On Tue, 4 May 2021 at 17:27, Tamás Cservenák <ta...@cservenak.net> wrote:
> Howdy, > > plexus-sec-dispatcher is a really widely used dependency, is used in maven > itself, but also in many shared components and plugins (nb: there are even > some org.sonatype.plexus:plexus-sec-dispatcher among shared deps!). > > Given this module is really maven specific, I see no reason to keep it > "outside" (in codehaus-plexus org), as I am really unaware of anything else > using it. Moreover, the module has a single dependency on plexus-cipher. > Both projects are just a handful of classes. > > So, my proposal: > * create maven-sec-dispatcher project (among maven-shared-components) > * collapse the two projects (both has handful of classes, > plexus-sec-dispatcher and plexus-cipher) in there > * org.apache.maven.shared:maven-sec-dispatcher becomes a "drop in" > replacement for org.plexus/org.sonatype.plexus:plexus-sec-dispatcher. > * bonus, this cuts (transitive) dependencies by one as well > > WDYT? > would makes sense with changing groupId/artifactId and packages but cons: release this if needed will take ages because of ASF procedures :) > Thanks > T >
