yeikel commented on pull request #21:
URL: https://github.com/apache/maven-site-plugin/pull/21#issuecomment-910492406
Somewhat. They block Jetty for everyone(including the projects where the
vulnerabilities applies) which affects this plugin indirectly.
If it helps, what we use is similar to this :
https://www.google.com/amp/s/blog.sonatype.com/keeping-third-party-dependencies-in-check-with-nexus%3fhs_amp=true
If this PR is considered stale then I can resume and maybe target the latest
version instead?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
