[ 
https://issues.apache.org/jira/browse/MDEP-753?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491432#comment-17491432
 ] 

Slawomir Jaranowski commented on MDEP-753:
------------------------------------------

[~chonton] - it is special case what you show in example project.

test code use {{ObjectCodec}} from {{jackson-core}}

production code use only {{ObjectMapper}} from {{jackson-databind}}
production code don't use any classes from {{jackson-core}}

but {{jackson-core}} is needed by {{jackson-databind}} and must by in compile 
scope ...

dependency analyzer only check bytecode of classes in project so it is not 
possible detect that some of external classes is needed by transitive dependency
in this case you can use new options {{ignoredNonTestScopedDependencies}} 
(MDEP-787) to ignore {{jackson-core}} as non-test scoped

> Non-test dependency reported as Non-test scoped test only dependency
> --------------------------------------------------------------------
>
>                 Key: MDEP-753
>                 URL: https://issues.apache.org/jira/browse/MDEP-753
>             Project: Maven Dependency Plugin
>          Issue Type: Bug
>          Components: analyze
>    Affects Versions: 3.2.0
>            Reporter: Elliotte Rusty Harold
>            Assignee: Elliotte Rusty Harold
>            Priority: Critical
>             Fix For: 3.3.0
>
>         Attachments: chas.zip, tj.zip
>
>
> Saw this when updating the google-http-java-client from 3.1.2 to 3.2.0 of the 
> plugin. I'm not immediately sure whether this is a regression:
> [INFO] --- maven-dependency-plugin:3.2.0:analyze (default-cli) @ 
> google-http-client ---
> Warning:  Non-test scoped test only dependencies found:
> Warning:     com.google.guava:guava:jar:30.1.1-android:compile
> Warning:     io.opencensus:opencensus-api:jar:0.28.0:compile
> Changing Guava to scope test breaks the build, which is expected based on the 
> code. The warning seems incorrect. 
> https://github.com/googleapis/google-http-java-client/pull/1396
> https://github.com/googleapis/google-http-java-client/pull/1396/checks?check_run_id=2809438131



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to