elharo opened a new issue, #247:
URL: https://github.com/apache/maven-artifact-plugin/issues/247

   `RangesUtil.isVersionRange()` (lines 139-143) misses fully-open ranges:
   
   ```java
   if (versionConstraint.getRange() != null) {
       return !Objects.equals(
               versionConstraint.getRange().getLowerBound(),
               versionConstraint.getRange().getUpperBound());
   }
   ```
   
   For a completely open range such as `(,)` both bounds are `null`, so 
`Objects.equals(null, null)` returns `true` and the range is *not* flagged. A 
fully-open range is the least reproducible dependency specification and is 
exactly what this goal should report.
   
   Suggested fix: treat `(,)` (both bounds null or one bound null) as a version 
range.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to