Re: Excluding maven pom.xml from generated jar as a security precaution?

2013-11-24 Thread Tang Kin Chuen
ure. > > > > > > > > As a developer, it it fantastically useful to have the pom's > available > > > > even when working with closed (or non-open) source products. > > > > > > > > On 19 November 2013 02:16, Paul Benedict > wrote: &

Re: Excluding maven pom.xml from generated jar as a security precaution?

2013-11-18 Thread Tang Kin Chuen
uot;Adam Retter" wrote: > I would be interested to know what your peers perceive the security > concerns as being? > > On 19 November 2013 01:22, Tang Kin Chuen wrote: > > Hi guys, > > > > Are there any security concerns in leaving the default pom file(s) in >

Excluding maven pom.xml from generated jar as a security precaution?

2013-11-18 Thread Tang Kin Chuen
Hi guys, Are there any security concerns in leaving the default pom file(s) in meta-inf of generated jars for "commercial products"? I find it useful to leave it there for troubleshooting purpose, thinking that there is not much security concerns but my peers are thinking otherwise. I would like

Filter dependencies based on OSGi bundle detection during assembly

2013-07-04 Thread Tang Kin Chuen
Hi, I am creating a Maven assembly that copies required dependencies to a "lib" directory. Since it is an OSGi based application, I would like to exclude non-OSGi based (transitive) dependencies automatically when my module's assembly is processed. >From maven dependency plugin and assembly descr