Carsten Pfeiffer created MPIR-473:
-------------------------------------
Summary: Do not leak rquests to outside repositories
Key: MPIR-473
URL: https://issues.apache.org/jira/browse/MPIR-473
Project: Maven Project Info Reports Plugin
Issue Type: Improvement
Reporter: Carsten Pfeiffer
When using a custom settings.xml or repositories configured in the pom, we
should make sure to honor this and only ever contact these repositories for
dependencies.
See this output where certain repositories even those found in transitive
dependencies are contacted. Not only does this lead to lots of unneeded
requests, it also leaks groupIds and artifactIds to these servers.
{code}
11:57:20.026 [DEBUG] Failure to find
com.example:myartifact:1.19.0-SNAPSHOT/maven-metadata.xml in
https://maven.java.net/content/repositories/snapshots was cached in the local
repository, resolution will not be reattempted until the update interval of
jvnet-nexus-snapshots has elapsed or updates are forced
11:57:20.028 [DEBUG] Failure to find
com.example:myartifact:1.19.0-SNAPSHOT/maven-metadata.xml in
https://repository.jboss.org/nexus/content/repositories/public/ was cached in
the local repository, resolution will not be reattempted until the update
interval of JBOSS has elapsed or updates are forced
11:57:20.031 [DEBUG] Failure to find
com.example:myartifact:1.19.0-SNAPSHOT/maven-metadata.xml in
https://oss.sonatype.org/content/repositories/snapshots was cached in the local
repository, resolution will not be reattempted until the update interval of
sonatype-nexus-snapshots has elapsed or updates are forced
11:57:20.033 [DEBUG] Failure to find
com.example:myartifact:1.19.0-SNAPSHOT/maven-metadata.xml in
https://oss.sonatype.org/content/repositories/snapshots was cached in the local
repository, resolution will not be reattempted until the update interval of
snapshots-repo has elapsed or updates are forced
11:57:20.036 [DEBUG] Failure to find
com.example:myartifact:1.19.0-SNAPSHOT/maven-metadata.xml in
https://oss.sonatype.org/content/repositories/releases was cached in the local
repository, resolution will not be reattempted until the update interval of
sonatype-releases has elapsed or updates are forced
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
