[ https://issues.apache.org/jira/browse/RYA-199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15575981#comment-15575981 ]
Aaron Mihalik commented on RYA-199: ----------------------------------- I cannot find a repo for this artifact: com.github.stephenc.findbugs:findbugs-annotations:3.0.1-1 stephenc lists the Repositories here [1] but I can't find the latest release in those mentioned repos (i.e. here [2] or here [3]) I don't think we'll have this resolved for RC2, but I'm hoping that's okay because other projects depend on findbugs:jsr305 (i.e. hadoop and fluo). --Aaron [1] http://stephenc.github.io/findbugs-annotations/distribution-management.html [2] https://oss.sonatype.org/content/repositories/releases/com/github/stephenc/findbugs/findbugs-annotations/ [3] https://repo.maven.apache.org/maven2/com/github/stephenc/findbugs/findbugs-annotations/ > Remove HEP Dependency > --------------------- > > Key: RYA-199 > URL: https://issues.apache.org/jira/browse/RYA-199 > Project: Rya > Issue Type: Task > Reporter: Aaron Mihalik > Assignee: Aaron Mihalik > Priority: Blocker > > As noted by Josh during a review: > {quote} > I took a glance at another JAR that a `mvn package` creates this time: > extras/indexing/target/rya.indexing-3.2.10-SNAPSHOT-accumulo-server.jar > In here, I found: hep/aida/bin/AbstractBin.class > Per https://dst.lbl.gov/ACSSoftware/colt/license.html, code in the > hep/aida package are licensed as LGPL. > It's really important to understand *all* of the dependencies that > you're using when you're creating these massive shaded jars... > ./extras/rya.merger/target/rya.merger-3.2.10-SNAPSHOT-shaded.jar also > has the same issue. It appears like it is coming in via tinkerpop-blueprints > [INFO] +- org.apache.rya:rya.sail:jar:3.2.10-SNAPSHOT:compile > [INFO] | +- com.tinkerpop.blueprints:blueprints-core:jar:2.5.0:compile > [INFO] | | \- colt:colt:jar:1.2.0:compile > [INFO] | | \- concurrent:concurrent:jar:1.3.4:compile > {quote} -- This message was sent by Atlassian JIRA (v6.3.4#6332)