Skip to content

use better wrods #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 28, 2024
Merged

use better wrods #36

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,8 @@ A small utility that finds manually overridden dependencies in a Maven POM, Grad
| Gradle - Groovy | ✓ | ✗ | ✓ |
| SBOM | ✓ | ✗ | ✗ |

Maven POM is the most accurate because it comes from the source file
Maven POM is the most accurate because it's generated from the source file

Gradle - Groovy does not support overwritten properties because those generally come from a separate file
Gradle - Groovy does not support overwritten properties because those usually come from a separate file

SBOM is accurate until you have dependencies that pull in newer versions that what Spring Boot recommends
SBOM is accurate until you have dependencies that pull in newer versions than what Spring Boot recommends, which results in false positives