Dependency : CQ Mapping

Identified dependencies and the corresponding CQ at Eclipse Foundation

Compile

CQ processed

• ✅ commons-io:commons-io:jar:2.6 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19181
• ✅ org.apache.commons:commons-lang3:jar:3.8.1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19178
• ✅ org.apache.httpcomponents:httpclient:jar:4.5.7 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19182
  • ✅ org.apache.httpcomponents:httpcore:jar:4.4.11 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19183
  • ✅ commons-logging:commons-logging:jar:1.2 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19184
  • ✅ commons-codec:commons-codec:jar:1.11 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19185
• ✅ org.apache.velocity:velocity:jar:1.7 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19186
  • ✅ commons-collections:commons-collections:jar:3.2.1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19187
  • ✅ commons-lang:commons-lang:jar:2.4 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19188
• ✅ org.slf4j:slf4j-api:jar:1.7.25 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19177
• ✅ com.fasterxml.jackson.core:jackson-databind:jar:2.9.8 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19198
  • ✅ com.fasterxml.jackson.core:jackson-annotations:jar:2.9.8 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19199
  • ✅ com.fasterxml.jackson.core:jackson-core:jar:2.9.8 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19200
• ✅ com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:jar:2.9.8 -> http://dev.eclipse.org/ipzilla/show_bug.cgi?id=19201 (base CQ for 2.9.7)
  • ✅ org.yaml:snakeyaml:jar:1.23 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19202
• ✅ com.github.cliftonlabs:json-simple:jar:3.0.2 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19288
• ✅ org.springframework:spring-web:jar:5.1.2.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19203
  • ✅ org.springframework:spring-beans:jar:5.1.2.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19204
  • ✅ org.springframework:spring-core:jar:5.1.2.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19205
  • ✅ org.springframework:spring-jcl:jar:5.1.2.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19206
• ✅ org.codehaus.plexus:plexus-utils:jar:3.1.1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19189 (base CQ for 3.1.0)
• ✅ org.springframework.hateoas:spring-hateoas:jar:0.25.0.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19207
  • ✅ org.springframework:spring-aop:jar:4.3.18.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19208 (base CQ for 4.3.12)
  • ✅ org.springframework:spring-context:jar:4.3.18.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19209 (base CQ for 4.3.12)
  • ✅ org.springframework:spring-expression:jar:4.3.18.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19210 (base CQ for 4.3.12)
  • ✅ org.springframework:spring-webmvc:jar:4.3.18.RELEASE -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19211 (base CQ for 4.3.7)
• ✅ org.codehaus.groovy:groovy:jar:2.5.3 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19191 (base CQ for 2.5.2)

CQ opened, IP team involved

• 🔶 org.jvnet.jaxb2_commons:jaxb2-basics-runtime:jar:1.11.1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19297
• 🔶 org.apache.commons:commons-csv:jar:1.5 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19287
• 🔶 org.spdx:spdx-tools:jar:2.1.15 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19212 (base CQ for 2.1.0 with special state, subs so far not handled)

CQ not opened, related CQ exists

• org.apache.maven:maven-plugin-api:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19298

  • org.apache.maven:maven-model:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19299

• org.apache.maven:maven-artifact:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19300

• org.apache.maven.plugin-tools:maven-plugin-annotations:jar:3.5.2 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19301 (base CQ for 3.5.1)

• org.apache.maven:maven-compat:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19302

  • org.apache.maven:maven-model-builder:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19303
    • org.apache.maven:maven-builder-support:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19304
    • com.google.guava:guava:jar:18.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19305
  • org.apache.maven:maven-settings:jar:3.3.9 -> org.apache.maven:maven-settings:jar:3.3.9
  • org.codehaus.plexus:plexus-interpolation:jar:1.21 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19307
  • org.codehaus.plexus:plexus-component-annotations:jar:1.6 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19308
  • org.apache.maven.wagon:wagon-provider-api:jar:2.10 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19309

• org.apache.maven:maven-core:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19310

  • org.apache.maven:maven-settings-builder:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19311
  • org.apache.maven:maven-repository-metadata:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19312
  • org.apache.maven:maven-aether-provider:jar:3.3.9 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19313
  • com.google.inject:guice:jar:no_aop:4.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19314
    • javax.inject:javax.inject:jar:1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19316
    • aopalliance:aopalliance:jar:1.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19315
  • org.codehaus.plexus:plexus-classworlds:jar:2.5.2 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19317
  • org.sonatype.plexus:plexus-sec-dispatcher:jar:1.3 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19318
    • org.sonatype.plexus:plexus-cipher:jar:1.4 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19319

• org.apache.maven.shared:maven-dependency-tree:jar:3.0.1 -> No CQ so far, only 2.2 (all sub deps not covered so far)

• org.apache.maven.shared:maven-invoker:jar:3.0.1 -> No CQ so far, only 2.1.1

To be handled

• org.gradle:gradle-core:jar:4.1 -> No CQ so far, are there newer versions, CQ exist for them?
• org.gradle:gradle-model-core:jar:4.1 -> No CQ so far, are there newer versions, CQ exist for them?
• org.gradle:gradle-base-services:jar:4.1 -> No CQ so far, are there newer versions, CQ exist for them?
• org.gradle:gradle-base-services-groovy:jar:4.1 -> No CQ so far, are there newer versions, CQ exist for them?
• org.gradle:gradle-logging:jar:4.1 -> No CQ so far, are there newer versions, CQ exist for them?
• org.kie:kie-api:jar:7.17.0.Final -> No CQ so far
  • org.kie.soup:kie-soup-maven-support:jar:7.17.0.Final -> No CQ so far
• org.kie:kie-internal:jar:7.17.0.Final -> No CQ so far
• org.drools:drools-compiler:jar:7.17.0.Final -> No CQ so far (all sub deps not covered so far)
• org.drools:drools-core:jar:7.17.0.Final -> No CQ so far (all sub deps not covered so far)

Test

CQ processed

• ✅ junit:junit:jar:4.12 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19179
  • ✅ org.hamcrest:hamcrest-core:jar:1.3 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19180
• ✅ org.mockito:mockito-core:jar:2.23.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19283
  • ✅ net.bytebuddy:byte-buddy:jar:1.9.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19284
  • ✅ net.bytebuddy:byte-buddy-agent:jar:1.9.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19285
  • ✅ org.objenesis:objenesis:jar:2.6 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19190

CQ opened, IP team involved

• 🔶 org.assertj:assertj-core:jar:3.11.1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19286
• ✅ org.apache.maven.plugin-testing:maven-plugin-testing-harness:jar:3.3.0 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19193
  • ✅ org.codehaus.plexus:plexus-archiver:jar:2.2 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19194
    • 🔶 org.codehaus.plexus:plexus-container-default:jar:1.0-alpha-9-stable-1 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19195 (base CQ for 1.0-beta-3.0.5 which is not approved, but how did approval for plexus-archiver work out?, there is another strange sub dependency)
    • ✅ org.codehaus.plexus:plexus-io:jar:2.0.4 -> https://dev.eclipse.org/ipzilla/show_bug.cgi?id=19196 (base CQ for 2.0.5)

To be handled

• org.springframework:spring-test:jar:5.1.2.RELEASE -> No CQ so far, only 4.3.17