OpenSAML 2.6+ missing xml-api dependency in pom.

Cantor, Scott cantor.2 at osu.edu
Tue Feb 25 16:50:15 EST 2014


On 2/25/14, 4:40 PM, "Randall,Matt" <MRANDALL at CERNER.COM> wrote:

>My apologies, this appears to be the result of utilizing Maven's repo
>(the standard for development at my organization), although this does
>bring into question why the Maven repo has a different artifact than what
>the official repo provides.

We have no involvement in whatever was put in Central, and that should
tell you everything you need to know about Central and why we don't use or
support it. Pulling software from a repository that doesn't authenticate
its artifacts is like playing Russian Roulette with 5 bullets.

Anyway, I can't be 100% sure nothing changed, but the only reference I
found to xml-apis in the POMs on our server was in the parent POM, and it
was "runtime" in both versions.

-- Scott




More information about the dev mailing list