https://github.com/justfairdev/oga-maven-plugin
🧩 Old GroupIds Alerter - A Maven plugin that checks for deprecated groupId+artifactId (e.g. did you know that graphql-spring-boot-starter moved from com.graphql-java to com.graphql-java-kickstart?).
https://github.com/justfairdev/oga-maven-plugin
dependency-analysis maven-plugin
Last synced: about 1 year ago
JSON representation
🧩 Old GroupIds Alerter - A Maven plugin that checks for deprecated groupId+artifactId (e.g. did you know that graphql-spring-boot-starter moved from com.graphql-java to com.graphql-java-kickstart?).
- Host: GitHub
- URL: https://github.com/justfairdev/oga-maven-plugin
- Owner: justfairdev
- License: mit
- Created: 2024-04-12T01:50:26.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2024-04-12T01:50:40.000Z (about 2 years ago)
- Last Synced: 2025-03-31T19:25:18.473Z (about 1 year ago)
- Topics: dependency-analysis, maven-plugin
- Language: Kotlin
- Homepage: https://central.sonatype.com/search?q=biz.lermitage.oga
- Size: 896 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Funding: .github/FUNDING.yml
- License: LICENSE.txt
Awesome Lists containing this project
README
Old GroupIds Alerter - Maven Plugin
A Maven plugin that checks for deprecated *groupId + artifactId* couples, in order to reduce usage of non-maintained 3rd-party code (e.g. did you know that artifact `graphql-spring-boot-starter` moved from `from com.graphql-java` to `com.graphql-java-kickstart`?).
Works with Maven 3.3+ and JDK8+.
*Looking for a Gradle plugin? Check [oga-gradle-plugin](https://github.com/jonathanlermitage/oga-gradle-plugin).*
## Author
Jonathan Lermitage ()
Linkedin profile: [jonathan-lermitage-092711142](https://www.linkedin.com/in/jonathan-lermitage-092711142/)
## Usage
### Goal
There's one maven goal: `biz.lermitage.oga:oga-maven-plugin:check`.
Execution will produce error message everytime a deprecated *groupId + artifactId* couple is found.
You may see something like `[ERROR] 'com.graphql-java:graphql-spring-boot-starter' should be replaced by 'com.graphql-java-kickstart:graphql-spring-boot-starter'`, and Maven build failure.
### Maven coordinates
Maven coordinates ([Nexus](https://oss.sonatype.org/#nexus-search;quick~oga-maven-plugin)):
```xml
biz.lermitage.oga
oga-maven-plugin
1.8.0
```
### Configuration
The following properties can be set on the `oga-maven-plugin` plugin.
| Maven Configuration Property | Command Line Property (if different) | Description | Default Value |
|:-----------------------------|:-------------------------------------|:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:--------------------------------------------------------------------------------------------------------------|
| ogDefinitionsUrl | | Alternative location for og-definitions.json config file.
The configuration value can be a local file path, or a URL. | https://raw.githubusercontent.com/jonathanlermitage/oga-maven-plugin/master/uc/og-definitions.json |
| ogUnofficialDefinitionsUrl | | Alternative location for og-unofficial-definitions.json config file.
The configuration value can be a local file path, or a URL. | https://raw.githubusercontent.com/jonathanlermitage/oga-maven-plugin/master/uc/og-unofficial-definitions.json |
| additionalDefinitionFiles | | A list of locations for additional json config files which are processed in addition to those in the definitions at `ogDefinitionsUrl` and `ogUnofficialDefinitionsUrl`.
The configuration values can be a local file path, or a URL. | |
| ignoreListFile | | Local file location of a JSON ignore-list in order to exclude some *groupIds* or *groupId + artifactIds*. | |
| ignoreListUrl | | Remote file location of a JSON ignore-list in order to exclude some *groupIds* or *groupId + artifactIds* (ignored if `ignoreListFile` is defined). | |
| ignoreUnofficialMigrations | | Ignore unofficial definitions loaded from `ogUnofficialDefinitionsUrl`. | `false` |
| failOnError | | Fail on error, otherwise display an error message only. | `true` |
| skip | oga.maven.skip | Skip Check, for use in multi branch pipeline or command line override. | `false` |
#### Failing the build
By default, your build will fail if you use this plugin, if you would like to receive a warning instead you can set the `failOnError` property like so:
```xml
biz.lermitage.oga
oga-maven-plugin
false
```
#### Changing the definitions
By default, this plugin is configured to use the [community maintained definitions files](https://github.com/jonathanlermitage/oga-maven-plugin/tree/master/uc) in
this repository. `og-definitions.json` defines official migration plans. `og-unofficial-definitions.json` defines unofficial migration plans for abandoned dependencies with no official successors (active forks are proposed instead).
If you would like to use **only** your own definitions you can override the location of the file:
```xml
biz.lermitage.oga
oga-maven-plugin
https://your-custom-location/your-og-definitions.json
```
Your custom definitions file can mix official and unofficial migrations. See the structure of `og-definitions.json` and `og-unofficial-definitions.json` files for details.
However, if you would like to get the benefit of the community maintained definitions **and** maintain your own definitions you can define additional files:
```xml
biz.lermitage.oga
oga-maven-plugin
https://your-custom-location/your-og-definitions.json
./your-og-definitions.json
```
#### Ignoring definitions
You can also provide a JSON ignore-list in order to exclude some *groupIds* or *groupId + artifactIds*:
```xml
biz.lermitage.oga
oga-maven-plugin
local-ignore-list.json
https://website.com/remote-ignore-list.json
```
Please see the sample [ignore-list file](sample/sample_ignore_list.json). For each of your dependencies or proposed migrations, the plugin will ignore it if it finds its coordinates in the ignore-list. So, by ignoring "foo:bar" (or "foo"), you will ignore this coordinate from your project dependencies and from the definitions file.
You can skip check (useful in multi-branch pipeline) by using the `oga.maven.skip` property.
Finally, you can also set configuration in command line with `-DogDefinitionsUrl`, `-DignoreListFile`, `-DignoreListUrl`, `-DfailOnError`, `-Doga.maven.skip` properties.
## Build
Just call `./mvnw clean install` or `./do i` to build plugin and install into local Maven repository.
## Contribution
### Code
Open an issue or a pull-request. Contributions must be tested at least on JDK8.
Please reformat new code only: do not reformat the whole project or entire existing file (in other words, try do limit the amount of changes in order to speed up code review).
### Definitions file
The list of deprecated *groupId + artifactId* couples is stored in [og-definitions.json](uc/og-definitions.json) file. To remove/update/add entries, you can [open an issue](https://github.com/jonathanlermitage/oga-maven-plugin/issues/new?assignees=&labels=enhancement&projects=&template=definitions.yml&title=Migration+definition+%60groupId%3AartifactId%60+to+%60groupId%3AartifactId%60), submit a merge request, or simply send an email ().
### Find new entries for definitions file
Go to [maven-index-search-suspect-coordinates](maven-index-search-suspect-coordinates/): this project downloads Maven Central indexes and looks for potential entries, then saves it to a file; i.e. artifactIds that exists for two different groupIds (keep in mind that 90~99% are false-positive).
You can view resulting file here: [suspiciousCoordinates.txt](maven-index-search-suspect-coordinates/suspiciousCoordinates.txt) (warning, it's a ~3 MB file).
A filtered version is available here: [suspiciousCoordinates-filtered.txt](maven-index-search-suspect-coordinates/suspiciousCoordinates-filtered.txt) (~500 KB). In this file, we keep only dependency couples where a groupId is a part of the other groupdId, like `com.graphql-java` and `com.graphql-java-kickstart`.
## License
MIT License. In other words, you can do what you want: this project is entirely OpenSource, Free and Gratis.