Hi Glen, yes please file a JIRA so this doesn't get lost. We can then open sub-tasks as we migrate/update dependencies.
I would also add log4j to this list, to replace it with a custom logger for JSPWiki, something similar to the logger facade developed at the 3.0 branch, but based on SLF4J + [Logback | Log4j2] Regarding Jetty, it was used to build custom webapps to launch the Selenium tests, so may be it can be dismissed in favour of the it-* modules cheers, juan pablo On Sat, Jul 20, 2013 at 2:38 AM, Glen Mazza <glen.ma...@gmail.com> wrote: > Hi Team, > > By running mvn versions:display-dependency-**updates as well as checking > each of the dependencies in JSPWiki, I've come up with a list of potential > obsolete or outdated dependencies in JSPWiki. This is just food for > thought, if anybody would like to work on any of these, that would be > great, we can also type in JIRA tickets for each of these that seem to be a > good idea. > > Just basic updates (some testing probably needed): > ------------------------------**------------------------------**-------- > commons-io 1.4 to 2.4 > hsqldb 2.2.9 to 2.3.0 - JUnit tests fail with this update (apparently not > backwards compatible), some tweaking of the codebase needed. > lucene 3.6 to 4.3.1 > jetty 7.6.7 to 9.0.4 (used during testing only, possibly good to replace > with embedded Tomcat) > > Switching to new projects: > ------------------------------**------ > Sandler: used for Atom messages (http://sourceforge.net/** > projects/sandler/ <http://sourceforge.net/projects/sandler/> -- but > website linked to from there is dead). Last updated 2004. Switch to > Apache Abdera? > > opensymphony:oscache 2.3 to 2.4.1 -- Opensymphony website is dead, replace > with ehcache (http://ehcache.org/)? Seemingly quite popular, Apache > Roller uses it... > > xmlrpc:xmlrpc 2.0.1 to 3.0a1 -- AFAICT XML-RPC is dead today. Mailing list > last used almost 3 years ago: http://mail-archives.apache.** > org/mod_mbox/ws-xmlrpc-dev/<http://mail-archives.apache.org/mod_mbox/ws-xmlrpc-dev/>; > replace with Apache CXF for SOAP and REST? > > json-rpc: now called jabsorb > (http://code.google.com/p/**jabsorb/<http://code.google.com/p/jabsorb/>), > hasn't been updated in about 3 years. Likewise no longer needed? Just use > CXF REST w/JSON perhaps. > > Stripes framework: team still wish to use this? Project certainly looks > good > (http://www.stripesframework.**org/display/stripes/Home<http://www.stripesframework.org/display/stripes/Home>), > although I prefer open source projects that accept new committers (Stripes > may be like that, but I don't see any advertisements on their web page > indicating as such) so we're not dependent on a few volunteers. > > Jakarta Oro > (http://jakarta.apache.org/**oro/index.html<http://jakarta.apache.org/oro/index.html>) > in the Apache Attic, replace with Java or commons-* products? > > Jakarta ecs:ecs A markup language, also in the Attic since 2010: ( > http://jakarta.apache.org/**ecs/ <http://jakarta.apache.org/ecs/>), > unsure what to replace it with. > > org.jvnet.hudson:org.**suigeneris.jrcs.diff - now at > http://code.google.com/p/jrcs/**, last updated 3 years 3 months ago, from > the website: "JRCS is a library that knows how to manipulate the archive > files produced by the RCS and CVS version control systems." IIRC Harry > deprecated RCS a few months back, we may not need this library at all > anymore. That it links to CVS (not Subversion or Git/GitHub) further > indicates its age. > > akismet-java: used for combating spam. Hasn't been updated in 2 years but > probably still OK > (https://github.com/**czarneckid/akismet-java<https://github.com/czarneckid/akismet-java> > ) > > freshcookies security -- Done by Andrew Jaquith of our team ( > http://mvnrepository.com/**artifact/org.freshcookies/** > freshcookies-security/0.60<http://mvnrepository.com/artifact/org.freshcookies/freshcookies-security/0.60>), > but the website for it is dead: http://www.freshcookies.org/ -- I don't > know when it was last updated, and haven't researched yet what this library > does. Switch to Apache Shiro? > > Cheers, > Glen >
