You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by Gary Weaver <ga...@duke.edu> on 2008/09/03 17:09:11 UTC

what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Hey everyone,

I've been using and evangelizing Maven 2 for a few years now. And yes, 
it is really the greatest thing since sliced bread!

However, I've run into one thing makes life with Maven a little less 
easy than it should be. Specifically, there are projects out there that 
don't have anyone deploying project artifacts to a public Maven 2 
repository (or at least they aren't advertising that fact, and I can't 
seem to find some of them).

For example, right now I'd like to use a simple in-memory HTTP Server of 
some sort for serving RSS. While there is a simple HTTPServer built into 
Java 6 ( 
http://java.sun.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/package-summary.html 
), a good number of the projects described on 
http://java-source.net/open-source/web-servers like Rupy, Simple, etc. 
don't have artifacts deployed to http://repo1.maven.org/maven2/ . While 
I could install/deploy the required jar(s) locally for my own projects, 
I would like to use this in an open-source project without requiring 
others to have to manually deploy the jar via installing it specifically 
or via deployment to their m2 repo (if they have one setup).

Are there any of you out there that have open-source projects where you 
couldn't find a dependency in a public Maven 2 repo, and if you, how did 
you handle it?

I've run into issues with some of the Sun jars that have licensing 
issues before, but I kind of consider that par for the course for Maven 
2 projects. However, it doesn't seem "normal" to make a developer that 
wants to build your project have to deploy some other libraries locally 
just to build it when there are no licensing issues. So I'm just curious 
how you guys usually handle these, if you don't mind me asking.

Thanks!

Gary

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Posted by Gary Weaver <ga...@duke.edu>.
Nick,

Thanks for the quick response!

The problem is that I'm not the project owner or even a developer on the 
dependencies I would need deployed.

I could definitely attempt to get permission from some of the project 
owners, if that is the best route. I know from past experience that 
people may sometimes deploy stuff to central (repo1) that they don't 
own, because I've heard a project owner say one time something like 
"Whoever deployed that had a messed up pom.xml that they created for it".

Some of the page that you mentioned says that if it is a new groupId 
(which in all cases it would be), then the owner of the domain or at 
least the project owner/developer would need to be asked.

Should I get permission from the developer, etc. before posting a "Maven 
Upload Request" to Jira via: 
http://jira.codehaus.org/secure/CreateIssue.jspa?pid=10367&issuetype=5

Or if it is a public, open-source project, is a simple "notification" 
sent to them that I requested it to be uploaded good enough? In some 
circumstances, I'd imagine the developer may not be able to be contacted 
easily or at all. Is it still ok to post a Jira issue to upload it to 
central in that case?

And does the artifact need to be fully tested and to some extent 
working/usable before it can be uploaded? (i.e. If a project artifact 
from a 3rd party open-source project is advertised on the site as being 
a release (albeit possibly a v0.2 or similar) is the best route to 
install locally, get it to work and prove it is of worth to others 
before going through the process of requesting an upload to the central 
m2 repo, or do people sometimes just request upload first and then test 
it after the fact?)

Some of the answers to these questions might seem obvious to some, but 
I'm just trying to get a handle on what is normal since I'm a virgin at 
this.

Thanks,
Gary


Nick Stolwijk wrote:
> Take a look at the Maven website, especially this [1] page. I guess it
> tells you everything you ask about uploading third party libraries to
> central.
>
> [1] http://maven.apache.org/guides/mini/guide-central-repository-upload.html
>
> Hth,
>
> Nick Stolwijk
> ~Java Developer~
>
> Iprofs BV.
> Claus Sluterweg 125
> 2012 WS Haarlem
> www.iprofs.nl
>
>
>
> On Wed, Sep 3, 2008 at 5:09 PM, Gary Weaver <ga...@duke.edu> wrote:
>   
>> Hey everyone,
>>
>> I've been using and evangelizing Maven 2 for a few years now. And yes, it is
>> really the greatest thing since sliced bread!
>>
>> However, I've run into one thing makes life with Maven a little less easy
>> than it should be. Specifically, there are projects out there that don't
>> have anyone deploying project artifacts to a public Maven 2 repository (or
>> at least they aren't advertising that fact, and I can't seem to find some of
>> them).
>>
>> For example, right now I'd like to use a simple in-memory HTTP Server of
>> some sort for serving RSS. While there is a simple HTTPServer built into
>> Java 6 (
>> http://java.sun.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/package-summary.html
>> ), a good number of the projects described on
>> http://java-source.net/open-source/web-servers like Rupy, Simple, etc. don't
>> have artifacts deployed to http://repo1.maven.org/maven2/ . While I could
>> install/deploy the required jar(s) locally for my own projects, I would like
>> to use this in an open-source project without requiring others to have to
>> manually deploy the jar via installing it specifically or via deployment to
>> their m2 repo (if they have one setup).
>>
>> Are there any of you out there that have open-source projects where you
>> couldn't find a dependency in a public Maven 2 repo, and if you, how did you
>> handle it?
>>
>> I've run into issues with some of the Sun jars that have licensing issues
>> before, but I kind of consider that par for the course for Maven 2 projects.
>> However, it doesn't seem "normal" to make a developer that wants to build
>> your project have to deploy some other libraries locally just to build it
>> when there are no licensing issues. So I'm just curious how you guys usually
>> handle these, if you don't mind me asking.
>>
>> Thanks!
>>
>> Gary
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>> For additional commands, e-mail: users-help@maven.apache.org
>>
>>
>>     
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>   


-- 
Gary Weaver
Internet Framework Services
Office of Information Technology
Duke University


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Posted by Nick Stolwijk <ni...@gmail.com>.
Take a look at the Maven website, especially this [1] page. I guess it
tells you everything you ask about uploading third party libraries to
central.

[1] http://maven.apache.org/guides/mini/guide-central-repository-upload.html

Hth,

Nick Stolwijk
~Java Developer~

Iprofs BV.
Claus Sluterweg 125
2012 WS Haarlem
www.iprofs.nl



On Wed, Sep 3, 2008 at 5:09 PM, Gary Weaver <ga...@duke.edu> wrote:
> Hey everyone,
>
> I've been using and evangelizing Maven 2 for a few years now. And yes, it is
> really the greatest thing since sliced bread!
>
> However, I've run into one thing makes life with Maven a little less easy
> than it should be. Specifically, there are projects out there that don't
> have anyone deploying project artifacts to a public Maven 2 repository (or
> at least they aren't advertising that fact, and I can't seem to find some of
> them).
>
> For example, right now I'd like to use a simple in-memory HTTP Server of
> some sort for serving RSS. While there is a simple HTTPServer built into
> Java 6 (
> http://java.sun.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/package-summary.html
> ), a good number of the projects described on
> http://java-source.net/open-source/web-servers like Rupy, Simple, etc. don't
> have artifacts deployed to http://repo1.maven.org/maven2/ . While I could
> install/deploy the required jar(s) locally for my own projects, I would like
> to use this in an open-source project without requiring others to have to
> manually deploy the jar via installing it specifically or via deployment to
> their m2 repo (if they have one setup).
>
> Are there any of you out there that have open-source projects where you
> couldn't find a dependency in a public Maven 2 repo, and if you, how did you
> handle it?
>
> I've run into issues with some of the Sun jars that have licensing issues
> before, but I kind of consider that par for the course for Maven 2 projects.
> However, it doesn't seem "normal" to make a developer that wants to build
> your project have to deploy some other libraries locally just to build it
> when there are no licensing issues. So I'm just curious how you guys usually
> handle these, if you don't mind me asking.
>
> Thanks!
>
> Gary
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Posted by Gary Weaver <ga...@duke.edu>.
Thanks, Geoffrey! Great blog!

I also liked Brian's that he mentioned in a comment: 
http://blogs.sonatype.com/brian/2008/05/27/1211942439071.html

And it appears that there is a bit of info here on fixing other's stuff 
in the central repo too that Brian referenced:
http://maven.apache.org/guides/mini/guide-maven-evangelism.html

It's hard to believe that anyone wouldn't want their open-source project 
to have greater adoptability of their releases by Maven 2, etc. Maybe a 
repository that could act as a maven 2 repository, and Ivy repository, 
etc. and be *perceived* as truly agnostic is the answer.

Thanks again!

Gary


Geoffrey Wiseman wrote:
> On Wed, Sep 3, 2008 at 11:09 AM, Gary Weaver <ga...@duke.edu> wrote:
>
>   
>> For example, right now I'd like to use a simple in-memory HTTP Server of
>> some sort for serving RSS. While there is a simple HTTPServer built into
>> Java 6 (
>> http://java.sun.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/package-summary.html), a good number of the projects described on
>> http://java-source.net/open-source/web-servers like Rupy, Simple, etc.
>> don't have artifacts deployed to http://repo1.maven.org/maven2/ . While I
>> could install/deploy the required jar(s) locally for my own projects, I
>> would like to use this in an open-source project without requiring others to
>> have to manually deploy the jar via installing it specifically or via
>> deployment to their m2 repo (if they have one setup).
>>     
>
>
> Yeah, I played with a few of these, but I just ended up using the Sun one --
> although I only needed it for testing, so my requirements weren't incredibly
> stringent.
>
>
>   
>> Are there any of you out there that have open-source projects where you
>> couldn't find a dependency in a public Maven 2 repo, and if you, how did you
>> handle it?
>>
>>     
>
> http://furiouspurpose.blogspot.com/2008/05/subetha-smtp-maven-and-community.html
>   


-- 
Gary Weaver
Internet Framework Services
Office of Information Technology
Duke University


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Posted by Geoffrey Wiseman <ge...@gmail.com>.
On Wed, Sep 3, 2008 at 11:09 AM, Gary Weaver <ga...@duke.edu> wrote:

> For example, right now I'd like to use a simple in-memory HTTP Server of
> some sort for serving RSS. While there is a simple HTTPServer built into
> Java 6 (
> http://java.sun.com/javase/6/docs/jre/api/net/httpserver/spec/com/sun/net/httpserver/package-summary.html), a good number of the projects described on
> http://java-source.net/open-source/web-servers like Rupy, Simple, etc.
> don't have artifacts deployed to http://repo1.maven.org/maven2/ . While I
> could install/deploy the required jar(s) locally for my own projects, I
> would like to use this in an open-source project without requiring others to
> have to manually deploy the jar via installing it specifically or via
> deployment to their m2 repo (if they have one setup).


Yeah, I played with a few of these, but I just ended up using the Sun one --
although I only needed it for testing, so my requirements weren't incredibly
stringent.


> Are there any of you out there that have open-source projects where you
> couldn't find a dependency in a public Maven 2 repo, and if you, how did you
> handle it?
>

http://furiouspurpose.blogspot.com/2008/05/subetha-smtp-maven-and-community.html
-- 
Geoffrey Wiseman

Re: what to do when you require a dependency in an open-source project that isn't available on a public maven 2 repository, but could be (and you can't host it)

Posted by Graham Leggett <mi...@sharp.fm>.
Gary Weaver wrote:

> Are there any of you out there that have open-source projects where you 
> couldn't find a dependency in a public Maven 2 repo, and if you, how did 
> you handle it?

We run our own maven repository where we publish our own artifacts 
released using the release plugin.

Jars that are not publicly available, or jars that we have patched 
ourselves, go into this same repository.

Regards,
Graham
--