[jira] [Comment Edited] (CAMEL-23604) Analyze invalid scm url in sbom

Jira Thu, 28 May 2026 06:07:17 -0700


    [ 
https://issues.apache.org/jira/browse/CAMEL-23604?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18084103#comment-18084103
 ]


Aurélien Pupier edited comment on CAMEL-23604 at 5/28/26 1:05 PM:
------------------------------------------------------------------

https://github.com/apache/maven-artifact-transfer has been archived since 2025

"Users are encouraged to switch to [Maven 
Resolver|https://maven.apache.org/resolver/] or the new Maven 4.x API."

EDIT: simply removing the dependency lets the bom-genrator compile but isgiving 
an erro when launching the camel-bom generation:
{noformat}
[[1;33mWARNING[m] Error injecting: 
org.apache.camel.maven.bom.generator.BomGeneratorMojo
[1;31mjava.lang.NoClassDefFoundError[m: 
[1;31morg/apache/maven/shared/transfer/artifact/resolve/ArtifactResolver[m
    [1mat[m java.lang.Class.getDeclaredConstructors0 ([1mNative Method[m)
    [1mat[m java.lang.Class.privateGetDeclaredConstructors 
([1mClass.java:3551[m)
    [1mat[m java.lang.Class.getDeclaredConstructors ([1mClass.java:2729[m)
    [1mat[m com.google.inject.spi.InjectionPoint.forConstructorOf 
([1mInjectionPoint.java:299[m)
    [1mat[m com.google.inject.internal.ConstructorBindingImpl.create 
([1mConstructorBindingImpl.java:121[m)
    [1mat[m 
com.google.inject.internal.InjectorImpl.createUninitializedBinding 
([1mInjectorImpl.java:715[m)
    [1mat[m com.google.inject.internal.InjectorImpl.createJustInTimeBinding 
([1mInjectorImpl.java:941[m)
    [1mat[m 
com.google.inject.internal.InjectorImpl.createJustInTimeBindingRecursive 
([1mInjectorImpl.java:863[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getJustInTimeBinding 
([1mInjectorImpl.java:300[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getBindingOrThrow 
([1mInjectorImpl.java:223[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProviderOrThrow 
([1mInjectorImpl.java:1093[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProvider 
([1mInjectorImpl.java:1122[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProvider 
([1mInjectorImpl.java:1087[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getInstance 
([1mInjectorImpl.java:1139[m)
    [1mat[m org.eclipse.sisu.space.AbstractDeferredClass.get 
([1mAbstractDeferredClass.java:50[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory.provision 
([1mProviderInternalFactory.java:86[m)
    [1mat[m 
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision 
([1mInternalFactoryToInitializableAdapter.java:57[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory$1.call 
([1mProviderInternalFactory.java:67[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision 
([1mProvisionListenerStackCallback.java:109[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision 
([1mProvisionListenerStackCallback.java:124[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback.provision 
([1mProvisionListenerStackCallback.java:66[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory.circularGet 
([1mProviderInternalFactory.java:62[m)
    [1mat[m 
com.google.inject.internal.InternalFactoryToInitializableAdapter.get 
([1mInternalFactoryToInitializableAdapter.java:47[m)
    [1mat[m com.google.inject.internal.InjectorImpl$1.get 
([1mInjectorImpl.java:1101[m)
    [1mat[m org.eclipse.sisu.inject.Guice4$2.get ([1mGuice4.java:235[m)
    [1mat[m org.eclipse.sisu.inject.LazyBeanEntry.getValue 
([1mLazyBeanEntry.java:83[m)
    [1mat[m org.eclipse.sisu.plexus.LazyPlexusBean.getValue 
([1mLazyPlexusBean.java:53[m)
    [1mat[m org.codehaus.plexus.DefaultPlexusContainer.lookup 
([1mDefaultPlexusContainer.java:267[m)
    [1mat[m org.codehaus.plexus.DefaultPlexusContainer.lookup 
([1mDefaultPlexusContainer.java:259[m)
    [1mat[m 
org.apache.maven.plugin.internal.DefaultMavenPluginManager.getConfiguredMojo 
([1mDefaultMavenPluginManager.java:503[m)
    [1mat[m com.gradle.maven.cache.extension.g.b.getConfiguredMojo 
([1mSourceFile:58[m)
    [1mat[m com.gradle.maven.scan.extension.internal.e.b.executeMojo 
([1mSourceFile:104[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 
([1mMojoExecutor.java:328[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
([1mMojoExecutor.java:316[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:212[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:174[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.access$000 
([1mMojoExecutor.java:75[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor$1.run 
([1mMojoExecutor.java:162[m)
    [1mat[m org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute 
([1mDefaultMojosExecutionStrategy.java:39[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:159[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
([1mLifecycleModuleBuilder.java:105[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
([1mLifecycleModuleBuilder.java:73[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 ([1mSingleThreadedBuilder.java:53[m)
    [1mat[m org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
([1mLifecycleStarter.java:118[m)
    [1mat[m org.apache.maven.DefaultMaven.doExecute 
([1mDefaultMaven.java:261[m)
    [1mat[m org.apache.maven.DefaultMaven.doExecute 
([1mDefaultMaven.java:173[m)
    [1mat[m org.apache.maven.DefaultMaven.execute 
([1mDefaultMaven.java:101[m)
    [1mat[m org.apache.maven.cli.MavenCli.execute ([1mMavenCli.java:919[m)
    [1mat[m org.apache.maven.cli.MavenCli.doMain ([1mMavenCli.java:285[m)
    [1mat[m org.apache.maven.cli.MavenCli.main ([1mMavenCli.java:207[m)
    [1mat[m jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
([1mDirectMethodHandleAccessor.java:103[m)
    [1mat[m java.lang.reflect.Method.invoke ([1mMethod.java:580[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
([1mLauncher.java:255[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.launch 
([1mLauncher.java:201[m)
    [1mat[m 
org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
([1mLauncher.java:361[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.main 
([1mLauncher.java:314[m)
[1mCaused by[m: java.lang.ClassNotFoundException: 
[1;31morg.apache.maven.shared.transfer.artifact.resolve.ArtifactResolver[m
    [1mat[m 
org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass 
([1mSelfFirstStrategy.java:42[m)
    [1mat[m 
org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass 
([1mClassRealm.java:225[m)
    [1mat[m org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass 
([1mClassRealm.java:210[m)
    [1mat[m org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass 
([1mClassRealm.java:205[m)
    [1mat[m java.lang.Class.getDeclaredConstructors0 ([1mNative Method[m)
    [1mat[m java.lang.Class.privateGetDeclaredConstructors 
([1mClass.java:3551[m)
    [1mat[m java.lang.Class.getDeclaredConstructors ([1mClass.java:2729[m)
    [1mat[m com.google.inject.spi.InjectionPoint.forConstructorOf 
([1mInjectionPoint.java:299[m)
    [1mat[m com.google.inject.internal.ConstructorBindingImpl.create 
([1mConstructorBindingImpl.java:121[m)
    [1mat[m 
com.google.inject.internal.InjectorImpl.createUninitializedBinding 
([1mInjectorImpl.java:715[m)
    [1mat[m com.google.inject.internal.InjectorImpl.createJustInTimeBinding 
([1mInjectorImpl.java:941[m)
    [1mat[m 
com.google.inject.internal.InjectorImpl.createJustInTimeBindingRecursive 
([1mInjectorImpl.java:863[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getJustInTimeBinding 
([1mInjectorImpl.java:300[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getBindingOrThrow 
([1mInjectorImpl.java:223[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProviderOrThrow 
([1mInjectorImpl.java:1093[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProvider 
([1mInjectorImpl.java:1122[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getProvider 
([1mInjectorImpl.java:1087[m)
    [1mat[m com.google.inject.internal.InjectorImpl.getInstance 
([1mInjectorImpl.java:1139[m)
    [1mat[m org.eclipse.sisu.space.AbstractDeferredClass.get 
([1mAbstractDeferredClass.java:50[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory.provision 
([1mProviderInternalFactory.java:86[m)
    [1mat[m 
com.google.inject.internal.InternalFactoryToInitializableAdapter.provision 
([1mInternalFactoryToInitializableAdapter.java:57[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory$1.call 
([1mProviderInternalFactory.java:67[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision 
([1mProvisionListenerStackCallback.java:109[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback$Provision.provision 
([1mProvisionListenerStackCallback.java:124[m)
    [1mat[m 
com.google.inject.internal.ProvisionListenerStackCallback.provision 
([1mProvisionListenerStackCallback.java:66[m)
    [1mat[m com.google.inject.internal.ProviderInternalFactory.circularGet 
([1mProviderInternalFactory.java:62[m)
    [1mat[m 
com.google.inject.internal.InternalFactoryToInitializableAdapter.get 
([1mInternalFactoryToInitializableAdapter.java:47[m)
    [1mat[m com.google.inject.internal.InjectorImpl$1.get 
([1mInjectorImpl.java:1101[m)
    [1mat[m org.eclipse.sisu.inject.Guice4$2.get ([1mGuice4.java:235[m)
    [1mat[m org.eclipse.sisu.inject.LazyBeanEntry.getValue 
([1mLazyBeanEntry.java:83[m)
    [1mat[m org.eclipse.sisu.plexus.LazyPlexusBean.getValue 
([1mLazyPlexusBean.java:53[m)
    [1mat[m org.codehaus.plexus.DefaultPlexusContainer.lookup 
([1mDefaultPlexusContainer.java:267[m)
    [1mat[m org.codehaus.plexus.DefaultPlexusContainer.lookup 
([1mDefaultPlexusContainer.java:259[m)
    [1mat[m 
org.apache.maven.plugin.internal.DefaultMavenPluginManager.getConfiguredMojo 
([1mDefaultMavenPluginManager.java:503[m)
    [1mat[m com.gradle.maven.cache.extension.g.b.getConfiguredMojo 
([1mSourceFile:58[m)
    [1mat[m com.gradle.maven.scan.extension.internal.e.b.executeMojo 
([1mSourceFile:104[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 
([1mMojoExecutor.java:328[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.doExecute 
([1mMojoExecutor.java:316[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:212[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:174[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.access$000 
([1mMojoExecutor.java:75[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor$1.run 
([1mMojoExecutor.java:162[m)
    [1mat[m org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute 
([1mDefaultMojosExecutionStrategy.java:39[m)
    [1mat[m org.apache.maven.lifecycle.internal.MojoExecutor.execute 
([1mMojoExecutor.java:159[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
([1mLifecycleModuleBuilder.java:105[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject 
([1mLifecycleModuleBuilder.java:73[m)
    [1mat[m 
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
 ([1mSingleThreadedBuilder.java:53[m)
    [1mat[m org.apache.maven.lifecycle.internal.LifecycleStarter.execute 
([1mLifecycleStarter.java:118[m)
    [1mat[m org.apache.maven.DefaultMaven.doExecute 
([1mDefaultMaven.java:261[m)
    [1mat[m org.apache.maven.DefaultMaven.doExecute 
([1mDefaultMaven.java:173[m)
    [1mat[m org.apache.maven.DefaultMaven.execute 
([1mDefaultMaven.java:101[m)
    [1mat[m org.apache.maven.cli.MavenCli.execute ([1mMavenCli.java:919[m)
    [1mat[m org.apache.maven.cli.MavenCli.doMain ([1mMavenCli.java:285[m)
    [1mat[m org.apache.maven.cli.MavenCli.main ([1mMavenCli.java:207[m)
    [1mat[m jdk.internal.reflect.DirectMethodHandleAccessor.invoke 
([1mDirectMethodHandleAccessor.java:103[m)
    [1mat[m java.lang.reflect.Method.invoke ([1mMethod.java:580[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced 
([1mLauncher.java:255[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.launch 
([1mLauncher.java:201[m)
    [1mat[m 
org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode 
([1mLauncher.java:361[m)
    [1mat[m org.codehaus.plexus.classworlds.launcher.Launcher.main 
([1mLauncher.java:314[m)
{noformat}


was (Author: apupier):
https://github.com/apache/maven-artifact-transfer has been archived since 2025

"Users are encouraged to switch to [Maven 
Resolver|https://maven.apache.org/resolver/] or the new Maven 4.x API."

> Analyze invalid scm url in sbom
> -------------------------------
>
>                 Key: CAMEL-23604
>                 URL: https://issues.apache.org/jira/browse/CAMEL-23604
>             Project: Camel
>          Issue Type: Task
>            Reporter: Aurélien Pupier
>            Priority: Major
>         Attachments: check_vcs_urls.py, notworking-or-archived.txt
>
>
> while investigating on dependencies and trying to search for 
> invalid/outdated/archived dependencies, I created a script to check all scms 
> mentioned in the sbom file.
> There are 104 giving 404
> 4 repos which are archived
> a lot which are using http instead of https
> I think it would be nice to go through the list.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

[jira] [Comment Edited] (CAMEL-23604) Analyze invalid scm url in sbom

Reply via email to