title: Not able to get dependency check report in Maven
body: <p>I am trying to get dependency check report for one of my Maven project but every time I am running:</p>
  
  <pre><code>mvn verify
  </code></pre>
  
  <p>dependency in dependency report shows no vulnerable JARs. </p>
  
  <p>I have added below plugin in my POM to generate dependency check report:</p>
  
  <pre><code> &lt;dependencyManagement&gt;
      &lt;dependencies&gt;
          &lt;dependency&gt;
          &lt;groupId&gt;org.apache.commons&lt;/groupId&gt;
          &lt;artifactId&gt;commons-email&lt;/artifactId&gt;
          &lt;version&gt;1.1&lt;/version&gt;
      &lt;/dependency&gt;
          &lt;dependency&gt;
              &lt;groupId&gt;apache.axis&lt;/groupId&gt;
              &lt;artifactId&gt;jaxrpc&lt;/artifactId&gt;
              &lt;version&gt;1.2beta&lt;/version&gt;
              &lt;scope&gt;provided&lt;/scope&gt;
          &lt;/dependency&gt;
         &lt;dependencies&gt;
  &lt;dependencyManagement&gt;
  &lt;build&gt;
    &lt;plugins&gt;
      &lt;plugin&gt;
            &lt;groupId&gt;org.owasp&lt;/groupId&gt;
            &lt;artifactId&gt;dependency-check-maven&lt;/artifactId&gt;
            &lt;version&gt;3.3.2&lt;/version&gt;
            &lt;executions&gt;
                &lt;execution&gt;
                    &lt;goals&gt;
                        &lt;goal&gt;check&lt;/goal&gt;
                    &lt;/goals&gt;
                &lt;/execution&gt;
            &lt;/executions&gt;
          &lt;/plugin&gt;
    &lt;/plugins&gt;
  </code></pre>
  
  <p>What do I need to correct or is there any other way? <code>commons-email-1.1.jar</code> have some vulnerabilities but still its not getting detected.</p>
  
  <p>These are the Maven logs:</p>
  
  <pre><code>[INFO] Scanning for projects...
  [INFO] Inspecting build with total of 1 modules...
  [INFO] Installing Nexus Staging features:
  [INFO]   ... total of 1 executions of maven-deploy-plugin replaced with 
  nexus-staging-maven-plugin
  [INFO]
  [INFO]
  [INFO] --- maven-clean-plugin:2.6.1:clean (default-clean) @ version-mana - 
   --
  [INFO]
  [INFO] --- maven-source-plugin:2.4:jar-no-fork (attach-sources) @ version- 
   mana ---
  [INFO]
  [INFO] --- maven-source-plugin:2.4:test-jar-no-fork (attach-sources) @ 
  version-mana ---
  [INFO]
  [INFO] --- dependency-check-maven:3.3.2:check (default) @ version-mana ---
  [INFO] Central analyzer disabled
  [INFO] Checking for updates
  [INFO] Skipping NVD check since last check was within 4 hours.
  [INFO] Skipping RetireJS update since last update was within 24 hours.
  [INFO] Check for updates complete (31 ms)
  [INFO] Analysis Started
  [INFO] Finished File Name Analyzer (0 seconds)
  [INFO] Finished Dependency Merging Analyzer (0 seconds)
  [INFO] Finished Version Filter Analyzer (0 seconds)
  [INFO] Finished Hint Analyzer (0 seconds)
  [INFO] Created CPE Index (1 seconds)
  [INFO] Skipping CPE Analysis for npm
  [INFO] Finished CPE Analyzer (1 seconds)
  [INFO] Finished False Positive Analyzer (0 seconds)
  [INFO] Finished NVD CVE Analyzer (0 seconds)
  [INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
  [INFO] Finished Dependency Bundling Analyzer (0 seconds)
  [INFO] Analysis Complete (1 seconds)
  </code></pre>