search

liquidz / antq

Point out your outdated dependencies.
Other
399 stars 24 forks source link

Flag deprecated libraries? #148

Open seancorfield opened 2 years ago

seancorfield commented 2 years ago

This idea came from a discussion around clj-kondo -- see https://github.com/clj-kondo/clj-kondo/issues/1591 -- as a way for users to become more aware that certain libraries are deprecated by their maintainers and there are often recommendations to use a different library or approach instead.

From my point of view, warning people that clj-time (clj-time/clj-time) is deprecated in favor of Java Time (via interop) would be a great first step.

In addition, warning people that depstar is deprecated (archived, in fact) in favor of tools.build would be helpful.

I'm not sure how this would fit into the reports that antq produces or where best to store a list of canonical group/artifact IDs with deprecation messages (recommending alternatives).

Note that depstar could appear with several different group IDs: com.healthfinch (the original, also archived), com.github.seancorfield, seancorfield (prior to Clojar's Verified Group Names policy), also potentially via git deps at either (com|io).github.healthfinch or io.github.seancorfield. This might be true for other deprecated libraries. clj-time is referenced as both clj-time and clj-time/clj-time (and is likely to appear in project.clj files).

lread commented 2 years ago

@liquidz if you like this idea, there might also be an opportunity to collaborate with clj-kondo.