Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Switch from BeanShell to Groovy #196

Closed
ppkarwasz opened this issue Jun 20, 2024 · 0 comments · Fixed by #241
Closed

Switch from BeanShell to Groovy #196

ppkarwasz opened this issue Jun 20, 2024 · 0 comments · Fixed by #241

Comments

@ppkarwasz
Copy link
Contributor

While the BeanShell project is being actively developed, it has not published any new releases to Maven Central since 2016. Similarly Günther's beanshell-maven-plugin didn't have any releases since 2017, even if BeanShell itself has published CVE-2016-2510.

Therefore I would propose to replace our BeanShell scripts with Groovy and use GMavenPlus as binding plugin:

  • GMavenPlus comes from a reputable source (the Groovy project) with a huge community,
  • the last release is less than 7 months old,
  • it's an Apache project 😉.

PS: I am not suggesting that we only stick to plugins backed by a large community, but such projects are more likely to be responsive, when things get interesting.
@ppkarwasz ppkarwasz mentioned this issue Sep 8, 2024
Merged
ppkarwasz added a commit that referenced this issue Sep 16, 2024
@ppkarwasz
Replace BeanShell with Groovy
ae04c32 
This replaces the BeanShell script used to create source and binary
distribution with a Groovy script.
The main motivations for the change are:

- While the [BeanShell project](https://github.com/beanshell/beanshell) is
  still active, the `2.x` branch has no releases in Maven Central since
  2015. The `3.x` branch has only snapshots.

  [Apache Groovy](https://groovy-lang.org/) on the other hand is a very
  active project.

- The [`beanshell-maven-plugin`](https://github.com/genthaler/beanshell-maven-plugin) seems dormant since 2017 or
  does not have enough users to report bugs against it.

  The [`gmaven-plugin`](https://github.com/groovy/GMavenPlus) on the
  other hand is relatively active and supported by the Apache Groovy
  team.

  Closes #196.
@ppkarwasz ppkarwasz mentioned this issue Sep 16, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Replace BeanShell with Groovy apache/logging-parent
1 participant
@ppkarwasz