Aman-Mittal commented on code in PR #5736:
URL: https://github.com/apache/fineract/pull/5736#discussion_r3035793829


##########
build.gradle:
##########
@@ -128,7 +128,7 @@ plugins {
     id 'com.github.andygoossens.modernizer' version '1.10.0' apply false
     id 'com.github.spotbugs' version '6.0.26' apply false
     id 'se.thinkcode.cucumber-runner' version '0.0.11' apply false
-    id "com.github.davidmc24.gradle.plugin.avro-base" version "1.9.1" apply 
false
+    id "eu.eventloopsoftware.avro-gradle-plugin" version "0.1.2" apply false

Review Comment:
   I think we better hold this one and this plugin is maintained by a single 
developer. Which is a huge supply chain risk.
   As stated by maintainer in ticket 
https://issues.apache.org/jira/browse/AVRO-4223 
   
   A planned release is discussed here under the name of org.apache.avro
   
   If that gets release. I think we should wait for it and use that instead
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to