About pom dependencies

[Ian Young]

On 27 Sep 2013, at 17:45, Rod Widdowson <rdw at steadingsoftware.com> wrote:

> Running dependency on idp-core throws up the need to depend on
> 'logback-core'.

I'd actually have expected that to have been taken care of by the IdP's parent POM already, as pretty much every module has code that directly references the logging API.

On the other hand, the whole logging business is the worst possible case for dependency management, as there have been umpteen packages each attempting to emulate the other and the POMs end up excluding dependencies from some packages so they can be replaced by a different implementation from another package.

> My question is whether we should fix this by adding a logback-core and its
> version into our master pom?

I'm with Tom on this; suck it and see.  Once you have removed the shrapnel from your face, write it up.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20130927/ae8a005a/attachment.bin