cloud-opensource-java
cloud-opensource-java copied to clipboard
Tools for detecting and avoiding linkage errors in GCP open source projects
https://github.com/GoogleCloudPlatform/cloud-opensource-java/blob/master/library-best-practices/JLBP-4.md There are beta checkers available for guava and grpc - these should be recommended. cc @netdpb
This is basically a list of Maven coordinates for things in cloud-oss-bom. However we eventually want to expand it with * artifact * repo * owners * list of dependency...
This will likely require some (how much?) manual effort since not all projects put scm info in the pom.xml published to Maven Central. (We may want to encourage projects to...
We might be able to do this automatically for Github if we can get owners permissions for the GoogleCloudPlatform organization. Requires #275
for upper bounds Requires #274
Using Github API? Requires #277 and #276
I.e. green is 100%
As of now, investigating errors in static linkage report are not straightforward. This is partly because StaticLinkageChecker shows the linkage errors without expected version from the source ``` grpc-netty-shaded-1.17.1.jar (1...
go/jdd-a to go/jdd-e etc. charter Ray's doc dependency convergence considered harmful go/fixlog go/cloud-java-bom etc. Focus on high level story for senior management along with goals and milestones 1. 3-10 (ideally...
As of now StaticLinkageChecker performs dependency mediation in the same manner as Maven does. Add an functionality to check Gradle's way, so that the result of StaticLinkageChecker makes sense to...