[
https://issues.apache.org/jira/browse/MNG-6602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16776340#comment-16776340
]
Yuri commented on MNG-6602:
---------------------------
> I too, maintain some Java-related ports, my general advice is unless you need
> native code, grab the prebuild tarball, extract to what the porter's handbook
> says and there you go.
This advice is good for ease of use, but is very bad for security. Installing
any prebuilt software on your system implies that you trust the vendor that has
built this software, or hosting company that hosts it. Building from source is
much more transparent. Particularly, SourceForge had been caught in the past
bundling adware and malware with binaries that they host.
On FreeBSD most ports build from source for this reason.
> Error reading assemblies: No assembly descriptors found
> -------------------------------------------------------
>
> Key: MNG-6602
> URL: https://issues.apache.org/jira/browse/MNG-6602
> Project: Maven
> Issue Type: Bug
> Reporter: Yuri
> Assignee: Michael Osipov
> Priority: Major
> Fix For: wontfix-candidate
>
>
> While trying to build this project [https://sourceforge.net/p/tuxguitar/] on
> FreeBSD, maven fails:
> ```
> [INFO]
> ------------------------------------------------------------------------
> [INFO] BUILD FAILURE
> [INFO]
> ------------------------------------------------------------------------
> [INFO] Total time: 10.235 s
> [INFO] Finished at: 2019-02-23T08:54:38-08:00
> [INFO]
> ------------------------------------------------------------------------
> [ERROR] Failed to execute goal
> org.apache.maven.plugins:maven-assembly-plugin:2.2-beta-5:assembly
> (default-cli) on project tuxguitar-pom: Error reading assemblies: No assembly
> descriptors found. -> [Help 1]
> [ERROR]
> [ERROR] To see the full stack trace of the errors, re-run Maven with the -e
> switch.
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
> [ERROR]
> [ERROR] For more information about the errors and possible solutions, please
> read the following articles:
> [ERROR] [Help 1]
> http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
> ```
>
> The TuxGuitar bug report: https://sourceforge.net/p/tuxguitar/bugs/106/
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
