Uploaded image for project: 'ShrinkWrap Resolvers'
  1. ShrinkWrap Resolvers
  2. SHRINKRES-292

BOM pollutes dependencyManagement

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 3.1.3
    • None
    • None

      SHRINKRES-256 added a dependency on org.apache.maven:maven to the Shrinkwrap Resolvers BOM. This was a poor idea. It pollutes the dependencyManagement of any projects relying on the SWR BOM with artifacts that have nothing to do with SWR. This includes a lot of commonly used libraries (Guava, commons-lang3, Mockito, etc).

      If a project relying on the SWR BOM also has a transitive dependency on any of those libraries, the version specified by org.apache.maven:maven will be used, which seems like a bad thing to me. And if a project relying on the SWR BOM also has a direct dependency on any of those libraries, Eclipse complains about overriding managed versions.

            Unassigned Unassigned
            rdicroce Richard DiCroce (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: