Jonathan Leitschuh issues

Results 820 issues of


                                            Jonathan Leitschuh

[SECURITY] Fix Zip Slip Vulnerability

# Security Vulnerability Fix This pull request fixes a Zip Slip vulnerability either due to an insufficient, or missing guard when unzipping zip files. Even if you deem, as the...

[SECURITY] Use HTTPS to resolve dependencies in Maven Build

[![mitm_build](https://user-images.githubusercontent.com/1323708/59226671-90645200-8ba1-11e9-8ab3-39292bef99e9.jpeg)](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/@jonathan.leitschuh/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb?source=friends_link&sk=3c99970c55a899ad9ef41f126efcde0e) - [Update: Want to take over the Java ecosystem? All you need is a MITM!](https://medium.com/bugbountywriteup/update-want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-d069d253fe23?source=friends_link&sk=8c8e52a7d57b98d0b7e541665688b454)...

[SECURITY] Use HTTPS to resolve dependencies in Maven Build

Test against previous versions of Kotlin API to ensure backwards compatibility

Closes #523 > Finally, to have your code merged you will have to fill out the [Contributor License Agreement](https://github.com/FasterXML/jackson/blob/master/contributor-agreement.pdf) and email a scan/photo of the result to info at fasterxml...

Install Tasks runs every time

It seems like this plugin doesn't take advantage of gradle's incremental build system very well. Even when there have been no changes to the list of dependencies the plugin seems...

Make the pivy-importer a plugin you add to your buildSrc project

Since the `pivy-importer` needs to run as a step before the repositories are resolved the only place that this can happen is as a step inside of your `buildSrc` project....

PythonDetails is not serializable

`PythonDetails` implements `Serializable` but it takes a `Project` that is not serializable. If you try to make it so that the `PipInstallTask` gets cached you get an exception that it...

ImporterCLI wrapped in a gradle task

I'm using this code for our internal creation of the ivy repo. Others may find this useful. This file is in our `buildSrc`. ```groovy import com.linkedin.python.importer.ImporterCLI import org.gradle.api.DefaultTask import org.gradle.api.tasks.Input...

Creating an egg as a distribution?

I've configured my build to create the `tar.gz` using the `sdist` plugin. Is there any easy way to also create an `.egg` artifact as well? Looking at the source it...

Version should be configurable in plugin

The plugin currently uses the hard coded `project.version` which may, in development enviroments, not be compliant with [PEP-0440](https://www.python.org/dev/peps/pep-0440/). Additionally, in the java/maven world, `-SNAPSHOT` is used for versions while python...