[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
[rt-pmc] Third party libs usage policies
|
Question for rt-pmc and emo with respect to usage of a third party library.
Context: ECF has been using the Jive Software Smack API for years now,
in order to implement our xmpp provider. Originally, the Smack
libraries were not distributed by Jive as bundles...rather 'just
jars'...and so ECF has had to create/build/and distribute the lib as a
bundle. The version of Smack that ECF is using/distributing currently
is 3.3.
It seems that Smack 4 has been released [1], and it is now distributed
as a at least one bundle. Further, these bundles are now available in
Maven central. The Smack team would like for us to update/use Smack 4
to get security fixes as well as other enhancements [1], and would like
us to consume the lib as bundles from Maven central, since Smack 4 now
apparently has the OSGi metadata.
How should we best approach doing this update? Can we use/depend
upon/distribute these bundles via our repo? If so, how should this be
done (e.g. CQs/IP process)?
Thanks,
Scott
[1] https://bugs.eclipse.org/bugs/show_bug.cgi?id=438006