github.com/google/osv-scalibr@v0.4.1/guidedremediation/internal/strategy/override/testdata/maven-classifier/pom.xml (about)

     1  <project>
     2    <modelVersion>4.0.0</modelVersion>
     3    <groupId>dev.osv</groupId>
     4    <artifactId>maven-classifier</artifactId>
     5    <version>1</version>
     6    <dependencies>
     7      <dependency>
     8        <groupId>com.github.javafaker</groupId>
     9        <artifactId>javafaker</artifactId>
    10        <version>1.0.2</version>
    11        <!--
    12          This depends on org.yaml:snakeyaml:android:1.23, which has vulnerabilities.
    13          Currently, we cannot update artifacts with classifiers, so this should produce no patches
    14          even though there are fixed versions for the vulns.
    15        -->
    16      </dependency>
    17    </dependencies>
    18  </project>