Best pratice for aggregator plugin

Hi, I'm developing a Maven plugin to check files' license header with aggregator=true because the backed functions are expected to work against the root path of the whole project. As stated in[1], I met an issue that although it works well if you configure the plugin in the parent module and run

Re: CVE-2021-26291 for plugin writers

Make sure your maven artifacts are provided scope then your users can continue using old versions just fine to the 3.3.9 support level you have now. Sent from my Verizon, Samsung Galaxy smartphone Get Outlook for Android From: Anton Vodonos