Create a rules engine to check project dependencies

Imagine something equivalent to Macker or Architecture Rules that doesn't work at classes or packages level but at Maven projects level.

We could implements rules like :

No project can depends on Log4j version 1.1 or less
A WAR project must not embed the servlet API
No project can declare a parent pom ("mygroupid", "myartifactid") whose version is X.Y or less

is related to

SONARJAVA-58 New rule to detect usage of user-defined "dangerous" methods

Ascending order - Click to sort in descending order

Field	Original Value	New Value
Project	Sonar Plugins [ 11911 ]	Sonar [ 11694 ]
Key	SONARPLUGINS-41	SONAR-3835

Summary	Create a rules engine to check Maven project dependencies	Create a rules engine to check project dependencies
Component/s		Dependencies [ 14728 ]
Component/s		Rules [ 14724 ]

Link

This issue is related to SONAR-3842 [ SONAR-3842 ]

Vote (3)

Watch (2)