Kucoin / kucoin-java-sdk

MIT License
87 stars 76 forks source link

CRITICAL: Dependency not found #49

Closed paalg closed 10 months ago

paalg commented 2 years ago

When adding the dependency published in the readme file to my pom.xml file, I get the error message "Cannot resolve com.kucoin:kucoin-java-sdk:1.0.6". The project is actually not available in the Maven repositories: https://repo.maven.apache.org/maven2/com/

After some research I found there is a fork off this project in the Maven repositories that actually exists (com.gruelbox.kucoin-java-sdk).

    <dependency>
        <groupId>com.gruelbox</groupId>
        <artifactId>kucoin-java-sdk</artifactId>
        <version>2.0.0</version>
    </dependency>

I hope you can update your readme file, or maybe make sure your project is available in the Maven repository.

Samicheaterb commented 2 years ago

THANK YOU

abolfazlimahdi commented 2 years ago

What has happened to this issue? I have the same problem here. should we use the other repo that was mentioned "com.gruelbox.kucoin-java-sdk"?

rohit-gandhe commented 2 years ago

This is very dangerous. Unless you check the forked code, you would have no idea what that code is doing. For all you know, it will send your key and secret to a malicious developer. If you have any money in your kucoin account, I'd just follow the directions in the readme. mvn clean install and then add dependency into your project.

BTW, this is very irresponsible of the kucoin dev team to not publish this into maven central and leave the developers using a forked and abandoned lib. A big thumbs down!!

paalg commented 2 years ago

You are right @rohit-gandhe, it is a huge security issue! I am changing the title of the issue hoping to get the attention of the developement team.

xiaoshengaimm commented 2 years ago
com.gruelbox kucoin-java-sdk 2.0.0

in github this fork was abandoned.....

ManufactoryOfCode commented 2 years ago

Download this project and use command mvn clean install -DskipTests With that you will install it into your local repository.