Jeremy Landis

will have fix later for this, marking it so we know why...

was 'overIfNewer'... note: Have not added Jira yet, looking at a separate issue and this caught my eye as a defect. Other class in copy dependencies has it spelled correctly...

If you notice, the license doesn't show up as resolved as Plexus is not a normal license. In fact, plexus https://github.com/codehaus-plexus/, doesn't even use that. They are all apache 2.0....

[spotbugs] Add in 'verify' as a valid goal

1

'verify' goal was added to maven project a long time ago. I don't see any tests at all for spotbugs nor pmd, so I just aimed for getting the newer...

Propose removing 'System.getenv()'

1

The default properties are gathered System.getenv() grabbing the entire environment set of properties which is highly unpredictable per machine and known to be possible to manipulate by outside processes. Spotbugs...

Propose we deprecate 'defaultPropertyList' with maven way to manage

2

Presumably this exists solely for properties someone wants to add that don't exist and we don't know about for some custom adjustments in files. I haven't looked far enough to...

Propose we stop reading blindly all java system properties with example including removal of system.getenv()

2

This is to global in scope and takes on so many properties that have nothing to do with this project in any way. We know what properties we support. So...

Today we are not using the junit bom so pull requests from dependabot result in 3 separate ones. So we need to use the bom so we get one pull...