slachiewicz opened a new issue, #323: URL: https://github.com/apache/maven-remote-resources-plugin/issues/323
A supplement that declares `<licenses>` replaces every license the dependency's own POM declares; one without `<licenses>` keeps them. [`ModelInheritanceAssembler.java`](https://github.com/apache/maven-remote-resources-plugin/blob/master/src/main/java/org/apache/maven/plugin/resources/remote/ModelInheritanceAssembler.java#L226) treats the supplement as the child and inherits the POM's licenses only when the list is empty. Other list fields (developers, contributors, mailing lists) behave the same way. The [supplemental models page](https://maven.apache.org/plugins/maven-remote-resources-plugin/supplemental-models.html) does not say so. A user who adds a supplement to append a second license silently drops the first, and the generated LICENSE or DEPENDENCIES file shows only the supplement's. The page should state the replace rule and show a supplement that corrects a POM's license, for example one that names the SPDX ID (`<name>MIT</name>`) for an artifact whose POM links only to its own license page. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
