[ 
https://issues.apache.org/jira/browse/MNG-7593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17629893#comment-17629893
 ] 

Piotr Zygielo commented on MNG-7593:
------------------------------------

This is wrong place to report this, use this [https://issues.sonatype.org/] 
instead.

> Lack of old versions of org.jruby:jruby-core package in the maven index.
> ------------------------------------------------------------------------
>
>                 Key: MNG-7593
>                 URL: https://issues.apache.org/jira/browse/MNG-7593
>             Project: Maven
>          Issue Type: Bug
>            Reporter: Kate Donk
>            Priority: Minor
>         Attachments: 3BDDA2CA-335A-4CD9-ADFF-0F51EEFDF181.jpeg
>
>
> Hello, I didn't find where else can I get an answer about this issue.
> While working with the [Maven index|[https://repo1.maven.org/] ] to get the 
> list of all available versions of the Maven package: "org.jruby:jruby-core", 
> for some reason there are a lot of old version numbers that are missing 
> [here|[https://repo1.maven.org/maven2/org/jruby/jruby-core/maven-metadata.xml]]
>  
> There are much more versions that were before 1.6.0.RC3, is this data is 
> missing on purpose? Or maybe I'm getting something wrong.
> I noticed that something isn't right because in OSV vulnerability DB this 
> package had much smaller version as the fixed version for some CVE. I 
> attached a screenshot.
> Thanks in advance, Kate.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to