenSettingsProxyId>
<mixAuditAnalyzerEnabled>${mixAuditAnalyzerEnabled}</mixAuditAnalyzerEnabled>
<mixAuditPath>${mixAuditPath}</mixAuditPath>
<nexusAnalyzerEnabled>${nexusAnalyzerEnabled}</nexusAnalyzerEnabled>
<nexusServerId>${nexusServerId}</nexusServerId>
<nexusUrl>${nexusUrl}</nexusUrl>
<nexusUsesProxy>${nexusUsesProxy}</nexusUsesProxy>
<nodeAnalyzerEnabled>${nodeAnalyzerEnabled}</nodeAnalyzerEnabled>
<nodeAuditAnalyzerEnabled>${nodeAuditAnalyzerEnabled}</nodeAuditAnalyzerEnabled>
<nodeAuditAnalyzerUseCache>${nodeAuditAnalyzerUseCache}</nodeAuditAnalyzerUseCache>
<nodeAuditSkipDevDependencies>${nodeAuditSkipDevDependencies}</nodeAuditSkipDevDependencies>
<nugetconfAnalyzerEnabled>${nugetconfAnalyzerEnabled}</nugetconfAnalyzerEnabled>
<nuspecAnalyzerEnabled>${nuspecAnalyzerEnabled}</nuspecAnalyzerEnabled>
<opensslAnalyzerEnabled>${opensslAnalyzerEnabled}</opensslAnalyzerEnabled>
<ossIndexServerId>${ossIndexServerId}</ossIndexServerId>
<ossindexAnalyzerEnabled>${ossindexAnalyzerEnabled}</ossindexAnalyzerEnabled>
<ossindexAnalyzerUrl>${ossindexAnalyzerUrl}</ossindexAnalyzerUrl>
<ossindexAnalyzerUseCache>${ossindexAnalyzerUseCache}</ossindexAnalyzerUseCache>
<outputDirectory default-value="${project.build.directory}"/>
<pathToCore>${pathToCore}</pathToCore>
<pathToGo>${pathToGo}</pathToGo>
<pipAnalyzerEnabled>${pipAnalyzerEnabled}</pipAnalyzerEnabled>
<prettyPrint>${prettyPrint}</prettyPrint>
<project>${project}</project>
<pyDistributionAnalyzerEnabled>${pyDistributionAnalyzerEnabled}</pyDistributionAnalyzerEnabled>
<pyPackageAnalyzerEnabled>${pyPackageAnalyzerEnabled}</pyPackageAnalyzerEnabled>
<reactorProjects>${reactorProjects}</reactorProjects>
<reportOutputDirectory>${project.reporting.outputDirectory}</reportOutputDirectory>
<retireJsAnalyzerEnabled>${retireJsAnalyzerEnabled}</retireJsAnalyzerEnabled>
<retireJsForceUpdate>${retireJsForceUpdate}</retireJsForceUpdate>
<retireJsUrl>${retireJsUrl}</retireJsUrl>
<retirejs>${retirejs}</retirejs>
<rubygemsAnalyzerEnabled>${rubygemsAnalyzerEnabled}</rubygemsAnalyzerEnabled>
<scanDirectory>${scanDirectory}</scanDirectory>
<serverId>${serverId}</serverId>
<session default-value="${session}"/>
<settingsXml default-value="${settings}"/>
<showSummary default-value="true">${showSummary}</showSummary>
<skip default-value="false">${dependency-check.skip}</skip>
<skipArtifactType>${skipArtifactType}</skipArtifactType>
<skipDependencyManagement default-value="true">${skipDependencyManagement}</skipDependencyManagement>
<skipProvidedScope default-value="false">${skipProvidedScope}</skipProvidedScope>
<skipRuntimeScope default-value="false">${skipRuntimeScope}</skipRuntimeScope>
<skipSystemScope default-value="false">${skipSystemScope}</skipSystemScope>
<skipTestScope default-value="true">${skipTestScope}</skipTestScope>
<suppressionFile>${suppressionFile}</suppressionFile>
<suppressionFiles>${suppressionFiles}</suppressionFiles>
<swiftPackageManagerAnalyzerEnabled>${swiftPackageManagerAnalyzerEnabled}</swiftPackageManagerAnalyzerEnabled>
<versionCheckEnabled default-value="true">${versionCheckEnabled}</versionCheckEnabled>
<virtualSnapshotsFromReactor default-value="true">${dependency-check.virtualSnapshotsFromReactor}</virtualSnapshotsFromReactor>
<zipExtensions>${zipExtensions}</zipExtensions>
</configuration>
[DEBUG] =======================================================================
[INFO]
[INFO] --- dependency-check-maven:6.0.1:purge (default-cli) @ project-name ---
[DEBUG] Dependency collection stats: {ConflictMarker.analyzeTime=1068490, ConflictMarker.markTime=864041, ConflictMarker.nodeCount=211, ConflictIdSorter.graphTime=628799, ConflictIdSorter.topsortTime=354673, ConflictIdSorter.conflictIdCount=97, ConflictIdSorter.conflictIdCycleCount=0, ConflictResolver.totalTime=8674091, ConflictResolver.conflictItemCount=195, DefaultDependencyCollector.collectTime=400756346, DefaultDependencyCollector.transformTime=13442150}
[DEBUG] org.owasp:dependency-check-maven:jar:6.0.1
[DEBUG] org.owasp:dependency-check-core:jar:6.0.1:compile
[DEBUG] org.anarres.jdiagnostics:jdiagnostics:jar:1.0.6:compile (version managed from default)
[DEBUG] org.whitesource:pecoff4j:jar:0.0.2.1:compile (version managed from default)
[DEBUG] org.apache.commons:commons-jcs-core:jar:2.2.1:compile (version managed from default)
[DEBUG] commons-logging:commons-logging:jar:1.2:compile
[DEBUG] com.github.package-url:packageurl-java:jar:1.1.1:compile (version managed from default)
[DEBUG] us.springett:cpe-parser:jar:2.0.2:compile (version managed from default)
[DEBUG] com.vdurmont:semver4j:jar:3.1.0:compile (version managed from default)
[DEBUG] org.slf4j:slf4j-api:jar:1.7.30:compile (version managed from default)
[DEBUG] commons-collections:commons-collections:jar:3.2.2:compile (version managed from default)
[DEBUG] org.apache.commons:commons-compress:jar:1.20:compile (version managed from default)
[DEBUG] commons-io:commons-io:jar:2.8.0:compile (version managed from default)
[DEBUG] org.apache.commons:commons-lang3:jar:3.11:compile (version managed from default)
[DEBUG] org.apache.commons:commons-text:jar:1.9:compile (version managed from default)
[DEBUG] org.apache.lucene:lucene-core:jar:8.6.2:compile (version managed from default)
[DEBUG] org.apache.lucene:lucene-analyzers-common:jar:8.6.2:compile (version managed from default)
[DEBUG] org.apache.lucene:lucene-queryparser:jar:8.6.2:compile (version managed from default)
[DEBUG] org.apache.lucene:lucene-queries:jar:8.6.2:compile
[DEBUG] org.apache.lucene:lucene-sandbox:jar:8.6.2:compile
[DEBUG] org.apache.velocity:velocity-engine-core:jar:2.2:compile (version managed from default)
[DEBUG] com.h2database:h2:jar:1.4.199:compile (version managed from default)
[DEBUG] org.glassfish:javax.json:jar:1.1.4:compile (version managed from default)
[DEBUG] org.jsoup:jsoup:jar:1.13.1:compile (version managed from default)
[DEBUG] com.sun.mail:mailapi:jar:1.6.5:compile (version managed from default)
[DEBUG] com.sun.activation:jakarta.activation:jar:1.2.1:compile
[DEBUG] com.fasterxml.jackson.core:jackson-databind:jar:2.11.2:compile (version managed from default)
[DEBUG] com.fasterxml.jackson.core:jackson-annotations:jar:2.11.2:compile
[DEBUG] com.fasterxml.jackson.core:jackson-core:jar:2.11.2:compile
[DEBUG] com.fasterxml.jackson.module:jackson-module-afterburner:jar:2.11.2:compile (version managed from default)
[DEBUG] com.google.guava:guava:jar:29.0-jre:compile (version managed from default)
[DEBUG] com.google.guava:failureaccess:jar:1.0.1:compile
[DEBUG] com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
[DEBUG] org.checkerframework:checker-qual:jar:2.11.1:compile
[DEBUG] com.google.errorprone:error_prone_annotations:jar:2.3.4:compile
[DEBUG] com.google.j2objc:j2objc-annotations:jar:1.3:compile
[DEBUG] com.h3xstream.retirejs:retirejs-core:jar:3.0.2:compile (version managed from default)
[DEBUG] org.json:json:jar:20190722:compile
[DEBUG] com.esotericsoftware:minlog:jar:1.3.1:compile
[DEBUG] com.github.spullara.mustache.java:compiler:jar:0.9.6:compile
[DEBUG] org.sonatype.ossindex:ossindex-service-client:jar:1.4.0:compile (version managed from default) (exclusions managed from default)
[DEBUG] org.sonatype.ossindex:ossindex-service-api:jar:1.4.0:compile
[DEBUG] javax.ws.rs:javax.ws.rs-api:jar:2.0.1:compile
[DEBUG] org.sonatype.goodies:package-url-java:jar:1.1.1:compile
[DEBUG] javax.inject:javax.inject:jar:1:compile
[DEBUG] org.slf4j:jcl-over-slf4j:jar:1.7.28:compile
[DEBUG] joda-time:joda-time:jar:2.10.4:compile
[DEBUG] com.google.code.gson:gson:jar:2.8.5:compile
[DEBUG] com.moandjiezana.toml:toml4j:jar:0.7.2:compile
[DEBUG] com.hankcs:aho-corasick-double-array-trie:jar:1.2.2:compile (version managed from default)
[DEBUG] commons-validator:commons-validator:jar:1.7:compile (version managed from default)
[DEBUG] commons-digester:commons-digester:jar:2.1:compile
[DEBUG] commons-beanutils:commons-beanutils:jar:1.9.4:compile (version managed from default)
[DEBUG] org.owasp:dependency-check-utils:jar:6.0.1:compile
[DEBUG] org.apache.maven.shared:file-management:jar:3.0.0:compile
[DEBUG] org.apache.maven:maven-plugin-api:jar:3.1.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-model:jar:3.1.0:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.plexus:jar:0.0.0.M2a:compile
[DEBUG] javax.enterprise:cdi-api:jar:1.0:compile
[DEBUG] javax.annotation:jsr250-api:jar:1.0:compile
[DEBUG] org.sonatype.sisu:sisu-guice:jar:no_aop:3.1.0:compile
[DEBUG] aopalliance:aopalliance:jar:1.0:compile
[DEBUG] org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.0.0.M2a:compile
[DEBUG] asm:asm:jar:3.3.1:compile
[DEBUG] org.apache.maven.shared:maven-shared-io:jar:3.0.0:compile
[DEBUG] org.apache.maven:maven-compat:jar:3.0:compile
[DEBUG] org.apache.maven.wagon:wagon-provider-api:jar:2.10:compile
[DEBUG] org.apache.maven.shared:maven-shared-utils:jar:3.0.0:compile
[DEBUG] org.codehaus.plexus:plexus-utils:jar:3.3.0:compile
[DEBUG] org.apache.maven.reporting:maven-reporting-api:jar:3.0:compile
[DEBUG] org.apache.maven.doxia:doxia-sink-api:jar:1.0:compile
[DEBUG] org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4:compile
[DEBUG] org.sonatype.plexus:plexus-cipher:jar:1.4:compile
[DEBUG] org.apache.maven.shared:maven-dependency-tree:jar:3.0.1:compile
[DEBUG] org.codehaus.plexus:plexus-component-annotations:jar:1.6:compile
[DEBUG] org.eclipse.aether:aether-util:jar:0.9.0.M2:compile
[DEBUG] org.apache.maven.shared:maven-artifact-transfer:jar:0.12.0:compile
[DEBUG] org.apache.maven:maven-core:jar:3.1.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-settings:jar:3.1.0:compile (version managed from default)
[DEBUG] org.apache.maven:maven-settings-builder:jar:3.1.0:compile
[DEBUG] org.apache.maven:maven-repository-metadata:jar:3.1.0:compile
[DEBUG] org.apache.maven:maven-model-builder:jar:3.1.0:compile
[DEBUG] org.apache.maven:maven-aether-provider:jar:3.1.0:compile
[DEBUG] org.eclipse.aether:aether-spi:jar:0.9.0.M2:compile
[DEBUG] org.eclipse.aether:aether-impl:jar:0.9.0.M2:compile
[DEBUG] org.eclipse.aether:aether-api:jar:0.9.0.M2:compile
[DEBUG] org.codehaus.plexus:plexus-interpolation:jar:1.16:compile
[DEBUG] org.codehaus.plexus:plexus-classworlds:jar:2.4.2:compile
[DEBUG] org.apache.maven:maven-artifact:jar:3.0:compile
[DEBUG] org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.1:compile
[DEBUG] org.sonatype.sisu:sisu-inject-plexus:jar:1.4.2:compile
[DEBUG] org.sonatype.sisu:sisu-inject-bean:jar:1.4.2:compile
[DEBUG] org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7:compile
[DEBUG] commons-codec:commons-codec:jar:1.11:compile
[DEBUG] org.jetbrains:annotations:jar:20.1.0:compile (optional)
[DEBUG] com.github.spotbugs:spotbugs-annotations:jar:4.0.4:compile (optional)
[DEBUG] com.google.code.findbugs:jsr305:jar:3.0.2:compile
[DEBUG] Created new class realm plugin>org.owasp:dependency-check-maven:6.0.1
[DEBUG] Importing foreign packages into class realm plugin>org.owasp:dependency-check-maven:6.0.1
[DEBUG] Imported: < maven.api
[DEBUG] Populating class realm plugin>org.owasp:dependency-check-maven:6.0.1
[DEBUG] Included: org.owasp:dependency-check-maven:jar:6.0.1
[DEBUG] Included: org.owasp:dependency-check-core:jar:6.0.1
[DEBUG] Included: org.anarres.jdiagnostics:jdiagnostics:jar:1.0.6
[DEBUG] Included: org.whitesource:pecoff4j:jar:0.0.2.1
[DEBUG] Included: org.apache.commons:commons-jcs-core:jar:2.2.1
[DEBUG] Included: commons-logging:commons-logging:jar:1.2
[DEBUG] Included: com.github.package-url:packageurl-java:jar:1.1.1
[DEBUG] Included: us.springett:cpe-parser:jar:2.0.2
[DEBUG] Included: com.vdurmont:semver4j:jar:3.1.0
[DEBUG] Included: commons-collections:commons-collections:jar:3.2.2
[DEBUG] Included: org.apache.commons:commons-compress:jar:1.20
[DEBUG] Included: commons-io:commons-io:jar:2.8.0
[DEBUG] Included: org.apache.commons:commons-lang3:jar:3.11
[DEBUG] Included: org.apache.commons:commons-text:jar:1.9
[DEBUG] Included: org.apache.lucene:lucene-core:jar:8.6.2
[DEBUG] Included: org.apache.lucene:lucene-analyzers-common:jar:8.6.2
[DEBUG] Included: org.apache.lucene:lucene-queryparser:jar:8.6.2
[DEBUG] Included: org.apache.lucene:lucene-queries:jar:8.6.2
[DEBUG] Included: org.apache.lucene:lucene-sandbox:jar:8.6.2
[DEBUG] Included: org.apache.velocity:velocity-engine-core:jar:2.2
[DEBUG] Included: com.h2database:h2:jar:1.4.199
[DEBUG] Included: org.glassfish:javax.json:jar:1.1.4
[DEBUG] Included: org.jsoup:jsoup:jar:1.13.1
[DEBUG] Included: com.sun.mail:mailapi:jar:1.6.5
[DEBUG] Included: com.sun.activation:jakarta.activation:jar:1.2.1
[DEBUG] Included: com.fasterxml.jackson.core:jackson-databind:jar:2.11.2
[DEBUG] Included: com.fasterxml.jackson.core:jackson-annotations:jar:2.11.2
[DEBUG] Included: com.fasterxml.jackson.core:jackson-core:jar:2.11.2
[DEBUG] Included: com.fasterxml.jackson.module:jackson-module-afterburner:jar:2.11.2
[DEBUG] Included: com.google.guava:guava:jar:29.0-jre
[DEBUG] Included: com.google.guava:failureaccess:jar:1.0.1
[DEBUG] Included: com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
[DEBUG] Included: org.checkerframework:checker-qual:jar:2.11.1
[DEBUG] Included: com.google.errorprone:error_prone_annotations:jar:2.3.4
[DEBUG] Included: com.google.j2objc:j2objc-annotations:jar:1.3
[DEBUG] Included: com.h3xstream.retirejs:retirejs-core:jar:3.0.2
[DEBUG] Included: org.json:json:jar:20190722
[DEBUG] Included: com.esotericsoftware:minlog:jar:1.3.1
[DEBUG] Included: com.github.spullara.mustache.java:compiler:jar:0.9.6
[DEBUG] Included: org.sonatype.ossindex:ossindex-service-client:jar:1.4.0
[DEBUG] Included: org.sonatype.ossindex:ossindex-service-api:jar:1.4.0
[DEBUG] Included: javax.ws.rs:javax.ws.rs-api:jar:2.0.1
[DEBUG] Included: org.sonatype.goodies:package-url-java:jar:1.1.1
[DEBUG] Included: org.slf4j:jcl-over-slf4j:jar:1.7.28
[DEBUG] Included: joda-time:joda-time:jar:2.10.4
[DEBUG] Included: com.google.code.gson:gson:jar:2.8.5
[DEBUG] Included: com.moandjiezana.toml:toml4j:jar:0.7.2
[DEBUG] Included: com.hankcs:aho-corasick-double-array-trie:jar:1.2.2
[DEBUG] Included: commons-validator:commons-validator:jar:1.7
[DEBUG] Included: commons-digester:commons-digester:jar:2.1
[DEBUG] Included: commons-beanutils:commons-beanutils:jar:1.9.4
[DEBUG] Included: org.owasp:dependency-check-utils:jar:6.0.1
[DEBUG] Included: org.apache.maven.shared:file-management:jar:3.0.0
[DEBUG] Included: javax.enterprise:cdi-api:jar:1.0
[DEBUG] Included: org.sonatype.sisu:sisu-guice:jar:no_aop:3.1.0
[DEBUG] Included: aopalliance:aopalliance:jar:1.0
[DEBUG] Included: org.eclipse.sisu:org.eclipse.sisu.inject:jar:0.0.0.M2a
[DEBUG] Included: asm:asm:jar:3.3.1
[DEBUG] Included: org.apache.maven.shared:maven-shared-io:jar:3.0.0
[DEBUG] Included: org.apache.maven.shared:maven-shared-utils:jar:3.0.0
[DEBUG] Included: org.codehaus.plexus:plexus-utils:jar:3.3.0
[DEBUG] Included: org.apache.maven.reporting:maven-reporting-api:jar:3.0
[DEBUG] Included: org.apache.maven.doxia:doxia-sink-api:jar:1.0
[DEBUG] Included: org.sonatype.plexus:plexus-sec-dispatcher:jar:1.4
[DEBUG] Included: org.sonatype.plexus:plexus-cipher:jar:1.4
[DEBUG] Included: org.apache.maven.shared:maven-dependency-tree:jar:3.0.1
[DEBUG] Included: org.codehaus.plexus:plexus-component-annotations:jar:1.6
[DEBUG] Included: org.eclipse.aether:aether-util:jar:0.9.0.M2
[DEBUG] Included: org.apache.maven.shared:maven-artifact-transfer:jar:0.12.0
[DEBUG] Included: org.codehaus.plexus:plexus-interpolation:jar:1.16
[DEBUG] Included: org.apache.maven.shared:maven-common-artifact-filters:jar:3.0.1
[DEBUG] Included: org.sonatype.sisu:sisu-inject-bean:jar:1.4.2
[DEBUG] Included: org.sonatype.sisu:sisu-guice:jar:noaop:2.1.7
[DEBUG] Included: commons-codec:commons-codec:jar:1.11
[DEBUG] Included: org.jetbrains:annotations:jar:20.1.0
[DEBUG] Included: com.github.spotbugs:spotbugs-annotations:jar:4.0.4
[DEBUG] Included: com.google.code.findbugs:jsr305:jar:3.0.2
[DEBUG] Configuring mojo org.owasp:dependency-check-maven:6.0.1:purge from plugin realm ClassRealm[plugin>org.owasp:dependency-check-maven:6.0.1, parent: jdk.internal.loader.ClassLoaders$AppClassLoader@277050dc]
[DEBUG] Configuring mojo 'org.owasp:dependency-check-maven:6.0.1:purge' with basic configurator -->
[DEBUG] (f) artifactoryAnalyzerParallelAnalysis = true
[DEBUG] (f) failBuildOnAnyVulnerability = false
[DEBUG] (f) failBuildOnCVSS = 11.0
[DEBUG] (f) failOnError = true
[DEBUG] (f) format = HTML
[DEBUG] (f) formats = []
[DEBUG] (f) junitFailOnCVSS = 0.0
[DEBUG] (f) mavenSettings = org.apache.maven.execution.SettingsAdapter@60cf62ad
[DEBUG] (f) outputDirectory = /Users/account/code/mobile/example-project-name/target
[DEBUG] (f) project = MavenProject: com.company.examples:project-name:DEV-SNAPSHOT @ /Users/account/code/mobile/example-project-name/pom.xml
[DEBUG] (f) reactorProjects = [MavenProject: com.company.examples:project-name:DEV-SNAPSHOT @ /Users/account/code/mobile/example-project-name/pom.xml]
[DEBUG] (s) reportOutputDirectory = /Users/account/code/mobile/example-project-name/target/site
[DEBUG] (f) retirejs = org.owasp.dependencycheck.maven.Retirejs@3d904e9c
[DEBUG] (f) scanDirectory = []
[DEBUG] (f) session = org.apache.maven.execution.MavenSession@508a65bf
[DEBUG] (f) settingsXml = org.apache.maven.execution.SettingsAdapter@60cf62ad
[DEBUG] (f) showSummary = true
[DEBUG] (f) skip = false
[DEBUG] (f) skipDependencyManagement = true
[DEBUG] (f) skipProvidedScope = false
[DEBUG] (f) skipRuntimeScope = false
[DEBUG] (f) skipSystemScope = false
[DEBUG] (f) skipTestScope = true
[DEBUG] (f) suppressionFiles = []
[DEBUG] (f) versionCheckEnabled = true
[DEBUG] (f) virtualSnapshotsFromReactor = true
[DEBUG] -- end configuration --
[DEBUG] Properties loaded:
analyzer.cocoapods.enabled='true'
proxy.disableSchemas='true'
cve.url.modified.validfordays='7'
cve.url.base='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-%d.json.gz'
analyzer.dependencybundling.enabled='true'
cve.url.original='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz'
odc.ecosystem.maxquerylimit.native='1000'
data.connection_string='jdbc:h2:file:%s;AUTOCOMMIT=ON;LOG=0;CACHE_SIZE=65536;'
archive.scan.depth='3'
analyzer.cmake.enabled='true'
odc.application.name='Dependency-Check Core'
analyzer.retirejs.repo.validforhours='24'
analyzer.node.package.enabled='true'
analyzer.pe.enabled='true'
analyzer.central.url='https://search.maven.org/solrsearch/select'
downloader.quick.query.timestamp='true'
analyzer.retirejs.repo.js.url='https://raw.githubusercontent.com/Retirejs/retire.js/master/repository/jsrepository.json'
analyzer.archive.enabled='true'
cpe.url='https://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml.gz'
analyzer.ossindex.url='https://ossindex.sonatype.org'
analyzer.nvdcve.enabled='true'
analyzer.jar.enabled='true'
analyzer.cpe.enabled='true'
data.writelock.shutdownhook='org.owasp.dependencycheck.utils.WriteLockCleanupHook'
analyzer.central.query='%s?q=1:%s&wt=xml'
analyzer.bundle.audit.enabled='true'
analyzer.node.audit.use.cache='true'
analyzer.dependencymerging.enabled='true'
odc.settings.mask='.*password.*,.*token.*'
cpe.validfordays='30'
junit.fail.on.cvss='0'
central.content.url='https://search.maven.org/remotecontent?filepath='
analyzer.node.audit.url='https://registry.npmjs.org/-/npm/v1/security/audits'
odc.application.version='6.0.1'
analyzer.msbuildproject.enabled='true'
data.user='dcuser'
engine.version.url='https://jeremylong.github.io/DependencyCheck/current.txt'
odc.autoupdate='true'
analyzer.autoconf.enabled='true'
analyzer.cpesuppression.enabled='true'
analyzer.retirejs.enabled='true'
cve.check.validforhours='4'
analyzer.versionfilter.enabled='true'
analyzer.assembly.enabled='true'
cve.cpe.startswith.filter='cpe:2.3:a:'
analyzer.golang.dep.enabled='true'
odc.analysis.timeout='30'
analyzer.nexus.url='https://repository.sonatype.org/service/local/'
analyzer.hint.enabled='true'
analyzer.retired.enabled='false'
database.batchinsert.enabled='true'
analyzer.openssl.enabled='true'
analyzer.swift.package.manager.enabled='true'
analyzer.nuspec.enabled='true'
analyzer.central.retry.count='7'
analyzer.central.use.cache='true'
updater.nvdcve.enabled='true'
analyzer.mix.audit.enabled='true'
max.download.threads='2'
analyzer.central.enabled='true'
analyzer.python.distribution.enabled='true'
analyzer.nexus.enabled='false'
odc.reports.pretty.print='false'
analyzer.artifactory.enabled='false'
analyzer.retirejs.filternonvulnerable='false'
analyzer.ossindex.enabled='true'
analyzer.central.parallel.analysis='false'
analyzer.nexus.proxy='true'
cve.startyear='2002'
odc.ecosystem.maxquerylimit.default='100'
nvd.newyear.grace.period='10'
downloader.tls.protocols='TLSv1.1,TLSv1.2,TLSv1.3'
data.file_name='odc.mv.db'
analyzer.ruby.gemspec.enabled='true'
analyzer.composer.lock.enabled='true'
data.version='5.0'
analyzer.vulnerabilitysuppression.enabled='true'
data.directory='[JAR]/data'
analyzer.experimental.enabled='false'
analyzer.golang.mod.enabled='true'
analyzer.filename.enabled='true'
analyzer.ossindex.use.cache='true'
analyzer.python.package.enabled='true'
updater.versioncheck.enabled='true'
data.driver_path=''
ecosystem.skip.cpeanalyzer='npm'
analyzer.falsepositive.enabled='true'
analyzer.pip.enabled='true'
analyzer.node.audit.enabled='true'
analyzer.npm.cpe.enabled='true'
database.batchinsert.maxsize='1000'
data.driver_name='org.h2.Driver'
analyzer.nugetconf.enabled='true'
data.password='********'
cve.url.modified='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz'
[DEBUG] Properties updated via merge:
analyzer.cocoapods.enabled='true'
proxy.disableSchemas='true'
cve.url.modified.validfordays='7'
cve.url.base='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-%d.json.gz'
analyzer.dependencybundling.enabled='true'
cve.url.original='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz'
odc.ecosystem.maxquerylimit.native='1000'
data.connection_string='jdbc:h2:file:%s;AUTOCOMMIT=ON;LOG=0;CACHE_SIZE=65536;'
archive.scan.depth='3'
analyzer.cmake.enabled='true'
odc.application.name='Dependency-Check Core'
analyzer.retirejs.repo.validforhours='24'
analyzer.node.package.enabled='true'
analyzer.pe.enabled='true'
analyzer.central.url='https://search.maven.org/solrsearch/select'
downloader.quick.query.timestamp='true'
analyzer.retirejs.repo.js.url='https://raw.githubusercontent.com/Retirejs/retire.js/master/repository/jsrepository.json'
analyzer.archive.enabled='true'
cpe.url='https://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml.gz'
analyzer.ossindex.url='https://ossindex.sonatype.org'
analyzer.nvdcve.enabled='true'
analyzer.jar.enabled='true'
analyzer.cpe.enabled='true'
data.writelock.shutdownhook='org.owasp.dependencycheck.utils.WriteLockCleanupHook'
analyzer.central.query='%s?q=1:%s&wt=xml'
analyzer.bundle.audit.enabled='true'
analyzer.node.audit.use.cache='true'
analyzer.dependencymerging.enabled='true'
odc.settings.mask='.*password.*,.*token.*'
cpe.validfordays='30'
junit.fail.on.cvss='0'
central.content.url='https://search.maven.org/remotecontent?filepath='
analyzer.node.audit.url='https://registry.npmjs.org/-/npm/v1/security/audits'
odc.application.version='6.0.1'
analyzer.msbuildproject.enabled='true'
data.user='dcuser'
engine.version.url='https://jeremylong.github.io/DependencyCheck/current.txt'
odc.autoupdate='true'
analyzer.autoconf.enabled='true'
analyzer.cpesuppression.enabled='true'
analyzer.retirejs.enabled='true'
cve.check.validforhours='4'
analyzer.versionfilter.enabled='true'
analyzer.assembly.enabled='true'
cve.cpe.startswith.filter='cpe:2.3:a:'
analyzer.golang.dep.enabled='true'
odc.analysis.timeout='30'
analyzer.nexus.url='https://repository.sonatype.org/service/local/'
analyzer.hint.enabled='true'
analyzer.retired.enabled='false'
database.batchinsert.enabled='true'
analyzer.openssl.enabled='true'
analyzer.swift.package.manager.enabled='true'
analyzer.nuspec.enabled='true'
analyzer.central.retry.count='7'
analyzer.central.use.cache='true'
updater.nvdcve.enabled='true'
analyzer.mix.audit.enabled='true'
max.download.threads='2'
analyzer.central.enabled='false'
analyzer.python.distribution.enabled='true'
analyzer.nexus.enabled='false'
odc.reports.pretty.print='false'
analyzer.artifactory.enabled='false'
analyzer.retirejs.filternonvulnerable='false'
analyzer.ossindex.enabled='true'
analyzer.central.parallel.analysis='false'
analyzer.nexus.proxy='true'
cve.startyear='2002'
odc.ecosystem.maxquerylimit.default='100'
nvd.newyear.grace.period='10'
downloader.tls.protocols='TLSv1.1,TLSv1.2,TLSv1.3'
data.file_name='odc.mv.db'
analyzer.ruby.gemspec.enabled='true'
analyzer.composer.lock.enabled='true'
data.version='5.0'
analyzer.vulnerabilitysuppression.enabled='true'
data.directory='[JAR]/../../dependency-check-data/5.0'
analyzer.experimental.enabled='false'
analyzer.golang.mod.enabled='true'
analyzer.filename.enabled='true'
analyzer.ossindex.use.cache='true'
analyzer.python.package.enabled='true'
updater.versioncheck.enabled='true'
data.driver_path=''
ecosystem.skip.cpeanalyzer='npm'
analyzer.falsepositive.enabled='true'
analyzer.pip.enabled='true'
analyzer.node.audit.enabled='true'
analyzer.npm.cpe.enabled='true'
database.batchinsert.maxsize='1000'
data.driver_name='org.h2.Driver'
analyzer.nugetconf.enabled='true'
data.password='********'
cve.url.modified='https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz'
[DEBUG] Setting: updater.versioncheck.enabled='true'
[DEBUG] Setting: junit.fail.on.cvss='0.0'
[DEBUG] Setting: analyzer.artifactory.parallel.analysis='true'
[DEBUG] Loaded Analyzer Hint Analyzer
[DEBUG] Loaded Analyzer CPE Analyzer
[DEBUG] Loaded Analyzer False Positive Analyzer
[DEBUG] Loaded Analyzer Dependency Bundling Analyzer
[DEBUG] Loaded Analyzer NVD CVE Analyzer
[DEBUG] Loaded Analyzer Vulnerability Suppression Analyzer
[DEBUG] Loaded Analyzer Node Audit Analyzer
[DEBUG] Loaded Analyzer RetireJS Analyzer
[DEBUG] Loaded Analyzer Sonatype OSS Index Analyzer
[DEBUG] Settings.getDataFile() - file: '[JAR]/../../dependency-check-data/5.0'
[DEBUG] Settings.getDataFile() - transforming filename
[DEBUG] Settings.getDataFile() - jar file: '/Users/account/.m2/repository/org/owasp/dependency-check-utils/6.0.1'
[DEBUG] Settings.getDataFile() - returning: '/Users/account/.m2/repository/org/owasp/dependency-check-utils/6.0.1/../../dependency-check-data/5.0'
[INFO] Unable to purge database; the database file does not exist: /Users/account/.m2/repository/org/owasp/dependency-check-utils/6.0.1/../../dependency-check-data/5.0/odc.mv.db
[DEBUG] Settings.getDataFile() - file: '[JAR]/../../dependency-check-data/5.0'
[DEBUG] Settings.getDataFile() - transforming filename
[DEBUG] Settings.getDataFile() - jar file: '/Users/account/.m2/repository/org/owasp/dependency-check-utils/6.0.1'
[DEBUG] Settings.getDataFile() - returning: '/Users/account/.m2/repository/org/owasp/dependency-check-utils/6.0.1/../../dependency-check-data/5.0'
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 1.204 s
[INFO] Finished at: 2020-09-23T09:07:01+02:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:6.0.1:purge (default-cli) on project project-name: Execution default-cli of goal org.owasp:dependency-check-maven:6.0.1:purge failed.: NullPointerException -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal org.owasp:dependency-check-maven:6.0.1:purge (default-cli) on project project-name: Execution default-cli of goal org.owasp:dependency-check-maven:6.0.1:purge failed.
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:957)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:289)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:193)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution default-cli of goal org.owasp:dependency-check-maven:6.0.1:purge failed.
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:148)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:957)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:289)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:193)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Caused by: java.lang.NullPointerException
at org.owasp.dependencycheck.utils.WriteLock.lock (WriteLock.java:145)
at org.owasp.dependencycheck.utils.WriteLock.<init> (WriteLock.java:132)
at org.owasp.dependencycheck.data.update.RetireJSDataSource.purge (RetireJSDataSource.java:153)
at org.owasp.dependencycheck.Engine.purge (Engine.java:971)
at org.owasp.dependencycheck.maven.PurgeMojo.runCheck (PurgeMojo.java:67)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:882)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:210)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:156)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:148)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:305)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:957)
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:289)
at org.apache.maven.cli.MavenCli.main (MavenCli.java:193)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:566)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment