Question

If you are using closed repository, but your application uses some dependencies from external(maven public) repository.

Is there a way the list can be generated with dependencies which are from internal and which from external repository.

Or I have to do it manually, put just the internal repositories and which dependencies my build fails for those are external, or there is a third way you think will get the results better. Thank you

EDIT

@Pascal Thivent

Here is the deal :

Lets say that my project uses only 2 dependencies:
First one is : junit
Second one is : velocity

Now lets assume that log4j is transitive dependency of junit(which is the one of the dependencies used by my project).

And lets assume that velocity doesn’t have any transitive dependencies. And lets imagine that velocity is on my corporate repository, and I know that junit is being downloaded from maven repository, but I don’t know about log4j because I didn’t put it in <dependecies> tag.

Is there a way I can get a list of dependencies or something .. which will group dependencies by repositories they are coing from or something similar like this :

velocity – corporate repository
junit – maven repository
log4j – maven repository

Or if I use the mirrorof to specify to use explicitly the corporate repository, will maven tell me which artifacts I’m missing, including the ones in transitive dependencies?

tnx

Answer 1

I would use dependency:purge-local-repository for this purpose and analyze the console output to see from where dependencies are (re)resovled.

And if at the end you are using a corporate repository and want to force Maven to use it for all requests (i.e. never access a public repository), then you should declare the corporate repository as mirrorOf all repositories in your settings.xml:

<settings>
  ...
  <mirrors>
    <mirror>
      <id>corporate-repository</id>
      <mirrorOf>*</mirrorOf>
      <name>Maven Repository Manager running on repo.mycompany.com</name>
      <url>http://repo.mycompany.com/proxy</url>
    </mirror>
  </mirrors>
  ...
</settings>

But I’m maybe extrapolating too much here.

Update:

Or if I use the mirrorof to specify to use explicitly the corporate repository, will maven tell me which artifacts I’m missing, including the ones in transitive dependencies?

Yes.