[
https://issues.apache.org/jira/browse/TAPESTRY-1249?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12469848
]
Andreas Andreou commented on TAPESTRY-1249:
-------------------------------------------
<quote>Tapestry 4.0.x went to great measures to download the necessary
dependencies (OGNL, Javassist) as needed, a pain for users, but part of the
cost of going outside the Apache fold.</quote>
So did 4.1.0 - anyway, i believe this to be a misconfiguration of the
maven-assembly-plugin... i've never used it myself,
but our dep.xml has a line saying
<includeDependencies>true</includeDependencies>
> 4.1.1 binary downloads include non-Apache modules (including OGNL and
> Javassist).
> ---------------------------------------------------------------------------------
>
> Key: TAPESTRY-1249
> URL: https://issues.apache.org/jira/browse/TAPESTRY-1249
> Project: Tapestry
> Issue Type: Bug
> Components: Build
> Affects Versions: 4.1.1
> Reporter: Howard M. Lewis Ship
> Priority: Blocker
> Fix For: 4.1.2
>
>
> I was just building the download pages for Tapestry 5.0.1 and noticed that
> the 4.1.1 binaries include ognl.jar, etc. This is absolutely against Apache
> guidelines (only Apache software may be downloaded from the Apache mirrors,
> directly or otherwise). Tapestry 4.0.x went to great measures to download
> the necessary dependencies (OGNL, Javassist) as needed, a pain for users,
> but part of the cost of going outside the Apache fold.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
