Since Spring, Hibernate and Apache all use JIRA for bug tracking, you can use the JIRA RSS feature to monitor the projects for new bugs and reported bug fixes. You can subscribe to them via any RSS reader. Client-side RSS readers like RSSOwl have saved searches, which would allow you to do full-text searching. You can also use something like Google Reader if you want a web-based approach. If you use Google Reader, you can create an RSS bundle out of all of your RSS feeds, and share it with anyone else who needs to monitor those issues.
To get started, go to the bug tracker for the project that you're interested in, search for issues. Once you have a set of results that look promising, select the RSS (Issues) or RSS(Comments) from the Views menu on the right-hand side of the screen just above the search results. The RSS (Issues) will give you a brief version of the issues. The RSS (Comments) includes the issues and any comments that have been entered for the issue. If you need something more web-based (and running inside your firewall), then you should be able to put something together using ROME. There's a ROME subproject called Aqueduct that you can use to persist RSS feeds. Or, if you feel so inclined, you could roll your own solution in Grails in a couple of days using the ROME library, the Searchable plugin (for full-text searching), and the Quartz plugin (for periodic automated updating of the RSS feeds). Hope this helps, Mark On Mon, Jul 26, 2010 at 6:43 AM, [email protected] < [email protected]> wrote: > Hey everyone, > > I have been presented with a problem that I cannot imagine is unique - > and I hope that someone out there can point me in the right > direction! > > I am responsible for an application deployed in a JBoss environment > where we use a number of 3rd party libraries - obviously the JBoss > stuff, plus Spring, Hibernate, Castor, commons-*, and a couple of > dozen other jars. > > At one of our customers their IS team has turned around and presented > us with a security schedule, mapping types of vulnerability to various > categories. They are fairly...aggressive...in their expectations in > updating components that have problems. > > I would like to be able to stay (at least) one step ahead of them and > actively monitor for announcements of problems and fixes. Is anyone > aware of any tools/services out there that would let us say which tool/ > library we are interested in and get regular notifications of > problems? > > Like I say - I can't imagine this is unique. In a bigger organisation > I'm sure we'd have our own team to do this monitoring, but we are a > relatively small company and given the number of libraries out there > we make use of (often transitively, making things more complex) this > would soak up a vast amount of resources. > > Thanks... > > Camden > > -- > You received this message because you are subscribed to the Google Groups > "The Java Posse" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<javaposse%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/javaposse?hl=en. > > -- You received this message because you are subscribed to the Google Groups "The Java Posse" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/javaposse?hl=en.
