Fix black duck risks - Githubissues

FINRAOS / DataGenerator

DataGenerator is a Java library for systematically producing large volumes of data. DataGenerator frames data production as a modeling problem, with a user providing a model of dependencies among variables and the library traversing the model to produce relevant data sets.

http://finraos.github.io/DataGenerator

Apache License 2.0

161 stars 170 forks source link

Fix black duck risks #320

Open yukaReal opened 6 years ago

BlackDuckCoPilot commented 6 years ago

Black Duck Security Report

Merging #320 into master will not change security risk.

Added Components

Clean: 19

Removed Components

Medium Risk: 1 Clean: 18

Click here to see full report

yukaReal commented 6 years ago

It improved some security issues, but not all of them.

To fix all of them we will need to much more work:

update commons-scxml (last update from 2009)
update spark library (build failed on last version, so it will need some refactoring)

Thanks.

yukaReal commented 6 years ago

Can someone verify updates and merge it, please? Thanks.