updated jar plugin
made non-vulnerable jars hidden by default