is there a maven plugin to identify ancient pom dependencies

2019-12-20 Thread Marlow, Andrew
Hello everyone, I am using the owasp maven dependency plugin to tell me when I am using components that have CVEs. That's great. I was wondering if there was something similar that would tell me when I am using very old components (where the judgement about what is old is configurable, e.g

maven plugin to check open source licenses

2019-12-20 Thread Marlow, Andrew
Hello everyone, I have just started looking at the plugin license-maven-plugin (org.codehaus.mojo) and have a question: is there a similar plugin to this that would check to see if any GNU-like licenses are in use? Andrew Marlow Software Engineer Specialist, Apex 38th Floor, 25 Canada Square,

Re: Skipping maven shade plugin in a spring-boot project based on maven profile

2019-12-20 Thread Debraj Manna
Thanks Maarten. On Fri, Dec 20, 2019 at 12:07 PM Maarten Mulders wrote: > Also cross-posting from StackOverflow [1], where I just answered your > question: > > > There is a dedicated Spring Boot Maven Plugin [2] that also allows you > to repackage your application. Its repackage goal

Re: Release Maven Doxia Plugin 1.9.1?

2019-12-20 Thread Michael Osipov
Am 2019-12-20 um 11:52 schrieb Konrad Windszus: Hi, is a bugfix release of Doxia planned soon which contains https://issues.apache.org/jira/browse/DOXIA-597? Or is there any other workaround known to get markdown code statements (`...`) work

Release Maven Doxia Plugin 1.9.1?

2019-12-20 Thread Konrad Windszus
Hi, is a bugfix release of Doxia planned soon which contains https://issues.apache.org/jira/browse/DOXIA-597? Or is there any other workaround known to get markdown code statements (`...`) work correctly with the latest maven-site-plugin?