lprimak commented on issue #1015:
URL: https://github.com/apache/shiro/issues/1015#issuecomment-1644635538

   I thought about this a bit, and I am not sure how a BOM for non-jakarta 
(javax) artifacts would help.
   The only reason there *is* a BOM for Jakarta is that every Shiro artifact 
has to have exclusions and needs to be individually included by application 
developer. In that specific case, BOM is very helpful and eases dependency 
inclusion.
   
   However, for non-Jakarta (javax), all Shiro artifacts have their 
dependencies included already as transitive,
   so there is no need to include all of them, just the most high-level one you 
use.
   
   What do you think? Can you give a specific example (reproducer?) where a BOM 
would be actually useful?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to