[TIKA-3777] Exclude dependencies from ossindex checks in the parent pom

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.4.1
• Assignee: Unassigned
• Reporter: Tim Allison
• Created: 27/May/22 18:10
• Updated: 27/May/22 20:27
• Resolved: 27/May/22 18:30

Description

With ossindex starting to make a bunch of questionable calls, we need to exclude more and more dependencies. I had initially wanted to limit the dependencies in our effectively abandoned modules (agerecogniser) to the poms there.

That causes problems though because we have to re-exclude dependencies in those modules when we add exclusions to the parent pom.

So, we should centralize exclusions in the parent pom, even though that has us excluding notoriously embarrassing dependencies in parent (like log4j 1.x).