enforcer-rules | Additional custom rules for Maven enforcer | Plugin library

by ceilfors Java Version: 1.2.0 License: MIT

X-Ray Key Features Code Snippets Community Discussions(3)Vulnerabilities Install Support

kandi X-RAY | enforcer-rules Summary

enforcer-rules is a Java library typically used in Plugin, Maven applications. enforcer-rules has no bugs, it has no vulnerabilities, it has build file available, it has a Permissive License and it has low support. You can download it from GitHub, Maven.

Additional custom rules for Maven enforcer. Available extra rules: * [requireDepMgt] - enforces that dependency management is used. * [requireFilesContent] - enforces that the specified list of files exist and are containing the specified content. * [matchGroupIdAndPackage] - enforces a module to contain a package that matches its group id. * [matchArtifactIdAndBaseDir] - enforces that the pom’s artifact id and the base directory name are the same. For more sample usages, refer to integration test scenarios in src/it folder. [requireDepMgt]: [requireFilesCOntent]: [matchGroupIdAndPackage]: [matchArtifactIdAndBaseDir]:

Support

Quality

Security

License

Reuse

Support

enforcer-rules has a low active ecosystem.

It has 6 star(s) with 2 fork(s). There are 4 watchers for this library.

It had no major release in the last 12 months.

There are 0 open issues and 2 have been closed. On average issues are closed in 6 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of enforcer-rules is 1.2.0

Quality

enforcer-rules has 0 bugs and 0 code smells.

Security

enforcer-rules has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

enforcer-rules code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

enforcer-rules is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

enforcer-rules releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Top functions reviewed by kandi - BETA

kandi has reviewed enforcer-rules and discovered the below as its top functions. This is intended to give you an instant insight into enforcer-rules implemented functionality, and help decide if they suit your requirements.

Runs the rules
Checks the given file
Checks the given condition
Validates that the reference is not null
Main entry point
Gets dependency map
Apply the difference between baseDir and baseDir
Gets the Maven project
Check if there is a Java package for the specified groupId
Get the cache id

Get all kandi verified functions for this library.

enforcer-rules Key Features

No Key Features are available at this moment for enforcer-rules.

enforcer-rules Examples and Code Snippets

No Code Snippets are available at this moment for enforcer-rules.

Community Discussions

Trending Discussions on enforcer-rules

Skip module with Maven enforcer

Automatically taking the newest transitive dependency in maven

How to forbid certain artifacts from being used in certain projects?

QUESTION

Skip module with Maven enforcer

Asked 2020-May-21 at 19:49

I´m using enforcer plugin in a multi-node project in the root pom, but I have one testing module, that I dont really care to run the plugin there since it wont create any jar and is only for testing propuse. Is there any way to skip one of the modules in the plugin config?.

Checking the documentation I cannot find anything. Only how to ban some specific dependencies. https://maven.apache.org/enforcer/enforcer-rules/bannedDependencies.html

The solution to put the plugin in each sub-module is possible but it's dangerous, since if I create a new sub-module I might forget to add it there

Here my plugin config.

...

ANSWER

Answered 2020-May-21 at 19:49

In the POM of the module, set enforcer.skip to true:

Source https://stackoverflow.com/questions/61940579

QUESTION

Automatically taking the newest transitive dependency in maven

Asked 2020-May-14 at 01:46

Consider a very common situation when a project depends on 2 libraries, each transitively bringing a 3rd library of different versions:

...

ANSWER

Answered 2020-May-07 at 12:52

No, as khmarbaise already said, this is not possible.

The resolution rule sits deeply in Maven itself. You can check the result of the resolution (as you already mentioned), but you cannot change it.

We decided to fix nearly all the versions of transitive dependencies by using appropriate BOMs (lists of dependencyManagement) that we import in the section. This guarantees that all dependencies come in recent versions. It does not guarantee that everything fits together. But using the newest version as standard would not do that either.

Source https://stackoverflow.com/questions/61589956

QUESTION

How to forbid certain artifacts from being used in certain projects?

Asked 2020-Mar-18 at 11:51

For example, the licensing might expire soon and we want to enforce everyone to find an alternative. Another example is when it is known then that a library is not secure (thus, some alternative library has to be used).

I have read this documentation: https://maven.apache.org/enforcer/enforcer-rules/bannedDependencies.html

What I meant is if there is a way to validate artifacts of a project against a remote (internal-company) server somewhere to see if any of the artifacts are banned or not.

...

ANSWER

Answered 2020-Mar-18 at 11:51

JFrog Xray allows you to filter for their security lists as well as to blacklist/whitelist other artifacts (with your own custom messages).

https://jfrog.com/xray/

Source https://stackoverflow.com/questions/60732748

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install enforcer-rules

You can download it from GitHub, Maven.
You can use enforcer-rules like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the enforcer-rules component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: