Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"sources" jar published in maven repo contains several binary .class files #5474

Closed
the-vj opened this issue May 25, 2023 · 1 comment · Fixed by #5487
Closed

"sources" jar published in maven repo contains several binary .class files #5474

the-vj opened this issue May 25, 2023 · 1 comment · Fixed by #5487
Labels
Bug Something isn't working

Comments

@the-vj
Copy link

the-vj commented May 25, 2023

for example:

https://repo.maven.apache.org/maven2/io/opentelemetry/opentelemetry-sdk-common/1.25.0/opentelemetry-sdk-common-1.25.0-sources.jar

=> binary class files can be found in: \META-INF\versions\9\io\opentelemetry\sdk\internal

this sounds like a cosmetic thing, but causes real-world problems. e.g. we have automated tooling to manage open source libraries and to check compliance with licensing conditions (where original source code artifacts are fetched and processed) - obviously, archives containing binary .class files are rejected as invalid/corrupted.

isn't a standard maven plugin used to package the sources jar before publishing a release into central maven repo? to be honest, can't even think of how this sort of mix of classes and sources can happen in practice - but apparently it does ;)

this issue is not unique to the 1.25.0 release of the artifact, i just used it as an example...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Something isn't working
Projects
None yet
2 participants