<commit_before><?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">

    <!-- False Positive? -->
    <!-- https://nvd.nist.gov/vuln/detail/CVE-2018-1258 -->
    <!-- Justification: Dependency Check is confusing spring-security-crypto with the "spring-security" core project -->
    <suppress>
        <notes><![CDATA[
      file name: spring-security-crypto-5.2.1.RELEASE.jar
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-crypto@.*$</packageUrl>
        <cve>CVE-2018-1258</cve>
    </suppress>

    <!-- False Positive? -->
    <!-- Justification: Dependency Check is confusing spring-security-rsa with the "spring-security" core project -->
    <!-- https://github.com/jeremylong/DependencyCheck/issues/1665 -->
    <suppress>
        <notes><![CDATA[
   file name: spring-security-rsa-1.0.7.RELEASE.jar
   ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-rsa@.*$</packageUrl>
        <cve>CVE-2011-2731</cve>
        <cve>CVE-2011-2732</cve>
        <cve>CVE-2012-5055</cve>
        <cve>CVE-2018-1258</cve>
    </suppress>

    <!-- False Positive? -->
    <!-- https://nvd.nist.gov/vuln/detail/CVE-2018-10237 -->
    <!-- Justification: Guava is a transitive dependency of QueryDsl; Guava is not being used for SerDes -->
    <!-- https://github.com/querydsl/querydsl/issues/2324 -->
    <suppress>
        <notes><![CDATA[
   file name: guava-18.0.jar
   ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
        <cve>CVE-2018-10237</cve>
    </suppress>

</suppressions>


        <!--<?xml version="1.0" encoding="UTF-8"?>-->
        <!--<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd">-->

        <!--    &lt;!&ndash; CVE: https://nvd.nist.gov/vuln/detail/CVE-2018-10237 &ndash;&gt;-->
        <!--    &lt;!&ndash; NOTE: We are not using guava directly; from dependency in QueryDSL &ndash;&gt;-->
        <!--    &lt;!&ndash; MORE: https://github.com/google/guava/wiki/CVE-2018-10237 &ndash;&gt;-->
        <!--    <suppress>-->
        <!--        <notes><![CDATA[-->
        <!--   file name: guava-18.0.jar-->
        <!--   ]]></notes>-->
        <!--        <gav regex="true">^com\.google\.guava:guava:.*$</gav>-->
        <!--        <cve>CVE-2018-10237</cve>-->
        <!--    </suppress>-->

        <!--    &lt;!&ndash; NOTE: False Positive &ndash;&gt;-->
        <!--    &lt;!&ndash; Mis-identification of "spring-security-rsa-*" with and older version of spring-security &ndash;&gt;-->
        <!--    <suppress>-->
        <!--        <notes><![CDATA[-->
        <!--   file name: spring-security-rsa-1.0.7.RELEASE.jar-->
        <!--   ]]></notes>-->
        <!--        <gav regex="true">^org\.springframework\.security:spring-security-rsa:.*$</gav>-->
        <!--        <cve>CVE-2018-1258</cve>-->
        <!--    </suppress>-->

        <!--    &lt;!&ndash; NOTE: False Positive &ndash;&gt;-->
        <!--    &lt;!&ndash; Mis-identification of "spring-security-crypto-*" with and older version of spring-security &ndash;&gt;-->
        <!--    <suppress>-->
        <!--        <notes><![CDATA[-->
        <!--   file name: spring-security-crypto-5.1.3.RELEASE.jar-->
        <!--   ]]></notes>-->
        <!--        <gav regex="true">^org\.springframework\.security:spring-security-crypto:.*$</gav>-->
        <!--        <cve>CVE-2018-1258</cve>-->
        <!--    </suppress>-->

        <!-- False Positive -->
        <!-- Mis-identification of "spring-security-crypto-*" with and older version of spring-security -->
        <!--    <suppress>-->
        <!--        <notes><![CDATA[-->
        <!--   file name: spring-security-crypto-5.2.1.RELEASE.jar-->
        <!--   ]]></notes>-->
        <!--        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-crypto@.*$</packageUrl>-->
        <!--        <cve>CVE-2018-1258</cve>-->
        <!--    </suppress>-->

        <!--</suppressions>--><commit_msg>Cleanup of dependency-check supressions file<commit_after><?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">

    <!-- False Positive? -->
    <!-- https://nvd.nist.gov/vuln/detail/CVE-2018-1258 -->
    <!-- Justification: Dependency Check is confusing spring-security-crypto with the "spring-security" core project -->
    <suppress>
        <notes><![CDATA[
      file name: spring-security-crypto-5.2.1.RELEASE.jar
      ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-crypto@.*$</packageUrl>
        <cve>CVE-2018-1258</cve>
    </suppress>

    <!-- False Positive? -->
    <!-- Justification: Dependency Check is confusing spring-security-rsa with the "spring-security" core project -->
    <!-- https://github.com/jeremylong/DependencyCheck/issues/1665 -->
    <suppress>
        <notes><![CDATA[
   file name: spring-security-rsa-1.0.7.RELEASE.jar
   ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.springframework\.security/spring\-security\-rsa@.*$</packageUrl>
        <cve>CVE-2011-2731</cve>
        <cve>CVE-2011-2732</cve>
        <cve>CVE-2012-5055</cve>
        <cve>CVE-2018-1258</cve>
    </suppress>

    <!-- False Positive? -->
    <!-- https://nvd.nist.gov/vuln/detail/CVE-2018-10237 -->
    <!-- Justification: Guava is a transitive dependency of QueryDsl; Guava is not being used for SerDes -->
    <!-- https://github.com/querydsl/querydsl/issues/2324 -->
    <suppress>
        <notes><![CDATA[
   file name: guava-18.0.jar
   ]]></notes>
        <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
        <cve>CVE-2018-10237</cve>
    </suppress>

</suppressions>
{'fraction_non_alphanumeric': 0.2193689157435381, 'fraction_numerical': 0.040953340046995634, 'mean_word_length': 2.265205479452055, 'pattern_counts': {'":': 0, '<': 174, '<?xml version=': 3, '>': 174, 'https://': 13, 'lorem ipsum': 0, 'www.': 0, 'xml': 6}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '6262560', 'n_tokens_mistral': 2195, 'n_tokens_neox': 1968, 'n_words': 285}