ebarboni commented on PR #4795:
URL: https://github.com/apache/netbeans/pull/4795#issuecomment-1516665623
Well late to the comment but this is not clear.
Is this the dependency on a possible vanishing fork the point ?
Because we may have a "mojohaus"-like organization, with our own fork of
nb-javac, frgaal we could put on mavencentral with a groupId we own (i.e.
blabla.org) . This could solve the vanish as we could have several individual
able to release. Karma beeing granted by existing members with release rules
that can be decided.
That grants us, the ability to release anytime upstream lib, not only when
individual wants. Risk of vanishing could be 0.
Have to make clear that vanishing is not for version 20.0.0 because it's
sealed in maven central. Vanishing is what will happens tomorrow if NetBeans
needs constructs of JDK 40 and frgaal people give up releasing, we will need to
make a move to openjdk 40 with all the debt from JDK8 to JDK40.
Pessimistic at the time od JDK40 they will be a CVE in 20.0.0 frgaal that
will prevent his usage.
In a world we have dependencies at our hands, would it be still an issue ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
