[
https://issues.apache.org/jira/browse/SLING-7384?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16327408#comment-16327408
]
Konrad Windszus edited comment on SLING-7384 at 1/16/18 5:25 PM:
-----------------------------------------------------------------
There are a lot of OSGi artifacts available on Maven Central. According to
[http://blog.osgi.org/2015/08/release-6-of-osgi-compendium-osgi.html?showComment=1439468504763#c7602007936621922721]
very few of them are published by the OSGi alliance themself. Before
referencing new dependencies we should validate the we only reference OSGi
alliance provided artifacts.
[~cziegeler] Since you are part of OSGi I guess you know which Maven artifacts
we should use best (the most official ones). Especially I am unsure about
{{org.osgi:osgi-annotation:6.0.1}} (from 2015) vs
{{org.osgi:org.osgi.annotation.versioning:1.0.0}} (from 2017) and about the
individual artifacts for parts of the OSGi R6 Compendium spec (like
{{org.osgi:org.osgi.service.component.annotations}}). Can you shed some light
on this (who published it and how trustworthy those deps are)?
was (Author: kwin):
There are a lot of OSGi artifacts available on Maven Central. According to
[http://blog.osgi.org/2015/08/release-6-of-osgi-compendium-osgi.html] very few
of them are published by the OSGi alliance themself. Before referencing new
dependencies we should validate the we only reference OSGi alliance provided
artifacts.
[~cziegeler] Since you are part of OSGi I guess you know which Maven artifacts
we should use best (the most official ones). Especially I am unsure about
{{org.osgi:osgi-annotation:6.0.1}} (from 2015) vs
{{org.osgi:org.osgi.annotation.versioning:1.0.0}} (from 2017) and about the
individual artifacts for parts of the OSGi R6 Compendium spec (like
{{org.osgi:org.osgi.service.component.annotations}}). Can you shed some light
on this (who published it and how trustworthy those deps are)?
> Revise dependencies
> -------------------
>
> Key: SLING-7384
> URL: https://issues.apache.org/jira/browse/SLING-7384
> Project: Sling
> Issue Type: Improvement
> Components: Best practices, General
> Reporter: Oliver Lietz
> Assignee: Oliver Lietz
> Priority: Major
> Fix For: Parent 33
>
>
> * use new OSGi dependencies
> * remove all dependencies (manage dependencies only)
> * update slf4j to 1.7.25
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
