rm-hull/nvd-clojure

National Vulnerability Database dependency checker for Clojure projects

nvd-clojure

Formerly known as lein-nvd

National Vulnerability Database dependency checker tool.

For a given project, all the .jar files from its classpath will be checked for known security vulnerabilities. nvd-clojure passes them to a library called DependencyCheck which does the vulnerability analysis. Quoting the README from that library:

DependencyCheck is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries.

Installation and basic usage

Please see also: Avoiding classpath interference

Leiningen

Please create a separate project consisting of [nvd-clojure/nvd-clojure "4.0.0"]. Said project can be located inside the targeted repo's Git repository.

(defproject nvd-helper "local"
  :description "nvd-clojure helper project"
  :dependencies [[nvd-clojure "4.0.0"]
                 [org.clojure/clojure "1.11.1"]]
  :jvm-opts ["-Dclojure.main.report=stderr"])

Please do not add nvd-clojure as a dependency or plugin in the project.clj of the project to be analysed.

Then you can run, within this helper project:

lein with-profile -user run -m nvd.task.check "nvd-clojure.edn" "$(cd <YOUR_PROJECT>; lein with-profile -user,-dev classpath)"

The first argument denotes a .edn file with extra options (example, doc). You can pass an empty string "" to mean "please use the default filename" (which is nvd-clojure.edn). If this file didn't exist, it will be automatically created for you, with some useful contents and comments.

The classpath Leiningen command should reflect a production-like classpath as closely as possible: it should not include dev/test tooling, plugins, etc.

If you are using a multi-modules solution (e.g. lein-monolith), you should ensure that each module is included in this classpath; else they will not be analysed.

Clojure CLI

Please create a separate project consisting exclusively of nvd-clojure/nvd-clojure {:mvn/version "4.0.0"}. Said project can be located inside the targeted repo's Git repository.

Please do not add nvd-clojure as a dependency in the deps.edn of the project to be analysed.

You can accomplish something similar with user-level aliases, or with the :replace-deps option, at your own risk.

Then you can run, within this helper project:

clojure -J-Dclojure.main.report=stderr -M -m nvd.task.check "nvd-clojure.edn" "$(cd <YOUR_PROJECT>; clojure -Spath -A:any:aliases)"

The first argument denotes a .edn file with extra options (example, doc). You can pass an empty string "" to mean "please use the default filename" (which is nvd-clojure.edn). If this file didn't exist, it will be automatically created for you, with some useful contents and comments.

The -Spath command should reflect a production-like classpath as closely as possible: it should not include dev/test tooling, etc.

If you are using a multi-modules solution (e.g. Polylith), you should ensure that each module is included in this classpath; else they will not be analysed.

Clojure CLI Tool

If you have CLI version 1.10.3.933 or later, you can also install nvd-clojure as a "tool":

clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd

Then you can run:

clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath \""$(clojure -Spath -A:any:aliases)\"" :config-filename \""nvd-config.edn\""

The :config-filename argument denotes an .edn file with extra options (example, doc). If this file didn't exist, it will be automatically created for you, with some useful contents and comments.

The -Spath command should reflect a production-like classpath as closely as possible: it should not include dev/test tooling, etc.

If you are using a multi-modules solution (e.g. Polylith), you should ensure that each module is included in this classpath; else they will not be analysed.

Usage overview

Run the program as indicated in the previous section. The first time it runs, it will download (and cache) various databases from https://nvd.nist.gov. Subsequent runs will periodically check and update the local database, but the initial run could therefore be quite slow - of the order of ten minutes or more, so give it time.

On completion, a summary table is output to the console, and a suite of reports will be produced in the project's ./target/nvd/ directory. If vulnerabilities are detected, then the check process will exit abnormally, thereby causing any CI build environment to error. (This behaviour can be overriden by setting a :fail-threshold in the project configuration).

Example

There is an example project which has dependencies with known vulnerabilities (CVE-2016-3720, CVE-2015-5262, CVE-2014-3577).

This can be demonstrated by running the following:

clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :classpath \""$(cd example; lein with-profile -user classpath)\""

This will download the NVD database, and then cross-check the classpath dependencies against known vulnerabilities. The following summary report will be displayed on the console:

Note that as there were some vulnerabilities detected, the process was aborted, with error code -1 hence the reported subprocess failed message.

More detailed reports (both HTML & XML) are written into the ./example/target/nvd/ directory as follows:

---

Upgrading dependencies

You may use the built-in dependency tree reporters to find out what the dependency relationships are:

$ lein deps :tree # for Leiningen
$ clojure -Stree # for deps.edn

...make sure to use aliases/profiles in such a way that reflects the production classpath.

antq will traverse your project dependencies, and suggest upgraded versions, and can optionally be configured to update the project file.

(Note that that is only one of the multiple ways of remediating a given vulnerability, please see FAQ)

Configuration

The default settings for nvd-clojure are usually sufficient for most projects, but can be customized with an .edn config file (example). The filename denoting that file is the first argument to be passed to nvd-clojure when invoking it as a main (-m) program.

When invoking it via Clojure Tools, it must be passed as a :config-filename option, e.g.

clojure -Tnvd nvd.task/check :classpath \""$(clojure -Spath)\"" :config-filename \""nvd-config.edn\""

Note the escaped double quotes around the filename, to ensure that Clojure reads the command line argument as a string, not a symbol.

Configuration options

There are many DependencyCheck settings (for example to connect via a proxy, or to specify an alternative to the H2 database). The exact settings can be seen in the config.clj source file and cross-referenced to the DependencyCheck wiki.

There are some specific settings below which are worthy of a few comments:

• :nvd-api - map of:
  • :key - MANDATORY (unless you set an NVD_API_TOKEN environment variable) - must contain an API key that you can obtain in https://nvd.nist.gov/developers/request-an-api-key
  • other keys: :endpoint, :delay, :max-retry-count, :valid-for-hours, :datafeed - advanced, please refer to the source code.
• :fail-threshold default value 0; checks the highest CVSS score across all dependencies, and fails if this threshold is breached.
  • As CVSS score ranges from 0..10, the default value will cause a build to fail even for the lowest rated vulnerability.
  • Set to 11 if you never want the build to fail.
• :data-directory default value is the data dir of DependencyCheck, e.g. ~/.m2/repository/org/owasp/dependency-check-utils/3.2.1/data/
  • It shouldn't normally be necessary to change this
• :suppression-file default unset
  • Allows for CVEs to be permanently or temporarily suppressed.
  • See DependencyCheck documentation for the XML file format.
  • If a nvd-clojure.edn file was automatically generated for you, then this file will also be automatically generated (and enabled) for you.
• :verbose-summary default false
  • When set to true, the summary table includes a severity determination for all dependencies.
  • When set to false, the summary table includes only packages that have either low or high severity determination.
• :output-dir default value target/nvd/: the directory to save reports into
• :throw-if-check-unsuccessful - makes the program exit by throwing an exception instead of by invoking System/exit.
  • This can ease certain usages.

Logging

You can override the default logging behaviour by providing a simplelogger.properties file on the nvd-clojure classpath. Note that this is not the classpath of your project. See resources/simplelogger.properties for the default config.

You can also set logging properties directly through Java system properties (the -D flags), for example:

clojure -J-Dclojure.main.report=stderr -J-Dorg.slf4j.simpleLogger.log.org.apache.commons=error -Tnvd nvd.task/check # ...

FAQ

Attribution

nvd-clojure uses Jeremy Long's DependencyCheck library to do the heavy lifting.

References

• https://nvd.nist.gov/
• https://www.owasp.org/index.php/OWASP_Dependency_Check
• https://github.com/jeremylong/DependencyCheck
• https://github.com/liquidz/antq

License

The MIT License (MIT)

Copyright (c) 2016-23 Richard Hull

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

nvd-clojure's Issues

`lein-nvd` imposes Clojure 1.8.0 via the `nvd-profile`

The lein-nvd plugin defines an nvd-profile that hardcodes Clojure 1.8.0. This profile then takes precedence over the project's profile, thereby overriding the project's Clojure version.

This bug is rather subtle--lein nvd does not load any project code, but Clojure always loads user.clj. So a project that requires Clojure 1.9 and requires clojure.spec.alpha in user.clj will get a NoClassDefFoundError when running lein nvd.

There's no reason for the Lein plugin to require a Clojure version--that should be left to the project.

Accept config as .edn

Idea: also emit edn/xml files if not provided

Fix reflection warnings

Reflection warning, nvd/report.clj:45:5 - call to method generateReports on org.owasp.dependencycheck.reporting.ReportGenerator can't be resolved (argument types: unknown, unknown).
Reflection warning, nvd/task/check.clj:42:9 - call to method scan on org.owasp.dependencycheck.Engine can't be resolved (argument types: unknown).

Leiningen plugin does not play nicely with `lein monolith`

Hey there, I'm trying to run this across multiple project.clj files using lein monolith each.

I noticed that check calls (System/exit ..) by default, which prevents lein monolith from executing the checks on each repository.

Is it possible to configure the exit behavior to throw an exception instead of calling System/exit?

Note: I also tried to set :nvd {:exit-after-check false} in my project.clj file, but it had no effect.

Boot support?

Would you be open to adding Boot support to this project?

Option to not report "OK" rows?

Hi there,

thanks for this project!

Would it sound good to add an option to not render rows like the following?

| tools.nrepl-0.2.12.jar                                                    | OK                                 |

In large projects, OK rows greatly outnumber vulnerable ones, so they become a nuisance (I have to scroll a lot to find the 'meat').

Show lein-nvd and dependency-check versions on running

... or add a version task

NoSuchMethodError: org.apache.commons.lang3.StringEscapeUtils.escapeXml11

I ran lein nvd check in a project at work and got the following error:

Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=512m; support was removed in 8.0
SLF4J: Class path contains multiple SLF4J bindings.
SLF4J: Found binding in [jar:file:/home/timmc/.m2/repository/org/slf4j/slf4j-simple/1.7.25/slf4j-simple-1.7.25.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: Found binding in [jar:file:/home/timmc/.m2/repository/ch/qos/logback/logback-classic/1.1.2/logback-classic-1.1.2.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
SLF4J: Actual binding is of type [org.slf4j.impl.SimpleLoggerFactory]
Checking dependencies for [project coordinates elided] ...
[2017-09-26 14:38:41.568] INFO Engine - Checking for updates
[2017-09-26 14:38:41.582] INFO NvdCveUpdater - Skipping NVD check since last check was within 4 hours.
[2017-09-26 14:38:41.585] INFO Engine - Check for updates complete (16 ms)
[2017-09-26 14:38:41.586] INFO Engine - Analysis Started
[2017-09-26 14:38:42.767] INFO Engine - Finished Archive Analyzer (1 seconds)
[2017-09-26 14:38:42.813] INFO Engine - Finished File Name Analyzer (0 seconds)
[2017-09-26 14:38:47.285] INFO Engine - Finished Jar Analyzer (4 seconds)
[2017-09-26 14:39:45.792] INFO Engine - Finished Central Analyzer (58 seconds)
[2017-09-26 14:39:45.834] INFO Engine - Finished Dependency Merging Analyzer (0 seconds)
[2017-09-26 14:39:45.858] INFO Engine - Finished Version Filter Analyzer (0 seconds)
[2017-09-26 14:39:45.962] INFO Engine - Finished Hint Analyzer (0 seconds)
[2017-09-26 14:39:48.871] INFO CPEAnalyzer - Created CPE Index (2 seconds)
[2017-09-26 14:39:50.930] INFO Engine - Finished CPE Analyzer (4 seconds)
[2017-09-26 14:39:50.937] INFO Engine - Finished False Positive Analyzer (0 seconds)
[2017-09-26 14:39:51.144] INFO Engine - Finished Cpe Suppression Analyzer (0 seconds)
[2017-09-26 14:39:51.483] INFO Engine - Finished NVD CVE Analyzer (0 seconds)
[2017-09-26 14:39:51.639] INFO Engine - Finished Vulnerability Suppression Analyzer (0 seconds)
[2017-09-26 14:39:51.696] INFO Engine - Finished Dependency Bundling Analyzer (0 seconds)
[2017-09-26 14:39:51.965] INFO Engine - Analysis Complete (70 seconds)
Exception in thread "main" org.apache.velocity.exception.MethodInvocationException: Invocation of method 'xml' in  class org.owasp.dependencycheck.reporting.EscapeTool threw exception java.lang.NoSuchMethodError: org.apache.commons.lang3.StringEscapeUtils.escapeXml11(Ljava/lang/String;)Ljava/lang/String; at templates/xmlReport.vsl[line 27, column 24], compiling:(/home/timmc/work/the_project/server/target/da066d96d0453d4c694f0f5a7419a2d4d8102935-init.clj:1:5)
	at clojure.lang.Compiler.load(Compiler.java:7391)
	at clojure.lang.Compiler.loadFile(Compiler.java:7317)
	at clojure.main$load_script.invokeStatic(main.clj:275)
	at clojure.main$init_opt.invokeStatic(main.clj:277)
	at clojure.main$init_opt.invoke(main.clj:277)
	at clojure.main$initialize.invokeStatic(main.clj:308)
	at clojure.main$null_opt.invokeStatic(main.clj:342)
	at clojure.main$null_opt.invoke(main.clj:339)
	at clojure.main$main.invokeStatic(main.clj:421)
	at clojure.main$main.doInvoke(main.clj:384)
	at clojure.lang.RestFn.invoke(RestFn.java:421)
	at clojure.lang.Var.invoke(Var.java:383)
	at clojure.lang.AFn.applyToHelper(AFn.java:156)
	at clojure.lang.Var.applyTo(Var.java:700)
	at clojure.main.main(main.java:37)
Caused by: org.apache.velocity.exception.MethodInvocationException: Invocation of method 'xml' in  class org.owasp.dependencycheck.reporting.EscapeTool threw exception java.lang.NoSuchMethodError: org.apache.commons.lang3.StringEscapeUtils.escapeXml11(Ljava/lang/String;)Ljava/lang/String; at templates/xmlReport.vsl[line 27, column 24]
	at org.apache.velocity.runtime.parser.node.ASTMethod.handleInvocationException(ASTMethod.java:261)
	at org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:187)
	at org.apache.velocity.runtime.parser.node.ASTReference.execute(ASTReference.java:280)
	at org.apache.velocity.runtime.parser.node.ASTReference.render(ASTReference.java:369)
	at org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at org.apache.velocity.runtime.directive.Foreach.render(Foreach.java:420)
	at org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:207)
	at org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:342)
	at org.apache.velocity.runtime.RuntimeInstance.render(RuntimeInstance.java:1378)
	at org.apache.velocity.runtime.RuntimeInstance.evaluate(RuntimeInstance.java:1314)
	at org.apache.velocity.app.VelocityEngine.evaluate(VelocityEngine.java:272)
	at org.owasp.dependencycheck.reporting.ReportGenerator.processTemplate(ReportGenerator.java:355)
	at org.owasp.dependencycheck.reporting.ReportGenerator.processTemplate(ReportGenerator.java:313)
	at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:242)
	at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:236)
	at org.owasp.dependencycheck.reporting.ReportGenerator.write(ReportGenerator.java:213)
	at nvd.report$generate_report.invokeStatic(report.clj:46)
	at nvd.report$generate_report.invoke(report.clj:37)
	at nvd.task.check$_main.invokeStatic(check.clj:54)
	at nvd.task.check$_main.invoke(check.clj:51)
	at user$eval317.invokeStatic(da066d96d0453d4c694f0f5a7419a2d4d8102935-init.clj:1)
	at user$eval317.invoke(da066d96d0453d4c694f0f5a7419a2d4d8102935-init.clj:1)
	at clojure.lang.Compiler.eval(Compiler.java:6927)
	at clojure.lang.Compiler.eval(Compiler.java:6917)
	at clojure.lang.Compiler.load(Compiler.java:7379)
	... 14 more
Caused by: java.lang.NoSuchMethodError: org.apache.commons.lang3.StringEscapeUtils.escapeXml11(Ljava/lang/String;)Ljava/lang/String;
	at org.owasp.dependencycheck.reporting.EscapeTool.xml(EscapeTool.java:84)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:483)
	at org.apache.velocity.util.introspection.UberspectImpl$VelMethodImpl.doInvoke(UberspectImpl.java:395)
	at org.apache.velocity.util.introspection.UberspectImpl$VelMethodImpl.invoke(UberspectImpl.java:384)
	at org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:173)
	... 37 more
Subprocess failed

Leiningen version 2.7.1 on Java 1.8.0_31. I can try pruning this project down to make an SSCCE, but wanted to go ahead and file the bug (especially in case it's a known one.)

Support some options like the Gradle/Maven plugins

Recent, a change in the NIST URL resulted in DependencyCheck failing to update the DB, thus causing the DB update process (and consequently lein nvd, and eventually our CI build) to fail.

The workaround is to configure variables like cveUrl12Modified in the Maven plugin. That doesn't seem to be available for lein-nvd, however.

Can options like these be exposed to give more flexibility to lein-nvd?

org.owasp.dependencycheck.Engine: Unexpected exception occurred initializing CPE Analyzer.

We have a fairly large project where we are trying to add lein-nvd. Unfortunately it doesn't work in our project and fails due to Unexpected exception occurred initializing CPE Analyzer. I haven't been figured any way to work around this. Any idea whether this is due to some dependency or our code?

ERROR 2019-06-04 16:08:51.052 [] o.o.d.analyzer.AssemblyAnalyzer: ----------------------------------------------------
ERROR 2019-06-04 16:08:51.054 [] o.o.d.analyzer.AssemblyAnalyzer: .NET Assembly Analyzer could not be initialized and at least one 'exe' or 'dll' was scanned. The 'mono' executable could not be found on the path; either disable the Assembly Analyzer or configure the path mono. On some systems mono-runtime and mono-devel need to be installed.
ERROR 2019-06-04 16:08:51.054 [] o.o.d.analyzer.AssemblyAnalyzer: ----------------------------------------------------
ERROR 2019-06-04 16:08:51.238 [] org.owasp.dependencycheck.Engine: Unexpected exception occurred initializing CPE Analyzer.
Exception in thread "main" Syntax error compiling at (/private/var/folders/zs/xwx9c01d2nd_40fjjk9f_b4c0000gp/T/form-init8886338634330637156.clj:1:125).
	at clojure.lang.Compiler.load(Compiler.java:7647)
	at clojure.lang.Compiler.loadFile(Compiler.java:7573)
	at clojure.main$load_script.invokeStatic(main.clj:452)
	at clojure.main$init_opt.invokeStatic(main.clj:454)
	at clojure.main$init_opt.invoke(main.clj:454)
	at clojure.main$initialize.invokeStatic(main.clj:485)
	at clojure.main$null_opt.invokeStatic(main.clj:519)
	at clojure.main$null_opt.invoke(main.clj:516)
	at clojure.main$main.invokeStatic(main.clj:598)
	at clojure.main$main.doInvoke(main.clj:561)
	at clojure.lang.RestFn.applyTo(RestFn.java:137)
	at clojure.lang.Var.applyTo(Var.java:705)
	at clojure.main.main(main.java:37)
Caused by: org.owasp.dependencycheck.exception.ExceptionCollection: One or more exceptions occurred during dependency-check analysis
	Unexpected Exception
	at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:693)
	at nvd.task.check$scan_and_analyze.invokeStatic(check.clj:43)
	at nvd.task.check$scan_and_analyze.invoke(check.clj:38)
	at nvd.task.check$_main.invokeStatic(check.clj:54)
	at nvd.task.check$_main.invoke(check.clj:51)
	at user$eval22080.invokeStatic(form-init8886338634330637156.clj:1)
	at user$eval22080.invoke(form-init8886338634330637156.clj:1)
	at clojure.lang.Compiler.eval(Compiler.java:7176)
	at clojure.lang.Compiler.eval(Compiler.java:7166)
	at clojure.lang.Compiler.load(Compiler.java:7635)
	... 12 more
Subprocess failed

exception in thread "main" java.lang.NoSuchMethodError:

Trying to run lein nvd check the example project is resulting in the below exception.

Using lein 2.8.1

Exception in thread "main" java.lang.NoSuchMethodError: org.apache.commons.io.IOUtils.toString(Ljava/io/InputStream;Ljava/nio/charset/Charset;)Ljava/lang/String;, compiling:(/private/var/folders/32/k631300x10xgjqf3gpxgc38r0000gn/T/form-init7686865009871791344.clj:1:125)
at clojure.lang.Compiler.load(Compiler.java:7526)
at clojure.lang.Compiler.loadFile(Compiler.java:7452)
at clojure.main$load_script.invokeStatic(main.clj:278)
at clojure.main$init_opt.invokeStatic(main.clj:280)
at clojure.main$init_opt.invoke(main.clj:280)
at clojure.main$initialize.invokeStatic(main.clj:311)
at clojure.main$null_opt.invokeStatic(main.clj:345)
at clojure.main$null_opt.invoke(main.clj:342)
at clojure.main$main.invokeStatic(main.clj:424)
at clojure.main$main.doInvoke(main.clj:387)
at clojure.lang.RestFn.applyTo(RestFn.java:137)
at clojure.lang.Var.applyTo(Var.java:702)
at clojure.main.main(main.java:37)
Caused by: java.lang.NoSuchMethodError: org.apache.commons.io.IOUtils.toString(Ljava/io/InputStream;Ljava/nio/charset/Charset;)Ljava/lang/String;
at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.createTables(ConnectionFactory.java:321)
at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.initialize(ConnectionFactory.java:183)
at org.owasp.dependencycheck.data.nvdcve.ConnectionFactory.getConnection(ConnectionFactory.java:231)
at org.owasp.dependencycheck.data.nvdcve.CveDB.open(CveDB.java:226)
at org.owasp.dependencycheck.data.nvdcve.CveDB.(CveDB.java:196)
at org.owasp.dependencycheck.Engine.openDatabase(Engine.java:950)
at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:892)
at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:871)
at nvd.task.update_database$_main.invokeStatic(update_database.clj:35)
at nvd.task.update_database$_main.invoke(update_database.clj:29)
at user$eval683.invokeStatic(form-init7686865009871791344.clj:1)
at user$eval683.invoke(form-init7686865009871791344.clj:1)
at clojure.lang.Compiler.eval(Compiler.java:7062)
at clojure.lang.Compiler.eval(Compiler.java:7052)
at clojure.lang.Compiler.load(Compiler.java:7514)
... 12 more
Subprocess failed

lein nvd check Task breaking

Edit: in order to clarify better what is going on:

We've been running lein nvd check to automate a patch process in our team, and it has been really smooth, since yesterday things started breaking (as stated below). We had a hypothesis that it could be the dependency-check dependency, that was outdated, so we bumped it and released a "1.4.2" nvd-clojure dependency locally (via lein install). but we just got another error. Not sure where to look at to debug it.

Dependency-check released a new version yesterday

---

Since yesterday, wheven I run lein nvd check I get this stacktrace back

Checking dependencies for machete 1.0.0-SNAPSHOT ...
  using nvd-clojure:  and dependency-check: 6.0.5
Encountered errors while analyzing: One or more exceptions occurred during analysis:
    UpdateException: java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
        caused by ExecutionException: java.lang.NoClassDefFoundError: com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
        caused by NoClassDefFoundError: com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
        caused by ClassNotFoundException: com.fasterxml.jackson.databind.deser.SettableBeanProperty$Delegating
    NoDataException: No documents exist
#error {
 :cause com.fasterxml.jackson.databind.deser.SettableBeanProperty$Delegating
 :via
 [{:type org.owasp.dependencycheck.data.update.exception.UpdateException
   :message java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
   :at [org.owasp.dependencycheck.data.update.NvdCveUpdater performUpdate NvdCveUpdater.java 298]}
  {:type java.util.concurrent.ExecutionException
   :message java.lang.NoClassDefFoundError: com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
   :at [java.util.concurrent.FutureTask report FutureTask.java 122]}
  {:type java.lang.NoClassDefFoundError
   :message com/fasterxml/jackson/databind/deser/SettableBeanProperty$Delegating
   :at [java.lang.ClassLoader defineClass1 ClassLoader.java -2]}
  {:type java.lang.ClassNotFoundException
   :message com.fasterxml.jackson.databind.deser.SettableBeanProperty$Delegating
   :at [jdk.internal.loader.BuiltinClassLoader loadClass BuiltinClassLoader.java 606]}]
 :trace
 [[jdk.internal.loader.BuiltinClassLoader loadClass BuiltinClassLoader.java 606]
  [jdk.internal.loader.ClassLoaders$AppClassLoader loadClass ClassLoaders.java 168]
  [java.lang.ClassLoader loadClass ClassLoader.java 522]
  [java.lang.ClassLoader defineClass1 ClassLoader.java -2]
  [java.lang.ClassLoader defineClass ClassLoader.java 1016]
  [java.security.SecureClassLoader defineClass SecureClassLoader.java 151]
  [jdk.internal.loader.BuiltinClassLoader defineClass BuiltinClassLoader.java 825]
  [jdk.internal.loader.BuiltinClassLoader findClassOnClassPathOrNull BuiltinClassLoader.java 723]
  [jdk.internal.loader.BuiltinClassLoader loadClassOrNull BuiltinClassLoader.java 646]
  [jdk.internal.loader.BuiltinClassLoader loadClass BuiltinClassLoader.java 604]
  [jdk.internal.loader.ClassLoaders$AppClassLoader loadClass ClassLoaders.java 168]
  [java.lang.ClassLoader loadClass ClassLoader.java 522]
  [java.lang.ClassLoader defineClass1 ClassLoader.java -2]
  [java.lang.ClassLoader defineClass ClassLoader.java 1016]
  [java.security.SecureClassLoader defineClass SecureClassLoader.java 151]
  [jdk.internal.loader.BuiltinClassLoader defineClass BuiltinClassLoader.java 825]
  [jdk.internal.loader.BuiltinClassLoader findClassOnClassPathOrNull BuiltinClassLoader.java 723]
  [jdk.internal.loader.BuiltinClassLoader loadClassOrNull BuiltinClassLoader.java 646]
  [jdk.internal.loader.BuiltinClassLoader loadClass BuiltinClassLoader.java 604]
  [jdk.internal.loader.ClassLoaders$AppClassLoader loadClass ClassLoaders.java 168]
  [java.lang.ClassLoader loadClass ClassLoader.java 522]
  [com.fasterxml.jackson.module.afterburner.deser.PropertyMutatorCollector addObjectSetter PropertyMutatorCollector.java 65]
  [com.fasterxml.jackson.module.afterburner.deser.DeserializerModifier findOptimizableProperties DeserializerModifier.java 143]
  [com.fasterxml.jackson.module.afterburner.deser.DeserializerModifier updateBuilder DeserializerModifier.java 61]
  [com.fasterxml.jackson.databind.deser.BeanDeserializerFactory buildBeanDeserializer BeanDeserializerFactory.java 267]
  [com.fasterxml.jackson.databind.deser.BeanDeserializerFactory createBeanDeserializer BeanDeserializerFactory.java 169]
  [com.fasterxml.jackson.databind.deser.DeserializerCache _createDeserializer2 DeserializerCache.java 403]
  [com.fasterxml.jackson.databind.deser.DeserializerCache _createDeserializer DeserializerCache.java 352]
  [com.fasterxml.jackson.databind.deser.DeserializerCache _createAndCache2 DeserializerCache.java 264]
  [com.fasterxml.jackson.databind.deser.DeserializerCache _createAndCacheValueDeserializer DeserializerCache.java 244]
  [com.fasterxml.jackson.databind.deser.DeserializerCache findValueDeserializer DeserializerCache.java 142]
  [com.fasterxml.jackson.databind.DeserializationContext findRootValueDeserializer DeserializationContext.java 461]
  [com.fasterxml.jackson.databind.ObjectReader _prefetchRootDeserializer ObjectReader.java 1791]
  [com.fasterxml.jackson.databind.ObjectReader <init> ObjectReader.java 205]
  [com.fasterxml.jackson.databind.ObjectMapper _newReader ObjectMapper.java 623]
  [com.fasterxml.jackson.databind.ObjectMapper readerFor ObjectMapper.java 3237]
  [org.owasp.dependencycheck.data.update.nvd.NvdCveParser parse NvdCveParser.java 89]
  [org.owasp.dependencycheck.data.update.nvd.ProcessTask importJSON ProcessTask.java 139]
  [org.owasp.dependencycheck.data.update.nvd.ProcessTask processFiles ProcessTask.java 152]
  [org.owasp.dependencycheck.data.update.nvd.ProcessTask call ProcessTask.java 113]
  [org.owasp.dependencycheck.data.update.nvd.ProcessTask call ProcessTask.java 40]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause No documents exist
 :via
 [{:type org.owasp.dependencycheck.exception.NoDataException
   :message No documents exist
   :at [org.owasp.dependencycheck.Engine ensureDataExists Engine.java 1066]}]
 :trace
 [[org.owasp.dependencycheck.Engine ensureDataExists Engine.java 1066]
  [org.owasp.dependencycheck.Engine analyzeDependencies Engine.java 596]
  [nvd.task.check$scan_and_analyze$fn__4682 invoke check.clj 54]
  [nvd.task.check$scan_and_analyze invokeStatic check.clj 53]
  [nvd.task.check$scan_and_analyze invoke check.clj 48]
  [nvd.task.check$_main invokeStatic check.clj 100]
  [nvd.task.check$_main doInvoke check.clj 95]
  [clojure.lang.RestFn invoke RestFn.java 408]
  [machete.playground$fn__18972 invokeStatic playground.clj 10]
  [machete.playground$fn__18972 invoke playground.clj 2]
  [clojure.lang.AFn applyToHelper AFn.java 152]
  [clojure.lang.AFn applyTo AFn.java 144]
  [clojure.lang.Compiler$InvokeExpr eval Compiler.java 3702]
  [clojure.lang.Compiler$DefExpr eval Compiler.java 457]
  [clojure.lang.Compiler eval Compiler.java 7182]
  [clojure.lang.Compiler eval Compiler.java 7132]
  [clojure.core$eval invokeStatic core.clj 3214]
  [clojure.core$eval invoke core.clj 3210]
  [nrepl.middleware.interruptible_eval$evaluate$fn__2436 invoke interruptible_eval.clj 91]
  [clojure.main$repl$read_eval_print__9086$fn__9089 invoke main.clj 437]
  [clojure.main$repl$read_eval_print__9086 invoke main.clj 437]
  [clojure.main$repl$fn__9095 invoke main.clj 458]
  [clojure.main$repl invokeStatic main.clj 458]
  [clojure.main$repl doInvoke main.clj 368]
  [clojure.lang.RestFn invoke RestFn.java 1523]
  [nrepl.middleware.interruptible_eval$evaluate invokeStatic interruptible_eval.clj 84]
  [nrepl.middleware.interruptible_eval$evaluate invoke interruptible_eval.clj 56]
  [nrepl.middleware.interruptible_eval$interruptible_eval$fn__2462$fn__2466 invoke interruptible_eval.clj 155]
  [clojure.lang.AFn run AFn.java 22]
  [nrepl.middleware.session$session_exec$main_loop__2563$fn__2567 invoke session.clj 190]
  [nrepl.middleware.session$session_exec$main_loop__2563 invoke session.clj 189]
  [clojure.lang.AFn run AFn.java 22]
  [java.lang.Thread run Thread.java 832]]}
Execution error (ExceptionInfo) at nvd.task.check/scan-and-analyze$fn (check.clj:59).
org.owasp.dependencycheck.exception.ExceptionCollection

I've tried patching locally the dependency-check to 6.1.3 (a release that was made yesterday)

And the stack changed to this:

Encountered errors while analyzing: One or more exceptions occurred during analysis:
	NoSuchMethodError: 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
	NoSuchMethodError: 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create DirectoryCache.java 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> OssindexClientImpl.java 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create OssindexClientFactory.java 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports OssIndexAnalyzer.java 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency OssIndexAnalyzer.java 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze AbstractAnalyzer.java 131]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 88]
  [org.owasp.dependencycheck.AnalysisTask call AnalysisTask.java 37]
  [java.util.concurrent.FutureTask run FutureTask.java 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker ThreadPoolExecutor.java 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run ThreadPoolExecutor.java 630]
  [java.lang.Thread run Thread.java 832]]}
#error {
 :cause 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
 :via
 [{:type java.lang.NoSuchMethodError
   :message 'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> DirectoryCache.java 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]} #error {
 :cause "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
 :via
 [{:type java.lang.NoSuchMethodError
   :message "'void com.google.common.base.Preconditions.checkState(boolean, java.lang.String, java.lang.Object)'"
   :at [org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]}]
 :trace
 [[org.sonatype.ossindex.service.client.cache.DirectoryCache <init> "DirectoryCache.java" 84]
  [org.sonatype.ossindex.service.client.cache.DirectoryCache$Configuration create "DirectoryCache.java" 328]
  [org.sonatype.ossindex.service.client.internal.OssindexClientImpl <init> "OssindexClientImpl.java" 96]
  [org.owasp.dependencycheck.data.ossindex.OssindexClientFactory create "OssindexClientFactory.java" 119]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer requestReports "OssIndexAnalyzer.java" 196]
  [org.owasp.dependencycheck.analyzer.OssIndexAnalyzer analyzeDependency "OssIndexAnalyzer.java" 138]
  [org.owasp.dependencycheck.analyzer.AbstractAnalyzer analyze "AbstractAnalyzer.java" 131]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 88]
  [org.owasp.dependencycheck.AnalysisTask call "AnalysisTask.java" 37]
  [java.util.concurrent.FutureTask run "FutureTask.java" 264]
  [java.util.concurrent.ThreadPoolExecutor runWorker "ThreadPoolExecutor.java" 1130]
  [java.util.concurrent.ThreadPoolExecutor$Worker run "ThreadPoolExecutor.java" 630]
  [java.lang.Thread run "Thread.java" 832]]}]}
 at nvd.task.check$scan_and_analyze$fn__2312.invoke (check.clj:59)
    nvd.task.check$scan_and_analyze.invokeStatic (check.clj:53)
    nvd.task.check$scan_and_analyze.invoke (check.clj:48)
    nvd.task.check$_main.invokeStatic (check.clj:100)
    nvd.task.check$_main.doInvoke (check.clj:95)
    clojure.lang.RestFn.invoke (RestFn.java:408)
    leiningen.nvd$nvd.invokeStatic (nvd.clj:70)
    leiningen.nvd$nvd.doInvoke (nvd.clj:35)
    clojure.lang.RestFn.invoke (RestFn.java:425)
    clojure.lang.AFn.applyToHelper (AFn.java:156)
    clojure.lang.RestFn.applyTo (RestFn.java:132)
    clojure.lang.Var.applyTo (Var.java:705)
    clojure.core$apply.invokeStatic (core.clj:667)
    clojure.core$apply.invoke (core.clj:660)
    leiningen.core.main$partial_task$fn__7330.doInvoke (main.clj:284)
    clojure.lang.RestFn.applyTo (RestFn.java:139)
    clojure.lang.AFunction$1.doInvoke (AFunction.java:31)
    clojure.lang.RestFn.applyTo (RestFn.java:137)
    clojure.core$apply.invokeStatic (core.clj:667)
    clojure.core$apply.invoke (core.clj:660)
    leiningen.core.main$apply_task.invokeStatic (main.clj:334)
    leiningen.core.main$apply_task.invoke (main.clj:320)
    leiningen.core.main$resolve_and_apply.invokeStatic (main.clj:343)
    leiningen.core.main$resolve_and_apply.invoke (main.clj:336)
    leiningen.core.main$_main$fn__7419.invoke (main.clj:453)
    leiningen.core.main$_main.invokeStatic (main.clj:442)
    leiningen.core.main$_main.doInvoke (main.clj:439)
    clojure.lang.RestFn.applyTo (RestFn.java:137)
    clojure.lang.Var.applyTo (Var.java:705)
    clojure.core$apply.invokeStatic (core.clj:665)
    clojure.main$main_opt.invokeStatic (main.clj:514)
    clojure.main$main_opt.invoke (main.clj:510)
    clojure.main$main.invokeStatic (main.clj:664)
    clojure.main$main.doInvoke (main.clj:616)
    clojure.lang.RestFn.applyTo (RestFn.java:137)
    clojure.lang.Var.applyTo (Var.java:705)
    clojure.main.main (main.java:40)

In some scenarios it works without fails, but I was unable to figure out why.

If you need more info, let me know!

Possible feature: ignore a dependency

Thanks for all your work on this, @rm-hull!

I have a question: would you be opposed to a pull request with an :nvd option to basically ignore a dependency listed in the project.clj? It would come with some very clear warnings about what's being ignored. I was thinking a regex pattern that would remove items from the classpath list that's getting scanned.

I understand this isn't ideal, but for me I think it's a difference between getting an automated NVD scan working on our code-bases and just giving up.

Background:

At my company, we have a home-rolled library that would theoretically get scanned every time it's built. However, when a consuming project lists that library in its dependency list, I'm getting some weird proxy error.

The library is internal-only, hosted on an internal artifactory, and for whatever reason I can't get any combination of proxy settings or artifactory analyzers to work. I've considered reaching out to some co-workers who are more aware of our networking settings, but I'm not sure how far I'll get.

lein-nvd's own dependencies shouldn't affect the analysis result

Hi,

first of all thanks again for this tool!

There's a thing that affects its cleanliness: the dependencies of the lein-nvd plugin itself affect the workload that is passed to the NVD analyzer.

A notorious example being guava, which is not necessarily present in my apps, and yet can trigger a vuln report, because as of today lein-nvd depends on (or resolves to) an outdated Guava version.

That was no clean fix AFAIK - none of these are ideal:

;; Approach 1 - global dependency.
;; Problematic: introduces a false dependency (the givenapp doesnt use Guava in any way)
:dependencies [[com.google.guava/guava "25.1-jre"]]

;; Approach 2 - :provided dependency.
;; Problematic: also introduces a false dependency, just in a weaker form
:provided {:dependencies [[com.google.guava/guava "25.1-jre"]]}

;; Approach 3 - NVD-specific dependency, run lein-nvd later with `+nvd` profile
;; Problematic: if our app actually depends on Guava at a global level
;; this dependency will override that version, mutating the analysis results.
:nvd {:dependencies [[com.google.guava/guava "25.1-jre"]]}

I would suggest either:

• figuring out a way of setting up Lein deps optimally (documenting that in the README); or
• run lein-nvd in two phases somehow
  • first one without nvd or any of its deps
  • second one with nvd, analyzing the classpath of the previous phase

WDYT?

Thanks - V

cli: print location of html report

After a run that found vulnerabilities, the location of the generated html report should be logged, so that users can easily open them (e.g. cmd+click on iTerm).

Remove eval-in-project?

The core module is run outside of leiningen (there is a conflict in the version of Lucene that is used in the dependency-check libs vs. the version of Lucene that is embedded in Leiningen).

I saw this in the readme and thought I should let you know that Leiningen 2.8.0-RC1 and onwards will not ship with its own Lucene, so the eval-in-project might not be necessary any more. I might be able to cook up a patch to remove it, but of course it would not be compatible with 2.7.1 and older.

IlllegalArgumentException when running the from the CLI

The error occurred during the first run of the program. I'm running OpenJDK 11. See the full version description below.

To Reproduce

1. Add to deps.end
   :nvd {:extra-deps {lein-nvd/lein-nvd {:mvn/version "1.4.1"}}
   :main-opts ["-m" "nvd.task.check"]}}}

2. Run clj -M:nvd

3. See error:
   Execution error (IllegalArgumentException) at nvd.task.check/make-classpath (check.clj:66).
   No matching field found: getURLs for class jdk.internal.loader.ClassLoaders$AppClassLoader

Java version:

openjdk 11.0.10 2021-01-19
OpenJDK Runtime Environment (build 11.0.10+9-Ubuntu-0ubuntu1.20.04)
OpenJDK 64-Bit Server VM (build 11.0.10+9-Ubuntu-0ubuntu1.20.04, mixed mode)

FAQ

• Semver / policy
• Why are there false positives?
• Why dirs? Why not .jars?
• OSSIndex flakiness
• How to remediate? Is it a good idea to automate remediation?

Cant run the example project - java.lang.NoSuchMethodError

I am receiving the following exception running the included example project. on master commit 58cfea4 using lein 2.7.1. Anyone seen this before ?

When running the Exception in thread "main" java.lang.NoSuchMethodError: org.apache.commons.io.IOUtils.toString(Ljava/io/InputStream;Ljava/nio/charset/Charset;)Ljava/lang/String;, compiling:(/private/var/folders/32/k631300x10xgjqf3gpxgc38r0000gn/T/form-init2800230060992263135.clj:1:125)
at clojure.lang.Compiler.load(Compiler.java:7526)
at clojure.lang.Compiler.loadFile(Compiler.java:7452)
at clojure.main$load_script.invokeStatic(main.clj:278)
at clojure.main$init_opt.invokeStatic(main.clj:280)
at clojure.main$init_opt.invoke(main.clj:280)
at clojure.main$initialize.invokeStatic(main.clj:311)
at clojure.main$null_opt.invokeStatic(main.clj:345)
at clojure.main$null_opt.invoke(main.clj:342)
at clojure.main$main.invokeStatic(main.clj:424)
at clojure.main$main.doInvoke(main.clj:387)
at clojure.lang.RestFn.applyTo(RestFn.java:137)
at clojure.lang.Var.applyTo(Var.java:702)
at clojure.main.main(main.java:37)

Suppress CVEs

Add capability (in project.clj settings) to suppress certain CVE-IDs, such that the task wont report (in red at least), and wont exit with an error status code

CVSS score thresholding

Currently exits with an error status code if >0 vulnerabilities detected. Change this to abort when the CVSS score threshold is breached

Clojure class-path for deps.edn with mvn/repos unable to resolve artifacts

Running clj -M:nvd in a clojure repo that has alternative mvn/repos in the deps.edn causes the following exception to be thrown.

Currently testing on version 1.7.0

Execution error (ExceptionInfo) at clojure.tools.deps.alpha.extensions.maven/get-artifact (maven.clj:153).
Could not find artifact org.clojure:clojure:jar:1.10.3 in releases

Maven priority rules for packages that are externally hosted in a repositories such as Nexus/JFrog should resolve correctly with the command clj -M:nvd.

Note that running the lein version of nvd where alternate mvn/repos are defined in a project.clj succeeds.

Support fail-threshold as a command line argument

Is it possible to add fail-threshold as a command line argument

ExceptionCollection error

[2019-04-25 10:47:13.180] INFO Engine - Finished CPE Analyzer (0 seconds)
[2019-04-25 10:47:13.181] INFO Engine - Finished False Positive Analyzer (0 seconds)
[2019-04-25 10:47:13.184] INFO Engine - Finished NVD CVE Analyzer (0 seconds)
[2019-04-25 10:47:13.207] INFO Engine - Finished Vulnerability Suppression Analyzer (0 seconds)
[2019-04-25 10:47:13.213] INFO Engine - Finished Dependency Bundling Analyzer (0 seconds)
[2019-04-25 10:47:13.247] INFO Engine - Analysis Complete (1 seconds)
Exception in thread "main" Syntax error compiling at (/tmp/form-init12567659599026164559.clj:1:74).
	at clojure.lang.Compiler.load(Compiler.java:7647)
	at clojure.lang.Compiler.loadFile(Compiler.java:7573)
	at clojure.main$load_script.invokeStatic(main.clj:452)
	at clojure.main$init_opt.invokeStatic(main.clj:454)
	at clojure.main$init_opt.invoke(main.clj:454)
	at clojure.main$initialize.invokeStatic(main.clj:485)
	at clojure.main$null_opt.invokeStatic(main.clj:519)
	at clojure.main$null_opt.invoke(main.clj:516)
	at clojure.main$main.invokeStatic(main.clj:598)
	at clojure.main$main.doInvoke(main.clj:561)
	at clojure.lang.RestFn.applyTo(RestFn.java:137)
	at clojure.lang.Var.applyTo(Var.java:705)
	at clojure.main.main(main.java:37)
Caused by: org.owasp.dependencycheck.exception.ExceptionCollection: One or more exceptions occurred during dependency-check analysis
	The download was interrupted; unable to complete the update
	at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:693)
	at nvd.task.check$scan_and_analyze.invokeStatic(check.clj:43)
	at nvd.task.check$scan_and_analyze.invoke(check.clj:38)
	at nvd.task.check$_main.invokeStatic(check.clj:54)
	at nvd.task.check$_main.invoke(check.clj:51)
	at user$eval678.invokeStatic(form-init12567659599026164559.clj:1)
	at user$eval678.invoke(form-init12567659599026164559.clj:1)
	at clojure.lang.Compiler.eval(Compiler.java:7176)
	at clojure.lang.Compiler.eval(Compiler.java:7166)
	at clojure.lang.Compiler.load(Compiler.java:7635)
	... 12 more
Subprocess failed

running 1.0.0

Improve lein-nvd docstring (a.k.a. lein help nvd)

Fail if dependency-check-core is analysed

If dependency-check-core is part of the analysed corpus, it would mean that one is not honoring https://github.com/rm-hull/nvd-clojure/tree/4b915138489e7b7ce12101abae002d888aa6f3cb#avoiding-classpath-interference

So it is cautious to fail the build early if:

• dependency-check-core is part of the classpath
• nvd-clojure is part of the classpath

Where does `lein-nvd` cache its DB?

CI services usually allow data to be cached. In this case, we can cache the NVE DB based on the hash of project.clj. But it's not obvious where the the data NVD downloads is kept.

Use default data directory

Bump to latest Owasp DependencyCheck

Motivation

Errors such as:

[2017-11-14 16:25:50.124] ERROR CentralAnalyzer - Could not connect to Central search. Analysis failed.
java.io.IOException: Finally failed connecting to Central search. Giving up after 5 tries.
	at org.owasp.dependencycheck.analyzer.CentralAnalyzer.fetchMavenArtifacts(CentralAnalyzer.java:288)
	at org.owasp.dependencycheck.analyzer.CentralAnalyzer.analyzeDependency(CentralAnalyzer.java:198)
	at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze(AbstractAnalyzer.java:137)
	at org.owasp.dependencycheck.AnalysisTask.call(AnalysisTask.java:88)
	at org.owasp.dependencycheck.AnalysisTask.call(AnalysisTask.java:37)
	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)
Caused by: java.io.IOException: Could not connect to MavenCentral (400): Bad Request
	at org.owasp.dependencycheck.data.central.CentralSearch.searchSha1(CentralSearch.java:181)
	at org.owasp.dependencycheck.analyzer.CentralAnalyzer.fetchMavenArtifacts(CentralAnalyzer.java:266)
	... 8 more

https://github.com/jeremylong/DependencyCheck/tree/v3.0.2
jeremylong/DependencyCheck#978

Suggested Musical Pairing

https://soundcloud.com/wax-poetics/instant-classic-selection

Incompatible with Leiningen option :pedantic? :abort

There's an internal dep conflict between lein-nvd and nvd-clojure's own data.json dependencies. One wants 1.0.0, and the other wants 0.2.6.

If you run in a project with :pedantic? :abort turned on, it will complain with something like (pulled from my own project):

[lein-nvd "1.4.0" :exclusions [org.clojure/clojure org.apache.commons/commons-lang3 org.slf4j/jcl-over-slf4j com.fasterxml.jackson.core/jackson-annotations commons-io]] -> [org.clojure/data.json "0.2.6"]
 overrides
[lein-nvd "1.4.0" :exclusions [org.clojure/clojure org.apache.commons/commons-lang3 org.slf4j/jcl-over-slf4j com.fasterxml.jackson.core/jackson-annotations commons-io]] -> [nvd-clojure "1.4.0"] -> [org.clojure/data.json "1.0.0"]

Clojure CLI tools deps.edn support?

Support for tools deps? (see #12)

Not possible to disable analyzers

Currently, lein-nvd creates the dependency check engine by first creating a settings object with the no arg constructor, and then passing that settings object to the single arg constructor for Engine.

https://github.com/rm-hull/lein-nvd/blob/master/src/nvd/config.clj#L98

Then, after that, lein-nvd goes back and mutates the settings object to configure certain analyzers/settings on or off.

Unfortunately, it's actually in the constructor for Engine that dependency-check initializes all of its analyzers.

https://github.com/jeremylong/DependencyCheck/blob/master/core/src/main/java/org/owasp/dependencycheck/Engine.java#L250

So it's too late too disable analyzers at the point that lein-nvd tries to modify the settings. Usually in the case of things like the assembly analyzer, it just fails to find dotnet on osx and disables itself during initialization so there isn't an issue. In my case the new sonatype oss analyzer has a guava conflict with some of my project dependencies and fails during initialization.

Better as a Clojure tool using tools.deps.alpha?

Given how sensitive nvd-clojure is to the classpath, I wonder if it would be better packaged as a Clojure tool using https://github.com/clojure/tools.deps.alpha ?

Omit dependencies of omitted parents from report

When running clj -Stree in my project, I see many dependencies which are marked with an X which are :superseded and some of those have transitive dependencies marked as :parent-omitted. As I understand from the (somewhat sparse) documentation, that means the dependency is excluded, which means it shouldn't be active. Therefore, I think nvd-clojure is producing a false positive by printing such dependencies.

One example in my project is we're depending on two subprojects which both pull in org.clojure/clojurescript. One is old and pulls in a vulnerable version of com.google.guava/guava, but the other is newer and doesn't even depend on guava, it seems. Yet, guava is still flagged by nvd:

org.clojars.mmb90/cljs-cache 0.1.4
  X org.clojure/core.async 0.2.385 :superseded
    X org.clojure/tools.analyzer.jvm 0.6.10 :parent-omitted
  X org.clojure/clojurescript 1.9.89 :superseded
    . com.google.javascript/closure-compiler v20160315
      X com.google.javascript/closure-compiler-externs v20160315 :parent-omitted
      X args4j/args4j 2.0.26 :parent-omitted
      X com.google.guava/guava 19.0 :parent-omitted
      X com.google.protobuf/protobuf-java 2.5.0 :parent-omitted
      X com.google.code.gson/gson 2.2.4 :parent-omitted
      X com.google.code.findbugs/jsr305 1.3.9 :parent-omitted
    . org.clojure/google-closure-library 0.0-20160609-f42b4a24
      X org.clojure/google-closure-library-third-party 0.0-20160609-f42b4a24 :parent-omitted
    . org.clojure/data.json 0.2.6
    . org.mozilla/rhino 1.7R5
    X org.clojure/tools.reader 1.0.0-beta1 :superseded
  . adzerk/boot-test 1.1.2
  . crisptrutski/boot-cljs-test 0.2.2-20160402.204547-3
  . tailrecursion/cljs-priority-map 1.2.1
    X org.clojure/clojurescript 1.7.170 :older-version
 . <other package>
   . <nested other package>
    . org.clojure/clojurescript 1.10.866 :newer-version
      . com.google.javascript/closure-compiler-unshaded v20210505
      . org.clojure/google-closure-library 0.0-20201211-3e6c510d
        . org.clojure/google-closure-library-third-party 0.0-20201211-3e6c510d
      . org.clojure/data.json 0.2.6
      X org.clojure/tools.reader 1.3.3 :older-version
      . com.cognitect/transit-clj 0.8.309
        . com.cognitect/transit-java 0.8.332
          X com.fasterxml.jackson.core/jackson-core 2.8.7 :older-version
          . org.msgpack/msgpack 0.6.12
            . com.googlecode.json-simple/json-simple 1.1.1
            . org.javassist/javassist 3.18.1-GA
          X commons-codec/commons-codec 1.10 :older-version

A minimal reproduction deps.edn case where guava is included (but should not be) is as follows:

{:deps {org.clojars.mmb90/cljs-cache {:mvn/version "0.1.4"}
        rewrite-cljs/rewrite-cljs {:mvn/version "0.4.5"}}

 :aliases {:nvd {:extra-deps {nvd-clojure/nvd-clojure {:mvn/version "2.1.0"}}
                 :main-opts ["-m" "nvd.task.check"]}}}

The funny thing, is that with this particular deps.edn, the -Stree output doesn't even mention guava! However, it is included in the nvd vulnerability report...

CI examples

It would be nice to leave example CI files for Circle and GH Actions alike, particularly including artifact caching.

CI improvements

I noticed a couple things:

• in the CI script, there isn't a 'dogfooding' step
• in project.clj, there isn't a :pedantic? setting

WDYT? I could try contributing a fix for both.

lein nvd 1.2.0 not working

Hi,

I'm getting error while running lein nvd check

Syntax error (ExceptionInfo) compiling at (/tmp/form-init14862117128822202941.clj:1:74).
org.owasp.dependencycheck.exception.ExceptionCollection

The error only happens when it runs in ci env interestingly it works fine when I run it in my local

Any idea?

The classpath for Leiningen and Clojure CLI is worked out differently

tl;dr: the results of vulnerability checking of a repo via Leiningen and Clojure CLI differ, this is due to the way the classpath is created by those tools. I think that I have a solution. Read on for details.

See the output of the run on a sample repo (https://github.com/dotemacs/pdfboxing):

[alex@~/dev/clojure/repos/pdfboxing]$ lein nvd check
Picked up JAVA_TOOL_OPTIONS: -Djava.awt.headless=true
Checking dependencies for pdfboxing 0.1.15.1-SNAPSHOT ...
  using nvd-clojure:  and dependency-check: 5.3.2

0 vulnerabilities detected. Severity: NONE
Detailed reports saved in: /Users/alex/dev/clojure/repos/pdfboxing/target/nvd

   *** THIS REPORT IS WITHOUT WARRANTY ***

[alex@~/dev/clojure/repos/pdfboxing]$ clj -M:nvd
Picked up JAVA_TOOL_OPTIONS: -Djava.awt.headless=true
Picked up JAVA_TOOL_OPTIONS: -Djava.awt.headless=true
SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
SLF4J: Defaulting to no-operation (NOP) logger implementation
SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
Checking dependencies for unknown  ...
  using nvd-clojure:  and dependency-check: 5.3.2
00:00  INFO: Vulnerability found: jquery below 3.5.0
00:00  INFO: Vulnerability found: jquery below 3.5.0
+------------------------------------------------------+--------------------------------+
| dependency                                           | status                         |
+------------------------------------------------------+--------------------------------+
| dependency-check-core-5.3.2.jar: jquery-3.4.1.min.js | CVE-2020-11022, CVE-2020-11023 |
| failureaccess-1.0.1.jar                              | CVE-2020-8908                  |
| guava-28.2-jre.jar                                   | CVE-2020-8908                  |
| httpclient-4.5.3.jar                                 | CVE-2020-13956                 |
+------------------------------------------------------+--------------------------------+

5 vulnerabilities detected. Severity: MEDIUM
Detailed reports saved in: /Users/alex/dev/clojure/repos/pdfboxing/target/nvd

   *** THIS REPORT IS WITHOUT WARRANTY ***

[alex@~/dev/clojure/repos/pdfboxing]$

I've added lein-nvd as a plugin in my $HOME/.lein/profiles.clj, whereas my deps.edn is:

{:description "Clojure PDF manipulation library & wrapper for PDFBox"
 :url "https://github.com/dotemacs/pdfboxing"
 :paths ["src"]
 :deps {org.clojure/clojure {:mvn/version "1.10.1"}
        org.apache.pdfbox/pdfbox {:mvn/version "2.0.21"}}
 :license {:name "BSD"
           :url "http://www.opensource.org/licenses/bsd-license"}
 :aliases {:test {:extra-paths ["test"]}
           :runner {:extra-deps {com.cognitect/test-runner
                                 {:git/url "https://github.com/cognitect-labs/test-runner"
                                  :sha "76568540e7f40268ad2b646110f237a60295fa3c"}}
                    :main-opts ["-m" "cognitect.test-runner" "-d" "test"]}
           :nvd {:extra-deps {lein-nvd/lein-nvd {:mvn/version "1.4.1"
                                                 :exclusions [org.slf4j/slf4j-simple]}}
                 :main-opts ["-m" "nvd.task.check"]}}}

The issue here is that when I ran clj -M:nvd it obviously picked up the classpath from that alias, but by doing that, it included the libraries needed by nvd.task.check/-main to run.

My thinking is that the way to work out the classpath for a project/library is not to use the classpath it is running from, when using Clojure CLI, but to read deps.edn, in particular the values under :deps key, and construct a classpath from that. See this example for details: https://github.com/clojure/tools.deps.alpha/blob/master/API.md#example-usage

Putting this here in case somebody else stumbles upon it. I plan on tackling this soon, but sharing the notes just in case I don't get to it.

Set failure threshold by confidence, not just severity?

The :fail-threshold option allows the user to configure the CVSS score for failure, which is about severity.

Could we also set it based on confidence? For a lot of CLJ libs, severity is high for some reason but confidence is low. I'd guess most of these are false positive.

lein-nvd always uses the latest version of nvd-clojure

We've been on an older version of lein-nvd for awhile now and last weeks release of 1.1.0 suddenly broke our existing builds which was surprising. I did some digging and it looks like no matter what version of the 'lein-nvd' plugin you use, it grabs the latest version of 'nvd-clojure' which is what controls the 'dependency-check' version. This is easy to reproduce:

[Nicks-MacBook-Pro:20:46:39 ] git$ lein new nvd-test
Generating a project called nvd-test based on the 'default' template.
The default template is intended for library projects, not applications.
To see other templates (app, plugin, etc), try `lein help new`.
[Nicks-MacBook-Pro:20:46:46 ] git$ cd nvd-test/
[Nicks-MacBook-Pro:20:46:51 ] nvd-test$ vim project.clj
[Nicks-MacBook-Pro:20:47:25 ] nvd-test$ cat project.clj
(defproject nvd-test "0.1.0-SNAPSHOT"
  :description "FIXME: write description"
  :url "http://example.com/FIXME"
  :license {:name "EPL-2.0 OR GPL-2.0-or-later WITH Classpath-exception-2.0"
            :url "https://www.eclipse.org/legal/epl-2.0/"}
  :dependencies [[org.clojure/clojure "1.9.0"]]
  :plugins [[lein-nvd "0.5.2"]]
  :repl-options {:init-ns nvd-test.core})
[Nicks-MacBook-Pro:20:47:46 ] nvd-test$ lein nvd update
Retrieving lein-nvd/lein-nvd/0.5.2/lein-nvd-0.5.2.pom from clojars
Retrieving lein-nvd/lein-nvd/0.5.2/lein-nvd-0.5.2.jar from clojars
Retrieving nvd-clojure/nvd-clojure/1.1.1/nvd-clojure-1.1.1.pom from clojars
Retrieving org/owasp/dependency-check-core/5.0.0/dependency-check-core-5.0.0.pom from central
Retrieving org/owasp/dependency-check-parent/5.0.0/dependency-check-parent-5.0.0.pom from central
Retrieving org/owasp/dependency-check-utils/5.0.0/dependency-check-utils-5.0.0.pom from central
Retrieving nvd-clojure/nvd-clojure/1.1.1/nvd-clojure-1.1.1.jar from clojars
Retrieving org/slf4j/slf4j-api/1.7.26/slf4j-api-1.7.26.jar from central
Retrieving org/owasp/dependency-check-core/5.0.0/dependency-check-core-5.0.0.jar from central
Retrieving org/owasp/dependency-check-utils/5.0.0/dependency-check-utils-5.0.0.jar from central
Retrieving joda-time/joda-time/2.9.9/joda-time-2.9.9.jar from central
Retrieving org/slf4j/jcl-over-slf4j/1.7.15/jcl-over-slf4j-1.7.15.jar from central
[2019-06-17 20:48:19.599] INFO Engine - Checking for updates
...

First I cleared my local .m2 repo and then ran the above. You can see that it first downloads lein-nvd 0.5.2 which is what is specified for the plugin, but then downloads nvd-clojure 1.1.1 and hence dependency-check 5.0.0. The behavior is the same if you use a more recent version like 1.0.0 which should use dependency-check 4.0.2:

[Nicks-MacBook-Pro:20:51:54 ] nvd-test$ cat project.clj
(defproject nvd-test "0.1.0-SNAPSHOT"
  :description "FIXME: write description"
  :url "http://example.com/FIXME"
  :license {:name "EPL-2.0 OR GPL-2.0-or-later WITH Classpath-exception-2.0"
            :url "https://www.eclipse.org/legal/epl-2.0/"}
  :dependencies [[org.clojure/clojure "1.9.0"]]
  :plugins [[lein-nvd "1.0.0"]]
  :repl-options {:init-ns nvd-test.core})
[Nicks-MacBook-Pro:20:52:00 ] nvd-test$ lein nvd update
Retrieving lein-nvd/lein-nvd/1.0.0/lein-nvd-1.0.0.pom from clojars
Retrieving lein-nvd/lein-nvd/1.0.0/lein-nvd-1.0.0.jar from clojars
Retrieving nvd-clojure/nvd-clojure/1.1.1/nvd-clojure-1.1.1.pom from clojars
Retrieving org/owasp/dependency-check-core/5.0.0/dependency-check-core-5.0.0.pom from central
Retrieving org/owasp/dependency-check-parent/5.0.0/dependency-check-parent-5.0.0.pom from central
Retrieving org/owasp/dependency-check-utils/5.0.0/dependency-check-utils-5.0.0.pom from central
Retrieving nvd-clojure/nvd-clojure/1.1.1/nvd-clojure-1.1.1.jar from clojars
Retrieving org/owasp/dependency-check-utils/5.0.0/dependency-check-utils-5.0.0.jar from central
Retrieving org/owasp/dependency-check-core/5.0.0/dependency-check-core-5.0.0.jar from central
...

I'm not really sure how lein gets the dependency on nvd-clojure since it isn't listed explicitly. I tested this behavior on both lein 2.8.3 and lein 2.9.1 (latest).

nginx clojure 0.5.2 error detected in CVE-2019-20372

nginx Clojure 0.5.2 is built with Nginx v1.18.0, but nvd-clojure detected CVE-2019-20372 vulnerability which affects NGINX before 1.17.7.

After investigation, I found it is related to the nvd.nist.gov backend service. the vulnerability id is cpe:2.3:a:nginx:nginx:0.5.2:*:*:*:*:*:*:* and if you use nvd.nist.gov web to refine the search and reset CPE info with these inputs:

Vendor: nginx
Product: nginx
Version: 1.18.0

and the result is none.

So I think the issue is caused by nvd-clojure recognizing the wrong version of nginx in nginx-clojure lib.

Exclude dependency-check dependencies

Possibly more generally, don't include profile dependencies - just those project dependencies, example:

{:name "ods-search-appliance",
 :group "rm-hull",
 :version "0.1.0",
 :classpath
 ["/Users/rhu/dev/ods-search-appliance/test"
  "/Users/rhu/dev/ods-search-appliance/src"
  "/Users/rhu/dev/ods-search-appliance/dev-resources"
  "/Users/rhu/dev/ods-search-appliance/resources"
  "/Users/rhu/dev/ods-search-appliance/target/classes"
  "/Users/rhu/.m2/repository/clj-time/clj-time/0.11.0/clj-time-0.11.0.jar"
  "/Users/rhu/.m2/repository/org/clojars/pjlegato/clansi/1.3.0/clansi-1.3.0.jar"
  "/Users/rhu/.m2/repository/org/apache/lucene/lucene-core/4.7.2/lucene-core-4.7.2.jar"
  "/Users/rhu/.m2/repository/fipp/fipp/0.6.6/fipp-0.6.6.jar"
  "/Users/rhu/.m2/repository/org/eclipse/jetty/jetty-http/9.2.10.v20150310/jetty-http-9.2.10.v20150310.jar"
  "/Users/rhu/.m2/repository/org/clojure/java.classpath/0.2.2/java.classpath-0.2.2.jar"
  "/Users/rhu/.m2/repository/org/clojure/clojure/1.8.0/clojure-1.8.0.jar"
  "/Users/rhu/.m2/repository/org/apache/lucene/lucene-queries/4.7.2/lucene-queries-4.7.2.jar"
  "/Users/rhu/.m2/repository/instaparse/instaparse/1.4.0/instaparse-1.4.0.jar"
  "/Users/rhu/.m2/repository/tigris/tigris/0.1.1/tigris-0.1.1.jar"
  "/Users/rhu/.m2/repository/commons-io/commons-io/2.5/commons-io-2.5.jar"
  "/Users/rhu/.m2/repository/cider/cider-nrepl/0.13.0/cider-nrepl-0.13.0.jar"
  "/Users/rhu/.m2/repository/ring/ring-servlet/1.5.0/ring-servlet-1.5.0.jar"
  "/Users/rhu/.m2/repository/org/eclipse/jetty/jetty-server/9.2.10.v20150310/jetty-server-9.2.10.v20150310.jar"
  "/Users/rhu/.m2/repository/org/clojure/tools.macro/0.1.5/tools.macro-0.1.5.jar"
  "/Users/rhu/.m2/repository/org/slf4j/slf4j-api/1.7.21/slf4j-api-1.7.21.jar"
  "/Users/rhu/.m2/repository/org/clojure/data.csv/0.1.3/data.csv-0.1.3.jar"
  "/Users/rhu/.m2/repository/ring/ring-codec/1.0.1/ring-codec-1.0.1.jar"
  "/Users/rhu/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-smile/2.5.3/jackson-dataformat-smile-2.5.3.jar"
  "/Users/rhu/.m2/repository/grimradical/clj-semver/0.3.0/clj-semver-0.3.0.jar"
  "/Users/rhu/.m2/repository/org/clojure/data.codec/0.1.0/data.codec-0.1.0.jar"
  "/Users/rhu/.m2/repository/ring/ring-jetty-adapter/1.5.0/ring-jetty-adapter-1.5.0.jar"
  "/Users/rhu/.m2/repository/nvd-clojure/nvd-clojure/0.2.0/nvd-clojure-0.2.0.jar"
  "/Users/rhu/.m2/repository/slamhound/slamhound/1.5.5/slamhound-1.5.5.jar"
  "/Users/rhu/.m2/repository/org/slf4j/slf4j-simple/1.7.21/slf4j-simple-1.7.21.jar"
  "/Users/rhu/.m2/repository/org/owasp/dependency-check-utils/1.4.3/dependency-check-utils-1.4.3.jar"
  "/Users/rhu/.m2/repository/org/clojure/tools.nrepl/0.2.12/tools.nrepl-0.2.12.jar"
  "/Users/rhu/.m2/repository/org/apache/lucene/lucene-analyzers-common/4.7.2/lucene-analyzers-common-4.7.2.jar"
  "/Users/rhu/.m2/repository/org/clojars/brenton/google-diff-match-patch/0.1/google-diff-match-patch-0.1.jar"
  "/Users/rhu/.m2/repository/org/clojure/tools.reader/0.10.0/tools.reader-0.10.0.jar"
  "/Users/rhu/.m2/repository/venantius/glow/0.1.4/glow-0.1.4.jar"
  "/Users/rhu/.m2/repository/org/owasp/dependency-check-core/1.4.3/dependency-check-core-1.4.3.jar"
  "/Users/rhu/.m2/repository/ring-logger/ring-logger/0.7.5/ring-logger-0.7.5.jar"
  "/Users/rhu/.m2/repository/clojure-complete/clojure-complete/0.2.4/clojure-complete-0.2.4.jar"
  "/Users/rhu/.m2/repository/robert/hooke/1.3.0/hooke-1.3.0.jar"
  "/Users/rhu/.m2/repository/medley/medley/0.8.2/medley-0.8.2.jar"
  "/Users/rhu/.m2/repository/metrics-clojure/metrics-clojure/2.7.0/metrics-clojure-2.7.0.jar"
  "/Users/rhu/.m2/repository/com/taoensso/truss/1.3.5/truss-1.3.5.jar"
  "/Users/rhu/.m2/repository/org/antlr/antlr4/4.5.3/antlr4-4.5.3.jar"
  "/Users/rhu/.m2/repository/com/taoensso/encore/2.79.1/encore-2.79.1.jar"
  "/Users/rhu/.m2/repository/org/apache/velocity/velocity/1.7/velocity-1.7.jar"
  "/Users/rhu/.m2/repository/rm-hull/jasentaa/0.2.3/jasentaa-0.2.3.jar"
  "/Users/rhu/.m2/repository/crypto-equality/crypto-equality/1.0.0/crypto-equality-1.0.0.jar"
  "/Users/rhu/.m2/repository/com/taoensso/timbre/4.7.4/timbre-4.7.4.jar"
  "/Users/rhu/.m2/repository/io/aviso/pretty/0.1.30/pretty-0.1.30.jar"
  "/Users/rhu/.m2/repository/commons-collections/commons-collections/3.2.1/commons-collections-3.2.1.jar"
  "/Users/rhu/.m2/repository/org/apache/commons/commons-lang3/3.3.2/commons-lang3-3.3.2.jar"
  "/Users/rhu/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.5.3/jackson-core-2.5.3.jar"
  "/Users/rhu/.m2/repository/mvxcvi/whidbey/1.3.0/whidbey-1.3.0.jar"
  "/Users/rhu/.m2/repository/org/apache/lucene/lucene-sandbox/4.7.2/lucene-sandbox-4.7.2.jar"
  "/Users/rhu/.m2/repository/hiccup/hiccup/1.0.5/hiccup-1.0.5.jar"
  "/Users/rhu/.m2/repository/venantius/ultra/0.5.0/ultra-0.5.0.jar"
  "/Users/rhu/.m2/repository/ring/ring/1.5.0/ring-1.5.0.jar"
  "/Users/rhu/.m2/repository/mvxcvi/puget/1.0.1/puget-1.0.1.jar"
  "/Users/rhu/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.5.3/jackson-dataformat-cbor-2.5.3.jar"
  "/Users/rhu/.m2/repository/org/clojure/tools.logging/0.3.1/tools.logging-0.3.1.jar"
  "/Users/rhu/.m2/repository/compojure/compojure/1.5.1/compojure-1.5.1.jar"
  "/Users/rhu/.m2/repository/org/tcrawley/dynapath/0.2.4/dynapath-0.2.4.jar"
  "/Users/rhu/.m2/repository/org/eclipse/jetty/jetty-io/9.2.10.v20150310/jetty-io-9.2.10.v20150310.jar"
  "/Users/rhu/.m2/repository/mvxcvi/arrangement/1.1.0/arrangement-1.1.0.jar"
  "/Users/rhu/.m2/repository/org/apache/commons/commons-compress/1.12/commons-compress-1.12.jar"
  "/Users/rhu/.m2/repository/commons-codec/commons-codec/1.6/commons-codec-1.6.jar"
  "/Users/rhu/.m2/repository/metrics-clojure-ring/metrics-clojure-ring/2.7.0/metrics-clojure-ring-2.7.0.jar"
  "/Users/rhu/.m2/repository/org/jsoup/jsoup/1.9.2/jsoup-1.9.2.jar"
  "/Users/rhu/.m2/repository/org/clojure/tools.namespace/0.2.10/tools.namespace-0.2.10.jar"
  "/Users/rhu/.m2/repository/org/clojure/data.json/0.2.6/data.json-0.2.6.jar"
  "/Users/rhu/.m2/repository/crypto-random/crypto-random/1.2.0/crypto-random-1.2.0.jar"
  "/Users/rhu/.m2/repository/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar"
  "/Users/rhu/.m2/repository/ring/ring-core/1.5.0/ring-core-1.5.0.jar"
  "/Users/rhu/.m2/repository/org/clojure/core.rrb-vector/0.0.11/core.rrb-vector-0.0.11.jar"
  "/Users/rhu/.m2/repository/cheshire/cheshire/5.5.0/cheshire-5.5.0.jar"
  "/Users/rhu/.m2/repository/clansi/clansi/1.0.0/clansi-1.0.0.jar"
  "/Users/rhu/.m2/repository/ns-tracker/ns-tracker/0.3.0/ns-tracker-0.3.0.jar"
  "/Users/rhu/.m2/repository/io/dropwizard/metrics/metrics-core/3.1.2/metrics-core-3.1.2.jar"
  "/Users/rhu/.m2/repository/org/apache/lucene/lucene-queryparser/4.7.2/lucene-queryparser-4.7.2.jar"
  "/Users/rhu/.m2/repository/commons-fileupload/commons-fileupload/1.3.1/commons-fileupload-1.3.1.jar"
  "/Users/rhu/.m2/repository/org/eclipse/jetty/jetty-util/9.2.10.v20150310/jetty-util-9.2.10.v20150310.jar"
  "/Users/rhu/.m2/repository/ring-logger-timbre/ring-logger-timbre/0.7.5/ring-logger-timbre-0.7.5.jar"
  "/Users/rhu/.m2/repository/clj-antlr/clj-antlr/0.2.3/clj-antlr-0.2.3.jar"
  "/Users/rhu/.m2/repository/com/h2database/h2/1.3.176/h2-1.3.176.jar"
  "/Users/rhu/.m2/repository/ring/ring-devel/1.5.0/ring-devel-1.5.0.jar"
  "/Users/rhu/.m2/repository/joda-time/joda-time/2.8.2/joda-time-2.8.2.jar"
  "/Users/rhu/.m2/repository/clout/clout/2.1.2/clout-2.1.2.jar"
  "/Users/rhu/.m2/repository/com/sun/mail/mailapi/1.5.5/mailapi-1.5.5.jar"
  "/Users/rhu/.m2/repository/clj-stacktrace/clj-stacktrace/0.2.8/clj-stacktrace-0.2.8.jar"
  "/Users/rhu/.m2/repository/org/antlr/antlr4-runtime/4.5.3/antlr4-runtime-4.5.3.jar"
  "/Users/rhu/.m2/repository/commons-lang/commons-lang/2.4/commons-lang-2.4.jar"
  "/Users/rhu/.m2/repository/org/glassfish/javax.json/1.0.4/javax.json-1.0.4.jar"],
 :cmd-args nil}

Table print CVE Summary

Currently prints as a sprawling Vulnerability#toString - re-jig into a shorter ASCII table

CHANGELOG.md

Hello @rm-hull

What do you think of adding the CHANGELOG.md for the project?

I'd be happy to add it prior to the merge of #58 & #59.

And maybe even adding a pull request template, where the users are asked/prompted to update the changelog when submitting their PR?

Thanks

Unable to resolve symbol: simple-symbol? in this context

Hello, can someone help me?
When running lein nvd check many different dependencies get retrieved. During this process I get an exception (see below).
Am I missing something? / Am I doing something wrong?

===

Retrieving nvd-clojure/nvd-clojure/1.5.0/nvd-clojure-1.5.0.jar from clojars
Retrieving lein-kibit/lein-kibit/0.0.8/lein-kibit-0.0.8.jar from clojars
Retrieving jonase/kibit/0.0.8/kibit-0.0.8.jar from clojars
clojure.lang.Compiler$CompilerException: java.lang.RuntimeException: Unable to resolve symbol: simple-symbol? in this context, compiling:(clojure/tools/deps/alpha.clj:54:8)
at clojure.lang.Compiler.analyze (Compiler.java:6688)
clojure.lang.Compiler.analyze (Compiler.java:6625)
clojure.lang.Compiler$InvokeExpr.parse (Compiler.java:3766)
clojure.lang.Compiler.analyzeSeq (Compiler.java:6870)
clojure.lang.Compiler.analyze (Compiler.java:6669)
clojure.lang.Compiler.analyze (Compiler.java:6625)
clojure.lang.Compiler$IfExpr$Parser.parse (Compiler.java:2792)
clojure.lang.Compiler.analyzeSeq (Compiler.java:6868)
clojure.lang.Compiler.analyze (Compiler.java:6669)
clojure.lang.Compiler.analyze (Compiler.java:6625)
clojure.lang.Compiler$BodyExpr$Parser.parse (Compiler.java:6005)
clojure.lang.Compiler$FnMethod.parse (Compiler.java:5380)
clojure.lang.Compiler$FnExpr.parse (Compiler.java:3972)
clojure.lang.Compiler.analyzeSeq (Compiler.java:6866)
clojure.lang.Compiler.analyze (Compiler.java:6669)
clojure.lang.Compiler.analyzeSeq (Compiler.java:6856)
clojure.lang.Compiler.analyze (Compiler.java:6669)
clojure.lang.Compiler.access$300 (Compiler.java:38)
clojure.lang.Compiler$DefExpr$Parser.parse (Compiler.java:590)
clojure.lang.Compiler.analyzeSeq (Compiler.java:6868)
clojure.lang.Compiler.analyze (Compiler.java:6669)
clojure.lang.Compiler.analyze (Compiler.java:6625)
clojure.lang.Compiler.eval (Compiler.java:6931)
...

Deprecate old APIs

Currently there are a few ways of running nvd-clojure:

• As a main program (which can be invoked in a few ways: lein run, clojure -m, java -cp, etc)
  • it optionally accepts a user-provided classpath string as an argument
    • else it's inferred
• As a Clojure CLI Tool, that accepts a user-provided classpath string as an argument
• As a Leiningen plugin, which infers the classpath
• As a program oriented towards tools.deps projects, which infers the classpath by parsing deps.edn.

The APIs that infer a classpath are prone to classpath interference.

Accordingly, they're unsafe APIs, which lead to inaccurate results and increase the support burden in form of github issues.

I'd propose removing them entirely.

I wouldn't be worried about "not breaking APIs" as common between Clojurists, because this project's very goal is to regularly break CI builds 😄 i.e. it's part of the contract that this program will regularly require users to upgrade things if they want to remain safe.

Disable irrelevant analyzers

analyzer.experimental.enabled=false
analyzer.retired.enabled=false
analyzer.jar.enabled=true
analyzer.archive.enabled=true
analyzer.cpanfile.enabled=true
analyzer.node.package.enabled=true
analyzer.node.audit.enabled=true
analyzer.yarn.audit.enabled=true
analyzer.pnpm.audit.enabled=true
analyzer.golang.dep.enabled=true
analyzer.retirejs.enabled=true
analyzer.golang.mod.enabled=true
analyzer.mix.audit.enabled=true
analyzer.composer.lock.enabled=true
analyzer.python.distribution.enabled=true
analyzer.python.package.enabled=true
analyzer.ruby.gemspec.enabled=true
analyzer.bundle.audit.enabled=true
analyzer.autoconf.enabled=true
analyzer.pip.enabled=true
analyzer.pipfile.enabled=true
analyzer.cmake.enabled=true
analyzer.assembly.enabled=true
analyzer.nuspec.enabled=true
analyzer.nugetconf.enabled=true
analyzer.msbuildproject.enabled=true
analyzer.openssl.enabled=true
analyzer.central.enabled=true
analyzer.nexus.enabled=false
analyzer.cocoapods.enabled=true
analyzer.swift.package.manager.enabled=true
analyzer.swift.package.resolved.enabled=true
analyzer.cpe.enabled=true
analyzer.npm.cpe.enabled=true
analyzer.cpesuppression.enabled=true
analyzer.dependencybundling.enabled=true
analyzer.dependencymerging.enabled=true
analyzer.falsepositive.enabled=true
analyzer.filename.enabled=true
analyzer.pe.enabled=true
analyzer.hint.enabled=true
analyzer.nvdcve.enabled=true
analyzer.vulnerabilitysuppression.enabled=true
analyzer.versionfilter.enabled=true
analyzer.artifactory.enabled=false

Squash .NET Assembly Analyzer errors

Need to disable the Assembly Analyzer:

2016-10-21 00:22:49.464 ERROR AssemblyAnalyzer - ----------------------------------------------------
2016-10-21 00:22:49.464 ERROR AssemblyAnalyzer - .NET Assembly Analyzer could not be initialized and at least one 'exe' or 'dll' was scanned. The 'mono' executale could not be found on the path; either disable the Assembly Analyzer or configure the path mono.
2016-10-21 00:22:49.464 ERROR AssemblyAnalyzer - ----------------------------------------------------

IllegalArgumentException in project that uses lein-parent

With lein-parent 0.3.6 installed, this happens in a child project:

java.lang.IllegalArgumentException: Don't know how to create ISeq from: clojure.lang.Keyword
 at clojure.lang.RT.seqFrom (RT.java:542)
    clojure.lang.RT.seq (RT.java:523)
    clojure.core$seq__4357.invokeStatic (core.clj:137)
    clojure.core$concat$fn__4446.invoke (core.clj:706)
    clojure.lang.LazySeq.sval (LazySeq.java:40)
    clojure.lang.LazySeq.seq (LazySeq.java:49)
    clojure.lang.RT.seq (RT.java:521)
    clojure.core$seq__4357.invokeStatic (core.clj:137)
    clojure.core$concat$cat__4448$fn__4449.invoke (core.clj:715)
    clojure.lang.LazySeq.sval (LazySeq.java:40)
    clojure.lang.LazySeq.seq (LazySeq.java:49)
    clojure.lang.RT.seq (RT.java:521)
    clojure.core$seq__4357.invokeStatic (core.clj:137)
    clojure.core$select_keys.invokeStatic (core.clj:1491)
    clojure.core$select_keys.invoke (core.clj:1491)
    leiningen.nvd.deps$jars.invokeStatic (deps.clj:65)
    leiningen.nvd.deps$jars.invoke (deps.clj:62)
    leiningen.nvd.deps$get_classpath.invokeStatic (deps.clj:73)
    leiningen.nvd.deps$get_classpath.invoke (deps.clj:72)
    leiningen.nvd$nvd.invokeStatic (nvd.clj:75)
    leiningen.nvd$nvd.doInvoke (nvd.clj:44)
    clojure.lang.RestFn.invoke (RestFn.java:425)
    clojure.lang.Var.invoke (Var.java:383)
    clojure.lang.AFn.applyToHelper (AFn.java:156)
    clojure.lang.Var.applyTo (Var.java:700)
    clojure.core$apply.invokeStatic (core.clj:648)
    clojure.core$apply.invoke (core.clj:641)
    leiningen.core.main$partial_task$fn__4667.doInvoke (main.clj:284)

NullPointerException when running lein nvd check on 1.1.0

Hi,

I'm getting the below exception when running against the example project (or against any project):

[2019-06-14 23:46:54.326] INFO AbstractDiskCache - In dispose, destroying event queue.
[2019-06-14 23:46:54.327] INFO IndexedDiskCache - Region [CENTRAL] Saving keys to: CENTRAL, key count: 0
[2019-06-14 23:46:54.327] INFO IndexedDiskCache - Region [CENTRAL] Finished saving keys.
[2019-06-14 23:46:54.327] INFO IndexedDiskCache - Region [CENTRAL] Shutdown complete.
[2019-06-14 23:46:54.327] INFO CompositeCache - In DISPOSE, [CENTRAL] disposing of memory cache.
[2019-06-14 23:46:54.327] INFO AbstractMemoryCache - Memory Cache dispose called.
Exception in thread "main" java.lang.NullPointerException, compiling:(/tmp/form-init8052204418056509289.clj:1:73)
	at clojure.lang.Compiler.load(Compiler.java:7526)
	at clojure.lang.Compiler.loadFile(Compiler.java:7452)
	at clojure.main$load_script.invokeStatic(main.clj:278)
	at clojure.main$init_opt.invokeStatic(main.clj:280)
	at clojure.main$init_opt.invoke(main.clj:280)
	at clojure.main$initialize.invokeStatic(main.clj:311)
	at clojure.main$null_opt.invokeStatic(main.clj:345)
	at clojure.main$null_opt.invoke(main.clj:342)
	at clojure.main$main.invokeStatic(main.clj:424)
	at clojure.main$main.doInvoke(main.clj:387)
	at clojure.lang.RestFn.applyTo(RestFn.java:137)
	at clojure.lang.Var.applyTo(Var.java:702)
	at clojure.main.main(main.java:37)
Caused by: java.lang.NullPointerException
	at nvd.report$score.invokeStatic(report.clj:52)
	at nvd.report$score.invoke(report.clj:51)
	at nvd.report$vuln_status$iter__609__613$fn__614$fn__615.invoke(report.clj:72)
	at nvd.report$vuln_status$iter__609__613$fn__614.invoke(report.clj:71)
	at clojure.lang.LazySeq.sval(LazySeq.java:40)
	at clojure.lang.LazySeq.seq(LazySeq.java:49)
	at clojure.lang.Cons.next(Cons.java:39)
	at clojure.lang.LazySeq.next(LazySeq.java:81)
	at clojure.lang.RT.next(RT.java:706)
	at clojure.core$next__5108.invokeStatic(core.clj:64)
	at clojure.string$join.invokeStatic(string.clj:180)
	at clojure.string$join.invoke(string.clj:180)
	at nvd.report$vuln_status.invokeStatic(report.clj:70)
	at nvd.report$vuln_status.invoke(report.clj:67)
	at nvd.report$vulnerabilities$iter__624__628$fn__629.invoke(report.clj:79)
	at clojure.lang.LazySeq.sval(LazySeq.java:40)
	at clojure.lang.LazySeq.seq(LazySeq.java:49)
	at clojure.lang.Cons.next(Cons.java:39)
	at clojure.lang.RT.length(RT.java:1777)
	at clojure.lang.RT.seqToArray(RT.java:1718)
	at clojure.lang.LazySeq.toArray(LazySeq.java:130)
	at clojure.lang.RT.toArray(RT.java:1691)
	at clojure.core$to_array.invokeStatic(core.clj:344)
	at clojure.core$sort.invokeStatic(core.clj:3105)
	at clojure.core$sort_by.invokeStatic(core.clj:3111)
	at clojure.core$sort_by.invokeStatic(core.clj:3111)
	at clojure.core$sort_by.invoke(core.clj:3111)
	at nvd.report$vulnerabilities.invokeStatic(report.clj:76)
	at nvd.report$vulnerabilities.invoke(report.clj:75)
	at nvd.report$print_summary.invokeStatic(report.clj:89)
	at nvd.report$print_summary.invoke(report.clj:86)
	at nvd.task.check$_main.invokeStatic(check.clj:54)
	at nvd.task.check$_main.invoke(check.clj:51)
	at user$eval688.invokeStatic(form-init8052204418056509289.clj:1)
	at user$eval688.invoke(form-init8052204418056509289.clj:1)
	at clojure.lang.Compiler.eval(Compiler.java:7062)
	at clojure.lang.Compiler.eval(Compiler.java:7052)
	at clojure.lang.Compiler.load(Compiler.java:7514)
	... 12 more

# java -version
openjdk version "1.8.0_212"
OpenJDK Runtime Environment (build 1.8.0_212-8u212-b03-0ubuntu1.19.04.2-b03)
OpenJDK 64-Bit Server VM (build 25.212-b03, mixed mode)

# lein -version
Leiningen 2.9.1 on Java 1.8.0_212 OpenJDK 64-Bit Server VM

Any ideas how to solve this?