[
https://issues.apache.org/jira/browse/TIKA-4495?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tim Allison updated TIKA-4495:
------------------------------
Description:
The ossindex plugin now requires an api key. I don't know if we can get one for
free because we're open source or if that means the end of the plugin for us.
For now, I propose that we turn it off.
https://ossindex.sonatype.org/doc/auth-required
Any recommendations?
{noformat}
[WARNING] Failed to fetch component-reports
2025-09-26T16:53:22.9866506Z
org.sonatype.ossindex.service.client.transport.Transport$TransportException:
Unexpected response; status: HTTP/1.1 401 Unauthorized
2025-09-26T16:53:22.9868753Z at
org.sonatype.ossindex.service.client.transport.HttpClientTransport.post
(HttpClientTransport.java:102)
2025-09-26T16:53:22.9871010Z at
org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports
(OssindexClientImpl.java:204)
2025-09-26T16:53:22.9872964Z at
org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports
(OssindexClientImpl.java:170)
2025-09-26T16:53:22.9874862Z at
org.sonatype.ossindex.maven.common.ComponentReportAssistant.request
(ComponentReportAssistant.java:86)
2025-09-26T16:53:22.9876201Z at
org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute
(AuditMojoSupport.java:242)
2025-09-26T16:53:22.9877229Z at
org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
(DefaultBuildPluginManager.java:126)
2025-09-26T16:53:22.9878225Z at
org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
(MojoExecutor.java:328) {noformat}
was:
The ossindex plugin now requires an api key. I don't know if we can get one for
free because we're open source or if that means the end of the plugin for us.
For now, I propose that we turn it off.
Any recommendations?
{noformat}
[WARNING] Failed to fetch component-reports
2025-09-26T16:53:22.9866506Z
org.sonatype.ossindex.service.client.transport.Transport$TransportException:
Unexpected response; status: HTTP/1.1 401 Unauthorized
2025-09-26T16:53:22.9868753Z at
org.sonatype.ossindex.service.client.transport.HttpClientTransport.post
(HttpClientTransport.java:102)
2025-09-26T16:53:22.9871010Z at
org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports
(OssindexClientImpl.java:204)
2025-09-26T16:53:22.9872964Z at
org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports
(OssindexClientImpl.java:170)
2025-09-26T16:53:22.9874862Z at
org.sonatype.ossindex.maven.common.ComponentReportAssistant.request
(ComponentReportAssistant.java:86)
2025-09-26T16:53:22.9876201Z at
org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute
(AuditMojoSupport.java:242)
2025-09-26T16:53:22.9877229Z at
org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
(DefaultBuildPluginManager.java:126)
2025-09-26T16:53:22.9878225Z at
org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
(MojoExecutor.java:328) {noformat}
> What do we do with ossindex?
> ----------------------------
>
> Key: TIKA-4495
> URL: https://issues.apache.org/jira/browse/TIKA-4495
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> The ossindex plugin now requires an api key. I don't know if we can get one
> for free because we're open source or if that means the end of the plugin for
> us.
> For now, I propose that we turn it off.
> https://ossindex.sonatype.org/doc/auth-required
> Any recommendations?
> {noformat}
> [WARNING] Failed to fetch component-reports
> 2025-09-26T16:53:22.9866506Z
> org.sonatype.ossindex.service.client.transport.Transport$TransportException:
> Unexpected response; status: HTTP/1.1 401 Unauthorized
> 2025-09-26T16:53:22.9868753Z at
> org.sonatype.ossindex.service.client.transport.HttpClientTransport.post
> (HttpClientTransport.java:102)
> 2025-09-26T16:53:22.9871010Z at
> org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports
> (OssindexClientImpl.java:204)
> 2025-09-26T16:53:22.9872964Z at
> org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports
> (OssindexClientImpl.java:170)
> 2025-09-26T16:53:22.9874862Z at
> org.sonatype.ossindex.maven.common.ComponentReportAssistant.request
> (ComponentReportAssistant.java:86)
> 2025-09-26T16:53:22.9876201Z at
> org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute
> (AuditMojoSupport.java:242)
> 2025-09-26T16:53:22.9877229Z at
> org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
> (DefaultBuildPluginManager.java:126)
> 2025-09-26T16:53:22.9878225Z at
> org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
> (MojoExecutor.java:328) {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)