Hi Alex,

Sounds great!

I strongly agree with your decision of “pick the latest”. While I do
understand multiple active versions can make it easier for a developer I
don’t think that’s the “right” decision. Besides I can only imagine how
much of a pain it would be to implement reliably. I’d expect if I specify a
patched version of struts that a transitive dependency wouldn’t have the
ability to override that for its own purpose.

Cheers,
Nathan

On Sun, 7 Jan 2018 at 20:51, Alex Miller <a...@puredanger.com> wrote:

>
> On Sunday, January 7, 2018 at 3:41:34 PM UTC-6, Nathan Fisher wrote:
>>
>>
>> Not sure I would want to see duplicates either. If my code breaks because
>> of an old dependency I’d rather that than make the false assumption that
>> I’m running securely with the latest version of a lib.
>>
>
> Encountering duplicate libs in the transitive tree is common to almost
> every dependency trees (for example, it's typical to see multiple versions
> of Clojure as a dependency in *every* transitive tree). clj, like every
> other dependency tool, will continue to make choices about which version to
> include and tools to control which one is included.
>
> I do plan to add better tools to understand the tree and the choices made.
>
>> --
> You received this message because you are subscribed to the Google
> Groups "Clojure" group.
> To post to this group, send email to clojure@googlegroups.com
> Note that posts from new members are moderated - please be patient with
> your first post.
> To unsubscribe from this group, send email to
> clojure+unsubscr...@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/clojure?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Clojure" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to clojure+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
-- 
- sent from my mobile

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Clojure" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojure+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to