Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WSO2 xercesImpl missing from Maven Central (groupId=xerces.wso2) #97

Open
cdanger opened this issue Aug 18, 2018 · 1 comment
Open

WSO2 xercesImpl missing from Maven Central (groupId=xerces.wso2) #97

cdanger opened this issue Aug 18, 2018 · 1 comment

Comments

@cdanger
Copy link

cdanger commented Aug 18, 2018

Description:
balana-core module depends on org.wso2.balana.utils which depends on (xerces.wso2) xercesImpl. However, xercesImpl is not available on Maven Central whereas the others are. Therefore, one may need to add the WSO2 repository to the POM or Maven settings exclusively for the xercesImpl dependency in order to use Balana. It would make things much easier if the xercesImpl was on Maven Central as well. It is useless to put artifacts on Maven Central if their required dependencies are not.

The alternative is to remove xercesImpl dependency: #82

Suggested Labels:
bug, enhancement (depending on how critical you think it is)

Suggested Assignees:

Affected Product Version:
1.1.11

OS, DB, other environment details and versions:

Steps to reproduce:
Try to build a project with Balana (org.wso2.balana) dependency, without WSO2 maven repository

Related Issues:
Related to #82 which suggests to remove xercesImpl which would fix the issue better.

@zhangguangyan
Copy link

Can we remove the dependency or replace it with xerces:xercesImpl:2.12.2 as its dependency xerces:xercesImpl:2.8.1 has known vulnerabilities:
image

Tahnks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants