Skip to content

Commit 7bd8853

Browse files
author
sberv
committed
#140312: добавлены обоснования для зависимостей
1 parent 7898ffe commit 7bd8853

File tree

2 files changed

+30
-2
lines changed

2 files changed

+30
-2
lines changed

libreoffice-api-wrapper-server/pom.xml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,8 @@
77

88
<artifactId>libreoffice-api-wrapper-server</artifactId>
99
<packaging>jar</packaging>
10+
<name>LibreOffice API wrapper project</name>
11+
<description>POM of LibreOffice API wrapper project</description>
1012

1113
<parent>
1214
<groupId>com.payneteasy</groupId>
@@ -66,30 +68,37 @@
6668

6769
<dependencies>
6870
<dependency>
71+
<!--Justification: HTTP server used for incoming requests of documents and images conversions-->
6972
<groupId>org.eclipse.jetty</groupId>
7073
<artifactId>jetty-server</artifactId>
7174
</dependency>
7275
<dependency>
76+
<!--Justification: Servlet API implementation for Jetty HTTP server-->
7377
<groupId>org.eclipse.jetty</groupId>
7478
<artifactId>jetty-servlet</artifactId>
7579
</dependency>
7680
<dependency>
81+
<!--Justification: Library for conversation between different office documents formats, using OpenOffice.org-->
7782
<groupId>com.artofsolving</groupId>
7883
<artifactId>jodconverter</artifactId>
7984
</dependency>
8085
<dependency>
86+
<!--Justification: Simple Logging Facade for Java (SLF4J)-->
8187
<groupId>org.slf4j</groupId>
8288
<artifactId>slf4j-api</artifactId>
8389
</dependency>
8490
<dependency>
91+
<!--Justification: Bridge to use JCL (Jakarta Commons Logging) via SLF4J-->
8592
<groupId>org.slf4j</groupId>
8693
<artifactId>jcl-over-slf4j</artifactId>
8794
</dependency>
8895
<dependency>
96+
<!--Justification: Implementation of the SLF4J API for Logback logging framework-->
8997
<groupId>ch.qos.logback</groupId>
9098
<artifactId>logback-classic</artifactId>
9199
</dependency>
92100
<dependency>
101+
<!--Justification: Application configuration via environment variables-->
93102
<groupId>com.payneteasy</groupId>
94103
<artifactId>startup-parameters</artifactId>
95104
</dependency>
@@ -99,18 +108,22 @@
99108
<scope>test</scope>
100109
</dependency>
101110
<dependency>
111+
<!--Justification: Batik utility library (used by batik-transcoder)-->
102112
<groupId>org.apache.xmlgraphics</groupId>
103113
<artifactId>batik-util</artifactId>
104114
</dependency>
105115
<dependency>
116+
<!--Justification: Batik DOM implementation (used by batik-transcoder)-->
106117
<groupId>org.apache.xmlgraphics</groupId>
107118
<artifactId>batik-dom</artifactId>
108119
</dependency>
109120
<dependency>
121+
<!--Justification: Batik generic API for transcoding an input to an output (used for conversation different images to PNG format)-->
110122
<groupId>org.apache.xmlgraphics</groupId>
111123
<artifactId>batik-transcoder</artifactId>
112124
</dependency>
113125
<dependency>
126+
<!--Justification: Batik codecs of different image formats (used by batik-transcoder)-->
114127
<groupId>org.apache.xmlgraphics</groupId>
115128
<artifactId>batik-codec</artifactId>
116129
</dependency>

pom.xml

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,8 @@
66
<artifactId>libreoffice-api-wrapper</artifactId>
77
<version>3.1.8</version>
88
<packaging>pom</packaging>
9+
<name>LibreOffice API wrapper parent project</name>
10+
<description>POM of LibreOffice API wrapper parent project</description>
911

1012
<properties>
1113
<surefire.plugin.version>2.22.2</surefire.plugin.version>
@@ -71,49 +73,58 @@
7173
<dependencyManagement>
7274
<dependencies>
7375
<dependency>
76+
<!--Justification: HTTP server used for incoming requests of documents and images conversions-->
7477
<groupId>org.eclipse.jetty</groupId>
7578
<artifactId>jetty-server</artifactId>
7679
<version>${jetty.version}</version>
7780
</dependency>
7881
<dependency>
82+
<!--Justification: Servlet API implementation for Jetty HTTP server-->
7983
<groupId>org.eclipse.jetty</groupId>
8084
<artifactId>jetty-servlet</artifactId>
8185
<version>${jetty.version}</version>
8286
</dependency>
8387
<dependency>
88+
<!--Justification: Library for conversation between different office documents formats, using OpenOffice.org-->
8489
<groupId>com.artofsolving</groupId>
8590
<artifactId>jodconverter</artifactId>
8691
<version>${jodconverter.version}</version>
87-
<!-- Fix of CVE-2021-29425 (part 1 of 2) -->
92+
<!-- [begin] Fix of CVE-2021-29425 (part 1 of 2) -->
8893
<exclusions>
8994
<exclusion>
9095
<groupId>commons-logging</groupId>
9196
<artifactId>commons-logging</artifactId>
9297
</exclusion>
9398
</exclusions>
99+
<!-- [end] Fix of CVE-2021-29425 (part 1 of 2) -->
94100
</dependency>
95-
<!-- Fix of CVE-2021-29425 (part 2 of 2) -->
101+
<!-- [begin] Fix of CVE-2021-29425 (part 2 of 2) -->
96102
<dependency>
97103
<groupId>commons-io</groupId>
98104
<artifactId>commons-io</artifactId>
99105
<version>2.7</version>
100106
</dependency>
107+
<!-- [end] Fix of CVE-2021-29425 (part 2 of 2) -->
101108
<dependency>
109+
<!--Justification: Simple Logging Facade for Java (SLF4J)-->
102110
<groupId>org.slf4j</groupId>
103111
<artifactId>slf4j-api</artifactId>
104112
<version>${slf4j.version}</version>
105113
</dependency>
106114
<dependency>
115+
<!--Justification: Bridge to use JCL (Jakarta Commons Logging) via SLF4J-->
107116
<groupId>org.slf4j</groupId>
108117
<artifactId>jcl-over-slf4j</artifactId>
109118
<version>${slf4j.version}</version>
110119
</dependency>
111120
<dependency>
121+
<!--Justification: Implementation of the SLF4J API for Logback logging framework-->
112122
<groupId>ch.qos.logback</groupId>
113123
<artifactId>logback-classic</artifactId>
114124
<version>${logback.version}</version>
115125
</dependency>
116126
<dependency>
127+
<!--Justification: Application configuration via environment variables-->
117128
<groupId>com.payneteasy</groupId>
118129
<artifactId>startup-parameters</artifactId>
119130
<version>${startup.parameters.version}</version>
@@ -125,21 +136,25 @@
125136
</dependency>
126137

127138
<dependency>
139+
<!--Justification: Batik utility library (used by batik-transcoder)-->
128140
<groupId>org.apache.xmlgraphics</groupId>
129141
<artifactId>batik-util</artifactId>
130142
<version>${batik.version}</version>
131143
</dependency>
132144
<dependency>
145+
<!--Justification: Batik DOM implementation (used by batik-transcoder)-->
133146
<groupId>org.apache.xmlgraphics</groupId>
134147
<artifactId>batik-dom</artifactId>
135148
<version>${batik.version}</version>
136149
</dependency>
137150
<dependency>
151+
<!--Justification: Batik generic API for transcoding an input to an output (used for conversation different images to PNG format)-->
138152
<groupId>org.apache.xmlgraphics</groupId>
139153
<artifactId>batik-transcoder</artifactId>
140154
<version>${batik.version}</version>
141155
</dependency>
142156
<dependency>
157+
<!--Justification: Batik codecs of different image formats (used by batik-transcoder)-->
143158
<groupId>org.apache.xmlgraphics</groupId>
144159
<artifactId>batik-codec</artifactId>
145160
<version>${batik.version}</version>

0 commit comments

Comments
 (0)