[jira] [Created] (TIKA-3777) Exclude dependencies from ossindex checks in the parent pom

["Tim Allison (Jira)" <ji...@apache.org>]

Tim Allison created TIKA-3777:
---------------------------------

             Summary: Exclude dependencies from ossindex checks in the parent pom
                 Key: TIKA-3777
                 URL: https://issues.apache.org/jira/browse/TIKA-3777
             Project: Tika
          Issue Type: Improvement
            Reporter: Tim Allison


With ossindex starting to make a bunch of questionable calls, we need to exclude more and more dependencies.  I had initially wanted to limit the dependencies in our effectively abandoned modules (agerecogniser) to the poms there.

That causes problems though because we have to re-exclude dependencies in those modules when we add exclusions to the parent pom.

So, we should centralize exclusions in the parent pom, even though that has us excluding notoriously embarrassing dependencies in parent (like log4j 1.x).



--
This message was sent by Atlassian Jira
(v8.20.7#820007)