dependency-check / dependency-check/DependencyCheck

[FP]: selenium detected as archive_project

Open
#7,460 12 comments 0 reactions 0 assignees View on GitHub
bug FP Report maven
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

### Package URl

pkg:maven/androidx.lifecycle/lifecycle-viewmodel@2.8.7

### CPE

`cpe:2.3:a:selenium:selenium:2.8.7:*:*:*:*:*:*:*`

### CVE

_No response_

### ODC Integration

{"label" => "Gradle Plugin"}

### ODC Version

12.1.0

### Description

After suppressing this one it also matches with `cpe:/a:archive_project:archive` and `cpe:/a:digital-ant:digital_ant`.

We got a few of these sorts of issues after updating from 10.0.2 to 12.1.0, prompted by the recent parsing error.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.