The concurrent_ruby.jar JAR file included in the gem has no version information included in the MANIFEST.MF file. This means common dependency scanning tools like syft find the JAR, but can't determine its version, outputting the version as UNKNOWN.