You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tika.apache.org by "Tim Allison (Jira)" <ji...@apache.org> on 2025/09/26 18:45:00 UTC
[jira] [Updated] (TIKA-4495) What do we do with ossindex?
[ https://issues.apache.org/jira/browse/TIKA-4495?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tim Allison updated TIKA-4495:
------------------------------
Description:
The ossindex plugin now requires an api key. I don't know if we can get one for free because we're open source or if that means the end of the plugin for us.
For now, I propose that we turn it off.
https://ossindex.sonatype.org/doc/auth-required
Any recommendations?
{noformat}
[WARNING] Failed to fetch component-reports
2025-09-26T16:53:22.9866506Z org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: HTTP/1.1 401 Unauthorized
2025-09-26T16:53:22.9868753Z at org.sonatype.ossindex.service.client.transport.HttpClientTransport.post (HttpClientTransport.java:102)
2025-09-26T16:53:22.9871010Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports (OssindexClientImpl.java:204)
2025-09-26T16:53:22.9872964Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports (OssindexClientImpl.java:170)
2025-09-26T16:53:22.9874862Z at org.sonatype.ossindex.maven.common.ComponentReportAssistant.request (ComponentReportAssistant.java:86)
2025-09-26T16:53:22.9876201Z at org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute (AuditMojoSupport.java:242)
2025-09-26T16:53:22.9877229Z at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
2025-09-26T16:53:22.9878225Z at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) {noformat}
was:
The ossindex plugin now requires an api key. I don't know if we can get one for free because we're open source or if that means the end of the plugin for us.
For now, I propose that we turn it off.
Any recommendations?
{noformat}
[WARNING] Failed to fetch component-reports
2025-09-26T16:53:22.9866506Z org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: HTTP/1.1 401 Unauthorized
2025-09-26T16:53:22.9868753Z at org.sonatype.ossindex.service.client.transport.HttpClientTransport.post (HttpClientTransport.java:102)
2025-09-26T16:53:22.9871010Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports (OssindexClientImpl.java:204)
2025-09-26T16:53:22.9872964Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports (OssindexClientImpl.java:170)
2025-09-26T16:53:22.9874862Z at org.sonatype.ossindex.maven.common.ComponentReportAssistant.request (ComponentReportAssistant.java:86)
2025-09-26T16:53:22.9876201Z at org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute (AuditMojoSupport.java:242)
2025-09-26T16:53:22.9877229Z at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
2025-09-26T16:53:22.9878225Z at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) {noformat}
> What do we do with ossindex?
> ----------------------------
>
> Key: TIKA-4495
> URL: https://issues.apache.org/jira/browse/TIKA-4495
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> The ossindex plugin now requires an api key. I don't know if we can get one for free because we're open source or if that means the end of the plugin for us.
> For now, I propose that we turn it off.
> https://ossindex.sonatype.org/doc/auth-required
> Any recommendations?
> {noformat}
> [WARNING] Failed to fetch component-reports
> 2025-09-26T16:53:22.9866506Z org.sonatype.ossindex.service.client.transport.Transport$TransportException: Unexpected response; status: HTTP/1.1 401 Unauthorized
> 2025-09-26T16:53:22.9868753Z at org.sonatype.ossindex.service.client.transport.HttpClientTransport.post (HttpClientTransport.java:102)
> 2025-09-26T16:53:22.9871010Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports (OssindexClientImpl.java:204)
> 2025-09-26T16:53:22.9872964Z at org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports (OssindexClientImpl.java:170)
> 2025-09-26T16:53:22.9874862Z at org.sonatype.ossindex.maven.common.ComponentReportAssistant.request (ComponentReportAssistant.java:86)
> 2025-09-26T16:53:22.9876201Z at org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute (AuditMojoSupport.java:242)
> 2025-09-26T16:53:22.9877229Z at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
> 2025-09-26T16:53:22.9878225Z at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328) {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)