[MDEP-273] Analyze Dependency Versions Mojo

**[Cole Mickens](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=cm019081)** opened **[MDEP-273](https://issues.apache.org/jira/browse/MDEP-273?redirect=false)** and commented

This is a patch that adds a new mojo and a report class to maven-dependency-plugin trunk (2.2). The goal `dependency:analyze-dep-versions` lists dependencies that are either resolved at a lower version than needed by a dependency farther from the project root or are being overridden by the dependencyManagement section. In some sense it is complimentary to `dependency:analyze-dep-mgt`.

I checked out trunk today, added my new files, `svn add`ed them, then performed an `svn diff`. The patches applied correctly with a rechecked out copy of trunk with `cd apache-maven-dependency-plugin; patch -p0 < ../analyze-dep-versions.patch`. After patching, it built, installed and passed IT tests (including the 6 new ones that I've added) properly.

---

**Affects:** 2.2

**Attachments:**
- [analyze-dep-versions.patch](https://issues.apache.org/jira/secure/attachment/12715177/analyze-dep-versions.patch) (_74.05 kB_)
- [analyze-dep-versions-1.patch](https://issues.apache.org/jira/secure/attachment/12715142/analyze-dep-versions-1.patch) (_76.74 kB_)
- [core.PNG](https://issues.apache.org/jira/secure/attachment/12714996/core.PNG) (_22.46 kB_)
- [script-ant.PNG](https://issues.apache.org/jira/secure/attachment/12715178/script-ant.PNG) (_36.18 kB_)

7 votes, 8 watchers

Start by reviewing the attached analyze-dep-versions.patch, focusing on its new mojo and report class and the six added integration tests. Run the existing build and IT test suite, then verify that dependency:analyze-dep-versions reports lower resolved versions and dependencyManagement overrides as described.

Written by the indexing model from the issue text.