yeah I know, so do we ;), right now grep is all I got On Tue, Dec 15, 2009 at 10:09 AM, <stanl...@gmail.com> wrote: > Thanks brother. Actually it's not our projects we analyze; it's the open > source projects. We *do not* simply download/dump the OS project and begin > to use it. We factor each project into as many constituent OS projects as > it made from and then recursively walk down the tree doing this at each > node. It is a big PITA! > > On Tue, Dec 15, 2009 at 12:03 PM, Musachy Barroso <musa...@gmail.com> wrote: > >> mvn dependency:tree will give you all the dependencies nicely. I also >> have to help with this task in my company, and we haven't found any >> decent tool that does what you described. If all your projects use >> maven, then there is probably a plugin for that, but that's not the >> case for us. >> >> On Tue, Dec 15, 2009 at 9:58 AM, <stanl...@gmail.com> wrote: >> > Thanks Wes -- >> > >> > Have you or others discovered any software that could be used to >> "decompose" >> > an open source product into its constituent parts and then further >> decompose >> > each of those in turn. Looking at a single POM rarely answers the "real" >> > questions. The dependency/version graph is wicked to deal with by hand >> and >> > the licenses therein complicate matters even further. I struggle when >> > thinking how many shops are each doing this over-and-over with each new >> > version release and it seems like a missing piece of the FOSS/legal >> puzzle. >> > >> > Peace, >> > Scott >> > >> > >> > On Mon, Dec 14, 2009 at 10:44 AM, Wes Wannemacher <w...@wantii.com> >> wrote: >> > >> >> Scott, take a look at the mailreader and blank apps. You can also read >> >> through the struts2-core pom (annotated and easier to read here - >> >> >> >> >> http://jarvana.com/jarvana/inspect-pom/org/apache/struts/struts2-core/2.1.8/struts2-core-2.1.8.pom >> >> , >> >> that points to 2.1.8, they haven't indexed 2.1.8.1 yet, but there is >> >> no differences in dependencies). >> >> >> >> If you just want to cut to the chase, the "essentials" would be - >> >> >> >> struts2-core 2.1.8.1 >> >> xwork-core 2.1.6 >> >> freemarker 2.3.15 >> >> ognl 2.7.3 >> >> >> >> -Wes >> >> >> >> On Mon, Dec 14, 2009 at 10:36 AM, stanlick <stanl...@gmail.com> wrote: >> >> > >> >> > Greetings and Happy Holidays -- >> >> > >> >> > I am sitting down to unwind the Essential Dependencies Only jar >> >> > (struts-2.1.8.1-lib.zip) in preparation for the litany of questions >> the >> >> > lawyers are going to ask before accepting the Struts 2.1.8.1 upgrade >> in >> >> > house. Now either I have a different understanding of the word >> >> essential, >> >> > or this version of our new Struts has really spread her arms. There >> are >> >> > seventy-one jars in the lib folder of the *essential dependencies only >> >> jar* >> >> > and a quick glance suggests they are *not* all essential. So does >> >> essential >> >> > != core or required? Is there a resource where an analysis can be >> made >> >> to >> >> > determine compile, testing, run-time dependencies? Untangling this >> ball >> >> of >> >> > yarn by hand is going to burn up hours and lead an analyst down many >> >> rabbit >> >> > holes. Is there a POM that could save the man hours? >> >> > >> >> > Peace, >> >> > Scott >> >> > -- >> >> > View this message in context: >> >> >> http://old.nabble.com/Essential-Dependencies-Only-tp26779724p26779724.html >> >> > Sent from the Struts - User mailing list archive at Nabble.com. >> >> > >> >> > >> >> > --------------------------------------------------------------------- >> >> > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org >> >> > For additional commands, e-mail: user-h...@struts.apache.org >> >> > >> >> > >> >> >> >> >> >> >> >> -- >> >> Wes Wannemacher >> >> >> >> Head Engineer, WanTii, Inc. >> >> Need Training? Struts, Spring, Maven, Tomcat... >> >> Ask me for a quote! >> >> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org >> >> For additional commands, e-mail: user-h...@struts.apache.org >> >> >> >> >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org >> For additional commands, e-mail: user-h...@struts.apache.org >> >> >
--------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org