search

orchidhq / Orchid

Build and deploy beautiful documentation sites that grow with you
https://orchid.run
GNU General Public License v3.0
512 stars 53 forks source link

Clarify when jcenter dep is necessary #378

Closed mnowotnik closed 4 years ago

mnowotnik commented 4 years ago

jcenter is regarded as having worse security measures than mavenCentral and for this reason is unlikely to be accepted in some places due to corporate policies.

It would be beneficial from marketing point of view to clarify in which cases can jcenter be avoided. OrchidAll bundle definitely requires jcenter, but does OrchidBlog also require it?

cjbrooks12 commented 4 years ago

All Orchid artifacts, and a couple of it's dependencies, are only published to JCenter and are not available on MavenCentral. So for now, it's unlikely that JCenter will be able to be removed as a repository.

For handling corporate security issues, the company could set up a proxy artifact repository such as with Azure Artifacts. Alternatively, using Orchid from Kscript can export a single binary executable and wouldn't need to perform any dependency resolution on the CI server at all.

mnowotnik commented 4 years ago

I'll look into it. Thanks.