[
https://issues.apache.org/jira/browse/OFBIZ-6271?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14528361#comment-14528361
]
Ron Wheeler commented on OFBIZ-6271:
------------------------------------
How many third party dependencies are part of OFBiz?
Do we need to build each of these as part of OFBiz?
With Maven, we could set up a pprivate repo and build each of the dependencies
from source and deploy them to a private OFBiz repo to assure ourselves of a
secure set of jars.
A bit of work to set up and keep it up to date but would add a layer of control
and security to OFBiz.
It would also reduce the current "jar hell" where multiple versions of third
party libraries are listed as transitive dependencies and left to the
classloader to sort out at run-time.
> build management with maven
> ---------------------------
>
> Key: OFBIZ-6271
> URL: https://issues.apache.org/jira/browse/OFBIZ-6271
> Project: OFBiz
> Issue Type: Improvement
> Components: ALL COMPONENTS
> Reporter: Adam Heath
> Priority: Minor
> Attachments: console.log
>
>
> This is a new build system; the primary goal will be to not require any
> changes to existing ofbiz layouts(for backwards compatibility, at least
> initially).
> These pom.xml files are completely new; the existing build.xml infrastructure
> will continue to exist. The existing build.xml will never call into
> maven(which is what processes the pom.xml), and maven will never call into
> build.xml either.
> I have already committed a working pom.xml for the top level, and
> framework/start. Shortly, I will be adding framework/base and
> framework/entity, but into this branch.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
