CycloneDX / CycloneDX/cyclonedx-maven-plugin
Missing dependency in 2.0.0
- Dominant language
- Java
- Stars
- 385
- Forks
- 107
- Avg merge
- 17h 31m
- Merged PRs (30d)
- 7
Description
There seems to be a missing dependency in latest release. Since few hours ago we seen a lot of failure on our CIs about invocation of cyclonedx-maven-plugin via cli, like that:
`[ERROR] Failed to execute goal org.cyclonedx:cyclonedx-maven-plugin:2.0.0:makeAggregateBom (default-cli) on project MyProject: Execution default-cli of goal org.cyclonedx:cyclonedx-maven-plugin:2.0.0:makeAggregateBom failed: Plugin org.cyclonedx:cyclonedx-maven-plugin:2.0.0 or one of its dependencies could not be resolved: Could not find artifact com.github.everit-org.json-schema:org.everit.json.schema:jar:1.12.1 in my-mirror (https://nexus.example.com/nexus/repository/my-mirror) -> [Help 1]`
I searched **com.github.everit-org.json-schema:org.everit.json.schema** on search.maven.org and i didn't found it, even for past versions... is groupdId and artifactId correct?
Contributor guide
Research direction
Reproduce the cyclonedx-maven-plugin:2.0.0:makeAggregateBom CLI invocation using the reported error, then inspect the 2.0.0 dependency publication metadata. Done means the plugin's dependency coordinates resolve from a Maven repository and the invocation completes without the reported missing-artifact failure.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100