Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[rt-pmc] Third party libs usage policies

Question for rt-pmc and emo with respect to usage of a third party library.

Context: ECF has been using the Jive Software Smack API for years now, in order to implement our xmpp provider. Originally, the Smack libraries were not distributed by Jive as bundles...rather 'just jars'...and so ECF has had to create/build/and distribute the lib as a bundle. The version of Smack that ECF is using/distributing currently is 3.3.

It seems that Smack 4 has been released [1], and it is now distributed as a at least one bundle. Further, these bundles are now available in Maven central. The Smack team would like for us to update/use Smack 4 to get security fixes as well as other enhancements [1], and would like us to consume the lib as bundles from Maven central, since Smack 4 now apparently has the OSGi metadata.

How should we best approach doing this update? Can we use/depend upon/distribute these bundles via our repo? If so, how should this be done (e.g. CQs/IP process)?

Thanks,

Scott

[1] https://bugs.eclipse.org/bugs/show_bug.cgi?id=438006


Back to the top