maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

New developer tools for open source dependency management

September 2010 - devel - Fedora Mailing-Lists

Monitor security risks of dependencies into Java project - Developer's Corner

Getting Started with Sonatype Vulnerability Analysis

September 2010 - devel - Fedora Mailing-Lists

Maven: dependency appears in effective pom but not in dependency tree

java - How to find a dependency in maven, dependency:tree doesn't work - Stack Overflow

java - How to list all dependencies of a package from maven (including scopes) - Stack Overflow

Maybe (RxJava Javadoc 2.2.0-SNAPSHOT)

java - The POM for is missing, no dependency information available even though it exists in Maven Repository - Stack Overflow

java - The POM for is missing, no dependency information available even though it exists in Maven Repository - Stack Overflow

Maven Dependencies Pop Quiz – Results – Andres Almiray

Unnecessary-looking dependencies · Issue #2824 · google/guava · GitHub

SCM Features Technical Overview