You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Piotr Zygielo (Jira)" <ji...@apache.org> on 2022/11/07 16:23:00 UTC

[jira] [Commented] (MNG-7593) Lack of old versions of org.jruby:jruby-core package in the maven index.

    [ https://issues.apache.org/jira/browse/MNG-7593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17629893#comment-17629893 ] 

Piotr Zygielo commented on MNG-7593:
------------------------------------

This is wrong place to report this, use this [https://issues.sonatype.org/] instead.

> Lack of old versions of org.jruby:jruby-core package in the maven index.
> ------------------------------------------------------------------------
>
>                 Key: MNG-7593
>                 URL: https://issues.apache.org/jira/browse/MNG-7593
>             Project: Maven
>          Issue Type: Bug
>            Reporter: Kate Donk
>            Priority: Minor
>         Attachments: 3BDDA2CA-335A-4CD9-ADFF-0F51EEFDF181.jpeg
>
>
> Hello, I didn't find where else can I get an answer about this issue.
> While working with the [Maven index|[https://repo1.maven.org/] ] to get the list of all available versions of the Maven package: "org.jruby:jruby-core", for some reason there are a lot of old version numbers that are missing [here|[https://repo1.maven.org/maven2/org/jruby/jruby-core/maven-metadata.xml]] 
> There are much more versions that were before 1.6.0.RC3, is this data is missing on purpose? Or maybe I'm getting something wrong.
> I noticed that something isn't right because in OSV vulnerability DB this package had much smaller version as the fixed version for some CVE. I attached a screenshot.
> Thanks in advance, Kate.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)