[
https://issues.apache.org/jira/browse/TIKA-4495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18023252#comment-18023252
]
Tilman Hausherr commented on TIKA-4495:
---------------------------------------
I proposed that it doesn't get deleted, only disabled so that people can run it
locally. Btw I haven't been able to find out how to pass user and token. I do
have one and I use it in pdfbox where ossindex is used as part of the owasp
plugin.
> What do we do with ossindex?
> ----------------------------
>
> Key: TIKA-4495
> URL: https://issues.apache.org/jira/browse/TIKA-4495
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> The ossindex plugin now requires an api key. I don't know if we can get one
> for free because we're open source or if that means the end of the plugin for
> us.
> For now, I propose that we turn it off.
> https://ossindex.sonatype.org/doc/auth-required
> Any recommendations?
> {noformat}
> [WARNING] Failed to fetch component-reports
> 2025-09-26T16:53:22.9866506Z
> org.sonatype.ossindex.service.client.transport.Transport$TransportException:
> Unexpected response; status: HTTP/1.1 401 Unauthorized
> 2025-09-26T16:53:22.9868753Z at
> org.sonatype.ossindex.service.client.transport.HttpClientTransport.post
> (HttpClientTransport.java:102)
> 2025-09-26T16:53:22.9871010Z at
> org.sonatype.ossindex.service.client.internal.OssindexClientImpl.doRequestComponentReports
> (OssindexClientImpl.java:204)
> 2025-09-26T16:53:22.9872964Z at
> org.sonatype.ossindex.service.client.internal.OssindexClientImpl.requestComponentReports
> (OssindexClientImpl.java:170)
> 2025-09-26T16:53:22.9874862Z at
> org.sonatype.ossindex.maven.common.ComponentReportAssistant.request
> (ComponentReportAssistant.java:86)
> 2025-09-26T16:53:22.9876201Z at
> org.sonatype.ossindex.maven.plugin.AuditMojoSupport.execute
> (AuditMojoSupport.java:242)
> 2025-09-26T16:53:22.9877229Z at
> org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
> (DefaultBuildPluginManager.java:126)
> 2025-09-26T16:53:22.9878225Z at
> org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
> (MojoExecutor.java:328) {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
