Jason van Zyl created MNG-5818:
----------------------------------
Summary: Disallow plugins from programmatically adding
dependencies to projects
Key: MNG-5818
URL: https://issues.apache.org/jira/browse/MNG-5818
Project: Maven
Issue Type: Task
Reporter: Jason van Zyl
Assignee: Jason van Zyl
MavenProject.setDependencyArtifacts(deps) is publicly available to plugins that
can alter the classpath non-declaratively. For compatibility reasons in
MNG-4363 we restored this capability for the cobertura-maven-plugin but it
needs to be removed. It causes some nasty logic in the core, but it being
non-delclarative and magical is the real problem.
We need to deprecate MavenProject.setDependencyArtifacts(deps), and replace the
logic for constructing the artifacts in a better. Preferably passing in the
artifacts in the constructor of MavenProject.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
