Details
-
Type:
New Feature
-
Status:
Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: Dependencies, Rules
-
Labels:None
-
Number of attachments :
Description
Imagine something equivalent to Macker or Architecture Rules that doesn't work at classes or packages level but at Maven projects level.
We could implements rules like :
- No project can depends on Log4j version 1.1 or less
- A WAR project must not embed the servlet API
- No project can declare a parent pom ("mygroupid", "myartifactid") whose version is X.Y or less
Issue Links
- is related to
-
SONARJAVA-58
New rule to detect usage of user-defined "dangerous" methods
-