Bug 996630 - Designer: replace dependency SuperCSV with a better alternative
Summary: Designer: replace dependency SuperCSV with a better alternative
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss BPMS Platform 6
Classification: Retired
Component: jBPM Designer
Version: 6.0.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ER2
: 6.0.0
Assignee: Tihomir Surdilovic
QA Contact: Marek Baluch
URL:
Whiteboard:
Depends On:
Blocks: 989519
TreeView+ depends on / blocked
 
Reported: 2013-08-13 14:44 UTC by Geoffrey De Smet
Modified: 2014-08-06 20:09 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-08-06 20:09:37 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Geoffrey De Smet 2013-08-13 14:44:30 UTC 
The dependency org.supercsv:SuperCSV has bad maven metadata.
It generates a warning for every build:
  [WARNING] The POM for org.supercsv:SuperCSV:jar:1.52 is missing, no dependency information available

Therefore, it's too low quality to have it in our dependency tree - because it can cause maven issues and legal issues (no license specified).

There's only 1 class that needs it: StencilSetExtensionGeneratorServlet.java in designer.

Either upgrade it to a version that has decent maven metadata.
Or replace it with a Apache's commons-csv:
  http://commons.apache.org/proper/commons-csv/
Comment 2 Geoffrey De Smet 2013-08-14 07:48:56 UTC 
Designer should also get rid of the jbpt dependency. It gives a similar warning as SuperCsv.
Comment 3 Geoffrey De Smet 2013-08-17 07:30:17 UTC 
Apparently, SuperCSV doesn't exist in the central or jboss repository:
  https://repository.jboss.org/nexus/index.html#nexus-search;gav~org.supercsv~~~~

Really needs to be removed.
Comment 4 Tihomir Surdilovic 2013-08-17 15:03:07 UTC 
SuperCSV dependency removed.
Comment 5 Marek Baluch 2013-09-04 11:49:31 UTC 
Verified on ER2.
Note You need to log in before you can comment on or make changes to this bug.