[
https://issues.apache.org/jira/browse/MGPG-111?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17827428#comment-17827428
]
Tamas Cservenak commented on MGPG-111:
--------------------------------------
This is the best I can (and feel right):
{noformat}
[INFO] --- dependency:3.6.1:analyze (default-cli) @ maven-gpg-plugin ---
[WARNING] Used undeclared dependencies found:
[WARNING] com.kohlschutter.junixsocket:junixsocket-common:jar:2.9.0:compile
[WARNING] Unused declared dependencies found:
[WARNING] com.kohlschutter.junixsocket:junixsocket-core:pom:2.9.0:compile
[WARNING] org.codehaus.plexus:plexus-cipher:jar:2.0:compile {noformat}
As explained: junixsocket tells you to use the POM dependency (the brings in
one java and one native), the analyze sense one java that is "undeclared but
used" (is used), and completely misses the native one, while tells that POM is
unused.
Also commented that plexus-sec-dispatcher and plexus-cipher simply "must go
both" (together).
> Clean upn dependency declarations
> ---------------------------------
>
> Key: MGPG-111
> URL: https://issues.apache.org/jira/browse/MGPG-111
> Project: Maven GPG Plugin
> Issue Type: Dependency upgrade
> Reporter: Elliotte Rusty Harold
> Assignee: Tamas Cservenak
> Priority: Minor
> Fix For: 3.2.1
>
>
> [WARNING] Used undeclared dependencies found:
> [WARNING] org.apache.maven:maven-artifact:jar:3.9.6:provided
> [WARNING] org.apache.maven:maven-settings:jar:3.9.6:provided
> [WARNING] com.kohlschutter.junixsocket:junixsocket-common:jar:2.9.0:compile
> [WARNING] org.apache.maven.resolver:maven-resolver-impl:jar:1.9.18:provided
> [WARNING] Unused declared dependencies found:
> [WARNING] com.kohlschutter.junixsocket:junixsocket-core:pom:2.9.0:compile
> [WARNING] org.codehaus.plexus:plexus-cipher:jar:2.0:compile
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
