Elliotte Rusty Harold created MDEP-964:
------------------------------------------
Summary: Allowlist org.glassfish:javax.json
Key: MDEP-964
URL: https://issues.apache.org/jira/browse/MDEP-964
Project: Maven Dependency Plugin
Issue Type: Improvement
Reporter: Elliotte Rusty Harold
found this one in our own code:
- <dependency>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.json</artifactId>
- <version>1.1.4</version>
- <scope>test</scope>
- </dependency>
It's typically loaded by reflection so not found by the analyzer. Might want to
list it as used iff javax.json-api is used
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
