Different artifacts in the wild, for the same Maven coordinates

[guusdk]

It appears that different variants of the same commons-ip-math artifact are published in several places, although the exact same coordinates are used.

The pom.xml file for the com.github.jgonian:commons-ip-math:1.32 artifact is different in these repositories:

• https://repo1.maven.org/maven2/com/github/jgonian/commons-ip-math/1.32/commons-ip-math-1.32.pom
• https://jitpack.io/com/github/jgonian/commons-ip-math/1.32/commons-ip-math-1.32.pom

I'm not quite sure which is the correct artifact. We've observed behavior that caused our software to fail when the one from jitpack was used, while it was working with the one in Maven-central.

As an aside: our project did not have the jitpack Maven repository in its configuration, but had Atlassian's. That redirects to jitpack for this particular artifact.

I realize that the authors of this project may not have much power to change things. I'm raising it nonetheless here, in an effort to help people prevent having to go through the ... process ... that we had to go through to figure out the unexpected, inconsistent build behavior that we've been observing.

[guusdk]

If you're interested in tracing back our steps, leading up to this discovery:

• it was found when applying a what I believe to be unrelated change (which may have triggered a Maven cache invalidation): https://github.com/igniterealtime/Openfire/pull/2603
• as a result, we're phasing out usage of Atlassian's repository, which is tracked in this ticket (which, ironically, is logged in an Atlassian system): https://igniterealtime.atlassian.net/browse/OF-2910