[ https://jira.codehaus.org/browse/MNG-5260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=338842#comment-338842 ]
Jason van Zyl commented on MNG-5260: ------------------------------------ It's relatively easy these days to get full reporting using Aether code directly: https://github.com/eclipse/aether-demo/blob/master/aether-demo-snippets/src/main/java/org/eclipse/aether/examples/GetDependencyTree.java > Provide option for obtaining complete dependency hierarchy > ---------------------------------------------------------- > > Key: MNG-5260 > URL: https://jira.codehaus.org/browse/MNG-5260 > Project: Maven 2 & 3 > Issue Type: Improvement > Components: Dependencies > Affects Versions: 3.0.4 > Environment: Any > Reporter: Peter Johnson > Priority: Minor > Attachments: patch_alldeps.txt > > > Our lawyers are keen on us providing them with a list of all open source > components in our code so that they can ensure we are properly following the > licenses. Since license information is in the POM (well, for most components, > but that's another story), and since Maven provides a nice report for and > artifact and its dependencies, including the licenses used, we decided to sue > that instead of manually coming up with a list (which is what we used to do, > needless to say, the manually-generated list was always wrong). Anyway, this > worked well until we tried to report on something (such as an EAR) that had a > WAR as a dependency. In that case, we got the license info for the WAR, but > nothing about any of the components packaged into the WAR. Initially, we > though to just run a separate report on the WAR, but that lead to many too > many reports and also the need to remember to run all of them (we have a main > POM that describes all of the components that make up our product's release, > and we wanted to run the report only on that POM). > So we patched Maven Core such that the includesDependencies property for an > artifact type would be ignored (essentially, always false). Now we can get a > complete report, including information about dependencies for a WAR, using: > mvn site -Dall.deps -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira