[
https://issues.apache.org/jira/browse/MDEP-761?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17414768#comment-17414768
]
Jan commented on MDEP-761:
--------------------------
Hi, yes. Here it is:
https://github.com/jwedel/maven-dependency-reproducer/tree/main
See README.md for details. I used the latest 3.2.1-SNAPSHOT to reproduce. The
plugin did not terminate after 15minutes.
The output looks like this:
{code}
$ mvn org.apache.maven.plugins:maven-dependency-plugin:3.2.1-SNAPSHOT:tree
-Dverbose
[INFO] Scanning for projects...
[INFO]
[INFO] --------------< com.example:maven-dependency-reproducer >---------------
[INFO] Building Test Project to reproduce a bug in the Maven Dependecy plugin
1.0.0-SNAPSHOT
[INFO] --------------------------------[ pom ]---------------------------------
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/jul-to-slf4j/1.7.32/jul-to-slf4j-1.7.32.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/jul-to-slf4j/1.7.32/jul-to-slf4j-1.7.32.pom (990
B at 746 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-starter-actuator/2.5.4/spring-boot-starter-actuator-2.5.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-starter-actuator/2.5.4/spring-boot-starter-actuator-2.5.4.pom
(2.6 kB at 5.4 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-actuator-autoconfigure/2.5.4/spring-boot-actuator-autoconfigure-2.5.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-actuator-autoconfigure/2.5.4/spring-boot-actuator-autoconfigure-2.5.4.pom
(2.9 kB at 9.5 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-actuator/2.5.4/spring-boot-actuator-2.5.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/springframework/boot/spring-boot-actuator/2.5.4/spring-boot-actuator-2.5.4.pom
(2.1 kB at 7.0 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-databind/2.12.4/jackson-databind-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-databind/2.12.4/jackson-databind-2.12.4.pom
(15 kB at 41 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/jackson-base/2.12.4/jackson-base-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/jackson-base/2.12.4/jackson-base-2.12.4.pom
(9.3 kB at 16 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/jackson-bom/2.12.4/jackson-bom-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/jackson-bom/2.12.4/jackson-bom-2.12.4.pom
(17 kB at 65 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-annotations/2.12.4/jackson-annotations-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-annotations/2.12.4/jackson-annotations-2.12.4.pom
(5.9 kB at 18 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-core/2.12.4/jackson-core-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/core/jackson-core/2.12.4/jackson-core-2.12.4.pom
(5.4 kB at 17 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.12.4/jackson-datatype-jsr310-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.12.4/jackson-datatype-jsr310-2.12.4.pom
(4.9 kB at 14 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/module/jackson-modules-java8/2.12.4/jackson-modules-java8-2.12.4.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/fasterxml/jackson/module/jackson-modules-java8/2.12.4/jackson-modules-java8-2.12.4.pom
(3.2 kB at 6.6 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/springframework/spring-web/5.3.9/spring-web-5.3.9.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/springframework/spring-web/5.3.9/spring-web-5.3.9.pom
(2.2 kB at 6.8 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/slf4j-api/2.0.0-alpha1/slf4j-api-2.0.0-alpha1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/slf4j-api/2.0.0-alpha1/slf4j-api-2.0.0-alpha1.pom
(1.7 kB at 2.3 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/slf4j-parent/2.0.0-alpha1/slf4j-parent-2.0.0-alpha1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/slf4j/slf4j-parent/2.0.0-alpha1/slf4j-parent-2.0.0-alpha1.pom
(16 kB at 46 kB/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/jboss/logging/jboss-logging/3.3.2.Final/jboss-logging-3.3.2.Final.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/jboss/logging/jboss-logging/3.3.2.Final/jboss-logging-3.3.2.Final.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/jaxb-runtime/2.3.1/jaxb-runtime-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/jaxb-runtime/2.3.1/jaxb-runtime-2.3.1.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-runtime-parent/2.3.1/jaxb-runtime-parent-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-runtime-parent/2.3.1/jaxb-runtime-parent-2.3.1.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-parent/2.3.1/jaxb-parent-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-parent/2.3.1/jaxb-parent-2.3.1.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/jaxb-bom-ext/2.3.1/jaxb-bom-ext-2.3.1.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/jaxb-bom/2.3.1/jaxb-bom-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/jaxb-bom/2.3.1/jaxb-bom-2.3.1.pom (0 B
at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/txw2/2.3.1/txw2-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/glassfish/jaxb/txw2/2.3.1/txw2-2.3.1.pom (0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-txw-parent/2.3.1/jaxb-txw-parent-2.3.1.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/bind/mvn/jaxb-txw-parent/2.3.1/jaxb-txw-parent-2.3.1.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/istack/istack-commons-runtime/3.0.7/istack-commons-runtime-3.0.7.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/istack/istack-commons/3.0.7/istack-commons-3.0.7.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/istack/istack-commons/3.0.7/istack-commons-3.0.7.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/org/jvnet/staxex/stax-ex/1.8/stax-ex-1.8.pom (0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/fastinfoset/FastInfoset/1.2.15/FastInfoset-1.2.15.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/fastinfoset/fastinfoset-project/1.2.15/fastinfoset-project-1.2.15.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/sun/xml/fastinfoset/fastinfoset-project/1.2.15/fastinfoset-project-1.2.15.pom
(0 B at 0 B/s)
Downloading from devcloud-bci-mvn:
https://my-repo.com/com/rabbitmq/amqp-client/5.9.0/amqp-client-5.9.0.pom
Downloaded from devcloud-bci-mvn:
https://my-repo.com/com/rabbitmq/amqp-client/5.9.0/amqp-client-5.9.0.pom (36 kB
at 94 kB/s)
[INFO]
[INFO] --- maven-dependency-plugin:3.2.1-SNAPSHOT:tree (default-cli) @
maven-dependency-reproducer ---
{code}
At this point, it hangs.
> Tree plugin does not terminate with 3.2.0
> -----------------------------------------
>
> Key: MDEP-761
> URL: https://issues.apache.org/jira/browse/MDEP-761
> Project: Maven Dependency Plugin
> Issue Type: Bug
> Components: tree
> Affects Versions: 3.2.0
> Environment: Windows 10
> Reporter: Jan
> Priority: Major
>
> We use a tool called WhiteSource that analyzes our dependencies for security
> issues. It uses the the following call to maven deps plugin to get the
> dependencies:
> {code}mvn dependency:tree -DoutputFile=whitesource_mvn_dependency_tree.txt
> -Dverbose -DoutputType=text -T1 -B {code}
> This works and takes ~15seconds with version 3.1.2, after upgrading to 3.2.0,
> this call does not terminate after 15 minutes and runs into a timeout.
> When starting maven with "-X" I can see thousands of those debug messages
> flowing through, it looks like it is scanning the whole local maven
> repository:
> {code}
> [DEBUG] Writing tracking file
> C:\Users\myuser\.m2\repository\org\jboss\spec\jboss-specs-parent\1.0.0.Beta2\_remote.repositories
> [DEBUG] Using transporter WagonTransporter with priority -1.0 for
> https://my-repo
> [DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for
> https://my-repo with username=myuser, password=*** via localhost:8888
> [DEBUG] Writing tracking file
> C:\Users\myuser\.m2\repository\org\jboss\spec\javax\interceptor\jboss-interceptors-api_1.1_spec\1.0.0.Beta1\_remote.repositories
> [DEBUG] Using transporter WagonTransporter with priority -1.0 for
> https://my-repo
> [DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for
> https://my-repo with username=myuser, password=*** via localhost:8888
> [DEBUG] Writing tracking file
> C:\Users\myuser\.m2\repository\org\jboss\spec\jboss-specs-parent\1.0.0.Beta1\_remote.repositories
> [DEBUG] Using transporter WagonTransporter with priority -1.0 for
> https://my-repo
> [DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for
> https://my-repo with username=myuser, password=*** via localhost:8888
> [DEBUG] Writing tracking file
> C:\Users\myuser\.m2\repository\org\testng\testng\5.10\_remote.repositories
> [DEBUG] Verifying availability of
> C:\Users\myuser\.m2\repository\org\apache\derby\derby\10.12.1.1\derby-10.12.1.1.pom
> from [devcloud-bci-mvn (https://my-repo, default, releases+snapshots),
> artifactory-central-mirror (https://my-repo, default, releases), central
> (https://repo.maven.apache.org/maven2, default, releases)]
> [DEBUG] Using transporter WagonTransporter with priority -1.0 for
> https://my-repo
> [DEBUG] Using connector BasicRepositoryConnector with priority 0.0 for
> https://my-repo with username=myuser, password=*** via localhost:8888
> [DEBUG] Writing tracking file
> C:\Users\myuser\.m2\repository\org\apache\derby\derby\10.12.1.1\_remote.repositories
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
