search

eclipse / steady

Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Apache License 2.0
517 stars 124 forks source link

Publish `rest-lib-utils` to mvn repository #594

Open mayaba opened 11 months ago

mayaba commented 11 months ago

Is your feature request related to a problem? Please describe. No.

Describe the solution you'd like To publish the model rest-lib-utils to maven repository so it can be used as a dependency.

Describe alternatives you've considered Importing the JAR file of rest-lib-utils which is not efficient at all.

Additional context I am working on a new project and found that the model rest-lib-utils has a lot of useful util classes and methods. It would be really nice to use them instead of reinventing the wheel.

henrikplate commented 11 months ago

Hello @mayaba - Declaring a dependency on a Spring Boot app in order to use some of its utility classes sounds a bit odd, which is one of the reasons why we decided a few releases back to only publish client-side libraries on Maven Central (and have all the apps on Docker Hub). I think it would be better to move generic utility classes to an existing or new artifact. The classes related to bytecode comparisons, for instance, could be moved to lang-java. What do you think?

mayaba commented 11 months ago

Hi @henrikplate, thank you very much for the reply. That's an excellent idea! I will move the code responsible for comparing Java bytecode to lang-java

henrikplate commented 11 months ago

Note that this functionality depends on dependencyfinder. Because it is not available on Maven Central, it has been included in the lib folder, from where it is copied into the local M2 folder during the Maven build. It could be interesting to check whether it can be updated to a later version, and whether recent Java features are supported.