ppkarwasz commented on PR #490: URL: https://github.com/apache/commons-compress/pull/490#issuecomment-1976543279
> The problem of deep dependencies can be solved if Compress provides a BOM POM and my app depends on this BOM POM (commons-compress-bom). I think the point that @elharo tried to make is that many developers will **not** notice that `commons-compress` was upgraded and that they will not know that they need to upgrade their dependency management: > The classpath now contains both commons-compress and commons-compress-core, even though the developer of the project might never have heard of commons-compress. I am sure that Spring Boot will rapidly replace `commons-compress` with `commons-compress-bom` in their dependency management, but many users will not know about this requirement and will consider it an issue that Commons Compress needs to solve. Anyway: if you know about an Apache-wide BOM that features coherent library versions, my only question is: where do I sign up? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
