search

gradle / plugin-portal-requests

Gradle Plugin Portal issues and requests.
https://plugins.gradle.org/
12 stars 8 forks source link

Removal: NewRelic Android Agent plugin #228

Closed cthomas-newrelic closed 2 weeks ago

cthomas-newrelic commented 1 month ago

The plugin staged earlier this year was POC and caused an unintended security violation. I'd like to start over with a fresh slate and plugin ID.

Plugin Id

com.newrelic.agent.android

Current Plugin Owner

mobile-agents@newrelic.com

Context

https://github.com/newrelic/newrelic-android-agent https://github.com/cthomas-newrelic

ov7a commented 1 month ago

Hello! Usually, we don't remove plugins since that can break user builds. Your plugin had more than 1000 downloads for the past six months. Please share the details of the security violation with us via email to justify the removal of the plugin version. And I think an update should be released first so the affected users have some replacements.

cthomas-newrelic commented 1 month ago

Thank you for the response, @ov7a . The plugin contained on GPP is is a snapshot of the agent's first 7.0 major version release (we are currently at 7.5). It doesn't match what is deployed on MavenCentral, and the plugin name is incorrect. I will email details of the security issue.

ov7a commented 2 weeks ago

FTR, the conversation was continued via e-mail.

Closing since the e-mail thread wasn't updated for two weeks.