Hi Team,
By running mvn versions:display-dependency-updates as well as checking
each of the dependencies in JSPWiki, I've come up with a list of
potential obsolete or outdated dependencies in JSPWiki. This is just
food for thought, if anybody would like to work on any of these, that
would be great, we can also type in JIRA tickets for each of these that
seem to be a good idea.
Just basic updates (some testing probably needed):
--------------------------------------------------------------------
commons-io 1.4 to 2.4
hsqldb 2.2.9 to 2.3.0 - JUnit tests fail with this update (apparently
not backwards compatible), some tweaking of the codebase needed.
lucene 3.6 to 4.3.1
jetty 7.6.7 to 9.0.4 (used during testing only, possibly good to replace
with embedded Tomcat)
Switching to new projects:
------------------------------------
Sandler: used for Atom messages
(http://sourceforge.net/projects/sandler/ -- but website linked to from
there is dead). Last updated 2004. Switch to Apache Abdera?
opensymphony:oscache 2.3 to 2.4.1 -- Opensymphony website is dead,
replace with ehcache (http://ehcache.org/)? Seemingly quite popular,
Apache Roller uses it...
xmlrpc:xmlrpc 2.0.1 to 3.0a1 -- AFAICT XML-RPC is dead today. Mailing
list last used almost 3 years ago:
http://mail-archives.apache.org/mod_mbox/ws-xmlrpc-dev/; replace with
Apache CXF for SOAP and REST?
json-rpc: now called jabsorb (http://code.google.com/p/jabsorb/), hasn't
been updated in about 3 years. Likewise no longer needed? Just use CXF
REST w/JSON perhaps.
Stripes framework: team still wish to use this? Project certainly looks
good (http://www.stripesframework.org/display/stripes/Home), although I
prefer open source projects that accept new committers (Stripes may be
like that, but I don't see any advertisements on their web page
indicating as such) so we're not dependent on a few volunteers.
Jakarta Oro (http://jakarta.apache.org/oro/index.html) in the Apache
Attic, replace with Java or commons-* products?
Jakarta ecs:ecs A markup language, also in the Attic since 2010:
(http://jakarta.apache.org/ecs/), unsure what to replace it with.
org.jvnet.hudson:org.suigeneris.jrcs.diff - now at
http://code.google.com/p/jrcs/, last updated 3 years 3 months ago, from
the website: "JRCS is a library that knows how to manipulate the
archive files produced by the RCS and CVS version control systems."
IIRC Harry deprecated RCS a few months back, we may not need this
library at all anymore. That it links to CVS (not Subversion or
Git/GitHub) further indicates its age.
akismet-java: used for combating spam. Hasn't been updated in 2 years
but probably still OK (https://github.com/czarneckid/akismet-java)
freshcookies security -- Done by Andrew Jaquith of our team
(http://mvnrepository.com/artifact/org.freshcookies/freshcookies-security/0.60),
but the website for it is dead: http://www.freshcookies.org/ -- I don't
know when it was last updated, and haven't researched yet what this
library does. Switch to Apache Shiro?
Cheers,
Glen
