yeah I know, so do we ;), right now grep is all I got

On Tue, Dec 15, 2009 at 10:09 AM,  <stanl...@gmail.com> wrote:
> Thanks brother.  Actually it's not our projects we analyze; it's the open
> source projects.  We *do not* simply download/dump the OS project and begin
> to use it.  We factor each project into as many constituent OS projects as
> it made from and then recursively walk down the tree doing this at each
> node.  It is a big PITA!
>
> On Tue, Dec 15, 2009 at 12:03 PM, Musachy Barroso <musa...@gmail.com> wrote:
>
>> mvn dependency:tree will give you all the dependencies nicely. I also
>> have to help with this task in my company, and we haven't found any
>> decent tool that does what you described. If all your projects use
>> maven, then there is probably a plugin for that, but that's not the
>> case for us.
>>
>> On Tue, Dec 15, 2009 at 9:58 AM,  <stanl...@gmail.com> wrote:
>> > Thanks Wes --
>> >
>> > Have you or others discovered any software that could be used to
>> "decompose"
>> > an open source product into its constituent parts and then further
>> decompose
>> > each of those in turn.  Looking at a single POM rarely answers the "real"
>> > questions.  The dependency/version graph is wicked to deal with by hand
>> and
>> > the licenses therein complicate matters even further.  I struggle when
>> > thinking how many shops are each doing this over-and-over with each new
>> > version release and it seems like a missing piece of the FOSS/legal
>> puzzle.
>> >
>> > Peace,
>> > Scott
>> >
>> >
>> > On Mon, Dec 14, 2009 at 10:44 AM, Wes Wannemacher <w...@wantii.com>
>> wrote:
>> >
>> >> Scott, take a look at the mailreader and blank apps. You can also read
>> >> through the struts2-core pom (annotated and easier to read here -
>> >>
>> >>
>> http://jarvana.com/jarvana/inspect-pom/org/apache/struts/struts2-core/2.1.8/struts2-core-2.1.8.pom
>> >> ,
>> >> that points to 2.1.8, they haven't indexed 2.1.8.1 yet, but there is
>> >> no differences in dependencies).
>> >>
>> >> If you just want to cut to the chase, the "essentials" would be -
>> >>
>> >> struts2-core 2.1.8.1
>> >> xwork-core 2.1.6
>> >> freemarker 2.3.15
>> >> ognl 2.7.3
>> >>
>> >> -Wes
>> >>
>> >> On Mon, Dec 14, 2009 at 10:36 AM, stanlick <stanl...@gmail.com> wrote:
>> >> >
>> >> > Greetings and Happy Holidays --
>> >> >
>> >> > I am sitting down to unwind the Essential Dependencies Only jar
>> >> > (struts-2.1.8.1-lib.zip) in preparation for the litany of questions
>> the
>> >> > lawyers are going to ask before accepting the Struts 2.1.8.1 upgrade
>> in
>> >> > house.  Now either I have a different understanding of the word
>> >> essential,
>> >> > or this version of our new Struts has really spread her arms.  There
>> are
>> >> > seventy-one jars in the lib folder of the *essential dependencies only
>> >> jar*
>> >> > and a quick glance suggests they are *not* all essential.  So does
>> >> essential
>> >> > != core or required?  Is there a resource where an analysis can be
>> made
>> >> to
>> >> > determine compile, testing, run-time dependencies?  Untangling this
>> ball
>> >> of
>> >> > yarn by hand is going to burn up hours and lead an analyst down many
>> >> rabbit
>> >> > holes.  Is there a POM that could save the man hours?
>> >> >
>> >> > Peace,
>> >> > Scott
>> >> > --
>> >> > View this message in context:
>> >>
>> http://old.nabble.com/Essential-Dependencies-Only-tp26779724p26779724.html
>> >> > Sent from the Struts - User mailing list archive at Nabble.com.
>> >> >
>> >> >
>> >> > ---------------------------------------------------------------------
>> >> > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> >> > For additional commands, e-mail: user-h...@struts.apache.org
>> >> >
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> Wes Wannemacher
>> >>
>> >> Head Engineer, WanTii, Inc.
>> >> Need Training? Struts, Spring, Maven, Tomcat...
>> >> Ask me for a quote!
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> >> For additional commands, e-mail: user-h...@struts.apache.org
>> >>
>> >>
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> For additional commands, e-mail: user-h...@struts.apache.org
>>
>>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Reply via email to