[jira] [Resolved] (TIKA-4495) What do we do with ossindex?

["Tim Allison (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/TIKA-4495?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tim Allison resolved TIKA-4495.
-------------------------------
    Fix Version/s: 4.0.0
       Resolution: Fixed

> What do we do with ossindex?
> ----------------------------
>
>                 Key: TIKA-4495
>                 URL: https://issues.apache.org/jira/browse/TIKA-4495
>             Project: Tika
>          Issue Type: Task
>            Reporter: Tim Allison
>            Priority: Minor
>             Fix For: 4.0.0
>
>
> The ossindex plugin now requires an api key. I don't know if we can get one for free because we're open source or if that means the end of the plugin for us.
> For now, I propose that we turn it off.
> https://ossindex.sonatype.org/doc/auth-required
> Any recommendations?
> {noformat}
> [WARNING] Failed to fetch component-reports
> 2025-09-26T16:53:22.9866506Z org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: HTTP/1.1 401 Unauthorized
> 2025-09-26T16:53:22.9868753Z     at org.sonatype.ossindex.service.client.transport.HttpClientTransport.post (HttpClientTransport.java:102)
> 2025-09-26T16:53:22.9871010Z     at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports (OssindexClientImpl.java:204)
> 2025-09-26T16:53:22.9872964Z     at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports (OssindexClientImpl.java:170)
> 2025-09-26T16:53:22.9874862Z     at org.sonatype.ossindex.maven.common.ComponentReportAssistant.request (ComponentReportAssistant.java:86)
> 2025-09-26T16:53:22.9876201Z     at org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute (AuditMojoSupport.java:242)
> 2025-09-26T16:53:22.9877229Z     at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
> 2025-09-26T16:53:22.9878225Z     at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) {noformat}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)