You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by Eric Jacob <er...@gmail.com> on 2005/11/18 17:26:22 UTC

How to disable transitive dependency?

Hi,

Putting the following dependency results in 72 jars downloaded in
WEB-INF/lib!

<dependency>
<groupId>acegisecurity</groupId>
<artifactId>acegi-security</artifactId>
<version>0.9.0</version>
<scope>runtime</scope>
</dependency>

Of course, I can exclude unecessary dependencies, but it's a real pain. A
better solution would be to disable transitive dependencies all together. Is
it supported?

Thanks.

Eric

Re: How to disable transitive dependency?

Posted by Carlos Sanchez <ca...@apache.org>.
Try your custom made poms in another project and you'll find that they
won't work. Will you create a pom for each jar in each project? no
thanks.

poms in the repo are not supposed to change, we're fixing them now
because there're a lot of errors, but our intention is to stop doing
that after some time. poms as jars have to be inmutable.

On 11/24/05, Igor Bljahhin <ig...@gmail.com> wrote:
> Why not? You will declare all dependencies you need by hands, as you
> did it in Maven 1. Thus, your project will be protected from changes
> in Acegi's pom in public repository.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Igor Bljahhin <ig...@gmail.com>.
Why not? You will declare all dependencies you need by hands, as you
did it in Maven 1. Thus, your project will be protected from changes
in Acegi's pom in public repository.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Carlos Sanchez <ca...@apache.org>.
But that won't work for everybody, just you.

On 11/23/05, Igor Bljahhin <ig...@gmail.com> wrote:
> Hello!
>
> I think I have found solution what is suitable for me.
> For Acegi Security framework I have created my own pom
> "acegi-security-0.9.0.pom" with the following content:
>
> <project>
>   <modelVersion>4.0.0</modelVersion>
>   <groupId>acegisecurity</groupId>
>   <artifactId>acegi-security</artifactId>
>   <version>0.9.0</version>
>   <packaging>jar</packaging>
>   <dependencies>
>     <dependency>
>       <groupId>aspectj</groupId>
>       <artifactId>aspectjrt</artifactId>
>       <version>1.2</version>
>     </dependency>
>     <dependency>
>       <groupId>commons-attributes</groupId>
>       <artifactId>commons-attributes-api</artifactId>
>       <version>2.1</version>
>     </dependency>
>     <dependency>
>       <groupId>commons-attributes</groupId>
>       <artifactId>commons-attributes-compiler</artifactId>
>       <version>2.1</version>
>     </dependency>
>  </dependencies>
> </project>
>
> I have copied this pom into my repository on http server. This
> repository is first of two repositories in my "pom.xml". The second
> one is Maven's public repository.
>
> Everytime when I run Maven on clean computer, Maven checks my
> repository first and download my corrected pom.
>
> For Spring framework the pom file is simplier:
> <project>
>   <modelVersion>4.0.0</modelVersion>
>   <groupId>springframework</groupId>
>   <artifactId>spring</artifactId>
>   <version>1.2.5</version>
> </project>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Igor Bljahhin <ig...@gmail.com>.
Hello!

I think I have found solution what is suitable for me.
For Acegi Security framework I have created my own pom
"acegi-security-0.9.0.pom" with the following content:

<project>
  <modelVersion>4.0.0</modelVersion>
  <groupId>acegisecurity</groupId>
  <artifactId>acegi-security</artifactId>
  <version>0.9.0</version>
  <packaging>jar</packaging>
  <dependencies>
    <dependency>
      <groupId>aspectj</groupId>
      <artifactId>aspectjrt</artifactId>
      <version>1.2</version>
    </dependency>
    <dependency>
      <groupId>commons-attributes</groupId>
      <artifactId>commons-attributes-api</artifactId>
      <version>2.1</version>
    </dependency>
    <dependency>
      <groupId>commons-attributes</groupId>
      <artifactId>commons-attributes-compiler</artifactId>
      <version>2.1</version>
    </dependency>
 </dependencies>
</project>

I have copied this pom into my repository on http server. This
repository is first of two repositories in my "pom.xml". The second
one is Maven's public repository.

Everytime when I run Maven on clean computer, Maven checks my
repository first and download my corrected pom.

For Spring framework the pom file is simplier:
<project>
  <modelVersion>4.0.0</modelVersion>
  <groupId>springframework</groupId>
  <artifactId>spring</artifactId>
  <version>1.2.5</version>
</project>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Carlos Sanchez <ca...@apache.org>.
I'll try to address that for acegi by creating submodules for ldap,
single sign on, etc...

On 11/21/05, Brett Porter <br...@gmail.com> wrote:
> We can actually do that using profiles, but we haven't greatly used it
> yet. In particular, we don't do activation selectively through a
> dependency.
>
> We do highly encourage avoiding this complexity in your own dependency
> graphs, however.
>
> - Brett
>
> On 11/22/05, Wim Deblauwe <wi...@gmail.com> wrote:
> > I don't think that is the way forward. There should be very good explenation
> > on how to specify your dependencies, so projects that use your project only
> > got the dependencies they want.
> >
> > What would be an improvement in my eyes, is that you can somehow relate
> > functionality (with some kind of keyword) to inclusion/exclusion of certain
> > jars. As Eric mentions in his mail, I only want core functionality, not
> > caching, not single sign on, ... I would be nice if you could specify things
> > on that level somehow.
> >
> > regards,
> >
> > Wim
> >
> > 2005/11/22, Chris Berry <ch...@gmail.com>:
> > >
> > > I think the gist of this thread is that, yes, we can add optional or
> > > exclusions -- but why not simply add a dependency attribute such as::
> > >
> > > <dependency transitive="off" >
> > >
> > > or even
> > >
> > > <dependencies transitive="off" >
> > >
> > > Although it seems that this should be a project-specific property and
> > > should
> > > not be transitive itself. In other words, it should be ignored if it is
> > > found in a child dependency so that if one requests transitive behavior
> > > (in
> > > the project being assembled) they will get what they expect.
> > >
> > > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > > >
> > > > Hi Carlos,
> > > >
> > > > I agree with you. The pom can be improved greatly by specifying only oro
> > > > and
> > > > commons-codec as "mandatory" dependencies. All others should be
> > > optional.
> > > >
> > > > I'll watch closely this bug :)
> > > >
> > > > Thanks.
> > > >
> > > > Eric
> > > >
> > > > On 11/21/05, Carlos Sanchez <ca...@apache.org> wrote:
> > > > >
> > > > > The problem is that the pom can be improved to add some of them as
> > > > > optional.
> > > > > I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.
> > > > >
> > > > > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > > > > > If you want to use all the Acegi's features, sure you need all these
> > > > > jars.
> > > > > > But since I don't need single sign on (cas), ldap or jsp support
> > > > > (directory,
> > > > > > taglibs) or caching (ehcache), why should I have these dependencies
> > > > > included
> > > > > > in my application?
> > > > > >
> > > > > > I think transitive dependency is great, but sometime it's just
> > > better
> > > > to
> > > > > > turn it off and specify by hand the dependencies you want ot use...
> > > > > >
> > > > > > Eric
> > > > > >
> > > > > > On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> > > > > > >
> > > > > > > I think there's something more wrong if a jar says it has
> > > > dependencies
> > > > > > > and it doesn't actually need them.
> > > > > > >
> > > > > > > Are you sure you don't need these? If so, consider using your own
> > > > > > > repository before ibiblio and strip these of their dependencies.
> > > > > > >
> > > > > > > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > > > > > > Hi John,
> > > > > > > >
> > > > > > > > Thanks for your suggestion. It worths a look! But I still think
> > > > the
> > > > > > > ability
> > > > > > > > to disable transitive dependency would be a good thing. It just
> > > > > doesn't
> > > > > > > feel
> > > > > > > > right to me to exclude more dependencies than I really need.
> > > > > > > >
> > > > > > > > Eric
> > > > > > > >
> > > > > > > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > > > > > > >
> > > > > > > > > Hi Eric,
> > > > > > > > >
> > > > > > > > > If you look at it's pom
> > > > > > > > > (
> > > > > > > > >
> > > > > > >
> > > > >
> > > >
> > > http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > > > > > > ),
> > > > > > > > > this artifact have 21 direct dependencies. Exclude those and
> > > the
> > > > > other
> > > > > > > > > transitive dependencies will be excluded as well. You can
> > > easily
> > > > > do
> > > > > > > this
> > > > > > > > > if you copy those dependencies from the artifact's pom and
> > > paste
> > > > > it to
> > > > > > > > > your exclusions. A find and replace for "dependency" to
> > > > > "exclusion"
> > > > > > > > > within your copied text won't take that much time.
> > > > > > > > >
> > > > > > > > > Hope this helps.
> > > > > > > > >
> > > > > > > > > Regards,
> > > > > > > > > John
> > > > > > > > >
> > > > > > > > > Eric Jacob wrote:
> > > > > > > > >
> > > > > > > > > >Hi,
> > > > > > > > > >
> > > > > > > > > >Putting the following dependency results in 72 jars
> > > downloaded
> > > > in
> > > > > > > > > >WEB-INF/lib!
> > > > > > > > > >
> > > > > > > > > ><dependency>
> > > > > > > > > ><groupId>acegisecurity</groupId>
> > > > > > > > > ><artifactId>acegi-security</artifactId>
> > > > > > > > > ><version> 0.9.0</version>
> > > > > > > > > ><scope>runtime</scope>
> > > > > > > > > ></dependency>
> > > > > > > > > >
> > > > > > > > > >Of course, I can exclude unecessary dependencies, but it's a
> > > > real
> > > > > > > pain. A
> > > > > > > > > >better solution would be to disable transitive dependencies
> > > all
> > > > > > > together.
> > > > > > > > > Is
> > > > > > > > > >it supported?
> > > > > > > > > >
> > > > > > > > > >Thanks.
> > > > > > > > > >
> > > > > > > > > >Eric
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > ---------------------------------------------------------------------
> > > > > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > ---------------------------------------------------------------------
> > > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Brett Porter <br...@gmail.com>.
We can actually do that using profiles, but we haven't greatly used it
yet. In particular, we don't do activation selectively through a
dependency.

We do highly encourage avoiding this complexity in your own dependency
graphs, however.

- Brett

On 11/22/05, Wim Deblauwe <wi...@gmail.com> wrote:
> I don't think that is the way forward. There should be very good explenation
> on how to specify your dependencies, so projects that use your project only
> got the dependencies they want.
>
> What would be an improvement in my eyes, is that you can somehow relate
> functionality (with some kind of keyword) to inclusion/exclusion of certain
> jars. As Eric mentions in his mail, I only want core functionality, not
> caching, not single sign on, ... I would be nice if you could specify things
> on that level somehow.
>
> regards,
>
> Wim
>
> 2005/11/22, Chris Berry <ch...@gmail.com>:
> >
> > I think the gist of this thread is that, yes, we can add optional or
> > exclusions -- but why not simply add a dependency attribute such as::
> >
> > <dependency transitive="off" >
> >
> > or even
> >
> > <dependencies transitive="off" >
> >
> > Although it seems that this should be a project-specific property and
> > should
> > not be transitive itself. In other words, it should be ignored if it is
> > found in a child dependency so that if one requests transitive behavior
> > (in
> > the project being assembled) they will get what they expect.
> >
> > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > >
> > > Hi Carlos,
> > >
> > > I agree with you. The pom can be improved greatly by specifying only oro
> > > and
> > > commons-codec as "mandatory" dependencies. All others should be
> > optional.
> > >
> > > I'll watch closely this bug :)
> > >
> > > Thanks.
> > >
> > > Eric
> > >
> > > On 11/21/05, Carlos Sanchez <ca...@apache.org> wrote:
> > > >
> > > > The problem is that the pom can be improved to add some of them as
> > > > optional.
> > > > I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.
> > > >
> > > > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > > > > If you want to use all the Acegi's features, sure you need all these
> > > > jars.
> > > > > But since I don't need single sign on (cas), ldap or jsp support
> > > > (directory,
> > > > > taglibs) or caching (ehcache), why should I have these dependencies
> > > > included
> > > > > in my application?
> > > > >
> > > > > I think transitive dependency is great, but sometime it's just
> > better
> > > to
> > > > > turn it off and specify by hand the dependencies you want ot use...
> > > > >
> > > > > Eric
> > > > >
> > > > > On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> > > > > >
> > > > > > I think there's something more wrong if a jar says it has
> > > dependencies
> > > > > > and it doesn't actually need them.
> > > > > >
> > > > > > Are you sure you don't need these? If so, consider using your own
> > > > > > repository before ibiblio and strip these of their dependencies.
> > > > > >
> > > > > > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > > > > > Hi John,
> > > > > > >
> > > > > > > Thanks for your suggestion. It worths a look! But I still think
> > > the
> > > > > > ability
> > > > > > > to disable transitive dependency would be a good thing. It just
> > > > doesn't
> > > > > > feel
> > > > > > > right to me to exclude more dependencies than I really need.
> > > > > > >
> > > > > > > Eric
> > > > > > >
> > > > > > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > > > > > >
> > > > > > > > Hi Eric,
> > > > > > > >
> > > > > > > > If you look at it's pom
> > > > > > > > (
> > > > > > > >
> > > > > >
> > > >
> > >
> > http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > > > > > ),
> > > > > > > > this artifact have 21 direct dependencies. Exclude those and
> > the
> > > > other
> > > > > > > > transitive dependencies will be excluded as well. You can
> > easily
> > > > do
> > > > > > this
> > > > > > > > if you copy those dependencies from the artifact's pom and
> > paste
> > > > it to
> > > > > > > > your exclusions. A find and replace for "dependency" to
> > > > "exclusion"
> > > > > > > > within your copied text won't take that much time.
> > > > > > > >
> > > > > > > > Hope this helps.
> > > > > > > >
> > > > > > > > Regards,
> > > > > > > > John
> > > > > > > >
> > > > > > > > Eric Jacob wrote:
> > > > > > > >
> > > > > > > > >Hi,
> > > > > > > > >
> > > > > > > > >Putting the following dependency results in 72 jars
> > downloaded
> > > in
> > > > > > > > >WEB-INF/lib!
> > > > > > > > >
> > > > > > > > ><dependency>
> > > > > > > > ><groupId>acegisecurity</groupId>
> > > > > > > > ><artifactId>acegi-security</artifactId>
> > > > > > > > ><version> 0.9.0</version>
> > > > > > > > ><scope>runtime</scope>
> > > > > > > > ></dependency>
> > > > > > > > >
> > > > > > > > >Of course, I can exclude unecessary dependencies, but it's a
> > > real
> > > > > > pain. A
> > > > > > > > >better solution would be to disable transitive dependencies
> > all
> > > > > > together.
> > > > > > > > Is
> > > > > > > > >it supported?
> > > > > > > > >
> > > > > > > > >Thanks.
> > > > > > > > >
> > > > > > > > >Eric
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > ---------------------------------------------------------------------
> > > > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > ---------------------------------------------------------------------
> > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > For additional commands, e-mail: users-help@maven.apache.org
> > > >
> > > >
> > >
> > >
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Wim Deblauwe <wi...@gmail.com>.
I don't think that is the way forward. There should be very good explenation
on how to specify your dependencies, so projects that use your project only
got the dependencies they want.

What would be an improvement in my eyes, is that you can somehow relate
functionality (with some kind of keyword) to inclusion/exclusion of certain
jars. As Eric mentions in his mail, I only want core functionality, not
caching, not single sign on, ... I would be nice if you could specify things
on that level somehow.

regards,

Wim

2005/11/22, Chris Berry <ch...@gmail.com>:
>
> I think the gist of this thread is that, yes, we can add optional or
> exclusions -- but why not simply add a dependency attribute such as::
>
> <dependency transitive="off" >
>
> or even
>
> <dependencies transitive="off" >
>
> Although it seems that this should be a project-specific property and
> should
> not be transitive itself. In other words, it should be ignored if it is
> found in a child dependency so that if one requests transitive behavior
> (in
> the project being assembled) they will get what they expect.
>
> On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> >
> > Hi Carlos,
> >
> > I agree with you. The pom can be improved greatly by specifying only oro
> > and
> > commons-codec as "mandatory" dependencies. All others should be
> optional.
> >
> > I'll watch closely this bug :)
> >
> > Thanks.
> >
> > Eric
> >
> > On 11/21/05, Carlos Sanchez <ca...@apache.org> wrote:
> > >
> > > The problem is that the pom can be improved to add some of them as
> > > optional.
> > > I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.
> > >
> > > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > > > If you want to use all the Acegi's features, sure you need all these
> > > jars.
> > > > But since I don't need single sign on (cas), ldap or jsp support
> > > (directory,
> > > > taglibs) or caching (ehcache), why should I have these dependencies
> > > included
> > > > in my application?
> > > >
> > > > I think transitive dependency is great, but sometime it's just
> better
> > to
> > > > turn it off and specify by hand the dependencies you want ot use...
> > > >
> > > > Eric
> > > >
> > > > On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> > > > >
> > > > > I think there's something more wrong if a jar says it has
> > dependencies
> > > > > and it doesn't actually need them.
> > > > >
> > > > > Are you sure you don't need these? If so, consider using your own
> > > > > repository before ibiblio and strip these of their dependencies.
> > > > >
> > > > > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > > > > Hi John,
> > > > > >
> > > > > > Thanks for your suggestion. It worths a look! But I still think
> > the
> > > > > ability
> > > > > > to disable transitive dependency would be a good thing. It just
> > > doesn't
> > > > > feel
> > > > > > right to me to exclude more dependencies than I really need.
> > > > > >
> > > > > > Eric
> > > > > >
> > > > > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > > > > >
> > > > > > > Hi Eric,
> > > > > > >
> > > > > > > If you look at it's pom
> > > > > > > (
> > > > > > >
> > > > >
> > >
> >
> http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > > > > ),
> > > > > > > this artifact have 21 direct dependencies. Exclude those and
> the
> > > other
> > > > > > > transitive dependencies will be excluded as well. You can
> easily
> > > do
> > > > > this
> > > > > > > if you copy those dependencies from the artifact's pom and
> paste
> > > it to
> > > > > > > your exclusions. A find and replace for "dependency" to
> > > "exclusion"
> > > > > > > within your copied text won't take that much time.
> > > > > > >
> > > > > > > Hope this helps.
> > > > > > >
> > > > > > > Regards,
> > > > > > > John
> > > > > > >
> > > > > > > Eric Jacob wrote:
> > > > > > >
> > > > > > > >Hi,
> > > > > > > >
> > > > > > > >Putting the following dependency results in 72 jars
> downloaded
> > in
> > > > > > > >WEB-INF/lib!
> > > > > > > >
> > > > > > > ><dependency>
> > > > > > > ><groupId>acegisecurity</groupId>
> > > > > > > ><artifactId>acegi-security</artifactId>
> > > > > > > ><version> 0.9.0</version>
> > > > > > > ><scope>runtime</scope>
> > > > > > > ></dependency>
> > > > > > > >
> > > > > > > >Of course, I can exclude unecessary dependencies, but it's a
> > real
> > > > > pain. A
> > > > > > > >better solution would be to disable transitive dependencies
> all
> > > > > together.
> > > > > > > Is
> > > > > > > >it supported?
> > > > > > > >
> > > > > > > >Thanks.
> > > > > > > >
> > > > > > > >Eric
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > ---------------------------------------------------------------------
> > > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > >
> > > > >
> > > >
> > > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > For additional commands, e-mail: users-help@maven.apache.org
> > >
> > >
> >
> >
>
>

Re: How to disable transitive dependency?

Posted by Chris Berry <ch...@gmail.com>.
I think the gist of this thread is that, yes, we can add optional or
exclusions -- but why not simply add a dependency attribute such as::

<dependency transitive="off" >

or even

<dependencies transitive="off" >

Although it seems that this should be a project-specific property and should
not be transitive itself. In other words, it should be ignored if it is
found in a child dependency so that if one requests transitive behavior (in
the project being assembled) they will get what they expect.

On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
>
> Hi Carlos,
>
> I agree with you. The pom can be improved greatly by specifying only oro
> and
> commons-codec as "mandatory" dependencies. All others should be optional.
>
> I'll watch closely this bug :)
>
> Thanks.
>
> Eric
>
> On 11/21/05, Carlos Sanchez <ca...@apache.org> wrote:
> >
> > The problem is that the pom can be improved to add some of them as
> > optional.
> > I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.
> >
> > On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > > If you want to use all the Acegi's features, sure you need all these
> > jars.
> > > But since I don't need single sign on (cas), ldap or jsp support
> > (directory,
> > > taglibs) or caching (ehcache), why should I have these dependencies
> > included
> > > in my application?
> > >
> > > I think transitive dependency is great, but sometime it's just better
> to
> > > turn it off and specify by hand the dependencies you want ot use...
> > >
> > > Eric
> > >
> > > On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> > > >
> > > > I think there's something more wrong if a jar says it has
> dependencies
> > > > and it doesn't actually need them.
> > > >
> > > > Are you sure you don't need these? If so, consider using your own
> > > > repository before ibiblio and strip these of their dependencies.
> > > >
> > > > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > > > Hi John,
> > > > >
> > > > > Thanks for your suggestion. It worths a look! But I still think
> the
> > > > ability
> > > > > to disable transitive dependency would be a good thing. It just
> > doesn't
> > > > feel
> > > > > right to me to exclude more dependencies than I really need.
> > > > >
> > > > > Eric
> > > > >
> > > > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > > > >
> > > > > > Hi Eric,
> > > > > >
> > > > > > If you look at it's pom
> > > > > > (
> > > > > >
> > > >
> >
> http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > > > ),
> > > > > > this artifact have 21 direct dependencies. Exclude those and the
> > other
> > > > > > transitive dependencies will be excluded as well. You can easily
> > do
> > > > this
> > > > > > if you copy those dependencies from the artifact's pom and paste
> > it to
> > > > > > your exclusions. A find and replace for "dependency" to
> > "exclusion"
> > > > > > within your copied text won't take that much time.
> > > > > >
> > > > > > Hope this helps.
> > > > > >
> > > > > > Regards,
> > > > > > John
> > > > > >
> > > > > > Eric Jacob wrote:
> > > > > >
> > > > > > >Hi,
> > > > > > >
> > > > > > >Putting the following dependency results in 72 jars downloaded
> in
> > > > > > >WEB-INF/lib!
> > > > > > >
> > > > > > ><dependency>
> > > > > > ><groupId>acegisecurity</groupId>
> > > > > > ><artifactId>acegi-security</artifactId>
> > > > > > ><version> 0.9.0</version>
> > > > > > ><scope>runtime</scope>
> > > > > > ></dependency>
> > > > > > >
> > > > > > >Of course, I can exclude unecessary dependencies, but it's a
> real
> > > > pain. A
> > > > > > >better solution would be to disable transitive dependencies all
> > > > together.
> > > > > > Is
> > > > > > >it supported?
> > > > > > >
> > > > > > >Thanks.
> > > > > > >
> > > > > > >Eric
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > ---------------------------------------------------------------------
> > > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > For additional commands, e-mail: users-help@maven.apache.org
> > > >
> > > >
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > For additional commands, e-mail: users-help@maven.apache.org
> >
> >
>
>

Re: How to disable transitive dependency?

Posted by Eric Jacob <er...@gmail.com>.
Hi Carlos,

I agree with you. The pom can be improved greatly by specifying only oro and
commons-codec as "mandatory" dependencies. All others should be optional.

I'll watch closely this bug :)

Thanks.

Eric

On 11/21/05, Carlos Sanchez <ca...@apache.org> wrote:
>
> The problem is that the pom can be improved to add some of them as
> optional.
> I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.
>
> On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> > If you want to use all the Acegi's features, sure you need all these
> jars.
> > But since I don't need single sign on (cas), ldap or jsp support
> (directory,
> > taglibs) or caching (ehcache), why should I have these dependencies
> included
> > in my application?
> >
> > I think transitive dependency is great, but sometime it's just better to
> > turn it off and specify by hand the dependencies you want ot use...
> >
> > Eric
> >
> > On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> > >
> > > I think there's something more wrong if a jar says it has dependencies
> > > and it doesn't actually need them.
> > >
> > > Are you sure you don't need these? If so, consider using your own
> > > repository before ibiblio and strip these of their dependencies.
> > >
> > > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > > Hi John,
> > > >
> > > > Thanks for your suggestion. It worths a look! But I still think the
> > > ability
> > > > to disable transitive dependency would be a good thing. It just
> doesn't
> > > feel
> > > > right to me to exclude more dependencies than I really need.
> > > >
> > > > Eric
> > > >
> > > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > > >
> > > > > Hi Eric,
> > > > >
> > > > > If you look at it's pom
> > > > > (
> > > > >
> > >
> http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > > ),
> > > > > this artifact have 21 direct dependencies. Exclude those and the
> other
> > > > > transitive dependencies will be excluded as well. You can easily
> do
> > > this
> > > > > if you copy those dependencies from the artifact's pom and paste
> it to
> > > > > your exclusions. A find and replace for "dependency" to
> "exclusion"
> > > > > within your copied text won't take that much time.
> > > > >
> > > > > Hope this helps.
> > > > >
> > > > > Regards,
> > > > > John
> > > > >
> > > > > Eric Jacob wrote:
> > > > >
> > > > > >Hi,
> > > > > >
> > > > > >Putting the following dependency results in 72 jars downloaded in
> > > > > >WEB-INF/lib!
> > > > > >
> > > > > ><dependency>
> > > > > ><groupId>acegisecurity</groupId>
> > > > > ><artifactId>acegi-security</artifactId>
> > > > > ><version> 0.9.0</version>
> > > > > ><scope>runtime</scope>
> > > > > ></dependency>
> > > > > >
> > > > > >Of course, I can exclude unecessary dependencies, but it's a real
> > > pain. A
> > > > > >better solution would be to disable transitive dependencies all
> > > together.
> > > > > Is
> > > > > >it supported?
> > > > > >
> > > > > >Thanks.
> > > > > >
> > > > > >Eric
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > > For additional commands, e-mail: users-help@maven.apache.org
> > > > >
> > > > >
> > > >
> > > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > For additional commands, e-mail: users-help@maven.apache.org
> > >
> > >
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

Re: How to disable transitive dependency?

Posted by Carlos Sanchez <ca...@apache.org>.
The problem is that the pom can be improved to add some of them as optional.
I'll solve that when solving http://jira.codehaus.org/browse/MEV-161.

On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> If you want to use all the Acegi's features, sure you need all these jars.
> But since I don't need single sign on (cas), ldap or jsp support (directory,
> taglibs) or caching (ehcache), why should I have these dependencies included
> in my application?
>
> I think transitive dependency is great, but sometime it's just better to
> turn it off and specify by hand the dependencies you want ot use...
>
> Eric
>
> On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
> >
> > I think there's something more wrong if a jar says it has dependencies
> > and it doesn't actually need them.
> >
> > Are you sure you don't need these? If so, consider using your own
> > repository before ibiblio and strip these of their dependencies.
> >
> > On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > > Hi John,
> > >
> > > Thanks for your suggestion. It worths a look! But I still think the
> > ability
> > > to disable transitive dependency would be a good thing. It just doesn't
> > feel
> > > right to me to exclude more dependencies than I really need.
> > >
> > > Eric
> > >
> > > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > > >
> > > > Hi Eric,
> > > >
> > > > If you look at it's pom
> > > > (
> > > >
> > http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > > ),
> > > > this artifact have 21 direct dependencies. Exclude those and the other
> > > > transitive dependencies will be excluded as well. You can easily do
> > this
> > > > if you copy those dependencies from the artifact's pom and paste it to
> > > > your exclusions. A find and replace for "dependency" to "exclusion"
> > > > within your copied text won't take that much time.
> > > >
> > > > Hope this helps.
> > > >
> > > > Regards,
> > > > John
> > > >
> > > > Eric Jacob wrote:
> > > >
> > > > >Hi,
> > > > >
> > > > >Putting the following dependency results in 72 jars downloaded in
> > > > >WEB-INF/lib!
> > > > >
> > > > ><dependency>
> > > > ><groupId>acegisecurity</groupId>
> > > > ><artifactId>acegi-security</artifactId>
> > > > ><version> 0.9.0</version>
> > > > ><scope>runtime</scope>
> > > > ></dependency>
> > > > >
> > > > >Of course, I can exclude unecessary dependencies, but it's a real
> > pain. A
> > > > >better solution would be to disable transitive dependencies all
> > together.
> > > > Is
> > > > >it supported?
> > > > >
> > > > >Thanks.
> > > > >
> > > > >Eric
> > > > >
> > > > >
> > > > >
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > > For additional commands, e-mail: users-help@maven.apache.org
> > > >
> > > >
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > For additional commands, e-mail: users-help@maven.apache.org
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Eric Jacob <er...@gmail.com>.
If you want to use all the Acegi's features, sure you need all these jars.
But since I don't need single sign on (cas), ldap or jsp support (directory,
taglibs) or caching (ehcache), why should I have these dependencies included
in my application?

I think transitive dependency is great, but sometime it's just better to
turn it off and specify by hand the dependencies you want ot use...

Eric

On 11/21/05, Eric Biesterfeld <ibsulon@gmail.com > wrote:
>
> I think there's something more wrong if a jar says it has dependencies
> and it doesn't actually need them.
>
> Are you sure you don't need these? If so, consider using your own
> repository before ibiblio and strip these of their dependencies.
>
> On 11/21/05, Eric Jacob < erjac77@gmail.com> wrote:
> > Hi John,
> >
> > Thanks for your suggestion. It worths a look! But I still think the
> ability
> > to disable transitive dependency would be a good thing. It just doesn't
> feel
> > right to me to exclude more dependencies than I really need.
> >
> > Eric
> >
> > On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> > >
> > > Hi Eric,
> > >
> > > If you look at it's pom
> > > (
> > >
> http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > > ),
> > > this artifact have 21 direct dependencies. Exclude those and the other
> > > transitive dependencies will be excluded as well. You can easily do
> this
> > > if you copy those dependencies from the artifact's pom and paste it to
> > > your exclusions. A find and replace for "dependency" to "exclusion"
> > > within your copied text won't take that much time.
> > >
> > > Hope this helps.
> > >
> > > Regards,
> > > John
> > >
> > > Eric Jacob wrote:
> > >
> > > >Hi,
> > > >
> > > >Putting the following dependency results in 72 jars downloaded in
> > > >WEB-INF/lib!
> > > >
> > > ><dependency>
> > > ><groupId>acegisecurity</groupId>
> > > ><artifactId>acegi-security</artifactId>
> > > ><version> 0.9.0</version>
> > > ><scope>runtime</scope>
> > > ></dependency>
> > > >
> > > >Of course, I can exclude unecessary dependencies, but it's a real
> pain. A
> > > >better solution would be to disable transitive dependencies all
> together.
> > > Is
> > > >it supported?
> > > >
> > > >Thanks.
> > > >
> > > >Eric
> > > >
> > > >
> > > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > > For additional commands, e-mail: users-help@maven.apache.org
> > >
> > >
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

Re: How to disable transitive dependency?

Posted by Eric Biesterfeld <ib...@gmail.com>.
I think there's something more wrong if a jar says it has dependencies
and it doesn't actually need them.

Are you sure you don't need these? If so, consider using your own
repository before ibiblio and strip these of their dependencies.

On 11/21/05, Eric Jacob <er...@gmail.com> wrote:
> Hi John,
>
> Thanks for your suggestion. It worths a look! But I still think the ability
> to disable transitive dependency would be a good thing. It just doesn't feel
> right to me to exclude more dependencies than I really need.
>
> Eric
>
> On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
> >
> > Hi Eric,
> >
> > If you look at it's pom
> > (
> > http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> > ),
> > this artifact have 21 direct dependencies. Exclude those and the other
> > transitive dependencies will be excluded as well. You can easily do this
> > if you copy those dependencies from the artifact's pom and paste it to
> > your exclusions. A find and replace for "dependency" to "exclusion"
> > within your copied text won't take that much time.
> >
> > Hope this helps.
> >
> > Regards,
> > John
> >
> > Eric Jacob wrote:
> >
> > >Hi,
> > >
> > >Putting the following dependency results in 72 jars downloaded in
> > >WEB-INF/lib!
> > >
> > ><dependency>
> > ><groupId>acegisecurity</groupId>
> > ><artifactId>acegi-security</artifactId>
> > ><version>0.9.0</version>
> > ><scope>runtime</scope>
> > ></dependency>
> > >
> > >Of course, I can exclude unecessary dependencies, but it's a real pain. A
> > >better solution would be to disable transitive dependencies all together.
> > Is
> > >it supported?
> > >
> > >Thanks.
> > >
> > >Eric
> > >
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > For additional commands, e-mail: users-help@maven.apache.org
> >
> >
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Eric Jacob <er...@gmail.com>.
Hi John,

Thanks for your suggestion. It worths a look! But I still think the ability
to disable transitive dependency would be a good thing. It just doesn't feel
right to me to exclude more dependencies than I really need.

Eric

On 11/18/05, John Tolentino <jo...@mergere.com> wrote:
>
> Hi Eric,
>
> If you look at it's pom
> (
> http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom
> ),
> this artifact have 21 direct dependencies. Exclude those and the other
> transitive dependencies will be excluded as well. You can easily do this
> if you copy those dependencies from the artifact's pom and paste it to
> your exclusions. A find and replace for "dependency" to "exclusion"
> within your copied text won't take that much time.
>
> Hope this helps.
>
> Regards,
> John
>
> Eric Jacob wrote:
>
> >Hi,
> >
> >Putting the following dependency results in 72 jars downloaded in
> >WEB-INF/lib!
> >
> ><dependency>
> ><groupId>acegisecurity</groupId>
> ><artifactId>acegi-security</artifactId>
> ><version>0.9.0</version>
> ><scope>runtime</scope>
> ></dependency>
> >
> >Of course, I can exclude unecessary dependencies, but it's a real pain. A
> >better solution would be to disable transitive dependencies all together.
> Is
> >it supported?
> >
> >Thanks.
> >
> >Eric
> >
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

Re: How to disable transitive dependency?

Posted by John Tolentino <jo...@mergere.com>.
Hi Eric,

If you look at it's pom 
(http://www.ibiblio.org/pub/packages/maven2/acegisecurity/acegi-security/0.9.0/acegi-security-0.9.0.pom), 
this artifact have 21 direct dependencies. Exclude those and the other 
transitive dependencies will be excluded as well. You can easily do this 
if you copy those dependencies from the artifact's pom and paste it to 
your exclusions. A find and replace for "dependency" to "exclusion" 
within your copied text won't take that much time.

Hope this helps.

Regards,
John

Eric Jacob wrote:

>Hi,
>
>Putting the following dependency results in 72 jars downloaded in
>WEB-INF/lib!
>
><dependency>
><groupId>acegisecurity</groupId>
><artifactId>acegi-security</artifactId>
><version>0.9.0</version>
><scope>runtime</scope>
></dependency>
>
>Of course, I can exclude unecessary dependencies, but it's a real pain. A
>better solution would be to disable transitive dependencies all together. Is
>it supported?
>
>Thanks.
>
>Eric
>
>  
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Allan Ramirez <ar...@exist.com>.
Im not sure if there's already a jira issue for this, if none you can 
file a jira issue for your request. :)

regards,
-allan

Arik Kfir wrote:

>I agree - perhaps an <exclusions> element inside the
><dependencyManagement> section?
>
>On 11/19/05, Barry Kaplan <gr...@memelet.com> wrote:
>  
>
>>Allan Ramirez wrote:
>>
>>    
>>
>>>Hi,
>>>
>>>add the <exclusions> tag to your <dependency>
>>>and put the artifacts you want to exclude.
>>>      
>>>
>>For 72 dependencies! I think we need the ability to disable transitive
>>per dependency, or maybe a wildcard excludes pattern. I also dream of
>>the ability to have a top-level excludes (eg, "never ever include
>>xml-apis in my project no matter who says they need it").
>>
>>-bk
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>>For additional commands, e-mail: users-help@maven.apache.org
>>
>>
>>    
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>For additional commands, e-mail: users-help@maven.apache.org
>
>
>
>  
>


Re: How to disable transitive dependency?

Posted by Arik Kfir <ar...@gmail.com>.
I agree - perhaps an <exclusions> element inside the
<dependencyManagement> section?

On 11/19/05, Barry Kaplan <gr...@memelet.com> wrote:
> Allan Ramirez wrote:
>
> > Hi,
> >
> > add the <exclusions> tag to your <dependency>
> > and put the artifacts you want to exclude.
>
>
> For 72 dependencies! I think we need the ability to disable transitive
> per dependency, or maybe a wildcard excludes pattern. I also dream of
> the ability to have a top-level excludes (eg, "never ever include
> xml-apis in my project no matter who says they need it").
>
> -bk
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Barry Kaplan <gr...@memelet.com>.
Allan Ramirez wrote:

> Hi,
>
> add the <exclusions> tag to your <dependency>
> and put the artifacts you want to exclude. 


For 72 dependencies! I think we need the ability to disable transitive 
per dependency, or maybe a wildcard excludes pattern. I also dream of 
the ability to have a top-level excludes (eg, "never ever include 
xml-apis in my project no matter who says they need it").

-bk

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org


Re: How to disable transitive dependency?

Posted by Allan Ramirez <ar...@exist.com>.
Hi,

add the <exclusions> tag to your <dependency>
and put the artifacts you want to exclude.

<dependency>
<groupId>acegisecurity</groupId>
<artifactId>acegi-security</artifactId>
<version>0.9.0</version>
<scope>runtime</scope>
<exclusions>
  <exclusion>
     <groupId>groupId-of-the-artifact</groupId>
     <artifactId>artifactId-of-the-artifact</artifactId>
  </exclusion>
</exclusions>
</dependency>

regards,
-allan

Eric Jacob wrote:

>But what about acegi-security-0.9.0.jar? I need it in my webapp.
>
>Thanks.
>
>Eric
>
>On 11/18/05, Pablo <pa...@tiger.com.pl> wrote:
>  
>
>>Eric Jacob wrote:
>>
>>    
>>
>>>Hi,
>>>
>>>Putting the following dependency results in 72 jars downloaded in
>>>WEB-INF/lib!
>>>
>>><dependency>
>>><groupId>acegisecurity</groupId>
>>><artifactId>acegi-security</artifactId>
>>><version>0.9.0</version>
>>><scope>runtime</scope>
>>></dependency>
>>>
>>>
>>>      
>>>
>>Hi
>>
>>If you set <scope>provided</scope> then these dependencies will not be
>>included in /WEB-INF/lib
>>
>>Cheers
>>Pablo
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
>>For additional commands, e-mail: users-help@maven.apache.org
>>
>>
>>    
>>
>
>  
>
>------------------------------------------------------------------------
>
>No virus found in this incoming message.
>Checked by AVG Free Edition.
>Version: 7.1.362 / Virus Database: 267.13.3/174 - Release Date: 11/17/2005
>  
>


Re: How to disable transitive dependency?

Posted by Eric Jacob <er...@gmail.com>.
But what about acegi-security-0.9.0.jar? I need it in my webapp.

Thanks.

Eric

On 11/18/05, Pablo <pa...@tiger.com.pl> wrote:
>
> Eric Jacob wrote:
>
> >Hi,
> >
> >Putting the following dependency results in 72 jars downloaded in
> >WEB-INF/lib!
> >
> ><dependency>
> ><groupId>acegisecurity</groupId>
> ><artifactId>acegi-security</artifactId>
> ><version>0.9.0</version>
> ><scope>runtime</scope>
> ></dependency>
> >
> >
> Hi
>
> If you set <scope>provided</scope> then these dependencies will not be
> included in /WEB-INF/lib
>
> Cheers
> Pablo
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>

Re: How to disable transitive dependency?

Posted by Pablo <pa...@tiger.com.pl>.
Eric Jacob wrote:

>Hi,
>
>Putting the following dependency results in 72 jars downloaded in
>WEB-INF/lib!
>
><dependency>
><groupId>acegisecurity</groupId>
><artifactId>acegi-security</artifactId>
><version>0.9.0</version>
><scope>runtime</scope>
></dependency>
>  
>
Hi

If you set <scope>provided</scope> then these dependencies will not be 
included in /WEB-INF/lib

Cheers
Pablo

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org