Bug 996630

Summary:	Designer: replace dependency SuperCSV with a better alternative
Product:	[Retired] JBoss BPMS Platform 6	Reporter:	Geoffrey De Smet <gdesmet>
Component:	jBPM Designer	Assignee:	Tihomir Surdilovic <tsurdilo>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Marek Baluch <mbaluch>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.0.0	CC:	rzhang
Target Milestone:	ER2
Target Release:	6.0.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-08-06 20:09:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	989519

Description Geoffrey De Smet 2013-08-13 14:44:30 UTC

The dependency org.supercsv:SuperCSV has bad maven metadata.
It generates a warning for every build:
  [WARNING] The POM for org.supercsv:SuperCSV:jar:1.52 is missing, no dependency information available

Therefore, it's too low quality to have it in our dependency tree - because it can cause maven issues and legal issues (no license specified).

There's only 1 class that needs it: StencilSetExtensionGeneratorServlet.java in designer.

Either upgrade it to a version that has decent maven metadata.
Or replace it with a Apache's commons-csv:
  http://commons.apache.org/proper/commons-csv/

Comment 2 Geoffrey De Smet 2013-08-14 07:48:56 UTC

Designer should also get rid of the jbpt dependency. It gives a similar warning as SuperCsv.

Comment 3 Geoffrey De Smet 2013-08-17 07:30:17 UTC

Apparently, SuperCSV doesn't exist in the central or jboss repository:
  https://repository.jboss.org/nexus/index.html#nexus-search;gav~org.supercsv~~~~

Really needs to be removed.

Comment 4 Tihomir Surdilovic 2013-08-17 15:03:07 UTC

SuperCSV dependency removed.

Comment 5 Marek Baluch 2013-09-04 11:49:31 UTC

Verified on ER2.