Re: Logging in Maven 4

2024-03-03 Thread Pavel Horal
Hi, sorry to jump into a conversation, but isn't System.Logger mainly for JDK internals? I always thought that using it is in a similar ballpark as using java.util.Optional in method arguments (i.e. „please don’t“). Pavel On Sun, 3 Mar 2024 at 23:54, Martin Desruisseaux < martin.desruisse...@geo

Re: Possible improvements on Maven

2023-07-01 Thread Pavel Horal
Hi, not a maintainer here, but just want to add to this: > Compare to newer package managers such as NPM, which only has two scopes (i.e., dependencies, devdependencies) NPM has dependencies, devDependencies, peerDependencies, bundleDependencies and optionalDependencies :) Pavel On Sat, 1 Jul

Re: Bug report - maven shade plugin - transitive dependencies of provided dependency included in uber-jar

2023-02-08 Thread Pavel Horal
Hi, there is a configuration for including/excluding provided scope dependencies - https://maven.apache.org/plugins/maven-shade-plugin/shade-mojo.html#keepDependenciesWithProvidedScope . It is not apparent what should be the default behavior from the documentation though. Pavel On Thu, 9 Feb 202

Re: MD5, SHA1, but nothing (still) safe?

2021-10-14 Thread Pavel Horal
Hello, i see two mixed topics in this discussion - verifying artifact transfer integrity and verifying that the downloaded artifact is really the one expected from the security perspective. The latter does not have anything to do with Maven Central or any other repository. Checksums in repositorie