You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by "Jason van Zyl (JIRA)" <ji...@codehaus.org> on 2005/07/14 00:42:57 UTC

[jira] Created: (MNG-586) Do not include the third party Jsch libraries

Do not include the third party Jsch libraries 
----------------------------------------------

         Key: MNG-586
         URL: http://jira.codehaus.org/browse/MNG-586
     Project: Maven 2
        Type: Wish
  Components: maven-artifact-ant  
 Reporter: Jason van Zyl


Hello,

Can I request that the Ant tasks for Maven do not include the third 
party Jsch libraries in their own jar

It may seem a good solution to your dependencies -bundle them in your 
own JAR, but the consequences are
  -unless you release the libs in perfect syncrhonisation with the jsch 
releases, your version will be behind
  -if someone has a different version of the jsch stuff on the 
classpath, they may not get what they want
  -the ant team ends up fielding the bug reports

We have problems with existing libraries including stuff like oro and 
antlr, and have documented it
http://ant.apache.org/manual/install.html#librarydependencies

Please dont add to the list.

I understand the value in secure downloads,  but feel this is the wrong 
tactic. If having the library is a prerequisite, please point to the 
library at download time. Otherwise, well, surely dynamic downloading of 
stuff is what the library is meant to be good at?


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Updated: (MNG-586) Do not include the third party Jsch libraries

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-586?page=all ]

Brett Porter updated MNG-586:
-----------------------------

    Priority: Critical  (was: Major)

> Do not include the third party Jsch libraries 
> ----------------------------------------------
>
>          Key: MNG-586
>          URL: http://jira.codehaus.org/browse/MNG-586
>      Project: Maven 2
>         Type: Wish
>   Components: maven-artifact-ant
>     Reporter: Jason van Zyl
>     Assignee: Brett Porter
>     Priority: Critical
>      Fix For: 2.0-beta-1

>
>
> Hello,
> Can I request that the Ant tasks for Maven do not include the third 
> party Jsch libraries in their own jar
> It may seem a good solution to your dependencies -bundle them in your 
> own JAR, but the consequences are
>   -unless you release the libs in perfect syncrhonisation with the jsch 
> releases, your version will be behind
>   -if someone has a different version of the jsch stuff on the 
> classpath, they may not get what they want
>   -the ant team ends up fielding the bug reports
> We have problems with existing libraries including stuff like oro and 
> antlr, and have documented it
> http://ant.apache.org/manual/install.html#librarydependencies
> Please dont add to the list.
> I understand the value in secure downloads,  but feel this is the wrong 
> tactic. If having the library is a prerequisite, please point to the 
> library at download time. Otherwise, well, surely dynamic downloading of 
> stuff is what the library is meant to be good at?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Updated: (MNG-586) Do not include the third party Jsch libraries

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-586?page=all ]

Brett Porter updated MNG-586:
-----------------------------

    Fix Version: 2.0-beta-1

Yep, this is a matter of convenient distribution, there is the
standalone antlib which is quite small but requires all the
dependencies in the classpath, or the fat one that has everything.

I want to trim them down a bit anyway, and cull some providers as you
suggest and provide easy ways to add them. Perhaps another task for
ensuring the presence of a wagon provider and its dependencies which
would be simple enough - we haven't solved that problem for Maven
itself yet either.

> Do not include the third party Jsch libraries 
> ----------------------------------------------
>
>          Key: MNG-586
>          URL: http://jira.codehaus.org/browse/MNG-586
>      Project: Maven 2
>         Type: Wish
>   Components: maven-artifact-ant
>     Reporter: Jason van Zyl
>      Fix For: 2.0-beta-1

>
>
> Hello,
> Can I request that the Ant tasks for Maven do not include the third 
> party Jsch libraries in their own jar
> It may seem a good solution to your dependencies -bundle them in your 
> own JAR, but the consequences are
>   -unless you release the libs in perfect syncrhonisation with the jsch 
> releases, your version will be behind
>   -if someone has a different version of the jsch stuff on the 
> classpath, they may not get what they want
>   -the ant team ends up fielding the bug reports
> We have problems with existing libraries including stuff like oro and 
> antlr, and have documented it
> http://ant.apache.org/manual/install.html#librarydependencies
> Please dont add to the list.
> I understand the value in secure downloads,  but feel this is the wrong 
> tactic. If having the library is a prerequisite, please point to the 
> library at download time. Otherwise, well, surely dynamic downloading of 
> stuff is what the library is meant to be good at?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Closed: (MNG-586) Do not include the third party Jsch libraries

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-586?page=all ]
     
Brett Porter closed MNG-586:
----------------------------

    Resolution: Fixed

> Do not include the third party Jsch libraries 
> ----------------------------------------------
>
>          Key: MNG-586
>          URL: http://jira.codehaus.org/browse/MNG-586
>      Project: Maven 2
>         Type: Wish
>   Components: maven-artifact-ant
>     Reporter: Jason van Zyl
>     Assignee: Brett Porter
>     Priority: Critical
>      Fix For: 2.0-beta-1

>
> Original Estimate: 2 hours
>        Time Spent: 2 hours
>         Remaining: 0 minutes
>
> Hello,
> Can I request that the Ant tasks for Maven do not include the third 
> party Jsch libraries in their own jar
> It may seem a good solution to your dependencies -bundle them in your 
> own JAR, but the consequences are
>   -unless you release the libs in perfect syncrhonisation with the jsch 
> releases, your version will be behind
>   -if someone has a different version of the jsch stuff on the 
> classpath, they may not get what they want
>   -the ant team ends up fielding the bug reports
> We have problems with existing libraries including stuff like oro and 
> antlr, and have documented it
> http://ant.apache.org/manual/install.html#librarydependencies
> Please dont add to the list.
> I understand the value in secure downloads,  but feel this is the wrong 
> tactic. If having the library is a prerequisite, please point to the 
> library at download time. Otherwise, well, surely dynamic downloading of 
> stuff is what the library is meant to be good at?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Updated: (MNG-586) Do not include the third party Jsch libraries

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-586?page=all ]

Brett Porter updated MNG-586:
-----------------------------

    Remaining Estimate: 2 hours
     Original Estimate: 7200

> Do not include the third party Jsch libraries 
> ----------------------------------------------
>
>          Key: MNG-586
>          URL: http://jira.codehaus.org/browse/MNG-586
>      Project: Maven 2
>         Type: Wish
>   Components: maven-artifact-ant
>     Reporter: Jason van Zyl
>     Assignee: Brett Porter
>     Priority: Critical
>      Fix For: 2.0-beta-1

>
> Original Estimate: 2 hours
>         Remaining: 2 hours
>
> Hello,
> Can I request that the Ant tasks for Maven do not include the third 
> party Jsch libraries in their own jar
> It may seem a good solution to your dependencies -bundle them in your 
> own JAR, but the consequences are
>   -unless you release the libs in perfect syncrhonisation with the jsch 
> releases, your version will be behind
>   -if someone has a different version of the jsch stuff on the 
> classpath, they may not get what they want
>   -the ant team ends up fielding the bug reports
> We have problems with existing libraries including stuff like oro and 
> antlr, and have documented it
> http://ant.apache.org/manual/install.html#librarydependencies
> Please dont add to the list.
> I understand the value in secure downloads,  but feel this is the wrong 
> tactic. If having the library is a prerequisite, please point to the 
> library at download time. Otherwise, well, surely dynamic downloading of 
> stuff is what the library is meant to be good at?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org