Skip to content

Analyzes your Java Maven Project dependencies for security issues and technical debts (CVE/EOL/+).

Notifications You must be signed in to change notification settings

based2/checker-maven-plugin

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

98 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Use now

Maven Security checker plugin for Java Maven dependencies

Analyzes your Java Maven Project dependencies for security issues and technical debts (CVE/EOL/+).

Sources

Notes: http://maven.apache.org/plugins/maven-project-info-reports-plugin/xref/index.html

https://github.com/skuro/plan-maven-plugin http://maven.40175.n5.nabble.com/ANN-Rate-my-Mojo-part-II-Launchify-td5696672.html http://mojo.codehaus.org/cassandra-maven-plugin/ http://code.google.com/p/pulloid/ java,pull,xml,parser,java,android,license_aslv2 http://maven.apache.org/plugins/localization.html http://www.displaytag.org http://www.jboss.org/shrinkwrap license_aslv2,jar http://sourceforge.net/projects/dnsjnio/ dns,java,nio,license_aslv2 https://docs.sonatype.org/display/Repository/Sonatype+OSS+Maven+Repository+Usage+Guide maven,upload,artifact,new,central,upload http://jira.codehaus.org/browse/MAVENUPLOAD

return getDirBySystemProperty( "JAVAFX_HOME" ); https://bitbucket.org/cedarsoft/org.jfxtras.maven-plugin/src/6db3cbe0665b/src/main/java/org/jfxtras/InstallSdkToLocalRepository.java http://blog.cedarsoft.com/2010/10/hierarchical-structures-with-java-enums/ enums,java,hierarchy,tree http://blog.cedarsoft.com/2010/08/unit-testing-time-zone-and-stuff/ testing,time,zone,java http://blog.cedarsoft.com/2010/11/setting-java-library-path-programmatically/#comments path,java,java.library.path http://www.cdnjs.com/ cdn,js https://github.com/lenniboy/jspc-maven-plugin maven,jsp,precompilation,java,plugin http://searls.github.com/jasmine-maven-plugin/ maven,java,testing,plugin https://github.com/lenniboy/debug-maven-plugin tree,maven,plugin,debug,dependency,conflict http://www.trackyourtests.com/ java,testing,maven,history,github http://www.thebuzzmedia.com/software/exiftool-enhanced-java-integration-for-exiftool/ java,exif,exiftool,photo,metadata http://jawr.java.net/features.html java,license_aslv2,maven,bundle,cdn,jawr

http://www.xebialabs.com/features deployit http://jduchess.org/duchess-france/blog/paris-jug-de-mai-build-share-deploy-jusquau-bout-de-la-nuit-5/ deployit,itil,cdn,maven,fr http://www.dbmaintain.org/overview.html maven,database,deployment,ant,version,sql,testing https://evolvis.org/plugins/mediawiki/wiki/kaliko/index.php/Main_Page scheduler,webservice,java

https://docs.sonatype.org/display/AETHER/Using+Aether+in+Maven+Plugins maven,aether,mojo,plugin http://www.eclipse.org/aether/ maven,aether,eclipse https://github.com/sonatype/mvnsh mvn,shell,maven http://stackoverflow.com/questions/6291146/arquillian-shrinkwrap-mavendependencyresolver-behind-proxy http://philippe.poumaroux.free.fr/public/thucydides/thucydides-fr.html java,testing,thucydides,tdd,maven,fr,manuel https://github.com/thucydides-webtests/thucydides java,testing,thucydides,tdd,maven,github http://maven.40175.n5.nabble.com/Converting-an-Artifact-Aether-to-MavenProject-td5609901.html http://git.eclipse.org/c/aether/aether-demo.git/tree/aether-demo-snippets/src/main/java/org/eclipse/aether/examples/ResolveTransitiveDependencies.java http://git.eclipse.org/c/aether/aether-demo.git/tree/aether-demo-snippets/src/main/java/org/eclipse/aether/examples/ResolveTransitiveDependencies.java http://stackoverflow.com/questions/5393873/epl-eclipse-public-license-gpl-gnu-public-license-lgpl-lesser-gpl-and-lic license,license_epl,license_gpl,discussion,epl,gpl http://www.fsf.org/blogs/licensing/using-the-gpl-for-eclipse-plug-ins license,license_epl,license_gpl,discussion,epl,gpl http://maven.apache.org/plugins/maven-shade-plugin/examples/resource-transformers.html maven,uberjar,jar,onejar https://github.com/eclipse/aether-demo/tree/master/aether-demo-snippets/src/main/java/org/eclipse/aether/examples http://objenesis.googlecode.com/svn/docs/index.html java,reflection,license_aslv2 https://dev.eclipse.org/mailman/listinfo/aether-users maven,aether,mailing list,archive http://www.rexsl.com/ xml,java,maven,xsl,rest,services,license_bsd,jaxb,jax-rs http://www.jcabi.com/ java,aether,maven http://www.jcabi.com/jcabi-log/decors.html java,logging,formatting,decors,license_bsd http://trac.fazend.com/rempl/ rempl,code,analysis,java http://superuser.com/questions/261440/whats-the-closest-equivalent-of-little-snitch-mac-program-on-windows privacy,personal active filter,little snitch

http://www.jarvana.com/jarvana/view/org/sonatype/aether/aether-spi/1.1/aether-spi-1.1-javadoc.jar!/overview-summary.html http://code.google.com/p/vosao/ cms,gae http://news.ycombinator.com/item?id=3988801 rabk,karma,reputation https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&product=Aether aether,bugtracker

testing java.io.IOException: Stream closed at java.io.BufferedInputStream.getInIfOpen(Unknown Source) at java.io.BufferedInputStream.fill(Unknown Source) at java.io.BufferedInputStream.read(Unknown Source) at org.codehaus.plexus.util.xml.XmlReader.getBOMEncoding(XmlReader.java:635) at org.codehaus.plexus.util.xml.XmlReader.doRawStream(XmlReader.java:459) at org.codehaus.plexus.util.xml.XmlReader.(XmlReader.java:180) at org.codehaus.plexus.util.xml.XmlReader.(XmlReader.java:143) at org.codehaus.plexus.util.xml.XmlStreamReader.(XmlStreamReader.java:86) at org.codehaus.plexus.util.ReaderFactory.newXmlReader(ReaderFactory.java:104) at org.apache.maven.plugin.testing.AbstractMojoTestCase.setUp(AbstractMojoTestCase.java:91) at junit.framework.TestCase.runBare(TestCase.java:132) at junit.framework.TestResult$1.protect(TestResult.java:110) at junit.framework.TestResult.runProtected(TestResult.java:128) at junit.framework.TestResult.run(TestResult.java:113) at junit.framework.TestCase.run(TestCase.java:124) at junit.framework.TestSuite.runTest(TestSuite.java:243) at junit.framework.TestSuite.run(TestSuite.java:238) at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:83) at org.eclipse.jdt.internal.junit4.runner.JUnit4TestReference.run(JUnit4TestReference.java:50) at org.eclipse.jdt.internal.junit.runner.TestExecution.run(TestExecution.java:38) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:467) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:683) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.run(RemoteTestRunner.java:390) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.main(RemoteTestRunner.java:197)

ExecutionEnvironment Exception in thread "main" java.lang.NullPointerException: mavenProject may not be null at org.twdata.maven.mojoexecutor.MojoExecutor$ExecutionEnvironment.(MojoExecutor.java:280) at org.twdata.maven.mojoexecutor.MojoExecutor.executionEnvironment(MojoExecutor.java:122) at org.github.based2.maven.plugin.checker.MavenSecurityChecker.loadMavenDependencyTree(MavenSecurityChecker.java:150) at org.github.based2.maven.plugin.checker.MavenSecurityChecker.main(MavenSecurityChecker.java:284)

MavenProject project; MavenSession session BuildPluginManager pluginManager

The plugins support several configuration options that can either be expressed in your project's POM file or in your settings.xml file. Where you put the plugin settings depends on whether you want a specific setting to be configured globally or on a per-project basis.

All GitHub Maven plugins support the following core configuration elements.

The notation below shows the plugin configuration property name followed by the settings configuration property in parentheses.

  • host (github.global.host)
    • Domain of GitHub API calls (defaults to api.github.com)
  • oauth2Token (github.global.oauth2Token)
  • userName (github.global.userName)
    • GitHub user name used for API authentication
  • password (github.global.password)
    • GitHub password used for API authentication
  • repositoryName
    • Name of repository that downloads will be uploaded to
  • repositoryOwner
    • Owner of repository that downloads will be uploaded to

Note: repositoryOwner property and repositoryName are optional and will be inferred from the following properties if not specified

  • project.url
  • project.scm.url
  • project.scm.connection
  • project.scm.developerConnection

Maven plugin that creates and uploads built resources to be available as GitHub repository downloads. The plugin has an upload goal and is configured with a goal prefix of ghDownloads. The plugin will upload the single build artifact by default but can be reconfigured to include/exclude files found in the build directory or to include attached artifacts such as Javadoc jars or sources jars.

Configuration

  • description
    • Description visible on the repository download page
  • includes
    • Sub-elements will be treated as patterns to include from the project.build.directory as downloads
    • This element is optional and will default to create a download of the build's main artifact
  • excludes
    • Sub-elements will be treated as patterns to exclude from the project.build.directory as downloads
    • This element is optional and will default to create a download of the build's main artifact
  • includeAttached (github.downloads.includeAttached)
    • true | false (default: false)
    • Whether to create downloads from attached artifacts, by default only the main artifact is uploaded
  • dryRun (github.downloads.dryRun)
    • true | false (default: false)
    • Log what files would be uploaded and what existing downloads would be deleted without actually modifying the current downloads
  • override (github.downloads.override)
    • true | false (default: false)
    • Whether existing downloads with the same name will be deleted before attempting to upload a new version
    • Note: Attempts to upload a download with the same name as one that already exists will fail unless this is set to true
  • suffix
    • String to be appended after file name but before file extension for uploaded files
    • A suffix of -master would cause artifacts to be uploaded as myartifact-1.0-master.jar

Example

<build>
  <plugins>
    <plugin>
      <groupId>com.github.github</groupId>
      <artifactId>downloads-maven-plugin</artifactId>
      <version>0.4</version>
      <configuration>
        <description>${project.version} release of ${project.name}</description>
        <override>true</override>
        <includeAttached>true</includeAttached>
      </configuration>
    </plugin>
  </plugins>
</build>

To upload a built artifact run the following command:

$ mvn clean install ghDownloads:upload

You can also bind the upload goal to execute as part of a specific phase:

<executions>
  <execution>
    <goals>
      <goal>upload</goal>
    </goals>
    <phase>install</phase>
  </execution>
</executions>

Maven plugin that commits files generated and updates a specific branch reference in a GitHub repository. This plugin can be used to deploy a created Maven site to a gh-pages branch so that it can be served statically as a GitHub Project Page. The plugin has a site goal and is configured with a goal prefix of ghSite.

Configuration

  • branch
    • Branch ref that will be updated to commit made
    • Default: refs/heads/gh-pages
  • message
    • Message used for commit
  • outputDirectory
    • Directory that includes and excludes will be relative to
    • Defaults to siteOutputDirectory or project.reporting.outputDirectory
  • includes
    • Sub-elements will be treated as patterns to include from the outputDirectory
  • excludes
    • Sub-elements will be treated as patterns to exclude from the outputDirectory
  • path
    • Path relative to the root of the repository that all blobs should be relative to
  • force (github.site.force)
    • true | false (default: false)
    • Whether to force a ref update, default is fast-forwards only
  • merge (github.site.merge)
    • true | false (default: false)
    • Whether to merge with the current tree or completely replace the tree that the commit points to
  • dryRun (github.site.dryRun)
    • true | false (default: false)
    • Log what blobs, tree, and commits would be created without actually creating them
  • noJekyll (github.site.noJekyll)
    • true | false (default: false)
    • Whether to always create a .nojekyll file at the root of the site if one doesn't already exist. This setting should be enabled if your site contains any folders that begin with an underscore.

Licenses

About

Analyzes your Java Maven Project dependencies for security issues and technical debts (CVE/EOL/+).

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages