Comments (2)
Hello, thanks for getting touch!
This is potentially a confusing situation, but in this case I believe it is working as intended. For Maven the GetRequirements API returns exactly what is in the POM file for the particular version. As you're probably aware, Maven itself does quite a bit of work to determine the actual set of requirements by recursively merging parent POMs, interpolating variables and so on.
In this particular case:
- the POM for httpclient5 does not have version strings for any of the dependencies
- the parent, httpclient5-parent has a dependencyManagement section that provides some of the httpclient dependencies with explicit versions, specified via the properties section
- the API response from https://api.deps.dev/v3alpha/systems/maven/packages/org.apache.httpcomponents.client5:httpclient5-parent/versions/5.3.1:requirements matches this as far as I can tell
We're currently working on publishing some helper code in this repo for merging POMs and performing the variable interpolation which should be available soon, I'll update here once that's done.
Finally, there is a fair question about whether our API responses should contain empty strings when the value is entirely absent from the POM (the alternative would be omitting the key from the JSON), so I would be interested to hear any opinions about that.
from deps.dev.
Oh, now I understand, thanks for the detailed answer.
Finally, there is a fair question about whether our API responses should contain empty strings when the value is entirely absent from the POM (the alternative would be omitting the key from the JSON), so I would be interested to hear any opinions about that.
Hmm, good question, I think I'd prefer an empty string over an absent key. But elsewhere, folks seem to have a different opinion.
from deps.dev.
Related Issues (20)
- API to access dependents for a specific version HOT 1
- Cross-language dependencies?
- Wrong response type: string should be int HOT 2
- Serve "observed at" times for Go modules HOT 1
- Issue with Published Dates Retrieval for Pywin32 on deps.dev HOT 1
- Flutter/Dart Support HOT 1
- RubyGems support
- could not find module for package import HOT 2
- what so much data is stored HOT 2
- Software signatures and upcoming standards about remote attestation
- Dependent information storage
- LLM Dependency chatbot HOT 1
- Details for non-standard licenses HOT 3
- Add input examples / OpenAPI spec HOT 2
- Support `GetDependencies` to consider "context" information
- Latest version is not available fot nuget/Grpc.Core
- how to get the checksum information or some type of hash value of the package through the API HOT 1
- Unresolved dependency tree in go HOT 1
- The maven component query return data is missing the publishedAt field. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from deps.dev.