maven-dependency-plugin icon indicating copy to clipboard operation
maven-dependency-plugin copied to clipboard

Published 20 hours ago • verified publisher icon apache

[MDEP-964] Allowlist org.glassfish:javax.json

Open elharo opened this issue 1 year ago • 1 comments

elharo avatar Nov 11 '24 00:11 elharo

Resolve #1458

jira-importer avatar Jun 18 '25 08:06 jira-importer

-1 for json, looks private project specific to me

slachiewicz avatar Aug 17 '25 15:08 slachiewicz

org.glassfish:javax.json is not private project specific. This is a widely used dependency that shows up in a lot of trees. It ended up in the glassfish project for no particularly good reason. There are other implementations floating around we'll likely need to allow list too, but this is a very commonly encountered one.

elharo avatar Sep 14 '25 10:09 elharo