Hi Alex, Sounds great!
I strongly agree with your decision of “pick the latest”. While I do understand multiple active versions can make it easier for a developer I don’t think that’s the “right” decision. Besides I can only imagine how much of a pain it would be to implement reliably. I’d expect if I specify a patched version of struts that a transitive dependency wouldn’t have the ability to override that for its own purpose. Cheers, Nathan On Sun, 7 Jan 2018 at 20:51, Alex Miller <[email protected]> wrote: > > On Sunday, January 7, 2018 at 3:41:34 PM UTC-6, Nathan Fisher wrote: >> >> >> Not sure I would want to see duplicates either. If my code breaks because >> of an old dependency I’d rather that than make the false assumption that >> I’m running securely with the latest version of a lib. >> > > Encountering duplicate libs in the transitive tree is common to almost > every dependency trees (for example, it's typical to see multiple versions > of Clojure as a dependency in *every* transitive tree). clj, like every > other dependency tool, will continue to make choices about which version to > include and tools to control which one is included. > > I do plan to add better tools to understand the tree and the choices made. > >> -- > You received this message because you are subscribed to the Google > Groups "Clojure" group. > To post to this group, send email to [email protected] > Note that posts from new members are moderated - please be patient with > your first post. > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/clojure?hl=en > --- > You received this message because you are subscribed to the Google Groups > "Clojure" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- - sent from my mobile -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to [email protected] Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
