Archiva
  1. Archiva
  2. MRM-2

repository: transitive dependency report

    Details

    • Type: New Feature New Feature
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.0-alpha-1
    • Component/s: reporting
    • Labels:
      None

      Description

      repository tool to ensure that transitive dependencies will work.

      we basically need to know that every artifact that
      is referenced in one POM is actually in the repository along with its
      POM. We need to know that the dependency relationships among
      all artifacts in the repository form a closed set. otherwise the
      transitive dependency mechanism in m2 will break and we need to be wary
      of this. eventually i would like to create graphical representations of
      the dependencies amongst projects but this can come later.

      1. MRM-2-maven-repository-reports-standard.diff
        30 kB
        Ernesto S. Tolentino Jr.
      2. MRM-2-maven-repository-reports-standard.diff
        32 kB
        Ernesto S. Tolentino Jr.
      3. MRM-2-maven-repository-reports-standard.diff
        24 kB
        Ernesto S. Tolentino Jr.
      4. MRM-2-maven-repository-reports-standard.diff
        12 kB
        Ernesto S. Tolentino Jr.

        Issue Links

          Activity

          Brett Porter created issue -
          Hide
          Rafal Krzewski added a comment -

          Note: that such check must span multiple repositories: An organization may publish their artifacts to a their private repository, but the artifacts could have dependencies both in the private and public repositories.
          If the scan were performed on a single repository only, dependencies from public repository would have to be replicated in private repository to pass the check, which would a waste of bandwidth and resources.

          Show
          Rafal Krzewski added a comment - Note: that such check must span multiple repositories: An organization may publish their artifacts to a their private repository, but the artifacts could have dependencies both in the private and public repositories. If the scan were performed on a single repository only, dependencies from public repository would have to be replicated in private repository to pass the check, which would a waste of bandwidth and resources.
          Hide
          Brett Porter added a comment -

          Rafal - thanks, that's a possible feature for later. I think for now this is fine to run on ibiblio itself so we've got the most upstream server in good condition.

          I'd prefer for users running this, to start with, to use something like maven-proxy so they actually have a local copy of all the deps they use, but we can certainly extend it in the ways you've suggested.

          Show
          Brett Porter added a comment - Rafal - thanks, that's a possible feature for later. I think for now this is fine to run on ibiblio itself so we've got the most upstream server in good condition. I'd prefer for users running this, to start with, to use something like maven-proxy so they actually have a local copy of all the deps they use, but we can certainly extend it in the ways you've suggested.
          Brett Porter made changes -
          Field Original Value New Value
          Link This issue is duplicated by MNG-335 [ MNG-335 ]
          Brett Porter made changes -
          Component/s repository-tools [ 11443 ]
          Issue Type Improvement [ 4 ] New Feature [ 2 ]
          Project Maven 2 [ 10500 ] Maven Repository Manager [ 10980 ]
          Key MNG-201 MRM-2
          Brett Porter made changes -
          Component/s reporting [ 11934 ]
          Brett Porter made changes -
          Fix Version/s 1.0 [ 12083 ]
          Brett Porter made changes -
          Assignee John Tolentino [ jtolentino ]
          Ernesto S. Tolentino Jr. made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          Ernesto S. Tolentino Jr. made changes -
          Original Estimate 48h [ 172800 ]
          Description repository tool to ensure that transitive dependencies will work.

          we basically need to know that every artifact that
          is referenced in one POM is actually in the repository along with its
          POM. We need to know that the dependency relationships among
          all artifacts in the repository form a closed set. otherwise the
          transitive dependency mechanism in m2 will break and we need to be wary
          of this. eventually i would like to create graphical representations of
          the dependencies amongst projects but this can come later.
          repository tool to ensure that transitive dependencies will work.

          we basically need to know that every artifact that
          is referenced in one POM is actually in the repository along with its
          POM. We need to know that the dependency relationships among
          all artifacts in the repository form a closed set. otherwise the
          transitive dependency mechanism in m2 will break and we need to be wary
          of this. eventually i would like to create graphical representations of
          the dependencies amongst projects but this can come later.
          Environment
          Remaining Estimate 48h [ 172800 ]
          Brett Porter made changes -
          Workflow jira [ 31699 ] Maven [ 43090 ]
          Ernesto S. Tolentino Jr. logged work - 05/Dec/05 00:50
          • Time Spent:
            4h
             
            Draft default implementation, mock objects and classes used for testing.
          Ernesto S. Tolentino Jr. made changes -
          Remaining Estimate 48h [ 172800 ] 44h [ 158400 ]
          Time Spent 4h [ 14400 ]
          Hide
          Ernesto S. Tolentino Jr. added a comment -

          New classes and unit tests.

          Show
          Ernesto S. Tolentino Jr. added a comment - New classes and unit tests.
          Ernesto S. Tolentino Jr. made changes -
          Hide
          Ernesto S. Tolentino Jr. added a comment -

          Additional implementations, new classes and unit tests.

          Show
          Ernesto S. Tolentino Jr. added a comment - Additional implementations, new classes and unit tests.
          Ernesto S. Tolentino Jr. made changes -
          Hide
          Ernesto S. Tolentino Jr. added a comment -

          More unit tests.

          Show
          Ernesto S. Tolentino Jr. added a comment - More unit tests.
          Ernesto S. Tolentino Jr. made changes -
          Ernesto S. Tolentino Jr. logged work - 06/Dec/05 19:01
          • Time Spent:
            8h
             
            Unit tests, new classes and implementations. Also added new methods and constants to interface.
          Ernesto S. Tolentino Jr. made changes -
          Remaining Estimate 44h [ 158400 ] 8h [ 28800 ]
          Time Spent 4h [ 14400 ] 12h [ 43200 ]
          Hide
          Ernesto S. Tolentino Jr. added a comment -

          Finished implementation with 100% unit test code coverage on artifact reporting.

          Show
          Ernesto S. Tolentino Jr. added a comment - Finished implementation with 100% unit test code coverage on artifact reporting.
          Ernesto S. Tolentino Jr. made changes -
          Ernesto S. Tolentino Jr. logged work - 06/Dec/05 23:34
          • Time Spent:
            5h
             
            Done with implementation with complete unit tests.
          Ernesto S. Tolentino Jr. made changes -
          Time Spent 12h [ 43200 ] 17h [ 61200 ]
          Edwin Punzalan made changes -
          Status In Progress [ 3 ] Closed [ 6 ]
          Fix Version/s 1.0-beta-1 [ 12112 ]
          Resolution Fixed [ 1 ]
          Fix Version/s 1.0-alpha-1 [ 12083 ]
          Brett Porter made changes -
          Status Closed [ 6 ] Reopened [ 4 ]
          Resolution Fixed [ 1 ]
          Brett Porter made changes -
          Resolution Fixed [ 1 ]
          Fix Version/s 1.0-beta-1 [ 12112 ]
          Status Reopened [ 4 ] Closed [ 6 ]
          Fix Version/s 1.0-alpha-1 [ 12083 ]
          Brett Porter made changes -
          Workflow Maven [ 43090 ] Maven New [ 49421 ]
          Joakim Erdfelt made changes -
          Fix Version/s 1.0 [ 12113 ]
          Fix Version/s 1.0-alpha-1 [ 13443 ]
          Mark Thomas made changes -
          Project Import Sun Apr 05 08:30:08 UTC 2015 [ 1428222608952 ]
          Mark Thomas made changes -
          Link This issue is duplicated by MNG-335 [ MNG-335 ]
          Mark Thomas made changes -
          Workflow jira [ 12706851 ] Default workflow, editable Closed status [ 12736289 ]
          Mark Thomas made changes -
          Project Import Sun Apr 05 21:01:51 UTC 2015 [ 1428267711911 ]
          Mark Thomas made changes -
          Link This issue is duplicated by MNG-335 [ MNG-335 ]
          Mark Thomas made changes -
          Workflow jira [ 12945456 ] Default workflow, editable Closed status [ 12982636 ]
          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open In Progress In Progress
          259d 6h 58m 1 Ernesto S. Tolentino Jr. 29/Nov/05 03:55
          In Progress In Progress Closed Closed
          9d 16h 49m 1 Edwin Punzalan 08/Dec/05 20:45
          Closed Closed Reopened Reopened
          20h 53m 1 Brett Porter 09/Dec/05 17:38
          Reopened Reopened Closed Closed
          31s 1 Brett Porter 09/Dec/05 17:38

            People

            • Assignee:
              Ernesto S. Tolentino Jr.
              Reporter:
              Brett Porter
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 48h
                48h
                Remaining:
                Time Spent - 17h Remaining Estimate - 8h
                8h
                Logged:
                Time Spent - 17h Remaining Estimate - 8h Time Not Required
                17h

                  Development