[jira] Commented: (MNG-1977) Global dependency exclusions

["Carlos Sanchez (JIRA)" <ji...@codehaus.org>]

    [ http://jira.codehaus.org/browse/MNG-1977?page=comments#action_65750 ] 

Carlos Sanchez commented on MNG-1977:
-------------------------------------

>From MNG-1977

Transitive dependencies are cool, however, the limitations are very difficult to work around.

    * specification dependencies
    * jarjar dependencies (spring.jar includes all spring-xxx.jar, so no need to include them)
    * remove warning on relocations for transitive dependencies (it's always difficult to tell users: that's not an error, and we can not do anything)
    * poms on ibiblio are all in m2 and never change
    * exclusions for transitive deps can be overriden if manually included

One cool feature would be to allow disabling transitive dependencies in the following ways:

    * disable all transitive deps
    * enable transitive dependencies only for modules of the same project
    * enable transitive deps for specific groupIds
    * disable transitive deps for specific groupIds
    * have a tag/attribute to exclude all transitive deps for one dependency (instead of having list all exclusions)


> Global dependency exclusions
> ----------------------------
>
>          Key: MNG-1977
>          URL: http://jira.codehaus.org/browse/MNG-1977
>      Project: Maven 2
>         Type: New Feature

>   Components: POM
>     Reporter: Kees de Kooter
>      Fix For: 2.1

>
>
> I depend on some libraries, which in turn depend on something
> (which in turn depend on something) that I don't want, because I declare
> some other artifact in my pom.xml.
> A concrete example: I don't want that the artifact "xerces" is imported in
> my project because I declare to depend on  "xercesImpl" which ships newer
> libraries but with the same namespaces.
> I guess I would need an "exclude transitive dependency at all", either
> globally or from this and that artifact. I saw the <exclusions> tag, but it
> forces me to be very verbose and have exact control on what is required by a
> dependency.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira