search

arakelian / java-jq

Lightweight Java wrapper around JQ, a flexible JSON processor available for multiple platforms
MIT License
82 stars 10 forks source link

Build from source, and automate publication to `maven` #24

Open Pamplemousse opened 10 months ago

Pamplemousse commented 10 months ago

From https://github.com/arakelian/java-jq/issues/22, https://github.com/arakelian/java-jq/issues/21#issuecomment-1613340351, I gather that the process of publishing a new version to maven is currently manually done by yourself @arakelian .

Also, *.so files, (supposedly) compiled from source, are vendored in https://github.com/arakelian/java-jq/tree/main/src/main/resources/lib. As a consequence, it takes one to trust maintainers and contributors to not distribute malware.

Leveraging GitHub actions, it would be possible to: 1) build *.so files from source; 2) publish to maven. This would remove the need to trust maintainers and contributors to trust only the build steps and GH action environment. Also, this could simplify the maintenance burden.