[ 
https://issues.apache.org/jira/browse/OFBIZ-10700?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16782648#comment-16782648
 ] 

Jacques Le Roux commented on OFBIZ-10700:
-----------------------------------------

BTW I just had a look and the report (in build\reports) is barely usable, for 
instance reports about
 * apache:xml-rpc:3.1.3 was fixed in OFBiz (it's 
[CVE-2011-3600|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3600] 
which is unclear because Archiva and the ASF at large did not report text to 
the CVE, cf *[CVE-2016-5002|https://nvd.nist.gov/vuln/detail/CVE-2016-5002]*)

 * groovy-2.4.15.jar not a problem we use groovy-2.4.16.jar

 * tomcat-catalina-9.0.13.jar, makes no sense, no problem there.


I did not dig further, but I believe unfortunately unlike before this report is 
useless and time wasting.

 

> Use the Gradle Plugin DSL
> -------------------------
>
>                 Key: OFBIZ-10700
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10700
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Mathieu Lirzin
>            Assignee: Mathieu Lirzin
>            Priority: Minor
>             Fix For: Upcoming Branch
>
>         Attachments: OFBIZ-10700_Improved-Use-the-Gradle-Plugin-DSL.patch
>
>
> Since Gradle 2.1 it is recommended to use the {{plugins {}}} block for
> binary plugins instead of the “traditional” {{apply()}} method.  See 
> [here|https://docs.gradle.org/current/userguide/plugins.html] for more 
> details.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to