Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [orbit-dev] Impact for Orbit of recent PDE and Tycho extensions to consume Maven libs directly?


I think the AC is the better body to discuss this. I've added it to the agenda for our call today.

FWIW, I believe as long as there are projects consuming Orbit it will exists. However, one of the goals for EBR was always to be able to consume Maven artifacts within the same reactor build. Thus, these are great new features in Tycho. 

It lacks a few features with regards to generating high quality manifests. Maybe EBR recipes can be fetched dynamically as templates and taken into account when generating the bundles?

From a legal perspective ... the about/ip information needs to be added. But I'm not sure this is still a strong requirements. We don't do this for dependencies in other ecosystems (eg., _javascript_ NPM). Thus, we might be able to lift that.

With regards to signing this is a grey area. My current thinking is that once artifacts are no longer consumed from they must not be signed with an certificate. But I don't see any issue with distributing unsigned 3rd party content in the same way Maven Central distributes jars (hash validation and TLS transfer).


Gunnar Wagenknecht

On Jan 14, 2021, at 11:26, Lars Vogel <lars.vogel@xxxxxxxxxxx> wrote:

Dear Orbit committers,

With the recent option added to Tycho and PDE [see 1 and 2] to consume
Maven artifacts directly it looks like the Eclipse projects could move
to consume libraries directly instead of consuming it from Orbit.

Is that supported by the rules of the foundation?

What does that mean for Orbit?

Best regards, Lars

for how-to-guides.

Eclipse Platform project co-lead
CEO vogella GmbH

Haindaalwisch 17a, 22395 Hamburg
Amtsgericht Hamburg: HRB 127058
Geschäftsführer: Lars Vogel, Jennifer Nerlich de Vogel
USt-IdNr.: DE284122352
Fax (040) 5247 6322, Email: lars.vogel@xxxxxxxxxxx, Web:
orbit-dev mailing list
To unsubscribe from this list, visit

Back to the top