Infrastructure
  1. Infrastructure
  2. INFRA-4522

Nexus should check that pom metatdata agrees with the pom in the associated jar

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Unresolved
    • Fix Version/s: Initial Clearing
    • Component/s: Nexus
    • Labels:
      None

      Description

      Where a pom describes a jar that contains a pom, Nexus should check that the metadata agrees.

      This would have prevented some projects from releasing renamed jars using incorrect Maven metadata.

      For example, the external metadata:

      <dependency>
        <groupId>org.apache.solr</groupId>
        <artifactId>solr-commons-csv</artifactId>
        <version>3.5.0</version>
      </dependency>

      actually refers to

        <groupId>org.apache.commons</groupId>
        <artifactId>commons-csv</artifactId>
        <version>1.0-SNAPSHOT</version>
       
      Ideally, there should also be some check of the package names for jars that don't have embedded POMs, as for example:

      <dependency>
        <groupId>org.apache.solr</groupId>
        <artifactId>solr-carrot2-core</artifactId>
        <version>3.5.0</version>
      </dependency>

      which uses the org.carrot2 package name space - which is unlikely to be an ASF package name.

      However, this is tricky to do accurately, so should probably only generate a warning.

        Activity

        Sebb created issue -
        Hide
        Brian Demers added a comment -
        Show
        Brian Demers added a comment - Feature request moved to: https://issues.sonatype.org/browse/NEXUS-4936
        Brian Demers made changes -
        Field Original Value New Value
        Status Open [ 1 ] Closed [ 6 ]
        Resolution Unresolved [ 9 ]
        Tony Stevenson made changes -
        Workflow jira [ 12656948 ] INFRA Workflow [ 12712193 ]
        Gavin made changes -
        Fix Version/s Initial Clearing [ 12325964 ]

          People

          • Assignee:
            Brian Demers
            Reporter:
            Sebb
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development