michael-o commented on PR #78: URL: https://github.com/apache/creadur-rat/pull/78#issuecomment-1214451184
> @michael-o can you say something concerning the warnings: > > ``` > [INFO] --- maven-plugin-plugin:3.6.4:descriptor (mojo-descriptor) @ apache-rat-plugin --- > [ERROR] > > Some dependencies of Maven Plugins are expected to be in provided scope. > Please make sure that dependencies listed below declared in POM > have set '<scope>provided</scope>' as well. > > The following dependencies are in wrong scope: > * org.apache.maven:maven-artifact:jar:2.2.1:compile > * org.apache.maven:maven-artifact-manager:jar:2.2.1:compile > * org.apache.maven:maven-repository-metadata:jar:2.2.1:compile > * org.apache.maven:maven-model:jar:2.2.1:compile > * org.apache.maven:maven-project:jar:2.2.1:compile > * org.apache.maven:maven-profile:jar:2.2.1:compile > * org.apache.maven:maven-plugin-registry:jar:2.2.1:compile > > [INFO] Using 'UTF-8' encoding to read mojo source files. > [INFO] java-javadoc mojo extractor found 0 mojo descriptor. > [INFO] bsh mojo extractor found 0 mojo descriptor. > [INFO] ant mojo extractor found 0 mojo descriptor. > [INFO] java-annotations mojo extractor found 3 mojo descriptors. > ``` > > Can they be fixed easily in the pom.xml? It's not related to this change, first of all. Reasoning of that message: A plugin should use the Maven Core artifacts provided by the Maven runtime, not a specific version your compiled against. Two reasons: * Saves bunch of downloads because Maven has then bundled anyway. * Assures that your plugin benefits for new Maven improvements which `compile` won't give you. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
