socket-cli/src/commands/manifest/scripts/maven-extension/pom.xml at e7e8f09e122353fcd5b580f60992574e0fefee96 · SocketDev/socket-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>tech.coana</groupId>
  <artifactId>coana-maven-extension</artifactId>
  <version>1.0</version>
  <!-- A Maven CORE EXTENSION (not a plugin): loaded from a loose jar via
       -Dmaven.ext.class.path=<jar>, so nothing is installed in the user's local repository and
       their pom.xml is untouched. It only GATHERS the resolved dependency graph and emits the
       flat line-protocol records the TS assembler turns into the Socket facts SBOM —
       no JSON / hashing here, identical contract to the Gradle init script and SBT plugin. -->
  <packaging>jar</packaging>
  <name>Coana Maven extension</name>
  <description>Core extension that emits Coana's dependency-graph records (socket-facts) without a local-repo install.</description>

  <properties>
    <maven.compiler.source>8</maven.compiler.source>
    <maven.compiler.target>8</maven.compiler.target>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <!-- Maven core APIs to compile against; runtime is provided by whatever Maven loads the
         extension (verified 3.2.5 .. 4.x). -->
    <maven.version>3.9.6</maven.version>
  </properties>

  <!-- Stable jar name so the TS runner can resolve it by a fixed path. -->
  <build>
    <finalName>coana-maven-extension</finalName>
    <plugins>
      <!-- Generate META-INF/sisu/javax.inject.Named so the container discovers our @Named
           lifecycle participant when the jar is on the ext class path. -->
      <plugin>
        <groupId>org.eclipse.sisu</groupId>
        <artifactId>sisu-maven-plugin</artifactId>
        <version>0.9.0.M3</version>
        <executions>
          <execution>
            <id>index-project</id>
            <goals>
              <goal>main-index</goal>
            </goals>
          </execution>
        </executions>
      </plugin>

      <!-- Single self-contained jar. Everything the extension compiles against lives in the Maven
           core realm at runtime, so nothing is bundled; shade stays for the Sisu index transformer
           that lets the container discover the participants in the ext realm. -->
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-shade-plugin</artifactId>
        <version>3.5.1</version>
        <executions>
          <execution>
            <phase>package</phase>
            <goals>
              <goal>shade</goal>
            </goals>
            <configuration>
              <createDependencyReducedPom>false</createDependencyReducedPom>
              <transformers>
                <transformer implementation="org.apache.maven.plugins.shade.resource.AppendingTransformer">
                  <resource>META-INF/sisu/javax.inject.Named</resource>
                </transformer>
                <transformer implementation="org.apache.maven.plugins.shade.resource.ComponentsXmlResourceTransformer"/>
              </transformers>
            </configuration>
          </execution>
        </executions>
      </plugin>
    </plugins>
  </build>

  <dependencies>
    <dependency>
      <groupId>javax.inject</groupId>
      <artifactId>javax.inject</artifactId>
      <version>1</version>
      <scope>provided</scope>
    </dependency>

    <!-- Maven core APIs: present in the core realm at runtime, so provided (not bundled). -->
    <dependency>
      <groupId>org.apache.maven</groupId>
      <artifactId>maven-core</artifactId>
      <version>${maven.version}</version>
      <scope>provided</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.maven</groupId>
      <artifactId>maven-model</artifactId>
      <version>${maven.version}</version>
      <scope>provided</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.maven</groupId>
      <artifactId>maven-artifact</artifactId>
      <version>${maven.version}</version>
      <scope>provided</scope>
    </dependency>
    <!-- Aether graph/artifact types: what ProjectDependenciesResolver hands back. -->
    <dependency>
      <groupId>org.apache.maven.resolver</groupId>
      <artifactId>maven-resolver-api</artifactId>
      <version>1.9.18</version>
      <scope>provided</scope>
    </dependency>
    <dependency>
      <groupId>org.slf4j</groupId>
      <artifactId>slf4j-api</artifactId>
      <version>1.7.36</version>
      <scope>provided</scope>
    </dependency>
  </dependencies>
</project>