On Fri, Sep 4, 2026 at 9:30 AM Piotr P. Karwasz <[email protected]> wrote: > > Hi Gary, > > On 4.09.2026 14:55, Gary Gregory wrote: > > Good idea. Components can do that today with Checkstyle, PMD, and/or > > SpotBugs. All can be configured with different levels of ease and > > complexity. The simplest in order of simple to complex are IMO: > > Checkstyle, PMD, and then SpotBugs. SpotBugs requires code and not > > just a config file. > > > > I don't want to hold up 105 for this new feature. We can do this for > > 106 after Secure XML is out. > > > Forbidden APIs has already a working Maven plugin, but delaying to 106 > is good enough. We're not going to run out of integer numbers anytime > soon anyway.
We already have _three_ static analysis plugins that ALL can do this. I don't see why we need to add a fourth plugin. I'd rather configure one thing in one plugin we already use, than adding a fourth plugin and configuring that. It feels less complicated and less to learn and maintain. Gary > > Piotr > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
