chains-project/maven-lockfile

Issues

• update CI so that it works for PR from external forks / contributors

  #875 opened 4 months ago by monperrus
  0

• Dependency Dashboard

  #22 opened 2 years ago by renovate
  0

• Add a parameter to print a warning instead of failing the build in case the lockfile validation is not correct.

  #873 opened 4 months ago by massimeddu-sj
  0

• Make metadata environment section optional on the lockfile

  #870 opened 4 months ago by massimeddu-sj
  1

• Add support for reproducibility on reproducible-central

  #747 opened 8 months ago by algomaster99
  4

• add full integration with Renovate

  #171 opened 2 years ago by monperrus
  4

• add maven-lockfile in https://github.com/nexB/dependency-inspector/

  #844 opened 4 months ago by monperrus
  0

• add support for platform artifacts

  #204 opened 2 years ago by MartinWitt
  2

• Missing transitive dependency in freeze

  #683 opened 7 months ago by cchanley2003
  6

• Make the changes to pom file after freeze reversible

  #688 opened 8 months ago by yogyagamage
  0

• Dependency tree does not always get flattened after declaring transitive dependencies as direct dependencies

  #697 opened 8 months ago by yogyagamage
  0

• Freeze option resolves the highest version of a dependency which is not the dependency mechanism followed by maven

  #686 opened 8 months ago by yogyagamage
  0

• Duplicate dependencies in the pom file after freeze

  #687 opened 8 months ago by yogyagamage
  0

• Have different warning types for different events when validating lockfile

  #689 opened 9 months ago by yogyagamage
  0

• Maven plugin dependencies are not recorded

  #424 opened a year ago by I-Al-Istannen
  2

• Lockfile does not contain plugin hashes

  #400 opened a year ago by I-Al-Istannen
  0

• Lockfile uses different case for `Id` in root object

  #401 opened a year ago by I-Al-Istannen
  0

• group metadata and config in a single json object with 2 subobjects

  #395 opened a year ago by MartinWitt
  0

• Default to a safe hash function when computing hashes locally

  #397 opened a year ago by I-Al-Istannen
  2

• dogfooding

  #220 opened 2 years ago by monperrus
  2

• Add functionality for modifying lock files, e.g., adding a new dependency without generating the whole file from scratch.

  #29 opened 2 years ago by MartinWitt
  1

• Make the validation failure message more human-readable

  #30 opened 2 years ago by MartinWitt
  0

• add field "packaged" which tells whether the dependency is taken after dependency / version resolution

  #18 opened 2 years ago by monperrus
  2

• Make build reproducible

  #138 opened 2 years ago by MartinWitt
  0

• add field `constraint` in lockfile.json

  #202 opened 2 years ago by monperrus
  2

• when adding/changing dependencies, previous hashs should be kept

  #1 opened 2 years ago by monperrus
  1

• use Central checksums by default

  #17 opened 2 years ago by monperrus
  7

• add option for flat list of dependencies in JSON format

  #205 opened 2 years ago by MartinWitt
  1

• add metadata `mvnVersion` and `javaVersion` as top level metadata

  #203 opened 2 years ago by monperrus
  2

• json schema compatible with npm lock file

  #3 opened 2 years ago by bbaudry
  5

• Upgrade release script and remove sed commands

  #139 opened 2 years ago by MartinWitt
  1

• Package the plugin into a github action

  #39 opened 2 years ago by bbaudry
  1

• Consider adding `CONTRIBUTING.md`

  #104 opened 2 years ago by armandino
  2

• activate CD to Maven Central

  #63 opened 2 years ago by monperrus
  1

• move todos from readme to issues

  #23 opened 2 years ago by MartinWitt
  0

• by default: we get the full dependency tree

  #16 opened 2 years ago by bbaudry
  1

• add group ID

  #15 opened 2 years ago by bbaudry
  0

• Bug: GroupID and ArtifactID are swapped.

  #6 opened 2 years ago by MartinWitt
  1

• activate CI for the repo

  #2 opened 2 years ago by monperrus
  2

• activate CD to Maven Central

  #4 opened 2 years ago by monperrus
  9